News for week 31/17

1. Shark or not? 3 real-life security scenarios and how to tell which will really bite
   www.helpnetsecurity.com/2017/08/02/real-life-security-scenarios/
2. DMARC again (see our previous article on phishing)
   threatpost.com/senator-calls-for-use-of-dmarc-to-curb-phishing/126931/
3. MS LAPS / Powershell?
   Refs: seclists.org/educause/2017/q3/102 , seclists.org/educause/2017/q3/117
   technet.microsoft.com/en-us/library/security/3062591.aspx
   cyber-defense.sans.org/blog/2013/08/01/reset-local-administrator-password-automatically-with-a-different-password-across-the-enterprise
4. Awareness – Backup and Recovery: SANS OUCH! August 2017
   securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201708_en.pdf
5. Lastly, relevant news for the week from SANS NewsBites
   Refs: www.sans.org/newsletters/newsbites/xix/59 , www.sans.org/newsletters/newsbites/xix/60
   • Petya/Goldeneye Decryptor
     blog.malwarebytes.com/malwarebytes-news/2017/07/bye-bye-petya-decryptor-old-versions-released/
   • Adobe Will End Support for Flash in 2020
     blogs.adobe.com/conversations/2017/07/adobe-flash-update.html
   • Targeting HTTP’s Hidden Attack-Surface
     blog.portswigger.net/2017/07/cracking-lens-targeting-https-hidden.html
   • Adobe Connect security update 9.6.2 / APSB17-22
     helpx.adobe.com/security/products/connect/apsb17-22.html
   • Microsoft Has No Plans to Patch SMBLoris Flaw
     smbloris.com/
     www.theregister.co.uk/2017/07/30/slow_loris_smbv1_attack/

Till next time…