jetlib.sec » Threatpost

Feeds

118791 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Threatpost

• January 23, 2012
• 8:49

  Ryan Naraine on the Koobface Expose and SCADA 0-Day Disclosures

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with long-lost Threatpost editor Ryan Naraine about the intricacies of the disclosure of the identities of the alleged Koobface gang members, whether we’ll see more of that kind of action and whether the recent trend toward disclosing 0-days in SCADA systems will continue.

  read more

  Tags:   

• December 12, 2011
• 7:12

  Adam Shostack on Methods of Compromise, the New School and Learning

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Adam Shostack of Microsoft about the taxonomy he helped develop for classifying how PCs are compromised, what he would and wouldn’t change in The New School of Information Security and who he’s learned the most from.

  read more

  Tags:   

• December 08, 2011
• 6:54

  Paul Judge on Clicks For Meals and Social Network Security

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s Clicks For Meals program, which is aiming to provide 10,000 meals during the holidays through the World Food Programme.

  read more

  Tags:   

• November 16, 2011
• 9:09

  Costin Raiu on Duqu, Stuxnet and Targeted Attacks

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with malware researcher Costin Raiu about the investigation into Duqu, the likelihood that it was written by the same team as Stuxnet, whether a government is behind its development and what mistakes the authors made.

  read more

  Tags:   

• October 21, 2011
• 8:40

  Ted Julian on Data Breach Response and Incident Analysis

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Ted Julian of CO3 about why even the more enlightened organizations still find themselves unprepared when hit with a data breach, the need for more public data to help analyze the nature and effects of breaches and how third-party breaches affect organizations.

  read more

  Tags:   

• September 29, 2011
• 9:46

  Tillmann Werner on the Kelihos Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Kaspersky Lab Researcher Tillmann Werner about the takedown of the Kelihos botnet, the network’s unique multi-tiered architecture, its custom protocol and the ethics and legality of pushing updates to disable bots on users’ machines.

  read more

  Tags:   

• September 28, 2011
• 8:15

  Gary McGraw on the BSIMM3 Data Release

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Gary McGraw of Cigital about the release of the data collected during the BSIMM 3 software security measurement project, the most pressing challenges facing companies involved in software security programs and the reasons that the US government is falling farther behind on this front.

  read more

  Tags:   

• September 26, 2011
• 5:00

  Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience.

  read more

  Tags:   

• August 24, 2011
• 4:45

  Katie Moussouris on the Microsoft Blue Hat Prize

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Katie Moussouris of Microsoft about the company’s new Blue Hat Prize for innovative defensive security technology, why Microsoft didn’t start a bug bounty program and whether this will become an annual contest.

  read more

  Tags:   

• August 22, 2011
• 8:12

  Podcast: Culture of Lax Security Prevails Among Medical Device Makers

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  The news last week was that the U.S. House Energy & Commerce Committee has asked the Government Accountability Office to investigate the security of the software that runs medical devices. But a prominent researcher says that security flaws in such devices are common, and that more federal oversight is necessary to change what he describes as a culture of lax security among medical device makers. 

  read more

  Tags:   

• July 01, 2011
• 6:00

  Josh Shaul on Broken Security, Targeted Attacks and Database Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Josh Shaul of AppSec about the current run of targeted attacks and data breaches, the state of denial among some security and IT staffs about the extent of the problem and what can be done to address the issues.

  read more

  Tags:   

• June 16, 2011
• 6:10

  Anup Ghosh on Targeted Attacks and the Need for Security Innovation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh of Invincea about the current wave of targeted attacks against high-profile companies such as RSA, the IMF and Citigroup and how the lack of innovation on the defensive side of the fence has made life easier for the attackers.

  read more

  Tags:   

• May 27, 2011
• 6:09

  Dennis Fisher and Paul Roberts on the MacDefender Malware and Google Wallet

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Paul Roberts discuss the re-emergence of the MacDefender malware, Apple's decision to push out an OS X update to protect against and the release of Google Wallet and the security implications of the system.

  read more

  Tags:   

• 6:09

  Dennis Fisher and Paul Roberts on the MacDefender Malware and Google Wallet

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Paul Roberts discuss the re-emergence of the MacDefender malware, Apple's decision to push out an OS X update to protect against and the release of Google Wallet and the security implications of the system.

  read more

  Tags:   

