Show notes: Risky Business #272

We had to cut lots this week!
March 7, 2013 -- 

For time considerations I had to cut out our discussion of a lot of these articles... but I've included them in the show notes because they're worth a cursory look. Enjoy!

Episode 272 can be found here.

The Java Zero-Day Procession Continues | threatpost

New Java 0-Day Attack Echoes Bit9 Breach — Krebs on Security

Oracle issues emergency Java update to patch vulnerabilities | Security & Privacy - CNET News

Prompted by Oracle Rejection, Researcher Finds Five New Java Sandbox Vulnerabilities | threatpost

More Java-based malware plagues the cross-platform runtime | Security & Privacy - CNET News

Jailed hacker allowed into IT class, hacks prison computers | Security & Privacy - CNET News

Groundbreaking Cyber Fast Track Research Program Ending | threatpost

Google Says the FBI Is Secretly Spying on Some of Its Customers | Threat Level |

Attorney General: Aaron Swartz Case Was a 'Good Use of Prosecutorial Discretion' | Threat Level |

White House, FCC Chairman Support Legalizing Unlocking of Mobile Phones | Threat Level |

Mobile Malcoders Pay to (Google) Play — Krebs on Security

APT1-Themed Spear Phishing Campaign Linked to China | threatpost

Google Patches 10 Chrome Flaws Ahead of Pwn2Own, Pwnium | threatpost

Time Stamp Bug in Sudo Could Have Allowed Code Entry | threatpost

MiniDuke Espionage Campaign Began About a Year Earlier Than First Thought | threatpost

Apple Begins to Blacklist Old Versions of Flash for Safari | threatpost

Evernote Compromised, But Says No User Data Affected | threatpost

Locked-down BlackBerry offers classified, personal use | Security & Privacy - CNET News

CloudFlare security service goes down after router failure | Security & Privacy - CNET News

The most secure Android phone in the world (maybe) | Security & Privacy - CNET News

Sudden death of U.S. engineer in Singapore linked to cyber espionage? | Security & Privacy - CNET News

Dropbox users getting spammed, might be from earlier hack | Security & Privacy - CNET News

Anonymous leaks alleged data on BofA execs, surveillance | Security & Privacy - CNET News

Dell builds sinkhole data-sharing platform - Applications - SC Magazine Australia - Secure Business Intelligence,dell-builds-sinkhole-data-shari...

CommBank builds security fault tree after RSA breach - Networks - SC Magazine Australia - Secure Business Intelligence,commbank-builds-security-fault-...

Use decoy and deception to mess with hackers - Applications - SC Magazine Australia - Secure Business Intelligence,use-decoy-and-deception-to-mess...

Hackers focus energy on solar sector - Networks - SC Magazine Australia - Secure Business Intelligence,hackers-focus-energy-on-solar-s...

silent circle - Google Search

Here's this week's sponsor: Buy their stuff!!!

Penetration Testing & Web Application Security - HackLabs


foxie.claire's picture

The zero day attack is really good. I guess they are aware of what they have. - Kris Krohn