jetlib.sec » Threatpost

Feeds

268045 items (2 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines (2 unread)
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Threatpost

• November 13, 2012
• 6:00

  Gary McGraw on Cyberwar and the Folly of Hoarding Cyber-Rocks

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Gary McGraw of Cigital about some of the holes in the current thinking about cyberwar, why traditional military analogies don’t hold up in cyberwar discussions and how better defense can make a difference. McGraw will be discussing his thoughts on cyberwar at King’s College London this week.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• November 12, 2012
• 10:31

  Dan Guido on the THREADS Mobile Security Conference

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Dan Guido, CEO of Trail of Bits and hacker-in-residence at NYU-Poly, about the school’s first mobile security conference, called THREADS, taking place this week in Brooklyn. Part of the college’s Cybersecurity Awareness Week (CSAW), THREADS will include speaker such as Dino Dai Zovi, Guido, Jon Oberheide and Vincenzo Iozzo.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• November 08, 2012
• 10:05

  Chris Soghoian on Exploit Sales

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Chris Soghoian, a principal technologist at the ACLU, about the developing market for buying and selling exploits and vulnerabilities. Soghoian has been a vocal critic of exploit sales and in this podcast he discusses the reasons why and why he thinks the policymakers in Washington need to get involved.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• September 26, 2012
• 6:00

  Gary McGraw on the BSIMM4 and How to Avoid Being the Slowest Zebra

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM4 data, how software security programs have matured in the last four years and how the government has become distracted by cyberwar and is ignoring software security, to its detriment.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• September 21, 2012
• 9:31

  Mike Mimoso on the Evolution of Security

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis Fisher talks with Mike Mimoso, the new editor of Threatpost, about his decade covering security, how the industry and threat landscape have changed and how security researchers are like Bill Parcells.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• September 07, 2012
• 7:15

  Al Huger on Malware Attribution and Why Defense is So Hard

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis Fisher talks with Al Huger of Sourcefire about the difficulty of tracking down the source of a malware infection, whether organizations should care about attribution after discovering an attack and why playing defense is so difficult.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• August 23, 2012
• 12:29

  Cesar Cerrudo on Owning Your CEO

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Cesar Cerrudo of IOActive Labs about his research project that used Fortune 500 executives’ corporate email addresses as the starting point to gather data about their online activities. Cerrudo found that he was able to map executives’ activities across a wide range of e-commerce, social networking and other sites with just an email address.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• August 01, 2012
• 12:17

  Joe Stewart on APTs and Cyber Espionage

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis Fisher talks with Joe Stewart of the Dell SecureWorks Counter Threat Unit about his team’s new research on the landscape of APT malware families, who is behind the use of these tools and how poorly prepared most organizations are for attacks by these crews.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• July 20, 2012
• 6:00

  Jose Nazario on Botnet Takedowns, Cybercrime and Whether We Can Ever Win

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with botnet researcher Jose Nazario about whether botnet takedowns are worth the effort, the evolution of attack techniques and whether we can ever get the upper hand on attackers.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• June 08, 2012
• 6:49

  Podcast: How The Flame Malware Stayed Hidden For So Long

   » ‎ Threatpost

  Enclosure: [download]

  The past week has brought to light more revelations about the mysterious Flame (or sKyWIper) worm that was first identified at the end of May. Among them: the eye-popping admission from Microsoft that the malware's authors found a way to use that company's Windows Update feature to distribute the malware. 

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 6:49

  Podcast: How The Flame Malware Stayed Hidden For So Long

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  The past week has brought to light more revelations about the mysterious Flame (or sKyWIper) worm that was first identified at the end of May. Among them: the eye-popping admission from Microsoft that the malware's authors found a way to use that company's Windows Update feature to distribute the malware. 

  read more

  Tags:   

• May 30, 2012
• 11:28

  Moxie Marlinspike on TACK, Convergence and Trust Agility

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Moxie Marlinspike about his new IETF proposal, TACK, which lays out a way for sites to assert the authenticity of their public keys. They also discuss the Convergence system for replacing the CA infrastructure and the ways in which browser vendors can help enable better trust agility for users.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 11:28

  Moxie Marlinspike on TACK, Convergence and Trust Agility

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Moxie Marlinspike about his new IETF proposal, TACK, which lays out a way for sites to assert the authenticity of their public keys. They also discuss the Convergence system for replacing the CA infrastructure and the ways in which browser vendors can help enable better trust agility for users.

  read more

  Tags:   

