Hack Naked News #129 - June 13, 2017

How to delete an entire company, GameStop suffers a breach, Macs do get viruses, Docker released LinuxKit, and more. Jason Wood of Paladin Security joins us to discuss the military beefing up their cybersecurity reserve on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode129Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #43 - Never Stop Believing

The six secrets to starting smart, a startup’s guide to protecting trade secrets, knowing what your customers value, and more articles for discussion. In the news, updates from Netskope, Yubikey, CybelAngel, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode43 Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #44 - Selling Ice to an Eskimo

Tarun Desikan of Banyan joins us alongside guest host Matt Alderman. In the news, negotiation mistakes that are hurting your deals, hiring re-founders, updates from Hexadite, Amazon, Sqrrl, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode44 Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #517 - Welcome To Reality

Graham Cluley joins us, our friends at Javelin Networks explain how to defend against performing one-click domain admin attacks, and we discuss the latest information security news!

Full Show Notes: https://wiki.securityweekly.com/Episode517

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #48 - Making Everybody Mad

Paul and John discuss building an internal penetration testing team. In the news, automating all the things, Juniper Networks opens a software-defined security ecosystem, millions of devices are running out-of-date systems, Duo and McAfee join forces, and more in this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode48Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #128 - June 6, 2017

Exploiting Windows 10, mimicking Twitter users, vulnerabilities in new cars, security issues surrounding virtual personal assistants, and more. Jason Wood of Paladin Security joins us to discuss sniffing out spy tools with ridesharing cars on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode128Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #42 - A Holistic Startup Approach

Matt Alderman joins us. In the news, how startups can stand out, Honeywell launches a $100 million venture fund, why you should think twice about listening to business gurus, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode42 Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #516 - What's The Deal With Backups?

Don Pezet of ITPro.TV joins us, Moses Hernandez of Cisco/SANS Institute delivers a tech segment on Node.js, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode516

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #47 - You Burn, You Learn

Corey Bodzin of Tenable joins us. In the news, the power of exploits, Carbon Black’s open letter to Cylance, security measures increase due to ransomware attacks, and more in this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode47Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #127 - May 30, 2017

Bugs found in pacemaker code, NTP is more secure, the most polite hackers ever, Microsoft is patching away, and more. Jason Wood of Paladin Security joins us to discuss government regulation on this episode of Hack Naked News!

Full Show Notes: https://wiki.securityweekly.com/HNNEpisode127

Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #41 - From a Startup Perspective

Don Pezet and Tim Broom of ITPro.TV join us. In the news, starting up on the right foot, the key to growth, marketing automation, financial modeling, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode41 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #515 - Crankin’ Out the Dubs

Dr. Branden R. Williams joins us, Almog Ohayon of Javelin Networks delivers part two of Javelin’s active directory series, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode515

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #46 - Sexy Cryptography

Atif Ghauri of Herjavec Group joins us. In the news, stopping insider threats with machine learning, uncovering encrypted threats, end-user experience matters everywhere, and are too many SEIM alerts overwhelming your staff? All that and more in this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode46Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #126 - May 23, 2017

Booby-trapped subtitles, Netgear is recording your IP and MAC addresses, net neutrality is on the chopping block, and more. Jason Wood of Paladin Security joins us to explain why companies should hack back on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode126Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #40 - I’m On a Roll

How to come up with worthy startup ideas, why your explainer video matters, and what does “Minimum Viable Product” actually mean, anyway? Paul and Michael give updates on their startup journeys and report on Karamba, Crowdstrike, Wandera, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode40 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #514 - Sausage Asadoorian

Joel Scambray of NCC Group joins us, we show you how to disable SMBv1, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode514 Visit http://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #45 - The Memes Were Great

April Wright of Verizon Enterprise and Matt Ploessel of Markley Group join us to discuss vendor response to WannaCry. In the news, Identropy and Exabeam team up, five pitfalls to avoid during a CASB evaluation, FirstWave partners with Fortinet, and more in this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode45Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #125 - May 16, 2017

Netflix blocks rooted devices, HP laptops are logging your keystrokes, Google Chrome is vulnerable, and more. Jason Wood of Paladin Security joins us to discuss a global tech support scheme on this episode of Hack Naked News!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode125

Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #124 - The Ransomware Special

Amanda Rousseau of Endgame joins us to discuss ransomware and malware protection on this episode of Hack Naked News!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode124

Visit http://www.securityweekly.com for all the latest episodes!

