ISC StormCast for Monday, December 8th 2014

By Johannes Ullrich MSFT promises 7 bulletins; Firefox/Thunderbird log all your input; Google App Engine Bugs; Cylance releases “Cleaver” report.
Microsoft Patch Tuesday Pre-Notifcations
https://technet.microsoft.com/en-us/library/security/ms14-dec.aspx
Firefox/Thunderbird log all input in /tmp on OS X 10.10
https://www.mozilla.org/en-US/security/advisories/mfsa2014-90/
Vulnerabilities in Google App Engine allow for Java VM Sandbox Escape
http://seclists.org/fulldisclosure/2014/Dec/26
Cylance Releases “Operation Cleaver” Report
http://www.cylance.com/assets/Cleaver/Cylance_Operation_Cleaver_Report.pdf More Here