Hello, welcome to the Tuesday, August 1st, 2017 edition of the Sandsenet Storm Center's Stormcast. My name is Johannes Ulrich, and today I'm reporting from Nashville, Tennessee.

Just a quick update on the SMB denial of service attack that I talked about yesterday, also known as SMB Loris.

One of the questions that came up is if this again just affects SMB version 1.

It does appear to affect all versions of SMB.

And actually one user on Twitter is reporting that on Windows 10, he tried to disable all versions of SMB and the system was still vulnerable.

Now, once he disable all versions of SMB, of course, there may still be a demon listening on 445.

It will just reject any request. But then again, this particular request is initial as the

connection is being set up. So it may still be accepted. So that's why I don't discount this

particular report. And remember standard best practice like disabling port 445 on your perimeter will prevent

this attack and it's only a denial of service even though a nasty one in that it does require

the system to be rebooted manually.

And Microsoft on Friday released a security update for Outlook. This particular update fixes three different vulnerabilities, the versed of which can be used

to execute arbitrary code.

In order to trigger the vulnerability, the user has to first open an

attachment. Now, this also supersedes an update was released in June. The June update had a number of

problems. These problems have also been addressed with this latest patch.

So don't be too surprised if you do see the pop-up for an update for Microsoft Outlook.

And this does not appear to be just a re-release of the June update because the CVE numbers

for these three vulnerabilities are different from the ones being

addressed in June. So this is June's update plus fixes for bucks introduced by the June update

plus fixes for new vulnerabilities. And SecureWorks last week reported at Blackhead that they believed to have

uncovered a fake social media profile that was used by Iranian hackers in order to make

...