Infosec bits for week 34/17

1. EDUCAUSE – Security Matters
   - Everything related to information security, privacy, and risk in higher education.
   Including:
   1. GDPR: A Data Regulation to Watch
   2. Creating an Anti-Phishing Campaign on a Small Budget
   3. Stay Ahead of Security Threats with a 7-Step Incident Response Plan
2. DNSSEC Key Signing Key Rollover
   - DNS admins remember: “On October 11, 2017, the Internet Corporation for Assigned Names and Numbers (ICANN) will be changing the Root Zone Key Signing Key (KSK) used in the domain name system (DNS) Security Extensions (DNSSEC) protocol.”
   ref: www.us-cert.gov/ncas/current-activity/2017/08/21/DNSSEC-Key-Signing-Key-Rollover-0
3. Cybersecurity: the Hottest New Major In College
   ref: SANS NewsBites Vol. 19 Num. 65
4. Drupal Security Update, Fixes 3 Vulnerabilities
   - “Because a CMS runs with the permissions to update and configure the web site, it contains the keys to its own destruction. When using one, you also need a corresponding proactive update, monitoring and minimal extension posture to reduce the risks of exploit. “ – Neely (ed.)
   ref: SANS NewsBites Vol. 19 Num. 66
5. SyncCrypt Ransomware Hides Inside JPG Files, Appends .KK Extension
   - Images with Embedded Ransomware Evade Antivirus Detection
6. It’s not an invoice…
   - Step-by-step analysis of a malicious word doc
7. Why It’s Still A Bad Idea to Post or Trash Your Airline Boarding Pass

Till next week Stop.Think.Connect :)