Indicators Associated With WannaCry Ransomware (Update I)

This updated alert is a follow-up to the updated alert titled ICS-ALERT-17-135-01H Indicators Associated With WannaCry Ransomware that was published May 31, 2017, on the NCCIC/ICS-CERT web site.

Startup Security Weekly #39 - Listen With Intent

Bonnie Halper of StartupOneStop joins us. In the news, why companies aren’t startups, how to be insanely well-connected, CyberArk acquires Conjur, and more!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/SSWEpisode39

Visit http://securityweekly.com/category/ssw/ for all the latest episodes!

Paul’s Security Weekly #513 - Two iPhones & A Pocket Full of Dongles

Steve Lipner of SAFECode joins us, Roi Abutbul and Guy Franco of Javelin Networks show us the importance of protecting AD, and we discuss the latest security news!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/Episode513

Visit http://www.securityweekly.com for all the latest episodes!

Subscribe to YouTube Channel: https://www.youtube.com/channel/UCg--XBjJ50a9tUhTKXVPiqg

Security Weekly Website: http://securityweekly.com

Follow us on Twitter: @securityweekly

Enterprise Security Weekly #44 - What Are We Bethesing Today

Ryan Hays of TBG Security joins us. In the news, VMware falls out with Tanium, machine learning at Invincea, the war on legacy IT, Cisco Cloudlock releases an apps firewall, and more in this episode of Enterprise Security Weekly!Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode44 Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #123 - May 9, 2017

Phishing in Google’s waters, HandBrake has been compromised, Dell releases patches galore, and more. Jason Wood of Paladin Security delivers expert commentary on how ultrasonic beacons can track your phone on this episode of Hack Naked News!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode123

Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #38 - We Need To Pivot!

Steven Grossman of Bay Dynamics joins us. In the news, why your startup doesn’t necessarily need early stage funding, Cisco acquires Viptela, the risks of startup debt, and why do chefs and soldiers make the best product managers?

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/SSWEpisode38 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #512 - It’s All About Length

Javvad Malik of AlienVault joins us, Ferruh Mavituna of Netsparker delivers a demo on second order attacks, and we discuss the security news for the week!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/Episode512 Visit http://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #43 - There’s Always Time For Lube

Don Pezet of ITPro.TV talks about deception technologies and honeypots. In the news, Duo launches its MSP program, Fortscale beefs up its partner programs, integrating threat intelligence into your operations, and more in this episode of Enterprise Security Weekly!Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode43 Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #122 - May 2, 2017

Microsoft VB macro barriers have been penetrated, the website that doesn’t let you change your password, IBM flash drives have malware, and more. Jason Wood of Paladin Security joins us to deliver expert commentary on NATO’s cyberwar games on this episode of Hack Naked News!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode122

Visit http://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #42 - Patents Like Candy

Paul, John, and Michael discuss building a bug bounty program. In the news, LockPath and SailPoint join forces, Skyhigh Networks announces a cloud security partnership, Acalvio is building deception farms, and more in this episode of Enterprise Security Weekly!Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode42 Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #37 - Speaking the Startup Language

Mike Simon of Cryptonite NTX joins us. In the news, how to drive maximum performance in your business, 6 reasons your small business will fail, how McAfee is securing its future, and how well do you know the language of startups?

