All posts by jb

Defensive Security Podcast Episode 107

February 28, 2015PodcastDepartment of State, Gemalto, Log monitoring, Mandiant, Morgan Stanleyjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.bloomberg.com/news/articles/2015-02-19/morgan-stanley-probe-said-to-examine-whether-adviser-got-hacked

http://gizmodo.com/state-department-computer-systems-hit-by-hackers-1659549503/1686899463/+chris-mills

http://www.theregister.co.uk/2015/02/25/gemalto_everythings_fine_security_industry_hang_on_a_minute/

https://www2.fireeye.com/rs/fireye/images/rpt-m-trends-2015.pdf

http://www.csoonline.com/article/2887930/network-security/how-better-log-monitoring-can-prevent-data-breaches.html

Defensive Security Podcast Episode 106

February 15, 2015PodcastAnthem, APT, data breach, malware, PCI, social engineering, SSLjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://training.pcisecuritystandards.org/pci-ssc-bulletin-on-impending-revisions-to-pci-dss-pa-dss-assessor

http://www.theguardian.com/technology/2015/feb/05/company-loses-17m-in-email-scam

http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html?_r=0

http://www.group-ib.com/files/Anunak_APT_against_financial_institutions.pdf

http://arstechnica.com/security/2015/02/pwned-in-7-seconds-hackers-use-flash-and-ie-to-target-forbes-visitors/

http://www.csoonline.com/article/2883248/data-protection/zero-days-last-up-to-six-months-for-some-malware.html#tk.rss_all

http://krebsonsecurity.com/2015/02/anthem-breach-may-have-started-in-april-2014/

Defensive Security Podcast Episode 105

February 8, 2015Disaster Recovery, PodcastAnthem, data breach, Sony, Topfacejb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.techworld.com/news/security/dating-site-topface-pays-hacker-who-stole-20-million-credentials-3596333/

http://www.securityweek.com/disconnected-security-increases-risk

http://www.csoonline.com/article/2879444/data-breach/hack-to-cost-sony-35-million-in-it-repairs.html

http://www.csoonline.com/article/2879655/malware-cybercrime/malicious-advertisements-on-major-sites-compromised-many-computers.html

http://www.csoonline.com/article/2880095/cyber-attacks-espionage/crowdstrike-demonstrates-how-attackers-wiped-the-data-from-the-machines-at-sony.html

http://www.huffingtonpost.com/2015/02/06/anthem-hackers-december_n_6634440.html

Defensive Security Podcast Episode 104

February 1, 2015Podcastdata breach, Ghost, hacking, Ransomewebjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.scmagazine.com/travelers-accuses-web-firm-of-shoddy-practices/article/394588/
https://www.htbridge.com/blog/ransomweb_emerging_website_threat.html
http://blogs.gartner.com/anton-chuvakin/2015/01/28/defeat-the-casual-attacker-first/
http://www.csoonline.com/article/2876310/security-leadership/7-ideas-for-security-leaders.html
http://blog.erratasec.com/2015/01/some-notes-on-ghost.html

Defensive Security Podcast Episode 103

January 25, 2015PodcastAussie Travel Cover, data breach, GoDaddy, NSA, Shnucks, Sonyjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.abc.net.au/pm/content/2015/s4164603.htm

http://breakingbits.net/2015/01/18/taking-over-godaddy-accounts-using-csrf/

http://recode.net/2015/01/20/heres-what-helped-sonys-hackers-break-in-zero-day-vulnerability/

http://www.darkreading.com/attacks-breaches/nsa-report-how-to-defend-against-destructive-malware/d/d-id/1318734

http://www.databreachtoday.com/court-rules-in-favor-breached-retailer-a-7822

http://www.csoonline.com/article/2872329/data-breach/6-biggest-business-security-risks-and-how-you-can-fight-back.html#tk.rss_all

http://www.csoonline.com/article/2871922/malware-cybercrime/gap-between-perception-and-reality-of-cyberthreats-widened-in-2015.html#tk.rss_all

Defensive Security Podcast Episode 102

January 18, 2015PodcastAPT, data breach, DHS, Google, microsoftjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.darkreading.com/a-lot-of-security-purchases-remain-shelfware/d/d-id/1318648

http://arstechnica.com/information-technology/2015/01/google-drops-more-windows-0-days-somethings-gotta-give/

http://www.eweek.com/security/effective-computer-security-means-covering-all-your-bases.html

http://krebsonsecurity.com/2015/01/park-n-fly-onestopparking-confirm-breaches/

http://www.databreachtoday.com/report-mercenaries-behind-apt-attacks-a-7806

http://www.zdnet.com/article/new-report-the-dhs-is-a-mess-of-cybersecurity-incompetence/

Defensive Security Podcast Episode 101

January 14, 2015Podcastdata breach, Google, microsoft, Morgan Stanley, ransomjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.wsj.com/articles/puzzle-forms-in-morgan-stanley-data-breach-1420590326

http://www.economist.com/news/leaders/21637390-states-should-police-corporate-cyber-security-more-toughlybut-react-breaches-cautiously-losing

http://www.securityweek.com/google-discloses-new-unpatched-windows-81-privilege-escalation-flaw

http://www.cultofmac.com/308478/confidential-apple-product-plans-quanta/

http://www.networkworld.com/article/2867565/microsoft-subnet/hackers-dump-over-30-000-confidential-client-emails-after-bank-refuses-to-pay-ransom.html

Defensive Security Podcast Episode 100

January 6, 2015Podcastdata breach, Morgan Stanley, Sony, USPSjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

 http://www.darkreading.com/attacks-breaches/long-running-cyberattacks-become-the-norm/d/d-id/1318392

http://www.hotforsecurity.com/blog/top-10-data-breaches-of-2014-lessons-learned-for-a-safer-2015-11101.html

http://www.net-security.org/secworld.php?id=17784

http://m.healthcareitnews.com/news/phi-485k-swiped-usps-data-breach

http://www.databreachtoday.com/breach-prevention-5-lessons-learned-a-7757/op-1

http://www.securityweek.com/morgan-stanley-fires-employee-stealing-client-data

Defensive Security Podcast Episode 99

December 29, 2014PodcastISC.org, JP Morgan, Sonyjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

https://securityledger.com/2014/12/new-clues-in-sony-hack-point-to-insiders-away-from-dprk/http://www.databreachtoday.com/blogs/6-sony-breach-lessons-we-must-learn-p-1786
http://www.theregister.co.uk/2014/12/26/isc_org_hacked/

http://www.darkreading.com/attackers-leverage-it-tools-as-cover-/d/d-id/1318365
http://www.theregister.co.uk/2014/12/23/jpmorgan_breach_probe_latest/ https://www.maliciouslink.com/jpmc-is-getting-off-easy/

Defensive Security Podcast Episode 98

December 22, 2014PodcastHome Depot, ICANN, Sonyjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.bizjournals.com/atlanta/news/2014/12/19/home-depot-data-breach-forces-community-banks-to.html?ana=twt

http://www.itworld.com/article/2861675/cyberattack-on-german-steel-factory-causes-massive-damage.html

http://www.csoonline.com/article/2860737/social-engineering/icann-targeted-by-spear-phishing-attack-several-systems-impacted.html#tk.rss_all

http://gizmodo.com/sony-execs-knew-about-extensive-it-flaws-two-months-bef-1670203774

http://for.tn/1x7xPTe