• April 10, 2012
• 13:04

  Ryan Naraine and Costin Raiu on Flashback and Mac Security

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Ryan Naraine and Costin Raiu about the Flashback Mac botnet, why Apple is reluctant to let third parties update software on Macs and the future outlook for the security of Macs.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:04

  Ryan Naraine and Costin Raiu on Flashback and Mac Security

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Ryan Naraine and Costin Raiu about the Flashback Mac botnet, why Apple is reluctant to let third parties update software on Macs and the future outlook for the security of Macs.

  read more

  Tags:   

• April 05, 2012
• 4:30

  Arms Race In Zero Days Spells Trouble For Privacy, Public Safety

   » ‎ Threatpost

  Enclosure: [download]

  Editor's Note: This is the second of a two-part podcast with independent security researcher Chris Soghoian. 

  In the first part of our podcast with independent security researcher Chris Soghoian, we talked about the way that the proliferation of "free" applications have forced consumers into the position of increasingly trading privacy for access to cool new Web sites and tools. The market, Soghoian argued, has failed to provide choice to consumers who may want to participate in social networks, but don't want their online activities passed along to advertisers.  Chris Soghoian

  In the second half of his interview with Threatpost Editor Paul Roberts, Chris switched focus from consumer protections from advertisers, to the fast-growing market for surveillance products.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 4:30

  Arms Race In Zero Days Spells Trouble For Privacy, Public Safety

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Editor's Note: This is the second of a two-part podcast with independent security researcher Chris Soghoian. Chris Soghoian

  In the first part of our podcast with independent security researcher Chris Soghoian, we talked about the way that the proliferation of "free" applications have forced consumers into the position of increasingly trading privacy for access to cool new Web sites and tools. The market, Soghoian argued, has failed to provide choice to consumers who may want to participate in social networks, but don't want their online activities passed along to advertisers.  

  In the second half of his interview with Threatpost Editor Paul Roberts, Chris switched focus from consumer protections from advertisers, to the fast-growing market for surveillance products.

  read more

  Tags:   

• April 04, 2012
• 4:29

  Podcast: How The Free Market Fails Privacy-Conscious Consumers

   » ‎ Threatpost

  Enclosure: [download]

  Editor's Note: This is the first of a two-part podcast with security researcher Chris Soghoian.

  It's a truism that the pace of technological change outstrips society's ability to grasp the impact of that change. For the most part, the consequences of this are benign and the remedies straight-forward --think: "mobile phones ringing in the movie theater." Not infrequently, however, our failure to grasp the true significance of technological innovation can have tragic consequences. There's the Gatling gun during the American Civil War, or the rapid increase in traffic fatalities that came with the adoption of the automobile.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Chris Soghoian, an independent security and privacy researcher, thinks that we're agaSoghoian: Consumers Can't Choose Privacyin in a period of extreme, technology-fueled dislocation. The rapid growth of online social networking Web sites and the proliferation of Internet connected, location-aware mobile devices have empowered for-profit firms like Google, Microsoft and Facebook to collect reams of private information and then hand it to advertisers - often just different divisions within the same company. Consumers, Soghoian argues, are stuck with a cornucopia of free applications, but ones that readily collect and then "spew" their personal information, or provide meager privacy features that are spotty and difficult to use.

  read more

  Tags:   

• 4:29

  Podcast: How The Free Market Fails Privacy-Conscious Consumers

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Soghoian: Consumers Can't Choose PrivacyEditor's Note: This is the first of a two-part podcast with security researcher Chris Soghoian.

  It's a truism that the pace of technological change outstrips society's ability to grasp the impact of that change. For the most part, the consequences of this are benign and the remedies straight-forward --think: "mobile phones ringing in the movie theater." Not infrequently, however, our failure to grasp the true significance of technological innovation can have tragic consequences. There's the Gatling gun during the American Civil War, or the rapid increase in traffic fatalities that came with the adoption of the automobile.

