Take 1 Security Podcast: Episode 10
Unsupervised Learning16 Maalis 2015

Take 1 Security Podcast: Episode 10



Play Podcast

START CONTENT


* There was another SQL Injection bug found in SEO by Yoast


* It required admins to click a malicious link
* Was patched quickly
* It’s the plugins that make WordPress vulnerable

* Attackers are targeting gamers for ransomware


* Virlock is one version of ransomware that not only locks the screen, but infects files
* It’s also polymorphic, so it changes itself every time it runs
* TeslaCrypt goes after gamers, which seems super smart because they are often addicted

* The Hello Barbie doll is recording kids voices and sending the recordings over the Internet for voice recognition


* I get asked a lot about what to do about this kind of stuff
* Start by making a list of everything that can record voice or audio in your home, and determine what kind of controls you have on them
* Assume the worst, even though it’s probably not that bad

* US industrial systems attacked 245 times between October 2013 and September 2014


* Most attacks were against Critical Manufacturing and Energy
* Biggest vectors were spear phishing and port scanning

* CloudFlare aims to defeat DDoS with Virtual DNS


* They want to proxy DNS before it hits customer name server

* The CIA supposedly tried to hack Apple hardware


* The article has come under extreme scrutiny

* Going to be on the Security Weekly podcast with Pau
* Hillary Clinton’s email account dram
* OpenSSL is getting an audit


* Bout time

* Wikimedia is suing the NSA over surveillance
* Spoofing the boss is the best way to phish someone, evidently
* Had a great time at CactusCon in Phoenix


* Did a talk with Jason and saw Dave’s keynote
* Dave’s keynote was about struggling with the basics, not APT
* He asked when a major breach was NOT a dumb mistake

* Someone’s looking to make a Snowden Phone
* Looks like I’ll be on the Security Weekly podcast with Paul


* Going to talk about IoT security and my our OWASP project



END CONTENT

Play Podcast

Notes


* Comments welcome on content and format, as usual.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Jaksot(532)

News & Analysis | No. 310

News & Analysis | No. 310

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism… Web Version: https://danielmiessler.com/podcast/news-analysis-no-310/Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

6 Joulu 20219min

News & Analysis | No. 309

News & Analysis | No. 309

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism… Web Version: https://danielmiessler.com/podcast/news-analysis-no-309/Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

29 Marras 202111min

News & Analysis | No. 308

News & Analysis | No. 308

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism… Web Version: https://danielmiessler.com/podcast/news-analysis-no-308/Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

22 Marras 20216min

Degrees and Credentials in InfoSec

Degrees and Credentials in InfoSec

How the needs-college and don't-need-college types are both right about the importance of education for getting into InfoSec.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

15 Marras 20214min

News & Analysis | No. 307

News & Analysis | No. 307

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism… Web Version: https://danielmiessler.com/podcast/news-analysis-no-307/Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

15 Marras 202122min

News & Analysis | No. 306

News & Analysis | No. 306

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism… Web Version: https://danielmiessler.com/podcast/news-analysis-no-306/Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

8 Marras 202116min

News & Analysis | No. 305

News & Analysis | No. 305

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism… Web Version: https://danielmiessler.com/podcast/news-analysis-no-305/Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

1 Marras 20219min

News & Analysis | No. 304

News & Analysis | No. 304

The latest in Security News, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism… Web Version: https://danielmiessler.com/podcast/news-analysis-no-304/Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

25 Loka 20213min