topic Re: Application version 614 in General Topics

Application version 614

TranceforLife — Tue, 20 Sep 2016 21:19:40 GMT

Hello Guys,

New emergency application version is out 614.

Checking the release notes not clear for me what exactly changed. I can see that Palo modified vulnerability signature. Ok what is it? and if l need this to be installed. Could someone clear it for me?

Thanks all,

Myky

Re: Application version 614

BPry — Tue, 20 Sep 2016 13:41:19 GMT

I'm pretty sure that is actually the only thing they did; they modified the Sundown signature to match the newer releases of the Sundown Exploit kit. Since we are talking about exploit kits I would install it on everything to make sure that my users aren't going to be affected by it, but largely speaking Sundown is one of the least popular kits out there right now. They also tend to just copy exploits right from their rivals and are usually pretty late to include newer exploits; so I would say that like with any exploit kit the risk is pretty high, but if your systems are up to date Sundown isn't as big of a worry.

*Note I would still install the update as soon as you can fit it into your schedule, there is a reason exploit kits deserve emergency application releases.

Re: Application version 614

TranceforLife — Tue, 20 Sep 2016 14:13:21 GMT

Thanks BPry. Do you know where can i get more info on this Sundown exploit kit to get better understanding

Re: Application version 614

BPry — Tue, 20 Sep 2016 17:51:18 GMT

http://www.theregister.co.uk/2016/09/05/sundown_exploit_kit_authors_champions_of_copypaste_hacking/

This is the most recent article that I could find explaining the SunDown exploit kit. Esentially they just steal what is already being used in the most popular exploit kits and repackaging everything as their own kit.

Re: Application version 614

TranceforLife — Tue, 20 Sep 2016 21:17:49 GMT

Thanks