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/SSWEpisode37 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #511 - HACKER PANTS!!1

Mimi Herrmann of Taylor and Francis joins us, Paul delivers part two of his tips on staying secure at conferences, and we discuss the security news for the week!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/Episode511 Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #121 - April 27, 2017

Windows boxes are getting pwned, vulnerabilities in SugarCRM, Ashley Madison is back in the news, and more. Jason Wood of Paladin Security joins us to deliver expert commentary on hacking cars with radio gadgets on this episode of Hack Naked News!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode121 Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #36 - A Mousetrap Will Do

Roger Courville of EventBuilder joins us. In the news, the number one trait of successful entrepreneurs, SoftBank is investing, the “store of the future,” Jeff Bezos’s annual letter, and more!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/SSWEpisode36 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #510 - Interrupting Myself

Phil Zimmermann of Silent Circle and PGP joins us, Paul drops knowledge on staying secure at hacker conferences, and we discuss the security news for the week!Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/Episode510 Visit http://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #41 - Solving Problems

Rami Essaid of Distil networks joins us for an interview. In the news, Cylance battles the malware testing industry, Tanium’s CEO issues an apology, Malwarebytes integrates with ForeScout, and more in this episode of Enterprise Security Weekly!Full show notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode41 Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #120 - April 18, 2017

Doug White and Jason Wood discuss Cyberpatriot, Shadow Brokers, and more on this episode of Hack Naked News!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode120

Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #35 - Miracle on Startup Street

Paul, Michael, and guest host Jeff Man discuss buyer perspective in the startup ecosystem. In the news, Comcast has a new investment, how to close investors, launching startups in crowded markets, and more!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/SSWEpisode35 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #509 - Oh So Nefarious

Alex Horan of Onapsis rejoins us, our own Carlos Perez shows us the basics of WMI events, and we review the security news for the week!Full show notes: http://wiki.securityweekly.com/wiki/index.php/Episode508 Visit http://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #40 - Huge, Gaping Hole

Gabriel Gumbs of STEALTHbits joins us for an interview. In the news, virtualization-based security, the road to Twistlock 2.0, Trend Micro embraces machine learning, and more in this episode of Enterprise Security Weekly!Full show notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode40 Visit http://www.securityweekly.com for all the latest episodes!

BrickerBot Permanent Denial-of-Service Attack (Update A)

This updated alert is a follow-up to the original alert titled ICS-ALERT-17-102-01A BrickerBot Permanent Denial-of-Service Attack that was published April 12, 2017, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of open-source reports of “BrickerBot” attacks, which exploit hard-coded passwords in IoT devices in order to cause a permanent denial of service (PDoS). This family of botnets, which consists of BrickerBot.1 and BrickerBot.2, was described in a Radware Attack Report.

Hack Naked News #119 - April 11, 2017

Signal patches vulnerabilities, hackers target tornado sirens in Texas, a Microsoft Word 0-day is being used to spread malware, and more. Don Pezet of ITPro.TV offers his expert commentary on this episode of Hack Naked News!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode119 Visit http://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #39 - Aware of the Breach

Paul and Doug discuss incident response and how to disclose the public. In the news, Cisco has new certs, 5 things to consider when building an SOC, CounterTack announces new data loss prevention measures, and more!

Full show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode39 Visit http://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #34 - The Anti-Drone

James Gellert of RapidRatings joins us. In the news, 5 reasons to slow or stop the growth of your business, Walmart is working with startups, Cloudera goes public, and more!Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/SSWEpisode34 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #508 - I’ve Been Overseas Pt. 2

Anna Manley of Manley Law Inc. joins us, our very own Jeff Man briefs us on his trip to IBM InterConnect 2017, and we review the security news for the week!Full show notes: http://wiki.securityweekly.com/wiki/index.php/Episode508 Visit http://www.securityweekly.com for all the latest episodes!

Hack Naked News #118 - April 4, 2017

Doug White fills in in the studio, while the awesome, sheer naked power of Jason Wood fills the airwaves. Anonymous FTP, the Russians, Skynet activates in Connecticut, and the return of Van Eck Phreaking!

Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/HNNEpisode118

Visit http://hacknaked.tv to get all the latest episodes!

Startup Security Weekly #33 - Throwing Spaghetti at the Fridge

Ira Winkler of Secure Mentem joins us. In the news, how to hire remote employees effectively, the periodic table of security startups, why no business is bulletproof, and more!Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/SSWEpisode33 Visit http://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #507 - Who’s Your Daddy?

