Defensive Security is a weekly information security podcast which reviews recent high profile security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.
https://defensivesecurity.org
Defensive Security Podcast Episode 15
This week: Twitter account hacks highlight opportunity for exploitation by attackers, Microsoft and Malwarebytes both release bad patches, Oracle releases a Java patch which fixes 42 security bugs, Oracle announces that Java 8 is delayed due to the focus on Java 7, a new botnet is being created by compromising WordPress installations for some unknown purpose, Linode was compromised in an attack targeted at some Linode customers, Microsoft finds a trojan that cleans up after itself in the next wave of anti-forensics, the Boston marathon bombing and West, Texas explosions see many phishing scams leading to malware installations, spam is down, targeted attacks via email are up, Microsoft released it’s second half 2012 Security Intelligence Report with some odd mixes of data, Microsoft releases EMET 4.0 beta, and a former employee has been charged with planting back doors on 2723 Hostgator servers.
Subscribe in iTunes | Podcast RSS Feed | Twitter | Email
60 minutes, 48 hours, NPR, BBC twitter accounts recently hacked.
MS and Malwarebytes released bad updates
http://krebsonsecurity.com/2013/04/java-update-plugs-42-security-holes/
http://mreinhold.org/blog/secure-the-train
http://krebsonsecurity.com/2013/04/brute-force-attacks-build-wordpress-botnet/
http://www.theregister.co.uk/2013/04/16/linode_breach/
http://m.darkreading.com/133696/show/b7639d290f6c32534f633e85cfe6ac04/
Boston bombing used to spread malware in multiple ways
http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/Z6nE3UFETb0/
http://news.cnet.com/8301-1009_3-57579847-83/targeted-cyberattacks-jump-42-percent-in-2012-symantec-says/
SIR: http://download.microsoft.com/download/E/0/F/E0F59BE7-E553-4888-9220-1C79CBD14B4F/Microsoft_Security_Intelligence_Report_Volume_14_Key_Findings_Summary_English.pdf
http://blogs.technet.com/b/srd/archive/2013/04/18/introducing-emet-v4-beta.aspx
http://arstechnica.com/security/2013/04/former-employee-arrested-charged-with-rooting-2700-hostgator-servers/