  Chris Soghoian, an independent security and privacy researcher, thinks that we're again in a period of extreme, technology-fueled dislocation. The rapid growth of online social networking Web sites and the proliferation of Internet connected, location-aware mobile devices have empowered for-profit firms like Google, Microsoft and Facebook to collect reams of private information and then hand it to advertisers - often just different divisions within the same company. Consumers, Soghoian argues, are stuck with a cornucopia of free applications, but ones that readily collect and then "spew" their personal information, or provide meager privacy features that are spotty and difficult to use.

  read more

  Tags:   

• April 03, 2012
• 8:43

  Dan Guido on Attacker Math and Exploit Intelligence

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Dan Guido, security researcher and CEO of Trail of Bits, about the new company’s plan to help enterprises defend against targeted attacks, the way that attackers think and the value of exploits versus vulnerabilities. They also discuss a new initiative to help share security knowledge more broadly in the community.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 8:43

  Dan Guido on Attacker Math and Exploit Intelligence

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Dan Guido, security researcher and CEO of Trail of Bits, about the new company’s plan to help enterprises defend against targeted attacks, the way that attackers think and the value of exploits versus vulnerabilities. They also discuss a new initiative to help share security knowledge more broadly in the community.

  read more

  Tags:   

• March 27, 2012
• 13:03

  Richard Boscovich on the Zeus Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Richard Boscovich of the Microsoft Digital Crimes Unit about the operation to take down the Zeus botnet, how the company works with partners and law enforcement on these operations and the importance of getting the word out to consumers about the danger of botnets.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:03

  Richard Boscovich on the Zeus Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Richard Boscovich of the Microsoft Digital Crimes Unit about the operation to take down the Zeus botnet, how the company works with partners and law enforcement on these operations and the importance of getting the word out to consumers about the danger of botnets.

  read more

  Tags:   

• March 15, 2012
• 13:33

  Ryan Naraine on Exploit Mitigations and the MS12-020 RDP Bug

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Ryan Naraine about whether exploit mitigations such as ASLR and DEP really make any difference in preventing browser attacks and the seriousness of the MS12-020 RDP vulnerability that was patched during March’s Patch Tuesday release.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:33

  Ryan Naraine on Exploit Mitigations and the MS12-020 RDP Bug

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Ryan Naraine about whether exploit mitigations such as ASLR and DEP really make any difference in preventing browser attacks and the seriousness of the MS12-020 RDP vulnerability that was patched during March’s Patch Tuesday release.

  read more

  Tags:   

• March 05, 2012
• 10:24

  Paul Judge on Measuring the Hotness of Security

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Paul Judge of Barracuda Labs about his new project, which uses data on the vendors and products on display at the RSA Conference to determine which topics and technologies are the hottest at the moment.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 10:24

  Paul Judge on Measuring the Hotness of Security

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge of Barracuda Labs about his new project, which uses data on the vendors and products on display at the RSA Conference to determine which topics and technologies are the hottest at the moment.

  read more

  Tags:   

• February 28, 2012
• 17:10

  Mobile Apps Space A 'Wild West' For Enterprises

   » ‎ Threatpost

  Enclosure: [download]

  

  SAN FRANCISCO - Companies that are hoping to catch a ride on the mobile wave should pay close attention to the application development firms they choose to work with, unless they want to be saddled with a buggy and insecure albatross bearing their corporate logo, a leading application security expert warns.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 17:10

  Mobile Apps Space A 'Wild West' For Enterprises

   » ‎ Threatpost

  Enclosure: [download]

  

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->
  SAN FRANCISCO - Companies that are hoping to catch a ride on the mobile wave should pay close attention to the application development firms they choose to work with, unless they want to be saddled with a buggy and insecure albatross bearing their corporate logo, a leading application security expert warns.

  read more

  Tags:   

• February 27, 2012
• 6:00

  Bruce Schneier on Liars and Outliers

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis Fisher talks with cryptographer and author Bruce Schneier about his new book, Liars and Outliers, the role of trust in society and security, the ways in which technology helps promote trust and how various groups and actors defect the norm and take advantage of that trust.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 6:00

  Bruce Schneier on Liars and Outliers

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with cryptographer and author Bruce Schneier about his new book, Liars and Outliers, the role of trust in society and security, the ways in which technology helps promote trust and how various groups and actors defect the norm and take advantage of that trust.

  read more

  Tags:   

• January 23, 2012
• 8:49

  Ryan Naraine on the Koobface Expose and SCADA 0-Day Disclosures

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with long-lost Threatpost editor Ryan Naraine about the intricacies of the disclosure of the identities of the alleged Koobface gang members, whether we’ll see more of that kind of action and whether the recent trend toward disclosing 0-days in SCADA systems will continue.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 8:49

  Ryan Naraine on the Koobface Expose and SCADA 0-Day Disclosures

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with long-lost Threatpost editor Ryan Naraine about the intricacies of the disclosure of the identities of the alleged Koobface gang members, whether we’ll see more of that kind of action and whether the recent trend toward disclosing 0-days in SCADA systems will continue.