Brad Antoniewicz of OpenDNS and BSides NYC joins us, Paul demonstrates how to block ads and malware using Pi-hole, and we discuss the security news for the week!Full show notes: http://wiki.securityweekly.com/wiki/index.php/Episode507 Visit http://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #38 - It’s a Virtual Thing

Paul and John discuss configuration management. In the news, enSilo adds NGAV support, the cure for infectious malware, and what percentage of malware attacks are 0-days? Stay tuned! Full show notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode38 Visit http://www.securityweekly.com for all the latest episodes!

Miele Professional PG 8528 Vulnerability

NCCIC/ICS-CERT is aware of a public report of a directory traversal vulnerability with proof-of-concept (PoC) exploit code affecting the embedded webserver (“PST10 WebServer”) in Miele Professional PG 8528, a large capacity washer and disinfector used in hospitals and laboratory settings to disinfect medical and laboratory equipment. According to this report, the vulnerability is remotely exploitable.

Hack Naked News #117 - March 28, 2017

LastPass fixes vulnerabilities, Instagram adds 2FA, scammers target iOS porn viewers, and more. Israel Barak of Cybereason joins us to deliver expert commentary on unifying industrial control system security operations into an enterprise SOC. Stay tuned!

Startup Security Weekly #32 - The Greatest Horn of All

Kevin O’Brien of GreatHorn joins us. In the news, 5 challenges most entrepreneurs don’t anticipate, 6 ways marketing can shrink the sales cycle, what you need to know about raising seed funding, and more. Stay tuned!

Paul’s Security Weekly #506 - Cut That Thing Free

Ferruh Mavituna of Netsparker makes his triumphant return, Paul shows us how to secure your Arlo wireless camera system, and Don Pezet of ITPro.TV gives tips on securing your online backups. Stay tuned!

Hack Naked News #116 - March 21, 2017

The Fappening 2.0 is upon us, hackers escape VMware, thieves are caught using facial recognition software, and more. Don Pezet of ITPro.TV joins us to deliver expert commentary on safe backups. Stay tuned!

Startup Security Weekly #31 - Low Pressure

Michael Figueroa of the Advanced Cyber Security Center joins us. In the news, machine learning from an investor’s perspective, 5 skills entrepreneurs need to succeed, AdEspresso joins Hootsuite, and more. Stay tuned!

Paul’s Security Weekly #505 - No Special Flowers

Andrew Whitaker of Rapid7 and Render Man of the Internet of Dongs Project join us for interviews, and we discuss the security news for this week. Stay tuned!

Enterprise Security Weekly #37 - You’ve Been Hacked!

Michael Dalgleish of LogRhythm joins us. In the news, LookingGlass debuts a new partner portal, F-Secure acquires Inverse Path, Skyhigh Networks has new CASB patents, and more. Stay tuned!

Hack Naked News #115 - March 15, 2017

Patch Tuesday returns, Android devices have malware, a government spyware maker doxes itself, and more. Jason Wood of Paladin Security delivers expert commentary on the Wikipedia for spies. Stay tuned!

MEMS Accelerometer Hardware Design Flaws (Update A)

This updated alert is a follow-up to the original alert titled ICS-ALERT-17-073-01 MEMS Accelerometer Hardware Design Flaws that was published March 14, 2017, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of public reporting of hardware design flaws in some capacitive micro-electromechanical systems (MEMS) accelerometer sensors, which are produced by the following manufacturers: Robert Bosch GmbH, STMicroelectronics, InvenSense Inc., Analog Devices Inc., and Murata Manufacturing Company.

Startup Security Weekly #30 - It’s All Good

Steve Tout and Stan Bounev of VeriClouds join us. In the news, AI startups are winning, 8 funding alternatives, CA Technologies acquires Veracode, and more. Stay tuned!

Paul’s Security Weekly #504 - Math is Dead Sexy

Hyrum Anderson of Endgame and Keith Hoodlet of Rapid7 and InfoSec Mentors Project join us for interviews, and we cover the latest security news. Stay tuned!