Hack Naked News #143 - October 3, 2017

The internet isn’t ready for DNS sec, Netgear patches away, Whole Foods is the latest victim of a credit card breach, and more. Ferruh Mavituna and Sven Morgenroth of Netsparker join us to discuss Apache Struts vulns and the Equifax breach on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode143

Visit http://hacknaked.tv for all the latest episodes!

Startup Security Weekly #57 - The Sand Hobo Himself

Barrett Lyon of Neustar joins us. In the news, funding your business with no experience, buying and selling strategy and tactics, taking a sabbatical, and updates from Google, Vimeo, CA Technologies, and more on this episode of Startup Security Weekly!Full Show Notes: https://wiki.securityweekly.com/SSWEpisode57Visit https://www.securityweekly.com/ssw for all the latest episodes!

Paul's Security Weekly #531 - Trevor Forget

Jim Nitterauer of AppRiver and Ed Skoudis of Counter Hack & SANS Institute join us, and we discuss the latest information security and hacking news!

Full Show Notes: https://wiki.securityweekly.com/Episode531

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #63 - Temporal Tempura

Paul and John discuss network security architecture. In the news, Google Cloud acquires Bitium, Ixia extends cloud visibility, Lacework now supports Microsoft Windows Server, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode63

Visit https://www.securityweekly.com/esw for all the latest episodes!

Hack Naked News #142 - September 26, 2017

Tracking cars, iOS 11 patches eight vulnerabilities, Equifax dumps their CEO, High Sierra gets slammed with a 0-day, and more. Jason Wood of Paladin Security discusses an email DDos threat on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode142

Visit http://hacknaked.tv for all the latest episodes!

Startup Security Weekly #56 - A Huge Week

Don Pezet and Tim Broom of ITProTV join us. In the news, building successful products, the most important startup question, and updates from McAfee, Slack, ThreatStack, and more on this episode of Startup Security Weekly!Full Show Notes: https://wiki.securityweekly.com/SSWEpisode56Visit https://www.securityweekly.com/ssw for all the latest episodes!

Enterprise Security Weekly #62 - Heat Death of the Universe

Paul and John discuss insights into the Equifax data breach. In the news, CyberGRX and BitSight join forces, YARA rules explained, Riverbed teases an application networking offering, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode62

Visit https://www.securityweekly.com/esw for all the latest episodes!

Hack Naked News #141 - September 18, 2017

CCleaner is distributing malware, rogue WordPress plugins, Equifax replaces key staff members, and more. Jason Wood of Paladin Security discusses malicious WordPress plugins on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode141

Visit http://hacknaked.tv for all the latest episodes!

Startup Security Weekly #55 - Bald, Beautiful Men

Jason Brvenik of NSS Labs joins us. In the news, attributes of a scalable business, founder struggles, how to grow your startup, and updates from AppGuard, Securonix, CashShield, and more on this episode of Startup Security Weekly!Full Show Notes: https://wiki.securityweekly.com/SSWEpisode55Visit https://www.securityweekly.com/ssw for all the latest episodes!

Paul’s Security Weekly #530 - That’s a Grand Slam

Ted Demopoulos and Mike Assante of the SANS Institute join us, and we discuss the latest information security and hacking news!

Full Show Notes: https://wiki.securityweekly.com/Episode530

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #61 - Crying Uncle

Tom Parker of Accenture joins us. In the news, Bay Dynamics and VMware join forces, confessions of an insecure coder, Flexera acquires BDNA, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode61

Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #140 - September 12, 2017

Bypassing Windows 10 security software, Android is vulnerable (go figure), hacking syringe infusion pumps to deliver fatal doses, and more. Jason Wood of Paladin Security discusses iOS 11 on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode140Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #54 - Here We Go with Witness Protection

Gary Golomb of Awake Security joins us. In the news, changing a prospect's mind, the MVP paradox, commodifying SaaS, and updates from ForgeRock and Michael and Paul's startup journeys!Full Show Notes: https://wiki.securityweekly.com/SSWEpisode54Visit https://www.securityweekly.com/ssw for all the latest episodes!

Paul's Security Weekly #529 - Security is a Religion

Michele Jordan of Under the Oak Consulting joins us, Chris Crowley of SANS Institute discusses mobile application security, and we discuss the latest information security and hacking news!