  read more

  Tags:   

• December 12, 2011
• 7:12

  Adam Shostack on Methods of Compromise, the New School and Learning

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Adam Shostack of Microsoft about the taxonomy he helped develop for classifying how PCs are compromised, what he would and wouldn’t change in The New School of Information Security and who he’s learned the most from.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 7:12

  Adam Shostack on Methods of Compromise, the New School and Learning

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Adam Shostack of Microsoft about the taxonomy he helped develop for classifying how PCs are compromised, what he would and wouldn’t change in The New School of Information Security and who he’s learned the most from.

  read more

  Tags:   

• December 08, 2011
• 6:54

  Paul Judge on Clicks For Meals and Social Network Security

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s Clicks For Meals program, which is aiming to provide 10,000 meals during the holidays through the World Food Programme.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 6:54

  Paul Judge on Clicks For Meals and Social Network Security

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s Clicks For Meals program, which is aiming to provide 10,000 meals during the holidays through the World Food Programme.

  read more

  Tags:   

• November 16, 2011
• 9:09

  Costin Raiu on Duqu, Stuxnet and Targeted Attacks

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with malware researcher Costin Raiu about the investigation into Duqu, the likelihood that it was written by the same team as Stuxnet, whether a government is behind its development and what mistakes the authors made.

  read more

  Tags:   

• 9:09

  Costin Raiu on Duqu, Stuxnet and Targeted Attacks

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with malware researcher Costin Raiu about the investigation into Duqu, the likelihood that it was written by the same team as Stuxnet, whether a government is behind its development and what mistakes the authors made.

  read more

  Tags:   

• October 21, 2011
• 8:40

  Ted Julian on Data Breach Response and Incident Analysis

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Ted Julian of CO3 about why even the more enlightened organizations still find themselves unprepared when hit with a data breach, the need for more public data to help analyze the nature and effects of breaches and how third-party breaches affect organizations.

  read more

  Tags:   

• 8:40

  Ted Julian on Data Breach Response and Incident Analysis

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Ted Julian of CO3 about why even the more enlightened organizations still find themselves unprepared when hit with a data breach, the need for more public data to help analyze the nature and effects of breaches and how third-party breaches affect organizations.

  read more

  Tags:   

• September 29, 2011
• 9:46

  Tillmann Werner on the Kelihos Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Kaspersky Lab Researcher Tillmann Werner about the takedown of the Kelihos botnet, the network’s unique multi-tiered architecture, its custom protocol and the ethics and legality of pushing updates to disable bots on users’ machines.

  read more

  Tags:   

• 9:46

  Botnet Takedown: Researcher Describes How Kelihos Fell

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher talks with Kaspersky Lab Researcher Tillmann Werner about the takedown of the Kelihos botnet, the network’s unique multi-tiered architecture, its custom protocol and the ethics and legality of pushing updates to disable bots on users’ machines.

  read more

  Tags:   

• September 28, 2011
• 8:15

  Gary McGraw on the BSIMM3 Data Release

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Gary McGraw of Cigital about the release of the data collected during the BSIMM 3 software security measurement project, the most pressing challenges facing companies involved in software security programs and the reasons that the US government is falling farther behind on this front.

  read more

  Tags:   

• 8:15

  Gary McGraw on the BSIMM3 Data Release

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Gary McGraw of Cigital about the release of the data collected during the BSIMM 3 software security measurement project, the most pressing challenges facing companies involved in software security programs and the reasons that the US government is falling farther behind on this front.

  read more

  Tags:   

• September 26, 2011
• 5:00

  Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience.

  read more

  Tags:   

• 5:00

  Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience.

  read more

  Tags:   

• August 24, 2011
• 4:45

  Katie Moussouris on the Microsoft Blue Hat Prize

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Katie Moussouris of Microsoft about the company’s new Blue Hat Prize for innovative defensive security technology, why Microsoft didn’t start a bug bounty program and whether this will become an annual contest.

  read more

  Tags:   

• 4:45

  Katie Moussouris on the Microsoft Blue Hat Prize

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Katie Moussouris of Microsoft about the company’s new Blue Hat Prize for innovative defensive security technology, why Microsoft didn’t start a bug bounty program and whether this will become an annual contest.

  read more

  Tags:   

• August 22, 2011
• 8:12

  Podcast: Culture of Lax Security Prevails Among Medical Device Makers

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  The news last week was that the U.S. House Energy & Commerce Committee has asked the Government Accountability Office to investigate the security of the software that runs medical devices. But a prominent researcher says that security flaws in such devices are common, and that more federal oversight is necessary to change what he describes as a culture of lax security among medical device makers. 

  read more

  Tags:   

• 8:12

  Podcast: Culture of Lax Security Prevails Among Medical Device Makers

   » ‎ Threatpost

  Enclosure: [download]

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  The news last week was that the U.S. House Energy & Commerce Committee has asked the Government Accountability Office to investigate the security of the software that runs medical devices. But a prominent researcher says that security flaws in such devices are common, and that more federal oversight is necessary to change what he describes as a culture of lax security among medical device makers. 

  read more

  Tags:   

• July 01, 2011
• 6:00

  Josh Shaul on Broken Security, Targeted Attacks and Database Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Josh Shaul of AppSec about the current run of targeted attacks and data breaches, the state of denial among some security and IT staffs about the extent of the problem and what can be done to address the issues.

  read more

  Tags:   

• 6:00

  Josh Shaul on Broken Security, Targeted Attacks and Database Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Josh Shaul of AppSec about the current run of targeted attacks and data breaches, the state of denial among some security and IT staffs about the extent of the problem and what can be done to address the issues.

  read more

  Tags:   

• June 16, 2011
• 6:10

  Anup Ghosh on Targeted Attacks and the Need for Security Innovation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh of Invincea about the current wave of targeted attacks against high-profile companies such as RSA, the IMF and Citigroup and how the lack of innovation on the defensive side of the fence has made life easier for the attackers.

  read more

  Tags:   

• May 27, 2011
• 6:09

  Dennis Fisher and Paul Roberts on the MacDefender Malware and Google Wallet

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Paul Roberts discuss the re-emergence of the MacDefender malware, Apple's decision to push out an OS X update to protect against and the release of Google Wallet and the security implications of the system.

  read more

  Tags:   

• 6:09

  Dennis Fisher and Paul Roberts on the MacDefender Malware and Google Wallet

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Paul Roberts discuss the re-emergence of the MacDefender malware, Apple's decision to push out an OS X update to protect against and the release of Google Wallet and the security implications of the system.

  read more

  Tags:   

• May 19, 2011
• 6:00

  Paul Roberts and Dennis Fisher on the Sony Data Breach and National Cybersecurity

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Threatpost editors Paul Roberts and Dennis Fisher talk about the data breach of the Sony PlayStation Network, Sony's response to the attack and whether the recent legislation proposed by the White House and its new cyberspace strategy will have any effect.

  read more

  Tags:   

• 6:00

  Paul Roberts and Dennis Fisher on the Sony Data Breach and National Cybersecurity

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Threatpost editors Paul Roberts and Dennis Fisher talk about the data breach of the Sony PlayStation Network, Sony's response to the attack and whether the recent legislation proposed by the White House and its new cyberspace strategy will have any effect.

  read more

  Tags:   

• April 19, 2011
• 6:28

  Alex Hutton on the 2011 Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon about the 2011 Data Breach Investigations Report, the massive decrease in the number of records breached, the increase in the number of incidents and the clues to the cover challenge that may or may not be embedded in the report.

  read more

  Tags:   

• 6:28

  Alex Hutton on the 2011 Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon about the 2011 Data Breach Investigations Report, the massive decrease in the number of records breached, the increase in the number of incidents and the clues to the cover challenge that may or may not be embedded in the report.

  read more

  Tags:   

• April 07, 2011
• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• 11:47

  Tyler Shields on Mobile App Privacy and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general.

  read more

  Tags:   

• April 05, 2011
• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• 6:39

  Rich Mogull on the RSA Attack and the Epsilon Breach

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon.

  read more

  Tags:   

• March 22, 2011
• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• 6:36

  Paul Kocher on the RSA Attack

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers.

  read more

  Tags:   

• March 18, 2011
• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• 8:03

  Alex Lanstein on the Rustock Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Lanstein of FireEye about this week's takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft's lawsuit and the mechanics behind the operation and dismantling of large-scale botnets.

  read more

  Tags:   

• March 16, 2011
• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• 8:12

  Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Microsoft's Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges--and fun--of being a woman in security.

  read more

  Tags:   

• February 24, 2011
• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• 10:33

  Alex Howard on Government Security, Internet Freedom and Open Gov

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard (@digiphile) of O'Reilly Media about the open government and open data movements, how they're affecting security and the ways in which Internet freedom and privacy play into the current climate online.

  read more

  Tags:   

• November 30, 2010
• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• 10:28

  Gary McGraw on Cyber War, Cyber FUD and Rhetoric

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program.

  read more

  Tags:   

• November 22, 2010
• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• 9:39

  Anup Ghosh on PDF Exploits and Sandboxes

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks.

  read more

  Tags:   

• November 17, 2010
• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• 8:11

  Alex Hutton on the VERIS Community App and Data Breaches

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents.

  read more

  Tags:   

• October 15, 2010
• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 10:22

  On HTC G2 Code Modification, Botnet Stats and Exploit Hub

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• September 20, 2010
• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• 8:34

  Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations.

  read more

  Tags:   

• September 17, 2010
• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 12:32

  On Stuxnet, the ASP.NET Vulnerability and the Return of Unofficial Patches

   » ‎ Threatpost

  Enclosure: [download]

  Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero days.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• August 23, 2010
• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• 14:17

  HD Moore on the Windows DLL Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers.

  read more

  Tags:   

• August 20, 2010
• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 13:16

  On the Network Solutions Hack and Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• August 16, 2010
• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• 10:14

  Alex Hutton on the Verizon Data Breach Investigations Report

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.

  read more

  Tags:   

• July 26, 2010
• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• 11:02

  Paul Judge and David Maynor on Twitter Crime and Searching for Malware

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most likely to be serving you SEO-related malware.

  read more

  Tags:   

• July 23, 2010
• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• 8:44

  Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks.

  read more

  Tags:   

• July 15, 2010
• 11:16

  Caleb Sima on Armorize’s Black Hat Talk Being Pulled

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Caleb Sima of Armorize about the company’s scheduled talk at Black Hat on China’s cyber army being canceled under pressure from the governments of China and Taiwan.

  read more

  Tags:   

• 11:16

  Caleb Sima on Armorize’s Black Hat Talk Being Pulled

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Caleb Sima of Armorize about the company’s scheduled talk at Black Hat on China’s cyber army being canceled under pressure from the governments of China and Taiwan.

  read more

  Tags:   

• 11:16

  Caleb Sima on Armorize’s Black Hat Talk Being Pulled

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Caleb Sima of Armorize about the company’s scheduled talk at Black Hat on China’s cyber army being canceled under pressure from the governments of China and Taiwan.

  read more

  Tags:   

• 10:54

  Caleb Sima and Andy Chou on Software Security, Quality and Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode Dennis Fisher talks with Caleb Sima of Armorize and Andy Chou of Coverity about the companies’ new partnership designed to make security and quality code testing simpler and more efficient and the state of software security in general.

  read more

  Tags:   

• 10:54

  Caleb Sima and Andy Chou on Software Security, Quality and Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode Dennis Fisher talks with Caleb Sima of Armorize and Andy Chou of Coverity about the companies’ new partnership designed to make security and quality code testing simpler and more efficient and the state of software security in general.

  read more

  Tags:   

• 10:54

  Caleb Sima and Andy Chou on Software Security, Quality and Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode Dennis Fisher talks with Caleb Sima of Armorize and Andy Chou of Coverity about the companies’ new partnership designed to make security and quality code testing simpler and more efficient and the state of software security in general.

  read more

  Tags:   

• July 08, 2010
• 11:46

  Rob Cheyne on Security Education and the Problem of People in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Rob Cheyne of Safelight Security Advisors about the classical problem of user education, how much of an obstacle to security people are and the ways in which technology has made security more difficult.

  read more

  Tags:   

• 11:46

  Rob Cheyne on Security Education and the Problem of People in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Rob Cheyne of Safelight Security Advisors about the classical problem of user education, how much of an obstacle to security people are and the ways in which technology has made security more difficult.

  read more

  Tags:   

• 11:46

  Rob Cheyne on Security Education and the Problem of People in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Rob Cheyne of Safelight Security Advisors about the classical problem of user education, how much of an obstacle to security people are and the ways in which technology has made security more difficult.

  read more

  Tags:   

• June 29, 2010
• 11:51

  Eddie Schwartz on Advanced Threats

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Eddie Schwartz, CSO of NetWitness, about a new study the company did on the level of awareness of advanced threats in the enterprise and what organizations are doing to respond to the latest targeted attacks.

  read more

  Tags:   

• June 25, 2010
• 11:59

  On the Disclosure Debate, the Value of Zero Days and the Privacy of Android Phones

   » ‎ Threatpost

  Enclosure: [download]

  In this episode, Ryan Naraine and Dennis Fisher discuss the relative value of the never-ending disclosure debate, the value of zero-days and whether users should be worried about the ability of Google to remotely install apps on Android phones.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• June 21, 2010
• 7:55

  Alex Horan on Penetration Testing and the Business of Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  In this episode, Dennis Fisher talks with Alex Horan of Core Security about penetration testing, the place of security within a business and Core’s new push to make security more accessible and understandable for business leaders.

  read more

  Tags:   

• June 16, 2010
• 10:21

  Mike Mimoso on Targeted Attacks and the Google-Microsoft Controversy

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Mike Mimoso of SearchSecurity.com and Information Security magazine about the current spate of highly targeted attacks, the silliness of the term cyberwar and the controversy surrounding the disclosure of the Windows Help Center flaw.

  read more

  Tags:   

• May 27, 2010
• 12:17

  Moxie Marlinspike on RedPhone, TextSecure and Internet Privacy

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with security researcher Moxie Marlinspike about his new startup, Whisper Systems, his RedPhone and TextSecure voice and data encryption software and the challenges of maintaining privacy in the Google Age.

  read more

  Tags:   

• May 12, 2010
• 6:56

  Gary McGraw on BSIMM2, Software Security and Cargo Cult Science

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM2 model, the continued maturing of software security programs and the similarities between computer security and cargo cult science.

  read more

  Tags:   

• May 06, 2010
• 13:23

  Rich Mogull on Database Security and Encryption

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with analyst Rich Mogull of Securosis about his new report on database encryption, the value and danger of storing credit-card data and why more companies don’t get rid of sensitive data more quickly.

  read more

  Tags:   

• May 04, 2010
• 11:30

  Didier Stevens on PDF Hacking and Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Didier Stevens, the security researcher who developed the innovative method for using the /launch command in PDF readers to execute code on remote machines. Stevens discusses the ramifications of the discovery, the security of PDFs in general and the user behavior that makes these attacks more effective.

  read more

  Tags:   

• May 03, 2010
• 6:56

  Chris Hoff on Cloud Security and the HacKid Conference

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Chris Hoff of Cisco Systems about the state of cloud security and privacy, as well as Hoff's plan for a series of hacking and technology conferences aimed at kids: HacKid.

  read more

  Tags:   

• April 29, 2010
• 12:04

  Don Bailey and Nick DePetrillo on GSM Hacking and Privacy

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Don Bailey of iSec Partners and Nick DePetrillo, an independent security researcher, about their recent work on geolocation and tracking of GSM mobile handsets and the privacy and security implications for users.

  read more

  Tags:   

• April 15, 2010
• 12:30

  Gunter Ollmann on Opt-In Botnets and Targeted Attacks

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Gunter Ollmann, VP of research at Damballa, about the new generation of hacktivism and opt-in botnets, as well as the trend toward targeted attacks in corporate environments.

  read more

  Tags:   

• April 09, 2010
• 12:29

  On the Latest Java Vulnerability and the New Qubes OS

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Ryan Naraine discuss the new vulnerability in Java, whether the Internet works without Java and the new operating system released by security researcher Joanna Rutkowska.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• April 02, 2010
• 11:17

  HD Moore on Metasploit, Exploitation and the Art of Pen Testing

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with HD Moore, the founder of the Metasploit Project and the chief security officer at Rapid7, about the evolution of Metasploit, the difficulty of client-side exploitation in the age of DEP and ASLR and the decision on when to publish an exploit.

  read more

  Tags:   

• March 22, 2010
• 13:23

  On This Year's CanSecWest, Pwn2Own and the Latest Firefox Zero-day

   » ‎ Threatpost

  Enclosure: [download]

  Dennis Fisher and Ryan Naraine preview this year’s CanSecWest conference, the Pwn2Own contest and talk about the recent zero-day flaw in Firefox.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• March 11, 2010
• 11:35

  Robert Hansen on Privacy and Google

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with security researcher Robert “Rsnake” Hansen about how online privacy became such a mess, Google’s effect on personal privacy and the virtual impossibility of using the Internet without using Google’s services.

  read more

  Tags:   

• March 10, 2010
• 12:08

  Paul Judge on Twitter Crime and Web Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Judge of Barracuda Networks about the company’s new report on Twitter phishing trends, search engine poisoning, Web security and what can be done about the spam pandemic.

  read more

  Tags:   

• February 26, 2010
• 6:38

  T.J. Campana on the Waledac Botnet Takedown

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Ryan Naraine talk with Microsoft’s T.J. Campana about the company’s work to disrupt and take down the Waledac botnet and the other work being done by Microsoft’s Digital Crimes Unit.

