11日 木曜日、先勝

+ CESA-2017:1201 Important CentOS 6 thunderbird Security Update
https://lwn.net/Alerts/722327/

+ CESA-2017:1204 Moderate CentOS 6 java-1.7.0-openjdk Security Update
https://lwn.net/Alerts/722324/

+ CESA-2017:1201 Important CentOS 7 thunderbird Security Update
https://lwn.net/Alerts/722328/

+ CESA-2017:1206 Important CentOS 6 qemu-kvm Security Update
https://lwn.net/Alerts/722326/

+ CESA-2017:1202 Important CentOS 6 bind Security Update
https://lwn.net/Alerts/722323/

+ CESA-2017:1204 Moderate CentOS 7 java-1.7.0-openjdk Security Update
https://lwn.net/Alerts/722325/

+ Cisco WebEx Meetings Server Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms
CVE-2017-6651

+ UPDATE: Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc1

+ Sudo 1.8.20 released
https://www.sudo.ws/changes.html

+ Microsoft Security Essentials SCEP 'MsMpEng' Remotely Exploitable Type Confusion
https://cxsecurity.com/issue/WLB-2017050065
CVE-2017-0290

社長に「よし、分かった」と言わせるセキュリティ会話術
「それはセキュリティ対策じゃない」、固定観念を捨ててもらおう
http://itpro.nikkeibp.co.jp/atcl/column/17/021400032/042400011/?ST=security&itp_list_theme

記者の眼
あまりに危険なIoT、濃いコーヒーを飲まされる恐れ
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/042700830/?ST=security&itp_list_theme

今日も誰かが狙われる
脅威のビジネスメール詐欺、帰ってきたタイポスクワッティング
http://itpro.nikkeibp.co.jp/atcl/column/17/050800181/050800001/?ST=security&itp_list_theme

UPDATE: JVNVU#92793783 Intel Active Management Technology (AMT) にアクセス制限不備の脆弱性
http://jvn.jp/vu/JVNVU92793783/

4 Best Practices for Web Browser Security on Your Linux Workstation
http://www.linuxsecurity.com/content/view/171438/169/

A bot is flooding the FCC's website with fake anti-net neutrality comments
http://www.linuxsecurity.com/content/view/171437/169/

The hijacking flaw that lurked in Intel chips is worse than anyone thought
http://www.linuxsecurity.com/content/view/171436/169/