• May 19, 2011
• 6:00

  Paul Roberts and Dennis Fisher on the Sony Data Breach and National Cybersecurity

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Threatpost editors Paul Roberts and Dennis Fisher talk about the data breach of the Sony PlayStation Network, Sony's response to the attack and whether the recent legislation proposed by the White House and its new cyberspace strategy will have any effect.

  read more

  Tags:   

• 6:00

  Paul Roberts and Dennis Fisher on the Sony Data Breach and National Cybersecurity

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Threatpost editors Paul Roberts and Dennis Fisher talk about the data breach of the Sony PlayStation Network, Sony's response to the attack and whether the recent legislation proposed by the White House and its new cyberspace strategy will have any effect.

  read more

  Tags:   

• April 19, 2011
• 6:28

  Alex Hutton on the 2011 Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon about the 2011 Data Breach Investigations Report, the massive decrease in the number of records breached, the increase in the number of incidents and the clues to the cover challenge that may or may not be embedded in the report.

  read more

  Tags:   

• 6:28

  Alex Hutton on the 2011 Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon about the 2011 Data Breach Investigations Report, the massive decrease in the number of records breached, the increase in the number of incidents and the clues to the cover challenge that may or may not be embedded in the report.

  read more

  Tags:   

• April 07, 2011
• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• April 05, 2011
• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• March 22, 2011
• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• March 18, 2011
• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• March 16, 2011
• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• February 24, 2011
• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• November 30, 2010
• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• November 22, 2010
• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• November 17, 2010
• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• October 15, 2010
• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• September 20, 2010
• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• September 17, 2010
• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• August 23, 2010
• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• August 20, 2010
• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• August 16, 2010
• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• July 26, 2010
• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• July 23, 2010
• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• July 15, 2010
• 11:16

  Caleb Sima on Armorize’s Black Hat Talk Being Pulled

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Caleb Sima of Armorize about the company’s scheduled talk at Black Hat on China’s cyber army being canceled under pressure from the governments of China and Taiwan.

  read more

  Tags:   

• 11:16

  Caleb Sima on Armorize’s Black Hat Talk Being Pulled

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Caleb Sima of Armorize about the company’s scheduled talk at Black Hat on China’s cyber army being canceled under pressure from the governments of China and Taiwan.

  read more

  Tags:   

• 11:16

  Caleb Sima on Armorize’s Black Hat Talk Being Pulled

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Caleb Sima of Armorize about the company’s scheduled talk at Black Hat on China’s cyber army being canceled under pressure from the governments of China and Taiwan.

  read more

  Tags:   

• 10:54

  Caleb Sima and Andy Chou on Software Security, Quality and Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode Dennis Fisher talks with Caleb Sima of Armorize and Andy Chou of Coverity about the companies’ new partnership designed to make security and quality code testing simpler and more efficient and the state of software security in general.

  read more

  Tags:   

• 10:54

  Caleb Sima and Andy Chou on Software Security, Quality and Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode Dennis Fisher talks with Caleb Sima of Armorize and Andy Chou of Coverity about the companies’ new partnership designed to make security and quality code testing simpler and more efficient and the state of software security in general.

  read more

  Tags:   

• 10:54

  Caleb Sima and Andy Chou on Software Security, Quality and Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode Dennis Fisher talks with Caleb Sima of Armorize and Andy Chou of Coverity about the companies’ new partnership designed to make security and quality code testing simpler and more efficient and the state of software security in general.

  read more

  Tags:   

• July 08, 2010
• 11:46

  Rob Cheyne on Security Education and the Problem of People in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Rob Cheyne of Safelight Security Advisors about the classical problem of user education, how much of an obstacle to security people are and the ways in which technology has made security more difficult.

  read more

  Tags:   

• 11:46

  Rob Cheyne on Security Education and the Problem of People in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Rob Cheyne of Safelight Security Advisors about the classical problem of user education, how much of an obstacle to security people are and the ways in which technology has made security more difficult.

  read more

  Tags:   

• 11:46

  Rob Cheyne on Security Education and the Problem of People in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Rob Cheyne of Safelight Security Advisors about the classical problem of user education, how much of an obstacle to security people are and the ways in which technology has made security more difficult.

  read more

  Tags:   

