Application version 614

[TranceforLife]

Hello Guys,

New emergency application version is out 614.

Checking the release notes not clear for me what exactly changed. I can see that Palo modified vulnerability signature. Ok what is it? and if l need this to be installed.  Could someone clear it for me?

Thanks all,

Myky

[BPry · Accepted solution]

I'm pretty sure that is actually the only thing they did; they modified the Sundown signature to match the newer releases of the Sundown Exploit kit. Since we are talking about exploit kits I would install it on everything to make sure that my users aren't going to be affected by it, but largely speaking Sundown is one of the least popular kits out there right now. They also tend to just copy exploits right from their rivals and are usually pretty late to include newer exploits; so I would say that like with any exploit kit the risk is pretty high, but if your systems are up to date Sundown isn't as big of a worry.

*Note I would still install the update as soon as you can fit it into your schedule, there is a reason exploit kits deserve emergency application releases. 

[TranceforLife]

Thanks BPry. Do you know where can i get more info on this Sundown exploit kit to get better understanding 

[BPry]

http://www.theregister.co.uk/2016/09/05/sundown_exploit_kit_authors_champions_of_copypaste_hacking/

This is the most recent article that I could find explaining the SunDown exploit kit. Esentially they just steal what is already being used in the most popular exploit kits and repackaging everything as their own kit. 

[TranceforLife]

Thanks