Today’s show discusses News of day in the Threatpost blog about Coolreaper: A backdoor is when software runs a piece of code that you are not aware of, and so CoolReaper phones seem to have malware built… Fixvirus Security show – Red team versus Blue Team
We are discussing in news of day – the sad story of retailers not having proper cyber security from Sophos survey: http://www.sophos.com/en-us/press-office/press-releases/2014/12/72-percent-of-uk-retailers-not-cyber-secure.aspx A lot of retailers do not know or have not for some reason implemented up-to-date… Fixvirus Security Show – NextGen FireWall (NGFW)
Here is the news link discussed in the news of day: http://dealbook.nytimes.com/2014/12/13/small-bank-in-kansas-is-a-financial-testing-ground/?_r=0 Hopefully they will review the security implications of this development. At the tip of Day segment – we are reviewing what the… Fixvirus Security show Dec15 – explain red team role in computer security
Threatpost blog post: http://threatpost.com/microsoft-recalls-patch-tuesday-exchange-update/109844 about the exchange server patch rollback (uninstall). The TipofDay is about PCI compliance – security policy must be created. some parts of the PCI DSS3.0 standard is not very specific (since… Fixvirus Show – PCI Compliance Discussion, Patch Rollback
Am working on the next video… In meantime here are some interesting links: Kerberos Hack of MS14-068 and then one can add themselves as Domain admin https://www.trustedsec.com/december-2014/ms14-068-full-compromise-step-step/ How about Alienvault vulnerability http://www.zerodayinitiative.com/advisories/ZDI-14-295/ Has an interesting… Video Log Will Return Saturday –
hacker process explained: Don’t get SVAPEC’d Criminal Hackers use this method: Scan-> Vulnerability Assessment –> Penetrate and Exploit –> Control = SVAPE&C You should do the SVA – Scan–> Vulnerability Assessment –> Mitigate the vulnerability or fix… Fixvirus Show Keurig2.0 hack – Hacker explanation, SVAPE&C
Why do hackers want to hack you? To steal your data and reputation, so they can make money. (a criminal in Romania – $10000 is a lot of money) or Russia – please add all… Why perform your own vulnerability analysis?
2nd show Fixvirus Security Show NewsofDay: POODLE(Padding Oracle On Downgraded Legacy) resurfaces – i.e. Not just the original issue https://www.openssl.org/~bodo/ssl-poodle.pdf – But the new one: https://www.imperialviolet.org/2014/12/08/poodleagain.html F5 has issued a list of products needing patches You can scan your… Vpost – POODLE resurfaces – physical hacks with raspberryPi
We will set up a daily(M-F) Tip-of-day and News-of-day segment Here is the first one – about tomorrows Patch Tuesday and plan for next year – replace old machines/ AV software replace/upgrade. Always better to… The Inaugural Fixvirus Security Show is uploaded
Our Blog at Oversitesentry.com goes over in some detail the new XSS attack vector. An exifdata image could include scripts that may affect you or your website visitors in unimagined ways. Only the evil hackers with… Cross Site Scripting(XSS) Zero day attack
