Hello, welcome to the Friday, June 17, 2016 edition of the Santern and Storm Center's Stormcast.

My name is Johannes Orrich, and I'm recording from Washington, D.C.

Adobe today released a patch for Flash Player.

This patch is a vulnerability that has originally been reported on Tuesday as a vulnerability that is currently

being exploited in targeted attacks. So this is a patch now type of update that you should

apply as soon as possible. It does fix a number of additional vulnerabilities as well, not just

the one that's already being exploited. Trend Micro is reporting that at least part of the

problem that the users recently had with Team Viewer maybe due to Trojanized version of Team team viewer. Trend Micro did find a couple of instances

where old versions of team viewer were trojanized in the sense that they collected

usernames and passwords of users. Now the versions they found were mostly version six of Team Viewer, which was distributed between December 2010 and November 2011.

Now according to some related media reports, Team Viewer did reiterate that they believe that most of the compromises that they have seen are due to password reuse,

where users did use Team Viewer passwords on other sites, and then these other sites were compromised,

and the passwords were used in order to compromise the TeamVore account.

And the US Industrial Control System cert does warn users of Siemens'

Sematic WinC devices of weekly protected credentials.

What this means is that credentials to authenticated device are transmitted in the clear. A patch may be available from

Siemens, so if you're using these particular devices, make sure that you are keeping them

up to date. And in general, of course, it is recommended to isolate industrial control systems

on a separate network to limit their network exposure

and if necessary to use VPNs in order to protect the network traffic.

And GitHub noticed the unauthorized access of a large number of user accounts and as a result reset those users passwords.

Apparently the problem here is something that we have seen before and well I just mentioned it with Team Viewer

...