Hello, welcome to the Thursday, June 16th, 2016 edition of the Sandin and Storm Center's Stormcast.

My name is Johannes Ulrich and the day I'm recording from Washington.

There are multiple reports of problems with one of this Tuesday's Microsoft updates, MS1672, which was a security update for group policy.

It was supposed to fix a vulnerability that, according to Microsoft, could allow elevation of privilege.

An attacker launches a man-in-the-middle attack against the traffic passing between the domain controller and target machine.

What apparently happens now is that group policies can no longer be applied.

In particular, one of the symptoms of the problem that has been repeatedly described is that drive mappings are no longer working correctly.

Hidden drives are now all of a sudden showing up and other tribes are not showing up at all.

At this point I don't see any statement from Microsoft. I'll link to one of Microsoft's support forums where multiple users

do describe the problems and some workarounds that have been working for them. And Apple is

running its worldwide developer conference this year and at this conference Apple also announced

some new requirements for applications that are going to be published in Apple's App Store.

One of these requirements that's supposed to be enforced by the end of this year is that applications will no longer

be allowed to connect via HTTP. Instead, they have to use H.S. We have often heard about

antivirus engines causing issues with false positives, but I think the next story is something new rising antivirus

which is mostly distributed to the Chinese market did include in a recent update

malware itself the sality virus was apparently being distributed with an update for this antivirus product.

The malware was first found by AV test, an antivirus test lab, that noticed that after

an update test machines that ran this virus scanner were infected with the sality virus. Now, typically antivirus scanner updates do not just new signatures, but also do include

new code and apparently the virus was injected in this particular scanner with one of these

code updates.

And last Tuesday, SAP did release an update for its products.

...