Archiwa tagu: security

Windows XP – co począć ?

Myślałem, że już nigdy nie napisze o Windows XP… a jednak… trafiłem na siec gdzie ich jest całkiem sporo i o dziwo trzymają się… (może to zasługa łącznie kilkunastu osób które je ogarnia)…

Tym ktorzy nie przeczytali polecam: https://www.microsoft.com/en-us/WindowsForBusiness/end-of-xp-support

Wiadomo ze nie kazdy moze poleciec do sklepu i kupic kilkadziesiat licencji od razu wiec co robic by jakos przetwac

  1. Ograniczyc uprawnienia osob korzystajacych z Systemów do absolutnego minimum
  2. Uruchomic systemy Firewall na maszynach zarowno dla połaczeń przychodzacych jak i wychodzacych
  3. Przenieść komputery do odzielnej podsieci gdzie ruch bedzie sciśle monitorowany
  4. Zainstalować wszystkie dostepne aktualizacje dla systemu operacyjnego i komponentów
  5. Odinstalować nieużywane komponenty systemu operacyjnego i zbedne oprogramowanie
  6. Ograniczyc lacznosc z Internetem do absolutnego minimum
  7. Uzywac alternatywnej – aktualnej przegladarki
  8. Ograniczyc uzycie i czyscic po kazdym zamknieciu cache przegladarek internetowych
  9. Jesli to mozliwe odlaczyc komputer od sieci.
  10. Zapewnic wysoki poziom ochrony antywirusowej dla urzadzen przenosnych lub rozwazyc ich wylaczenie.
  11. Zweryfikować czy używane mechanizmy backupu zapewniaja odzyskanie systemu i jego aktywacje bez połączenia z serwerami Microsoft
  12. Wdrożyc i skonfigurować  dodatkowe mechanizmy zabezpieczeń jak np  Enhanced Mitigation Experience Toolkit
  13. Zastosować mechanizmy application whitelisting
  14. Wszędzie gdzie to mozliwe użyc polityk domenowych do wprowadzenia ograniczeń
  15. Przeprowadzić dodatkowe szkolenia dla użytkowników tych systemów (jak postępować w przypadku wykrycia wirusa, używanie nośników nieznanego pochodzenia itp)

OpenVAS i problem z tworzeniem kont

Ku pamieci… podczas Tworzenia credentiali (Configuration -> Credentials) moze sie pojawic blad:

„Internal error: create_lsc_credential_omp:4506 (GSA 6.0.1)
An internal error occurred while creating a new credential. It is unclear whether the credential has been created or not. Diagnostics: Failure to receive response from manager daemon.”

Screenshot from 2016-08-30 03-02-22
Rozwiazaniem jest wykonanie komend:

openvasmd --create-credentials-encryption-key
mkdir /var/lib/openvas/gnupg

Poprawki M$ 7/2016

Ku potomności … M$ wypuścił takie coś….

Critical and Security Updates
Security Update for Microsoft .NET Framework 4.5.2 on Windows Vista, Windows 7, Server 2008 (KB3135996)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.5.2 on Windows 7, Vista, Windows Server 2008, Windows Server 2008 R2 for x64 (KB3135996)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB3170106)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB3170106)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Windows 7 for x64-based Systems (KB3170455)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Windows 7 (KB3170455)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft Excel 2010 (KB3115322) 64-Bit Edition
A security vulnerability exists in Microsoft Excel 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Web Applications (KB3115318) farm-deployment
A security vulnerability exists in Microsoft Web Applications that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Word 2010 (KB3115317) 64-Bit Edition
A security vulnerability exists in Microsoft Word 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft PowerPoint 2010 (KB3115118) 64-Bit Edition
A security vulnerability exists in Microsoft PowerPoint 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft SharePoint Foundation 2010 (KB3114890)
A security vulnerability exists in Microsoft SharePoint Foundation 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Office 2010 (KB3115315) 32-Bit Edition
A security vulnerability exists in Microsoft Office 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft SharePoint Server 2010 (KB3115312)
A security vulnerability exists in Microsoft SharePoint Server 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Outlook 2010 (KB3115246) 64-Bit Edition
A security vulnerability exists in Microsoft Outlook 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft PowerPoint 2010 (KB3115118) 32-Bit Edition
A security vulnerability exists in Microsoft PowerPoint 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft SharePoint Server 2010 (KB3115312) farm-deployment
A security vulnerability exists in Microsoft SharePoint Server 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Outlook 2010 (KB3115246) 32-Bit Edition
A security vulnerability exists in Microsoft Outlook 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Word 2010 (KB3115317) 32-Bit Edition
A security vulnerability exists in Microsoft Word 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Office 2010 (KB3115315) 64-Bit Edition
A security vulnerability exists in Microsoft Office 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft SharePoint Foundation 2010 (KB3114890) farm-deployment
A security vulnerability exists in Microsoft SharePoint Foundation 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Web Applications (KB3115318)
A security vulnerability exists in Microsoft Web Applications that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Microsoft Excel 2010 (KB3115322) 32-Bit Edition
A security vulnerability exists in Microsoft Excel 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Security Update for Windows 7 for x64-based Systems (KB3168965)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Windows 7 (KB3168965)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.6 on Windows 7, Windows Vista, Server 2008, Server 2008 R2 for x64 (KB3164025)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.6 on Windows Vista, Windows 7, Server 2008 (KB3164025)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.6.1 on Windows 7 and Windows Server 2008 R2 for x64 (KB3164025)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.6.1 on Windows 7 (KB3164025)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.5.2 on Windows Vista, Windows 7, Server 2008 (KB3163251)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.5.2 on Windows 7, Vista, Server 2008, and Server 2008 R2 for x64 (KB3163251)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 (KB3163245)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB3163245)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Security Update for Microsoft .NET Framework 4.5.2 on Windows Vista, Windows 7, Server 2008 (KB3135996)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system.
Other Updates
Windows Malicious Software Removal Tool – March 2016 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product.
Windows Malicious Software Removal Tool x64 – March 2016 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product.
Update for Windows 7 for x64-based Systems (KB2977759)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 (KB2952664)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 (KB2977759)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 for x64-based Systems (KB2952664)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 for x64-based Systems (KB2977759)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 (KB2977759)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 for x64-based Systems (KB3170735)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 (KB3170735)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Windows Malicious Software Removal Tool x64 – July 2016 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product.
Windows Malicious Software Removal Tool – July 2016 (KB890830)
After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product.
Update for Windows 7 for x64-based Systems (KB2952664)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.
Update for Windows 7 (KB2952664)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

 

DMARC na PEPUG

Wszystkich zainteresowanych posłuchaniem o tym co to jest DMARC –  Domain-based Message Authentication, Reporting & Conformance zapraszam na spotkanie grupy Polish Exchange Pro & Users Group na  ktorym  to poruszę  temat autentykacji poczty.

https://www.dmarc.org

Będzie to już 68 spotkanie PEPUG i odbędzie sie we wtorek 23. lutego 2016 o 18:00, do warszawskiej siedziby Promise (APN Promise S.A.ul. Domaniewska 44a 02-672 Warszawa) oraz online (https://meet.lync.com/pepug365/ziembor/DTJ42E5I – Pierwsze spotkanie Skype’a?).

Bardzo prosimy o rejestrację na stronie spotkania (niezależnie od formy uczestnictwa w spotkaniu): pepug69.evenea.pl

Link do wydarzenia na Evenea:  http://pepug69.evenea.pl/ 
Link do wydarzenia na Facebooku: https://www.facebook.com/groups/pepug/