• June 29, 2010
• 11:51

  Eddie Schwartz on Advanced Threats

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Eddie Schwartz, CSO of NetWitness, about a new study the company did on the level of awareness of advanced threats in the enterprise and what organizations are doing to respond to the latest targeted attacks.

  read more

  Tags:   

• June 25, 2010
• 11:59

  On the Disclosure Debate, the Value of Zero Days and the Privacy of Android Phones

   » ‎ Threatpost

  Enclosure: [download]

  In this episode, Ryan Naraine and Dennis Fisher discuss the relative value of the never-ending disclosure debate, the value of zero-days and whether users should be worried about the ability of Google to remotely install apps on Android phones.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• June 21, 2010
• 7:55

  Alex Horan on Penetration Testing and the Business of Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Alex Horan of Core Security about penetration testing, the place of security within a business and Core’s new push to make security more accessible and understandable for business leaders.

  read more

  Tags:   

• June 16, 2010
• 10:21

  Mike Mimoso on Targeted Attacks and the Google-Microsoft Controversy

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Mike Mimoso of SearchSecurity.com and Information Security magazine about the current spate of highly targeted attacks, the silliness of the term cyberwar and the controversy surrounding the disclosure of the Windows Help Center flaw.

  read more

  Tags:   

• May 27, 2010
• 12:17

  Moxie Marlinspike on RedPhone, TextSecure and Internet Privacy

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with security researcher Moxie Marlinspike about his new startup, Whisper Systems, his RedPhone and TextSecure voice and data encryption software and the challenges of maintaining privacy in the Google Age.

  read more

  Tags:   

• May 12, 2010
• 6:56

  Gary McGraw on BSIMM2, Software Security and Cargo Cult Science

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM2 model, the continued maturing of software security programs and the similarities between computer security and cargo cult science.

  read more

  Tags:   

• May 06, 2010
• 13:23

  Rich Mogull on Database Security and Encryption

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with analyst Rich Mogull of Securosis about his new report on database encryption, the value and danger of storing credit-card data and why more companies don’t get rid of sensitive data more quickly.

  read more

  Tags:   

• May 04, 2010
• 11:30

  Didier Stevens on PDF Hacking and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Didier Stevens, the security researcher who developed the innovative method for using the /launch command in PDF readers to execute code on remote machines. Stevens discusses the ramifications of the discovery, the security of PDFs in general and the user behavior that makes these attacks more effective.

  read more

  Tags:   

• May 03, 2010
• 6:56

  Chris Hoff on Cloud Security and the HacKid Conference

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Chris Hoff of Cisco Systems about the state of cloud security and privacy, as well as Hoff's plan for a series of hacking and technology conferences aimed at kids: HacKid.

  read more

  Tags:   

• April 29, 2010
• 12:04

  Don Bailey and Nick DePetrillo on GSM Hacking and Privacy

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Don Bailey of iSec Partners and Nick DePetrillo, an independent security researcher, about their recent work on geolocation and tracking of GSM mobile handsets and the privacy and security implications for users.

  read more

  Tags:   

• April 15, 2010
• 12:30

  Gunter Ollmann on Opt-In Botnets and Targeted Attacks

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Gunter Ollmann, VP of research at Damballa, about the new generation of hacktivism and opt-in botnets, as well as the trend toward targeted attacks in corporate environments.

  read more

  Tags:   

• April 09, 2010
• 12:29

  On the Latest Java Vulnerability and the New Qubes OS

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Ryan Naraine discuss the new vulnerability in Java, whether the Internet works without Java and the new operating system released by security researcher Joanna Rutkowska.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• April 02, 2010
• 11:17

  HD Moore on Metasploit, Exploitation and the Art of Pen Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore, the founder of the Metasploit Project and the chief security officer at Rapid7, about the evolution of Metasploit, the difficulty of client-side exploitation in the age of DEP and ASLR and the decision on when to publish an exploit.

  read more

  Tags:   

• March 22, 2010
• 13:23

  On This Year's CanSecWest, Pwn2Own and the Latest Firefox Zero-day

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Ryan Naraine preview this year’s CanSecWest conference, the Pwn2Own contest and talk about the recent zero-day flaw in Firefox.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• March 11, 2010
• 11:35

  Robert Hansen on Privacy and Google

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with security researcher Robert “Rsnake” Hansen about how online privacy became such a mess, Google’s effect on personal privacy and the virtual impossibility of using the Internet without using Google’s services.

