Risky Business #270 -- Red teaming your law firm for fun and profit
On this week's show we're taking a look at the issue of secondary targeting. These days it's borderline likely that attackers who want information on your company's upcoming mergers and acquisition activity won't even bother attacking you to get the intel. They'll go for your law firm instead... or your accountants... or another partner.
CERT Australia Executive Manager Dr. Carolyn Patterson joins the show to talk about that.
This week's show is brought to you by Senetas, makers of fine, layer 2 encryption hardware boxens! If you're planning a greenfields development, please, please, please go visit the Senetas website. They're a publicly listed company and they make really good gear. This week's sponsor interview is with Senetas co-founder and CTO Julian Fay, who as you'll discover, really knows what he's talking about.
This week we chat to Julian about the various certification schemes out there -- FIPS, Common Criteria and CAPS. We talk about some of the problems with these schemes, and also about some of the changes that are being made to them. Certification is changing, big time, so make sure you listen to that one.
PLUS: Did you know bug bounties are considered adequate testing in PCI audits?19 hours 57 min ago
All the news that's fit to read...20 hours 2 min ago
Two feature interviews in this week's show!6 days 16 hours ago
Palo Alto... Oh the mirth... the MIRTH...6 days 16 hours ago
Oh, and the other stuff no one is talking about that could get absolutely everything owned...2 weeks 17 hours ago