Tag Archives: data breach

Defensive Security Podcast Episode 103

January 25, 2015PodcastAussie Travel Cover, data breach, GoDaddy, NSA, Shnucks, Sonyjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.abc.net.au/pm/content/2015/s4164603.htm

http://breakingbits.net/2015/01/18/taking-over-godaddy-accounts-using-csrf/

http://recode.net/2015/01/20/heres-what-helped-sonys-hackers-break-in-zero-day-vulnerability/

http://www.darkreading.com/attacks-breaches/nsa-report-how-to-defend-against-destructive-malware/d/d-id/1318734

http://www.databreachtoday.com/court-rules-in-favor-breached-retailer-a-7822

http://www.csoonline.com/article/2872329/data-breach/6-biggest-business-security-risks-and-how-you-can-fight-back.html#tk.rss_all

http://www.csoonline.com/article/2871922/malware-cybercrime/gap-between-perception-and-reality-of-cyberthreats-widened-in-2015.html#tk.rss_all

Defensive Security Podcast Episode 102

January 18, 2015PodcastAPT, data breach, DHS, Google, microsoftjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.darkreading.com/a-lot-of-security-purchases-remain-shelfware/d/d-id/1318648

http://arstechnica.com/information-technology/2015/01/google-drops-more-windows-0-days-somethings-gotta-give/

http://www.eweek.com/security/effective-computer-security-means-covering-all-your-bases.html

http://krebsonsecurity.com/2015/01/park-n-fly-onestopparking-confirm-breaches/

http://www.databreachtoday.com/report-mercenaries-behind-apt-attacks-a-7806

http://www.zdnet.com/article/new-report-the-dhs-is-a-mess-of-cybersecurity-incompetence/

Defensive Security Podcast Episode 101

January 14, 2015Podcastdata breach, Google, microsoft, Morgan Stanley, ransomjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.wsj.com/articles/puzzle-forms-in-morgan-stanley-data-breach-1420590326

http://www.economist.com/news/leaders/21637390-states-should-police-corporate-cyber-security-more-toughlybut-react-breaches-cautiously-losing

http://www.securityweek.com/google-discloses-new-unpatched-windows-81-privilege-escalation-flaw

http://www.cultofmac.com/308478/confidential-apple-product-plans-quanta/

http://www.networkworld.com/article/2867565/microsoft-subnet/hackers-dump-over-30-000-confidential-client-emails-after-bank-refuses-to-pay-ransom.html

Defensive Security Podcast Episode 100

January 6, 2015Podcastdata breach, Morgan Stanley, Sony, USPSjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.darkreading.com/attacks-breaches/long-running-cyberattacks-become-the-norm/d/d-id/1318392

http://www.hotforsecurity.com/blog/top-10-data-breaches-of-2014-lessons-learned-for-a-safer-2015-11101.html

http://www.net-security.org/secworld.php?id=17784

http://m.healthcareitnews.com/news/phi-485k-swiped-usps-data-breach

http://www.databreachtoday.com/breach-prevention-5-lessons-learned-a-7757/op-1

http://www.securityweek.com/morgan-stanley-fires-employee-stealing-client-data

Defensive Security Podcast Episode 93

November 17, 2014Compliance, PodcastAPT, Browserstack, data breach, hacking, SIEM, US State Department, USPSjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.securityweek.com/postal-service-suspends-telecommuting-vpn-access-breach-investigation-continues

http://www.browserstack.com/attack-and-downtime-on-9-November

http://www.techweekeurope.co.uk/security/hotel-wifi-hacked-executives-kaspersky-155165

http://www.washingtonpost.com/world/national-security/state-department-shuts-down-its-e-mail-system-amid-concerns-about-hacking/2014/11/16/92cf0722-4815-41ca-b602-9bfe8ecdb256_story.html

http://www.securityweek.com/security-operations-what-your-signal-noise-ratio

Defensive Security Podcast Episode 92

November 10, 2014Podcastdata breach, Home Depot, malware, Risk Managementjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.securityweek.com/nc-dermatology-center-discovers-hacked-server-two-years-after-attack

http://krebsonsecurity.com/2014/11/home-depot-hackers-stole-53m-email-addreses/

http://www.csoonline.com/article/2842532/data-breach/6-things-we-learned-from-this-years-security-breaches.html

