ISC StormCast for Friday, December 12th 2014

By Johannes Ullrich GMail dots ease brute forcing; Microsoft Pulls Exchange Patch; Apple reissues Safari patch; Demo XSS and Putty Interception with ease
GMail quirk used to subvert spam tracking and blacklisting
https://isc.sans.edu/forums/diary/GMail+quirk+used+to+subvert+website+spam+tracking/19051
Microsoft Pulls Exchange Patch
https://support.microsoft.com/kb/2986475
http://blogs.technet.com/b/jribeiro/archive/2014/12/10/update-rollup-8-for-exchange-2010-sp3-has-been-released-kb2986475.aspx
Demonstrating the Impact of XSS With WordPress
https://blog.gaborszathmari.me/2014/12/10/wordpress-exploitation-with-xss/
Putty Rider: Inspect “putty” ssh connections
https://github.com/seastorm/PuttyRider
Apple Releases Safari 8.0.2
http://lists.apple.com/archives/security-announce/2014/Dec/msg00002.html More Here