Microsoft addressed a critical flaw in the Windows 10 and Windows Server 2016 version of crypt32.dll. Crypt32.dll implements the Windows CryptoAPI, which provides various cryptographic features used by software to verify digital signatures. This flaw was originally discovered by the NSA, but has not been used in attacks yet.
In this webcast, you will learn more about the nature of the vulnerability, how it could be exploited, and current recommendations to implement the patches as efficiently as possible.
Speakers:
Jake Williams @malwarejake
Jake Williams is a computer science and information security expert, U.S. Army veteran, certified SANS instructor, and course author. Jake has over a decade of experience in secure network design, penetration testing, incident response, forensics, and malware reverse engineering space. He is a former Network Exploitation operator with the DoD where he is one of less than 15 people to date who have earned the designation of ‘Master CNE Operator’. Leveraging experience and insight with advanced persistent threats help Jake "think like the attacker" and determine the attacker's likely hiding spots.
Johannes Ullrich @johullrich
Johannes Ullrich, dean of research at the SANS Technology Institute, is currently responsible for the SANS Internet Storm Center (ISC) and the GIAC Gold program. His research interests include IPv6, network traffic analysis and secure software development. In 2004, Network World named Johannes one of the 50 most powerful people in the networking industry, and SC Magazine named him one of the top five influential IT security thinkers for 2005. Prior to working for SANS, Johannes served as a lead support engineer for a web development company and as a research physicist.
