TippingPoint Threat Intelligence and Zero-Day Coverage – Week of December 12, 2016

This week marked the final Microsoft “Patch Tuesday” of 2016. Microsoft had a record-breaking year with 155 bulletins covering more than 500 CVEs. This week’s TippingPoint Digital Vaccine (DV) package includes coverage for the Microsoft Security Bulletins released on or before December 13, 2016. This month’s Patch Tuesday covered 48 CVEs with 12 update bulletins – six of them rated critical. The following table maps Digital Vaccine filters to the Microsoft Security Bulletins. Filters designated with an asterisk (*) shipped prior to this week’s package, providing zero-day protection for our customers. You can get more detailed information on this month’s Microsoft Security Bulletins from Dustin Childs’ December 2016 Security Update Review:

Zero-Day Filters

We did not have any new zero-day filters in this week’s Digital Vaccine (DV) package. A number of existing filters in this week’s DV package were modified to update the filter description, update specific filter deployment recommendation, increase filter accuracy and/or optimize performance. You can browse the list of published advisories and upcoming advisories on the Zero Day Initiative website.

Updated Existing Zero-Day Filters

This section highlights specific filter(s) of interest in this week’s Digital Vaccine package that have been updated as a result of a vendor either issuing a patch for a vulnerability found via the Zero Day Initiative or a vulnerability that has been published by the Zero Day Initiative in accordance with its Disclosure Policy.

This week’s updated zero-day filters focus on vulnerabilities in Adobe Flash. The updated filters reflect the fact that the vulnerabilities have been published because Adobe has issued patches for them. TippingPoint customers have been protected since November 1, 2016.

Missed Last Week’s News?

Catch up on last week’s news in my weekly recap.