SANS Rocky Mountain Fall is Live Online! Join us Nov 2-7 MT for 17 interactive courses + NetWars. Save $300 thru 10/7.

Press

Subscribe to SANS Newsletters

Join the SANS Community to receive the latest curated cyber security news, vulnerabilities and mitigations, training opportunities, and our webcast schedule.






MEDIA ALERT: SANS Institute Hosts Free Webcast to Help Information Security Professionals Mitigate Impact of the MS15-034 Vulnerability

  • Bethesda, MD
  • April 16, 2015

The SANS Institute is hosting a complimentary webcast to discuss the MS15-034 exploit, why it happened, how to prevent exploitation and how prevalent its use has already become.

Who: Hosted by SANS Chief Research Officer and the Director of the SANS Internet Storm Center (ISC), Johannes Ullrich PhD.

What: Live (and archived) webcast will discuss the latest news surrounding MS15-034 followed by a discussion on the steps security practitioners can take to mitigate risks caused by this vulnerability.

When: Thursday, April 16 at 6:00 PM EDT (22:00:00 UTC)

Where: http://www.sans.org/u/3BZ

Why: On Tuesday, April 14 - Microsoft released MS15-034 as part of its monthly patch. The bulletin addresses a vulnerability in HTTP.sys, the library processing HTTP requests in Windows. According to Microsoft, the vulnerability could be used to run arbitrary code on a vulnerable host. Among other programs, IIS uses HTTP.sys, and is directly exposed to the exploit. As of yesterday, trivial to execute exploits have been made public that will cause an IIS server to crash, and in a published analysis of the bug, an exploit to leak kernel memory was outlined.

SANS Media Contact

About SANS Institute

The SANS Institute was established in 1989 as a cooperative research and education organization. Today, SANS is the most trusted and, by far, the largest provider of cyber security training and certification to professionals in government and commercial institutions worldwide. Renowned SANS instructors teach more than 60 courses at In-Person and Live Online cyber security training events, and more than 50 courses are available anytime, anywhere with our OnDemand platform. GIAC, an affiliate of the SANS Institute, validates practitioner skills through more than 35 hands-on, technical certifications in cyber security. The SANS Technology Institute, a regionally accredited independent subsidiary, offers a master’s degree, graduate certificates, and an undergraduate certificate in cyber security. SANS Security Awareness, a division of SANS, provides organizations with a complete and comprehensive security awareness solution, enabling them to easily and effectively manage their ‘human’ cybersecurity risk. SANS also delivers a wide variety of free resources to the InfoSec community including consensus projects, research reports, webcasts, podcasts, and newsletters; it also operates the Internet's early warning system – the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to support and educate the global information security community. (https://www.sans.org)