http://money.cnn.com/2014/08/18/technology/security/hospital-chs-hack/ CNN story of 4.5 mil records of Community Health Systems – why would hackers want these records? Because the records have ss#, names and addresses. ” But this time, the hackers stole patient data… Who is next hacking target in 2015? Hospitals?
Here is one of the latest on http://fortune.com/2014/12/20/sony-pictures-entertainment-essay/ the Nork story. My Fixvirus Dec23 show video: Some of posts I discussed on the show: http://oversitesentry.com/cyberattack-lessons/ Here is what happened in Home Depot hack (56 mil emails… Fixvirus show Dec23 on North Korea attack on Sony
Is risk management philosophy as we know it good enough? What do we know in the current risk management philosophy? Categorize all systems and set up a level of risk number. Then set up an… The New Year means improve security or else
NewsofDay: On CMS systems review from this post: http://securityintelligence.com/cms-hacking-2014-by-the-numbers/ Also for TipofDay: PCI compliance the new page created at Oversitesentry (My blog) http://oversitesentry.com/pci-compliance/
Today’s show discusses News of day in the Threatpost blog about Coolreaper: A backdoor is when software runs a piece of code that you are not aware of, and so CoolReaper phones seem to have malware built… Fixvirus Security show – Red team versus Blue Team
We are discussing in news of day – the sad story of retailers not having proper cyber security from Sophos survey: http://www.sophos.com/en-us/press-office/press-releases/2014/12/72-percent-of-uk-retailers-not-cyber-secure.aspx A lot of retailers do not know or have not for some reason implemented up-to-date… Fixvirus Security Show – NextGen FireWall (NGFW)
Here is the news link discussed in the news of day: http://dealbook.nytimes.com/2014/12/13/small-bank-in-kansas-is-a-financial-testing-ground/?_r=0 Hopefully they will review the security implications of this development. At the tip of Day segment – we are reviewing what the… Fixvirus Security show Dec15 – explain red team role in computer security
Threatpost blog post: http://threatpost.com/microsoft-recalls-patch-tuesday-exchange-update/109844 about the exchange server patch rollback (uninstall). The TipofDay is about PCI compliance – security policy must be created. some parts of the PCI DSS3.0 standard is not very specific (since… Fixvirus Show – PCI Compliance Discussion, Patch Rollback
Am working on the next video… In meantime here are some interesting links: Kerberos Hack of MS14-068 and then one can add themselves as Domain admin https://www.trustedsec.com/december-2014/ms14-068-full-compromise-step-step/ How about Alienvault vulnerability http://www.zerodayinitiative.com/advisories/ZDI-14-295/ Has an interesting… Video Log Will Return Saturday –
hacker process explained: Don’t get SVAPEC’d Criminal Hackers use this method: Scan-> Vulnerability Assessment –> Penetrate and Exploit –> Control = SVAPE&C You should do the SVA – Scan–> Vulnerability Assessment –> Mitigate the vulnerability or fix… Fixvirus Show Keurig2.0 hack – Hacker explanation, SVAPE&C