This podcast is brought to you by the Greater Lafayette Security Professionals (GLSP) group, SecurePurdue, and the Center for Education and Research in Information Assurance and Security (CERIAS) at Purdue University.

Show Notes

Hosts

• Preston Wiley, CISSP, CCNA
• Mike Hill, CISSP
• Keith Watson, CISSP-ISSAP, CISA

Announcements

• The first Greater Lafayette Security Professionals meeting of 2013 will be on January 10th at 11:30 in Young Hall. The topic has not yet been decided. (Note: The January GLSP meeting agenda has now been set.)
• The CERIAS Security Seminar have concluded for this year. However, they will return again in January. In fact, the January 9th seminar slot is currently available you are interested in presenting. The seminars begin at 4:30pm in Stewart Center G52 and will also be shown on the Purdue channel. The seminars are recorded and made available as podcasts through iTunes and on YouTube.

Security Updates

• Adobe released a security bulletin for Flash Player and one bulletin for Adobe Reader and Acrobat, January 8th.
• Microsoft released updates today to patch seven vulnerabilities. Two are critical. Five are important. The affected software include Windows, Office, and .NET Framework, January 8th. A known 0-day exploit in Internet Explorer is in the wild. Microsoft has a “Fix It” available, but it doesn’t fully patch the issue. It does prevent the flaw from being used in the way it has been exploited thus far in the wild. It is unknown if a patch will be released out-of-band or if users will have to wait until next month for the patch.

Articles

• This $299 tool is reportedly capable of decrypting BitLocker, PGP, and TrueCrypt disks in real-time by Emil Protalinski (The Next Web), Elcomsoft Forensic Disk Decryptor (Elcomsoft)
• Employers in California, Illinois Can No Longer Request Facebook Passwords by Tiffany Kaiser (Daily Tech), California and Illinois pass laws preventing employers from demanding social media passwords by Eric Abent (SlashGear)
• TURKTRUST Incident Raises Renewed Questions About CA System by Dennis Fisher (ThreatPost), Fraudulent Certificate for Google Domains Found After Mistake by Turkish CA by Dennis Fisher (ThreatPost)