Tag Archives: APT

Defensive Security Podcast Episode 213

March 20, 2018PodcastAPT, CIS Top 20, Equifax, Insider Tradingjerry

Podcast: Play in new window | Download | Embed

Subscribe: RSS

https://www.theguardian.com/business/2018/mar/14/equifax-insider-trading-data-breach-jun-ying-charged

https://gizmodo.com/us-power-company-fined-2-7-million-over-security-flaws-1823745994

https://www.csoonline.com/article/3262551/data-protection/are-your-employees-unwittingly-invalidating-your-cyber-liability-insurance.html

https://www.cisecurity.org/controls/

Defensive Security Podcast Episode 154

March 28, 2016PodcastAPT, Bangladesh Central Bank, data breach, Ransomware, Verizon Enterprisejb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

https://threatpost.com/apt-attackers-flying-more-false-flags-than-ever/116814/
http://www.csoonline.com/article/3048334/security/verizons-breach-experts-missed-one-right-under-their-noses.html
http://www.wsj.com/articles/hackers-in-bangladesh-bank-account-heist-part-of-larger-breach-1458582678
http://krebsonsecurity.com/2016/03/hospital-declares-internet-state-of-emergency-after-ransomware-infection/

Defensive Security Podcast Episode 117

May 17, 2015PodcastAPT, Penn State, Plane Hacking, POS, Ransomware, Venomjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.computerworld.com/article/2918406/cybercrime-hacking/cybercriminals-borrow-from-apt-playbook-in-attacking-pos-vendors.html

http://www.welivesecurity.com/2015/05/12/5-practical-tips-avoid-ransomware-email/

http://www.zdnet.com/article/what-causes-enterprise-data-breaches-the-terrible-complexity-and-fragility-of-our-it-systems/

http://www.computing.co.uk/ctg/news/2408602/venom-security-vulnerability-allows-hackers-to-infiltrate-networks-via-the-cloud

http://arstechnica.com/security/2015/05/penn-state-severs-engineering-network-after-incredibly-serious-intrusion/

Defensive Security Podcast Episode 110

March 24, 2015PodcastAPT, Attribution, Bitwhisper, malware, Premera hack, Pwn2Ownjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.infoworld.com/article/2898658/security/premera-anthem-data-breaches-linked-by-similar-hacking-tactics.html

http://www.theregister.co.uk/2015/03/23/premera_healthcare_hipaa/

http://arstechnica.com/security/2015/03/all-four-major-browsers-take-a-stomping-at-pwn2own-hacking-competition/

http://www.csoonline.com/article/2898128/disaster-recovery/godaddy-accounts-vulnerable-to-social-engineering-and-photoshop.html

http://blog.norsecorp.com/2015/03/23/bitwhisper-breaching-air-gapped-systems-via-thermal-manipulation/

http://rt.com/news/243397-canada-cyber-spying-snowden/

http://www.dailydot.com/technology/michael-hamelin-legacy-encryption-death/

Defensive Security Podcast Episode 106

February 15, 2015PodcastAnthem, APT, data breach, malware, PCI, social engineering, SSLjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://training.pcisecuritystandards.org/pci-ssc-bulletin-on-impending-revisions-to-pci-dss-pa-dss-assessor

http://www.theguardian.com/technology/2015/feb/05/company-loses-17m-in-email-scam

http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html?_r=0

http://www.group-ib.com/files/Anunak_APT_against_financial_institutions.pdf

http://arstechnica.com/security/2015/02/pwned-in-7-seconds-hackers-use-flash-and-ie-to-target-forbes-visitors/

http://www.csoonline.com/article/2883248/data-protection/zero-days-last-up-to-six-months-for-some-malware.html#tk.rss_all

http://krebsonsecurity.com/2015/02/anthem-breach-may-have-started-in-april-2014/

Defensive Security Podcast Episode 102

January 18, 2015PodcastAPT, data breach, DHS, Google, microsoftjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.darkreading.com/a-lot-of-security-purchases-remain-shelfware/d/d-id/1318648

http://arstechnica.com/information-technology/2015/01/google-drops-more-windows-0-days-somethings-gotta-give/

http://www.eweek.com/security/effective-computer-security-means-covering-all-your-bases.html

http://krebsonsecurity.com/2015/01/park-n-fly-onestopparking-confirm-breaches/

http://www.databreachtoday.com/report-mercenaries-behind-apt-attacks-a-7806

http://www.zdnet.com/article/new-report-the-dhs-is-a-mess-of-cybersecurity-incompetence/

Defensive Security Podcast Episode 95

December 3, 2014PodcastAPT, Cleaver, Craigslist, Domain Hijack, hacking, Sony, SP+jb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.welivesecurity.com/2014/11/25/craigslist-redirected-prank-site-via-dns-hijack/

https://nakedsecurity.sophos.com/2014/11/28/syrian-electronic-army-returns-with-thanksgiving-press-hack/

http://www.theregister.co.uk/2014/12/02/us_parking_garage_breach/

http://arstechnica.com/security/2014/12/critical-networks-in-us-15-nations-completely-owned-by-iran-backed-hackers/

http://www.wired.com/2014/12/sony-hack-what-we-know/

Defensive Security Podcast Episode 93

November 17, 2014Compliance, PodcastAPT, Browserstack, data breach, hacking, SIEM, US State Department, USPSjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.securityweek.com/postal-service-suspends-telecommuting-vpn-access-breach-investigation-continues

http://www.browserstack.com/attack-and-downtime-on-9-November

http://www.techweekeurope.co.uk/security/hotel-wifi-hacked-executives-kaspersky-155165

http://www.washingtonpost.com/world/national-security/state-department-shuts-down-its-e-mail-system-amid-concerns-about-hacking/2014/11/16/92cf0722-4815-41ca-b602-9bfe8ecdb256_story.html

http://www.securityweek.com/security-operations-what-your-signal-noise-ratio

Defensive Security Podcast Episode 89

October 20, 2014PodcastAPT, data breach, HIPAA, malware, ShellShockjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.healthcareitnews.com/news/hipaa-breach-letters-go-out-after-email-hack

https://blog.gdatasoftware.com/blog/article/new-frameworkpos-variant-exfiltrates-data-via-dns-requests.html

http://www.zdnet.com/average-company-now-attacked-every-four-days-with-no-end-to-the-cybercrime-wave-in-sight-7000034755/

http://arstechnica.com/security/2014/10/ghost-in-the-bourne-again-shell-fallout-of-shellshock-far-from-over/

http://www.databreachtoday.com/defending-against-government-intrusions-a-7452

Defensive Security Podcast Episode 81

August 26, 2014PodcastAPT, CHS, heartbleed, infosec, malware, UPSjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.csoonline.com/article/2466084/data-protection/community-health-systems-blames-china-for-recent-data-breach.html
http://www.csoonline.com/article/2466726/data-protection/heartbleed-to-blame-for-community-health-systems-breach.html
http://www.csoonline.com/article/2597389/data-protection/more-problems-emerge-on-the-community-health-systems-network.html
http://www.securityweek.com/secret-service-over-1000-business-infected-backoff-point-sale-malware
http://nakedsecurity.sophos.com/2014/08/22/the-ups-store-breach-what-went-wrong-and-what-ups-got-right