Category Archives: Podcast

Why is a 14-month-old patched Microsoft vulnerability still being exploited?

no-brainer

While the media just looove zero-day exploits, the security industry sees a lot more exploits designed to take advantage of patched vulnerabilities. Question is why don't many of us get around to installing the patches?

Share

SSCC 82 - Sophos Security Threat Report, DMARC and mobile phone number leaks

ChetChatLogo250

This week, Paul Ducklin joins Chet to talk about the Sophos Security Threat Report 2012, the new anti-phishing proposal known as DMARC and mobile phone numbers being leaked through HTTP headers at O2.

Share

SSCC 81 - NCSA and Data Privacy Day

ChetChatLogo250

Chet sits down with Michael Kaiser, Executive Director at the National Cyber Security Alliance (NCSA) to discuss Data Privacy Day. Michael explains the origin of Data Privacy Day, some of the activities related to it and how people can participate in raising awareness about privacy and data security.

Share

SSCC 80 - Mobile security podcast with Vanja Svajcer

ChetChatLogo250

In this week's podcast, Vanja Svajcer joins Chet to talk about the mobile security landscape. Topics discussed include mobile malware, theft, application markets and advice on securing your smartphone.

Share

SSCC 79 - Smart meter privacy concerns, WiFi insecurity due to WPS and password hashes explained

ChetChatLogo250

Paul Ducklin joins Chet for the first Chet Chat of 2012. This week they discuss the privacy implications of smart meters, the recent research showing how WiFi routers are vulnerable due to an easy setup feature and password hashes.

Share

Data leaks at Stratfor and Care2 mark the end of a year riddled with data theft

iStock2012ahead250

As 2011 comes to a close it is clear there is much to be done to better secure our information in the "cloud". I look back at the major data loss incidents of the year and speculate this isn't the last we will see of our information being p0wned.

Share

SSCC 78 - IE 9 upgrades, Android malware, Carrier IQ and hospital shut down from malware

Chet Chat logo with wreath

Gary Korhonen joins Chet for this week's podcast discussing the automatic upgrade of Internet Explorer, Android Market malware, Carrier IQ and an infection that shut down a hospital in Georgia.

Share

SSCC 77 - Thanksgiving patching, SCADA, Google WiFi mapping and Android security

ChetChatLogo250

Paul Ducklin joins Chet to talk about this week's news including giving your friends and family a hand at Thanksgiving, Android security, SCADA hacking and Google's WiFi mapping opt-out scheme.

Share

SSCC 76 - Michael Kaiser, NCSA and Rob Strayer chat about cyber security

ChetChatLogo250

Chester interviews Michael Kaiser from the National Cyber Security Alliance and Rob Strayer from the Bipartisan Policy Center about National Cyber Security Awareness Month and our upcoming State of Cyber Security event.

Share

SSCC 75 - VB 2011, Apple updates, Microsoft Patch Tuesday and German R2D2 Trojan

ChetChatLogo250

John Shier joined Chet this week as they discussed the death of UNIX and C co-creator Dennis Ritchie, the Virus Bulletin 2011 conference, Apple's release of iOS 5 and OS X 10.7.2, Microsoft Patch Tuesday, and the German R2D2 Trojan.

Share

Following the tracks: understanding snowshoe spam

SnowShoesSlide250

Brett Cove from SophosLabs Vancouver presented a paper at Virus Bulletin 2011 today explaining the oft forgotten spamming technique known as snowshoe spam.

Share

Adobe Flash Player 11 and Reader security - Interview with Brad Arkin

iStock_Microphone250

Adobe released Flash Player 11 this week, so I sat down with Brad Arkin from Adobe to discuss the new security and privacy features and the general security landscape surrounding Adobe Reader.

Share

SSCC 74 - fighting hi-tech crime, Kelihos botnet, iCode for USA, Amazon Silk tablet, Mac malware and the BEAST

ChetChatLogo250

This week, Chet and Paul Ducklin discuss the interesting and important topics of the past week: fighting hi-tech crime, tackling the Kelihos botnet, taking on zombified home users, examining the risks of Amazon's new Silk tablet, and understanding the BEAST!

Share

SSCC 73 - Patch Tuesday, UBS, SpyEye, Twit.tv and Windows 8

ChetChatLogo250

Paul Ducklin joined Chet this week from a real-life Denial of Service situation at the domestic airport in Sydney, Australia. Topics discussed include Patch Tuesday, UBS losing £2.3bn, SpyEye on Android, Twit.tv hacked and Windows 8 including anti-virus.

Share

SSCC 72 - DigiNotar, DNS hijacking and Firesheep v2

Sophos Security Chet Chat 41

Mike Wood a Senior Threat Researcher with SophosLabs is Chet's guest. They discuss the upcoming Patch Tuesday, the new Firesheep and go in depth on the recent troubles at certificate authority DigiNotar.

Share

SSCC 71 - Juicejacking, ATM skimming, Anonymous attacks BART and our digital bread crumb trail online

Sophos Security Chet Chat 41

Chester Wisniewski welcomes back Paul Ducklin to summarize the week's security news. This week they talk about ATM skimming and recent related research, Juicejacking, the latest Anonymous attacks and the digital bread crumbs we all leave behind on the internet.

Share

SSCC 70 - Patch Tuesday, insulin pump hacking, Android patching, ChromeOS hacking, archiving our digital past

Sophos Security Chet Chat 41

Vanja Svajcer joins Chester Wisniewski to discuss the papers and demos they attended at last week's Black Hat and DEFCON conferences. Topics covered include Android patch cycles, Fixing the SSL CA problem, insulin pump hacking, Google ChromeOS flaws and archiving our digital past.

Share

SSCC 69 - Google+, Facebook facial recognition, Apple iOS SSL flaw and OS X File Vault 2

Sophos Security Chet Chat 41

David Schwartzberg joined Chet for this week's Chet Chat. David is a specialist in data protection and shared his thoughts on the new File Vault 2 feature in Mac OS X Lion. Dave and Chet also discussed Google+ privacy, Facebook's compromise on facial recognition and the critical vulnerability in Apple's iOS.

Share

SSCC 68 - OS X Lion, Zeus Android, Oracle patches and Secunia's threat report

Sophos Security Chet Chat 41

In this week's Chet Chat Kris Braun SophosLabs Threat Operations Manager joins Chet to discuss the week's news. Topics include OS X Lion, Oracle patches, Zeus for Android and Secunia's mid-year threat report.

Share

SSCC 67 - Patch Tuesday, iOS fixes, .co.cc banned and journalist hackers

Sophos Security Chet Chat 41

Richard Baldry is Chet's guest on this week's Chet Chat. Chet and Richard talk about Google blocking the .co.cc domain, Patch Tuesday, Apple's JailBreakMe.com patch and the "phone hacking" and malware related to the News of the World scandal.

Share