Full Show Notes: https://wiki.securityweekly.com/Episode529

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #60 - Live From Gainesville

Don Pezet of ITProTV and Doug White join us to discuss network security architecture. In the news, SealPath and Boldon James join forces, following the money, AI in the cloud, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode60Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #139 - September 5, 2017

AT&T customers at risk, WikiLeaks gets vandalized, catching hackers in the act, going to jail over VPNs, and more. Jason Wood of Paladin Security discusses wheeling and dealing malware on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode139Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #53 - Pulling Your G-String

Matt Alderman of Automox joins us. In the news, changing your audience’s perceptions, improving sales efforts, letting your kids fail, and updates from Facebook, Juniper, Qadium, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode53

Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #528 - DDos Campaign for Memes

Larry Pesce and Dave Kennedy hold down the fort in Paul’s absence! Kyle Wilhoit of DomainTools delivers a tech segment on pivoting off domain information, Dave talks about the upcoming DerbyCon, and we discuss the latest information security news!

Full Show Notes: https://wiki.securityweekly.com/Episode528

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #59 - Protect the Data

Michael and Matt join Paul to discuss security operations, endpoint protection, enterprise networking monitoring, and the latest enterprise security news on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode59Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #138 - August 29, 2017

Sparring government agencies, Microsoft patches a patch of a patch, Intel chips and backdoors, SMS authentication begone, and more. Jason Wood of Paladin Security discusses scaling back data demand on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode138Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #52 - Security Startups Taste So Good

Michael and Paul discuss de-risking risk. In the news, ten tools to streamline your processes, why cash conversion matters, creating psychological safety, and updates from Cisco, Nationwide, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode52

Visit https://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #527 - The Dirty Secret

Richard Moulds of Whitewood Security joins us, Larry delivers a surprise technical segment, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode527

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #58 - A Game Changer

Paul and John discuss developer awareness, security training, and vulnerability tracking and reporting. In the news, diving deep into threat intelligence, GeoGuard and Skyhook team up, securing mobile devices, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode58Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #137 - August 22, 2017

Zero-days in PDF readers, updates to Debain Stretch, killer robots are coming, and more. Jason Wood of Paladin Security discusses sexually charged sonar-based attacks on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode137Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #51 - Whiskey For Gold Diggers

Tarah Wheeler joins us. In the news, how much your startup needs to raise, 6 steps to surviving 3 years, documenting failures, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode51

Visit https://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #526 - Lemonade and Salad Dressing

Bryson Bort of GRIMM joins us, Sven Morgenroth of Netsparker deploys filters for web applications, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode526

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #57 - They're Talking About Us!

Mike Nichols of Endgame joins us, we explore Paul’s IoC enchanting quadrants, and cover the latest enterprise news on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode57Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #136 - August 15, 2017

Allowing terrible passwords, four arrested in Game of Thrones leak, using EternalBlue to attack hotel guests, and more. Don Pezet of ITProTV joins us to deliver expert commentary on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode136Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #50 - Bootstrapped

Matt Alderman joins us for a recap of Black Hat and Hacker Summer Camp. In the news, how not to botch your pitch, why VCs love insurance, and updates from OpenText, WatchGuard, and more on this episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode50

Visit https://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #525 - Baked-In Security

Aram Jivanyan of BeSafe joins us, our tech segment covers Paul’s recent printer hacking adventures, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode525

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #56 - Tunable Discriminator

Paul and John discuss security policies and procedures. In the news, WatchGuard acquires Datablink, Cylance brings enterprise technology to home users, Oracle and SafeLogic join forces for OpenSSL, 12 security startups that raised new funding in 2017, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode56Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #135 - August 8, 2017

Shame on Disney, shooting down customer drones, flaws in solar panels, Chrome extensions spreading adware, and more. Doug White of Roger Williams University joins us to discuss hacking back on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode135Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #49 - Speak Your Truth

Glenn Chisholm and Ben Johnson of Obsidian Security join us. In the news, how to keep your head without losing your heart, what aspiring founders need to know, supercharging sales, and how NOT to start a startup. Michael and Paul deliver updates from Callsign, Juvo, Awake Security, and more on episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode49Visit https://www.securityweekly.com for all the latest episodes!

