SSCC 68 – OS X Lion, Zeus Android, Oracle patches and Secunia’s threat report

Sophos Security Chet Chat 41

Sophos Security Chet Chat logoKris Braun from SophosLabs Canada joined me for this week’s Chet Chat. There were a lot of interesting news stories, so we narrowed it down to what we believe are the most relevant stories affecting IT administrators.

We began the podcast chatting a bit about Secunia’s recently released mid-year threat report. Not surprisingly they quoted a lot of statistics that most people are not doing a very good job of keeping their non-Microsoft applications patched. Fortunately, we do seem to be doing a better job of staying up to date with Microsoft, and that’s a start.

Oracle released 78 security updates last week, which seems like an awful lot of fixes to hold for a quarterly update. Perhaps it is time for Oracle to move to a monthly cycle like Microsoft (and also choose the second Tuesday…)

Apple released OS X 10.7 (Lion) last week and Kris and I spent some time reviewing the security related features. As we investigate the pros and cons of Lion we will publish more articles with our take on Apple’s progress.

The use of cell phones and SMS messages as a poor man’s second factor for secure authentication may be coming to an end. Kris explained the capabilities of the recently discovered Zeus Trojan for Android phones and what this means for mobile security.

(22 July 2011, duration 19:41 minutes, size 13.5MBytes)

You can also download this podcast directly in MP3 format: Sophos Security Chet Chat 68 or subscribe to our RSS.