http://www.net-security.org/article.php?id=2156

Defensive Security Podcast Episode 89

October 20, 2014PodcastAPT, data breach, HIPAA, malware, ShellShockjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.healthcareitnews.com/news/hipaa-breach-letters-go-out-after-email-hack

https://blog.gdatasoftware.com/blog/article/new-frameworkpos-variant-exfiltrates-data-via-dns-requests.html

http://www.zdnet.com/average-company-now-attacked-every-four-days-with-no-end-to-the-cybercrime-wave-in-sight-7000034755/

http://arstechnica.com/security/2014/10/ghost-in-the-bourne-again-shell-fallout-of-shellshock-far-from-over/

http://www.databreachtoday.com/defending-against-government-intrusions-a-7452

Defensive Security Podcast Episode 82

September 4, 2014Podcastdata breach, Home Depot, iCloud, infosec, PCI, Targetjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

http://www.databreachtoday.com/buying-cyber-insurance-5-tips-a-7250
http://www.csoonline.com/article/2600212/data-protection/why-russian-hackers-are-beating-us.html
http://www.aorato.com/labs/report/untold-story-target-attack-step-step/
http://www.csoonline.com/article/2599257/network-security/security-council-blames-breaches-on-poor-pci-standard-support.html#tk.rss_all

Defensive Security Podcast Episode 79

August 11, 2014PodcastCybervor, data breach, Google, hacking, information security, infosec, Java, malwarejb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

[1] Cisco’s mid-year report
[2] Poorly trained IT workers pose a risk to organizations
[3] Cyber security should be professionalized
[4] How hackers are using Google to steal data’
[5] PCI creates a check-box mentality
[6] Gamma’s ownage detailed on pastebin
[7] 1.2 Billion passwords, Russians and controversy
Web Site | Subscribe in iTunes | Podcast RSS Feed | Twitter | Email

[1] https://blogs.cisco.com/security/cisco-2014-midyear-security-report-exposing-weak-links-to-strengthen-the-security-chain/
[2] http://www.telegraph.co.uk/technology/internet-security/11011249/Poorly-trained-IT-workers-are-gateway-for-hackers.html
[3] http://www.csoonline.com/article/2461669/security-leadership/cybersecurity-should-be-professionalized.html
[4] http://www.csoonline.com/article/2462409/data-protection/how-hackers-used-google-in-stealing-corporate-data.html
[5] http://www.csoonline.com/article/2460607/security/pci-regime-has-bred-complacent-tick-box-security-among-retailers-tripwire-survey-finds.html
[6] http://pastebin.com/cRYvK4jb
[7] http://www.youarenotpayingattention.com/2014/08/08/the-lie-behind-1-2-billion-stolen-passwords/

Defensive Security Podcast Episode 72

June 17, 2014Podcastdata breach, DDOS, feedly, ransomjb

Podcast: Play in new window | Download | Embed

Subscribe: RSS

New Logo!; Dominos has 600k records stolen and held for ransome; Undisclosed number of customer records are stolen from ATT by employees of a vendor; PF Changs confirms credit card breach; Stratfor forensic report leaks; Feedly hit by DDOS attack, doesn’t pay ransom and gets it again; Inland Empire Colleges emails 35000 records to the wrong address; Class action suit filed against payroll company following data breach; 9 rules to follow after you’ve suffered a data breach; You should be managing incidents, not responding to them.

Subscribe in iTunes | Podcast RSS Feed | Twitter | Email
http://consumerist.com/2014/06/16/dominos-hit-by-hackers-demanding-ransom-money-for-european-customers-data
http://www.11alive.com/story/news/nation/2014/06/15/att-data-breach/10555039/
http://krebsonsecurity.com/2014/06/p-f-changs-confirms-credit-card-breach/#more-26467
http://www.dailydot.com/politics/stratfor-verizon-report-security-flaws/
http://techcrunch.com/2014/06/11/feedly-evernote-and-others-become-latest-victims-of-ddos-attacks/
http://www.nbclosangeles.com/news/local/Inland-Empire-Colleges-Report-Possible-Mass-Data-Breach-263370251.html
http://www.scmagazine.com/class-action-filed-against-payroll-company-paytime-over-massive-data-breach/article/356013/
http://www.infoworld.com/t/security/9-rules-follow-after-youve-suffered-data-breach-244273
http://integriography.wordpress.com/2014/05/06/if-you-are-doing-incident-response-you-are-doing-it-wrong/