Paul’s Security Weekly #524 - The Secret Sauce

Danny Miller of Ericom Software joins us, Larry and his intern Galen Alderson exfiltrate data from networks with inexpensive hardware, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode524

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #55 - Wheatland, Wyoming

Ping Look of Optiv joins us, John delivers a tech segment on RITA, and we discuss the latest enterprise security news!Full Show Notes: https://wiki.securityweekly.com/ES_Episode55Visit https://www.securityweekly.com for all the latest episodes!

Eaton ELCSoft Vulnerabilities

NCCIC/ICS-CERT is aware of a public report of buffer overflow vulnerabilities affecting Eaton ELCSoft, a PLC programming software for Eaton Logic Control (ELC) controllers. According to the public report, which was coordinated with ICS-CERT prior to its public release, researcher Ariele Caltabiano (kimiya) working with Trend Micro's Zero Day Initiative, identified that an attacker can leverage these vulnerabilities to execute arbitrary code in the context of the process. ICS-CERT has notified the affected vendor, who has reported that they are planning to address the vulnerabilities. No timeline has been provided. ICS-CERT is issuing this alert to provide notice of the report and to identify baseline mitigations for reducing risks to these and other cybersecurity attacks.

Hack Naked News #134 - August 2, 2017

No more VPNs in Russia, hacking luxury cars, stolen Game of Thrones scripts, your Echo is spying on you, and more. Jason Wood of Paladin Security joins us to discuss Chrome plugin phishing attacks on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode134Visit https://www.securityweekly.com for all the latest episodes!

CAN Bus Standard Vulnerability

NCCIC/ICS-CERT is aware of a public report of a vulnerability in the Controller Area Network (CAN) Bus standard with proof-of-concept (PoC) exploit code affecting CAN Bus, a broadcast based network standard. According to the public report, which was coordinated with ICS-CERT prior to its public release, researchers Andrea Palanca, Eric Evenchick, Federico Maggi, and Stefano Zanero identified a vulnerability exploiting a weakness in the CAN protocol that allows an attacker to perform a denial-of-service (DoS) attack.

CRASHOVERRIDE Malware

CRASHOVERRIDE, aka, Industroyer, is the fourth family of malware publically identified as targeting industrial control systems (ICS). It uses a modular design, with payloads that target several industrial communication protocols and are capable of directly controlling switches and circuit breakers. Additional modules include a data-wiping component and a module capable of causing a denial of service (DoS) to Siemens SIPROTEC devices.

Startup Security Weekly #47 - Cupcakes For Breakfast

Ronnie Feldman of Learnings & Entertainments joins us. In the news, how to be “customer first”, four components of a successful sales strategy, and updates from Symantec, Nok Nok Labs, Flashpoint, HyTrust, and more!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode47Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #48 - Exiting Stealth

Ali Golshan of StackRox and special guest host Doug White join us on this containerized episode of Startup Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode48Visit https://www.securityweekly.com for all the latest episodes!

Pauls Security Weekly 523 - Hack My NAS

Almog Ohayon of Javelin Networks pits Javelin ADProtect against Microsoft ATA, Sven Morgenroth of Netsparker bypasses corporate firewalls, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode523

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #54 - Complete Gibberish

Thomas Fischer of Digital Guardian joins us to discuss GDPR, Paul talks about monitoring infrastructure with Nagios, and we discuss the latest enterprise security news!Full Show Notes: https://wiki.securityweekly.com/ES_Episode54Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #133 - July 18, 2017

Forgetting your Windows password, bidding farewell to SMS authentication, reviewing Black Hat USA 2017, Ubuntu Linux for Windows 10, and more. Jason Wood of Paladin Security joins us to discuss companies being breached due to misconfiguration on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode133Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #522 - It's a Nerdgasm!

