July Patch Tuesday tackles 19 critical flaws, Windows NTLM vulnerabilities

Security Digest Information security news and advice from TechTarget's network | July 12, 2017 FEATURED STORY Windows NTLM fix addressed in July 2017 Patch Tuesday by Michael Heller, Senior Reporter Client-side security takes the forefront in Microsoft's July 2017 Patch Tuesday, which includes a fix for legacy Windows NTLM authentication processes. (SearchSecurity.com) Advertisement NEWS   Android Samba app from Google only uses broken SMBv1 Experts said the new Android Samba app from Google supported only unsafe SMBv1 despite susceptibility to WannaCry exploits and unclear demand from users. (SearchSecurity.com)   Tax software backdoor allowed NotPetya ransomware attacks Researchers analyze the software backdoor used to deliver NotPetya ransomware to Ukraine targets, while the threat actors behind the attacks ask for more money. (SearchSecurity.com)   Flawed Broadcom Wi-Fi chipsets get a fix, but flaw remains a mystery Broadpwn, a flaw in Broadcom Wi-Fi chipsets, is patched, but Google withholds details. Plus, the latest in the antivirus drama between the U.S. and Russia, and more. (SearchSecurity.com)   WoSign CA certificates get end-of-trust date in Chrome Google to distrust all WoSign CA certificates in Chrome starting in September, as the troubled certificate authority passed a key audit and is seeking a new CEO to help return trust. (SearchSecurity.com)   Cybersecurity skills gap fixes must support minorities A new survey shows a majority of organizations are facing a cybersecurity skills gap and experts say more focus on women and minorities could be key to finding talent. (SearchSecurity.com)   Risk & Repeat: NotPetya ransomware raises the stakes In this week's Risk & Repeat podcast, SearchSecurity editors discuss the NotPetya ransomware, its impact and the growing trend of sophisticated ransomware attacks. (SearchCloudSecurity.com) EXPERT ADVICE   Cybersecurity readiness: The importance of network monitoring Continuous network monitoring and traffic analysis are crucial ingredients for cybersecurity readiness. Expert Peter Sullivan explains what enterprise security teams need to know. (SearchSecurity.com)   How NetFlow data can be used for cloud environments Collecting and analyzing NetFlow data can help organizations detect security incidents and figure out their cause. Expert Frank Siemons explains how NetFlow works. (SearchCloudSecurity.com)   How WannaCry malware affects enterprises' ICS networks WannaCry malware has been plaguing organizations across the world. Expert Ernie Hayden explains how this ransomware threatens ICS networks and their security. (SearchSecurity.com)   WordPress REST API flaw: How did it lead to widespread attacks? A REST API endpoint vulnerability enabled attacks on 1.5 million sites running WordPress. Expert Michael Cobb explains how this vulnerability works and how to prevent attacks. (SearchSecurity.com) About This E-Newsletter This e-newsletter is published by the TechTarget network. To unsubscribe from Security Digest, click here. Please note, this will not affect any other subscriptions you have signed up for. TechTarget Security Media Group, 275 Grove Street, Newton, MA 02466. Contact: webmaster@techtarget.com Copyright 2017 TechTarget. All rights reserved.