  read more

  Tags:   

• March 10, 2010
• 12:08

  Paul Judge on Twitter Crime and Web Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s new report on Twitter phishing trends, search engine poisoning, Web security and what can be done about the spam pandemic.

  read more

  Tags:   

• February 26, 2010
• 6:38

  T.J. Campana on the Waledac Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Ryan Naraine talk with Microsoft’s T.J. Campana about the company’s work to disrupt and take down the Waledac botnet and the other work being done by Microsoft’s Digital Crimes Unit.

  read more

  Tags:   

• February 25, 2010
• 12:30

  Previewing RSA Conference 2010

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis and Ryan preview the RSA Conference 2010 with their friend Tim Whitman, the head of the security practice at Schwartz Communications.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• February 09, 2010
• 8:37

  Tyler Shields on the BlackBerry Spyware and the Coming Wave of Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his BlackBerry spyware application, txsBBSPY, the coming wave of smartphone attacks and his lack of surprise about the Google Aurora attack.

  read more

  Tags:   

• February 05, 2010
• 11:20

  On the Latest iPhone Attack, Patch Tuesday and More Fallout from Google

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis Fisher and Ryan Naraine discuss the latest iPhone attack, the upcoming Patch Tuesday and the never-ending fallout from the Google attack.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 9:59

  Paul Roberts on Google Aurora, Advanced Attacks and the RSA Conference

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Roberts of the 451 Group about the implications of the Aurora attack on Google and Adobe, the need for better understanding of advanced threats and what to expect at the RSA Conference.

  read more

  Tags:   

• January 20, 2010
• 8:42

  Tom Kellermann on Google and Howard Schmidt’s Priorities

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tom Kellermann of Core Security about the Google attack, the priorities for new cyber coordinator Howard Schmidt and the economic and political realities of advanced persistent threats.

  read more

  Tags:   

• January 18, 2010
• 12:28

  On the Recent Google Attack and Internet Explorer Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  

  Ryan Naraine and Dennis Fisher discuss the Google attack, the Internet Explorer vulnerability used in the attack and the continuing weakness of client security.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• January 08, 2010
• 11:31

  On Adobe, Their Silent Updater and Becoming a Target for Attackers

   » ‎ Threatpost

  Enclosure: [download]

  

  Ryan Naraine and Dennis Fisher discuss all of the news and criticism concerning Adobe this week, including their release of a silent updater and the company becoming a top target for attackers.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• January 04, 2010
• 9:09

  Rich Mogull and Mike Rothman on Security Research and Metrics

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull, Mike Rothman, David Mortman and Adrian Lane about the merger of Securosis and Security Incite, the need for better metrics in security and improving security research.

  read more

  Tags:   

• December 29, 2009
• 8:40

  Paul Roberts on the Decade in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Roberts of The 451 Group about the changes that the last decade has brought in computer security, the biggest story of the ‘00s and what the Teens might hold.

  read more

  Tags:   

• December 22, 2009
• 9:19

  Mike Mimoso on the Schmidt Appointment and the Top Security Stories of 2009

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Mike Mimoso, editorial director of the Security Media Group at TechTarget, about Howard Schmidt’s appointment, the top security stories of 2009 and the World Cup draw.

  read more

  Tags:   

• 6:54

  Howard Schmidt on the Cybersecurity Czar, Cybercrime and How to Fix Federal Cybersecurity

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher 

  President Obama on Tuesday appointed Howard Schmidt, the former CSO of Microsoft and Bush administration security adviser, to be the White House Cybersecurity Coordinator. In this podcast, recorded in May soon after Obama’s announcement that he would appoint a security czar, Dennis Fisher talks with Schmidt about the job, the cybercrime problem and what needs to be done to fix it.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• December 17, 2009
• 11:37

  Brad Arkin on Adobe Reader Zero-Day Flaws and Security Response

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Ryan Naraine talk with Brad Arkin, Adobe’s director of product security and privacy, about the new zero-day flaws in Acrobat and Reader, Adobe’s security response process and the challenges of getting updates to end users.

  read more

  Tags:   

• December 10, 2009
• 11:49

  Marc Maiffret on Modern Malware, Code Red and the State of Security Research

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with researcher Marc Maiffret of FireEye about the evolution of modern malware, the discovery of the Code Red worm and how far security research has come in the last 10 years.

  read more

  Tags: