T1SP: Episode 28

[ Subscribe to the Podcast: iTunes | Android ]

News

• [ ] Major Cisco ASA buffer overflow; patch now

• [ ] Critical patches for Windows and Flash

• [ ] The FBI is officially investigating Hillary Clinton regarding her private email server

• [ ] NSA doing a complete reorg (basically combining defense and offense) | https://www.washingtonpost.com/world/national-security/national-security-agency-plans-major-reorganization/2016/02/02/2a66555e-c960-11e5-a7b2-5a2f824b02c9_story.html?hpid=hp_local-news_no-name%3Ahomepage%2Fstory

• [ ] Little silver DHS boxes on SF streets during super bowl time | http://sfist.com/2016/01/27/trust_no_one.php

• [ ] Whitehouse hiring a CSO; go apply

• [ ] Samsung says not to speak privately near its televisions

• [ ] Hacker publishes personal information of 20,000 FBI Agents | http://motherboard.vice.com/read/hacker-publishes-personal-info-of-20000-fbi-agents

• [ ] Some nasty WordPress hacks going around, delivering drive-by downloads | http://arstechnica.com/security/2016/02/mysterious-spike-in-wordpress-hacks-silently-delivers-ransomware-to-visitors/

• [ ] Dutch police training eagles to disable drones in the air

• [ ] Drone hijacked by AnonSec hackers after massive breach at NASA

• [ ] Windows phone shut down

• [ ] FitBit data reveals pregnancy

• [ ] Smart toys presenting risk | https://techcrunch.com/2016/02/02/this-teddy-bear-could-have-exposed-your-childs-identity/?ncid=rss

• [ ] New Air Force satellites launched to improve GPS accuracy (from one meter to 42 centimeters) | https://techcrunch.com/2016/02/05/new-air-force-satellites-launched-to-improve-gps/?ncid=rss

• [ ] PONEMON: Cybercrime not paying as much as previously thought? | http://www.darkreading.com/threat-intelligence/cybercrime-doesnt-pay-as-much-as-youd-think/d/d-id/1324141

• [ ] Google is the most valuable public company in the world

• [ ] Sonatype gets 30Million from Goldman Sachs | https://techcrunch.com/2016/02/04/sonatype-snares-30-million-investment-led-by-goldman-sachs/?ncid=rss

• [ ] Facebook beats its numbers significantly

• [ ] Google to shame sites that don’t have HTTPS (red x on a padlock in Chrome) | http://motherboard.vice.com/read/google-will-soon-shame-all-websites-that-are-unencrypted-chrome-https

• [ ] Yahoo probably getting sold

• [ ] Apple hires Thunderstrike team (Mac Firmware) | https://techcrunch.com/2016/02/03/apple-beefs-up-its-security-team-by-hiring-zero-day-exploit-team/?ncid=rss

• [ ] Apple growth set to flatten in 2016 due to global economic situation

• [ ] Elon Musk cancels a guy’s Tesla order for talking shit about him online

• [ ] Venezuela on the brink of economic collapse | https://www.washingtonpost.com/news/wonk/wp/2016/01/29/venezuela-is-on-the-brink-of-a-complete-collapse/?tid=pm_business_pop_b

Ideas, updates, and discussion

• [ ] Red, Blue, and Purple Teams | https://danielmiessler.com/study/red-blue-purple-teams/

• [ ] CISA Summary: more ability for the government to watch traffic, with less oversight. QUOTE FROM TECHCRUNCH: organizations like the NSA and CIA now have even more government protections allowing them to play fast and loose with personal privacy. And our private information — already clearly at risk, given the large quantity of data breaches of late — is now even more freely available. | https://techcrunch.com/2016/02/07/why-you-should-be-concerned-about-cisa/?ncid=rss

• [ ] I think the sleeper tech for 2016 and 2017 will be virtual reality and augmented reality

• [ ] Insurers getting smart about assessing cybersecurity risk | Ihttp://www.darkreading.com/analytics/insurers-getting-smarter-about-assessing-cyber-insurance-policy-risks/d/d-id/1324048

Tools, talks, and projects

• [ ] Canary Tools | https://canary.tools

• [ ] Watchman | https://github.com/facebook/watchman

• [ ] Canary.io | https://canar.io

• [ ] https://danielmiessler.com/services/checkyourstack/

• [ ] https://danielmiessler.com/services/atm/

• [ ] https://github.com/snoopythesecuritydog/dvws

Announcements

• [ ] …

Miscellaneous

• [ ] Powered by WordPress, proudly or not | https://donmelton.com/2015/12/22/powered-by-wordpress-proudly-or-not/

• [ ] IoT Security taught to kids via iSpy Book | https://techcrunch.com/2016/01/27/iot-security-turned-into-an-i-spy-educational-book-for-kids/?ncid=rss

• [ ] Got a couple Amazon Echos

• [ ] Best defense against bullying is immunizing the bystanders; Renner Gracie

• [ ] Improve your networking skills with the 24 / 7 / 30 method: drop a note within 24 hours, connect on social media within 7 days, and try to set up a face-to-face with 30 days

[ Subscribe to the Podcast: iTunes | Android ]