Joe Desimone of Endgame joins us to discuss fileless attacks, Don Pezet of ITProTV delivers a technical segment on hardening weak software RNGs and hardware entropy sources, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode522

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #53 - Look At the Beards

Ferruh Mavituna of Netsparker joins us to discuss CI level automated web security, Paul talks about hardening Docker containers, and the latest enterprise security news!Full Show Notes: https://wiki.securityweekly.com/ES_Episode53Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #132 - July 11, 2017

Solving artificial stupidity, Petya’s decryption key is released, sleeping with the enemy, burned laptops for DEF CON, and more. Jason Wood of Paladin Security joins us to discuss the FTC shutting down a loan application firm on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode132Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #46 - All Black Everything

James Jardine of Jardine Software joins us. In the news, the hells of being a founder, killing projects before they kill you, intellectual property 101, and updates from Auth0, Upstream, Palo Alto Networks, Symantec, and more!

Full Show Notes: https://wiki.securityweekly.com/SSWEpisode46Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #521 - Bad Guy Walmart

Tim Helming of DomainTools joins us, Paul Ewing of Endgame demystifies the art of hunting, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode521

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #52 - Sweaty Lawyers

Doug White joins us to discuss network hardening using egress filtering, and we discuss the latest enterprise news!Full Show Notes: https://wiki.securityweekly.com/ES_Episode52Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #520 - Pickle Your Python

Moses Hernandez of Cisco Systems joins us, our friends at Javelin Networks discuss admin hunting and methods of credential theft for high privileged accounts, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode520

Visit https://www.securityweekly.com for all the latest episodes!

Petya Malware Variant (Update C)

This updated alert is a follow-up to the updated alert titled ICS-ALERT-17-181-01B Petya Malware Variant that was published July 5, 2017, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of reports of a variant of the Petya malware that is affecting several countries. ICS-CERT is releasing this alert to enhance the awareness of critical infrastructure asset owners/operators about the Petya variant and to identify product vendors that have issued recommendations to mitigate the risk associated with this malware.

Enterprise Security Weekly #51 - Idempotency

Apollo Clark joins us to discuss managing AWS cloud resources, docker security in the enterprise is our topic for the week, and we discuss the latest enterprise news!Full Show Notes: https://wiki.securityweekly.com/ES_Episode51Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #131 - June 28, 2017

DoD networks have been compromised, the Shadow Brokers continue their exploits, a Pennsylvania healthcare system gets hit with Petya, and more. Jason Wood of Paladin Security joins us to discuss nations' offensive technical strengths and defensive weaknesses on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode131Visit https://www.securityweekly.com for all the latest episodes!

Startup Security Weekly #45 - Walking In Pajamas

Fred Kneip of CyberGRX joins us. In the news, why most startups fail, conference season tips, the question you need to ask before solving any problem, and updates from GreatHorn, Cybereason, Amazon, and more!Full Show Notes: https://wiki.securityweekly.com/SSWEpisode45Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #519 - Whiskey Tango Foxtrot

Eric Conrad of SANS joins us, Justin Henderson reverse analyzes attacks for detection purposes, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode519

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #50 - Losing More Hair

Brian Ventura of SANS Institute and Ted Gary of Tenable join us. In the news, five ways to maximize your IT training, pocket-sized printing, 30 years of evasion techniques, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode50Visit https://www.securityweekly.com for all the latest episodes!

Hack Naked News #130 - June 20, 2017

Hacking military phone systems, IoT malware activity doubles, more WikiLeaks dumps, decade-old Linux bugs, and more. Jason Wood of Paladin Security joins us to discuss the erosion of ISP privacy rules on this episode of Hack Naked News!Full Show Notes: https://wiki.securityweekly.com/HNNEpisode130Visit https://www.securityweekly.com for all the latest episodes!

Paul's Security Weekly #518 - Floppy Lemons

Trey Forgety of NENA joins us, Carrie Roberts of Black Hills Information Security shows us how to prevent blacklisting while password spraying with Burp and ProxyCannon, and we discuss the latest security news!

Full Show Notes: https://wiki.securityweekly.com/Episode518

Visit https://www.securityweekly.com for all the latest episodes!

Enterprise Security Weekly #49 - 7 Layers

Paul and John discuss malware and endpoint defense. In the news, Carbon Black releases Cb Response 6.1, what to ask yourself before committing to a cybersecurity vendor, Malwarebytes replaces antivirus with endpoint protection, and more on this episode of Enterprise Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ES_Episode49Visit https://www.securityweekly.com for all the latest episodes!