  read more

  Tags:   

• February 25, 2010
• 12:30

  Previewing RSA Conference 2010

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis and Ryan preview the RSA Conference 2010 with their friend Tim Whitman, the head of the security practice at Schwartz Communications.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• February 09, 2010
• 8:37

  Tyler Shields on the BlackBerry Spyware and the Coming Wave of Smartphone Attacks

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tyler Shields of Veracode about his BlackBerry spyware application, txsBBSPY, the coming wave of smartphone attacks and his lack of surprise about the Google Aurora attack.

  read more

  Tags:   

• February 05, 2010
• 11:20

  On the Latest iPhone Attack, Patch Tuesday and More Fallout from Google

   » ‎ Threatpost

  Enclosure: [download]

  

  Dennis Fisher and Ryan Naraine discuss the latest iPhone attack, the upcoming Patch Tuesday and the never-ending fallout from the Google attack.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• 9:59

  Paul Roberts on Google Aurora, Advanced Attacks and the RSA Conference

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Roberts of the 451 Group about the implications of the Aurora attack on Google and Adobe, the need for better understanding of advanced threats and what to expect at the RSA Conference.

  read more

  Tags:   

• January 20, 2010
• 8:42

  Tom Kellermann on Google and Howard Schmidt’s Priorities

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Tom Kellermann of Core Security about the Google attack, the priorities for new cyber coordinator Howard Schmidt and the economic and political realities of advanced persistent threats.

  read more

  Tags:   

• January 18, 2010
• 12:28

  On the Recent Google Attack and Internet Explorer Vulnerability

   » ‎ Threatpost

  Enclosure: [download]

  

  Ryan Naraine and Dennis Fisher discuss the Google attack, the Internet Explorer vulnerability used in the attack and the continuing weakness of client security.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• January 08, 2010
• 11:31

  On Adobe, Their Silent Updater and Becoming a Target for Attackers

   » ‎ Threatpost

  Enclosure: [download]

  

  Ryan Naraine and Dennis Fisher discuss all of the news and criticism concerning Adobe this week, including their release of a silent updater and the company becoming a top target for attackers.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• January 04, 2010
• 9:09

  Rich Mogull and Mike Rothman on Security Research and Metrics

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Rich Mogull, Mike Rothman, David Mortman and Adrian Lane about the merger of Securosis and Security Incite, the need for better metrics in security and improving security research.

  read more

  Tags:   

• December 29, 2009
• 8:40

  Paul Roberts on the Decade in Security

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Paul Roberts of The 451 Group about the changes that the last decade has brought in computer security, the biggest story of the ‘00s and what the Teens might hold.

  read more

  Tags:   

• December 22, 2009
• 9:19

  Mike Mimoso on the Schmidt Appointment and the Top Security Stories of 2009

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with Mike Mimoso, editorial director of the Security Media Group at TechTarget, about Howard Schmidt’s appointment, the top security stories of 2009 and the World Cup draw.

  read more

  Tags:   

• 6:54

  Howard Schmidt on the Cybersecurity Czar, Cybercrime and How to Fix Federal Cybersecurity

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher 

  President Obama on Tuesday appointed Howard Schmidt, the former CSO of Microsoft and Bush administration security adviser, to be the White House Cybersecurity Coordinator. In this podcast, recorded in May soon after Obama’s announcement that he would appoint a security czar, Dennis Fisher talks with Schmidt about the job, the cybercrime problem and what needs to be done to fix it.

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  read more

  Tags:   

• December 17, 2009
• 11:37

  Brad Arkin on Adobe Reader Zero-Day Flaws and Security Response

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher and Ryan Naraine talk with Brad Arkin, Adobe’s director of product security and privacy, about the new zero-day flaws in Acrobat and Reader, Adobe’s security response process and the challenges of getting updates to end users.

  read more

  Tags:   

• December 10, 2009
• 11:49

  Marc Maiffret on Modern Malware, Code Red and the State of Security Research

   » ‎ Threatpost

  Enclosure: [download]

  Digital Underground podcast with Dennis Fisher

  -->

  You are missing some Flash content that should appear here! Perhaps your browser cannot display it, or maybe it did not initialize correctly.

  -->

  Dennis Fisher talks with researcher Marc Maiffret of FireEye about the evolution of modern malware, the discovery of the Code Red worm and how far security research has come in the last 10 years.

  read more

  Tags: