Re: Adobe Flash

[Kevin Reedy <KReedy () EXCELSIOR EDU>]

Flash is a tough one for us, since most of our online offerings utilize it
we can't simply disable it.  I am keeping an eye on all the Cryptolocker
type IDS alerts, as well as 'emergency' patching as soon as is reasonable
after the fix is released.

I am putting quite a bit of faith in our URL classification subscription as
well as the Palo Alto 'wild fire' detections, but obviously if the content
is on a compromised but otherwise good page it will be a problem.

Long term solution is to move away from Flash in our offerings, and while
we had already been doing that, this will hasten the timeline.

-Kevin

Kevin Reedy
Executive Director, Information Security
Excelsior College
(518) 464-8720



From:   Chris Green <CGreen () UTTYLER EDU>
To:     SECURITY () LISTSERV EDUCAUSE EDU,
Date:   07/22/2015 12:17 PM
Subject:        [SECURITY] Adobe Flash
Sent by:        The EDUCAUSE Security Constituent Group Listserv
            <SECURITY () LISTSERV EDUCAUSE EDU>



All,

I just wanted to reach out and see if anyone might be willing to share if
and what has been done at your respective institutions in response to the
multiple zero day vulnerabilities that have been exposed within Adobe
Flash.

Thank you for your feedback!

-C.

Chris Green
Information Security Officer
University of Texas at Tyler
cgreen () uttyler edu




This message and any attachments contain confidential  Excelsior College information intended for the specific 
individual and purpose. If you are not the intended recipient, you should notify the College and delete this message. 
Any disclosure, copying, distribution or inappropriate use of this message is strictly prohibited.