

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
Jerry Bell and Andrew Kalat
Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.
Episodes
Mentioned books

Dec 20, 2016 • 49min
Defensive Security Podcast Episode 180
https://www.bleepingcomputer.com/news/security/new-scheme-spread-popcorn-time-ransomware-get-chance-of-free-decryption-key/
http://arstechnica.com/tech-policy/2016/12/disgraced-it-worker-stole-confidential-expedia-e-mails-even-after-he-left/
http://arstechnica.com/security/2016/12/millions-exposed-to-malvertising-that-hid-attack-code-in-banner-pixels/
http://www.reuters.com/article/us-cyber-heist-bangladesh-exclusive-idUSKBN1411ST
http://motherboard.vice.com/read/newly-uncovered-site-suggests-nsa-exploits-for-direct-sale
http://arstechnica.com/security/2016/12/what-can-you-do-with-a-billion-yahoo-passwords-lots-of-bad-things/

Dec 18, 2016 • 1h 14min
Defensive Security Podcast Episode 179
2016 HOLIDAY PODCAST MASHUP
With:
PVC Security Podcast: http://www.pvcsec.com/
Brakeing Down Security Podcast: http://www.brakeingsecurity.com/
Advanced Persistent Security Podcast: https://advancedpersistentsecurity.net/
…and Amanda Berlin!

Nov 28, 2016 • 1h 13min
Defensive Security Podcast Episode 178
Slack channel: https://defensivesecurity.org/slack-channel/
http://blog.checkpoint.com/2016/11/24/imagegate-check-point-uncovers-new-method-distributing-malware-images/
http://www.csoonline.com/article/3143713/analytics/shall-we-care-about-zero-day.html
http://www.databreachtoday.com/umass-amherst-hit-650000-hipaa-settlement-a-9554
http://arstechnica.com/security/2016/11/elegant-0day-unicorn-underscores-serious-concerns-about-linux-security/
http://www.securityweek.com/disgruntled-gamer-likely-behind-october-us-hacking-expert
http://www.theregister.co.uk/2016/11/17/google_hacker_pleads_try_whitelists_not_just_bunk_antivirus_ids/
https://blog.instant2fa.com/an-economic-model-for-security-spending-3d982d05d0c1#.fpcnkz5qn
http://www.securityweek.com/when-ransomware-hits-business-paying-unlikely-guarantee-resolution
http://www.csoonline.com/article/3142889/security/ransomware-victims-able-to-thwart-attacks-report-says.html

Nov 14, 2016 • 38min
Defensive Security Podcast Episode 177
Book recommendations: https://defensivesecurity.org/resources/recommended-books/
Slack channel: http://https://defensivesecurity.org/slack-channel/
http://arstechnica.com/information-technology/2016/11/kaspersky-accuses-microsoft-of-anticompetitive-bundling-of-antivirus-software/
https://nakedsecurity.sophos.com/2016/11/11/yahoo-staff-knew-they-were-breached-two-years-ago/
http://www.csoonline.com/article/3139311/security/412-million-friendfinder-accounts-exposed-by-hackers.html

Nov 7, 2016 • 54min
Defensive Security Podcast Episode 176
Overconfidence is putting organizations at higher risk for attacks
http://arstechnica.com/security/2016/11/windows-zero-day-exploited-by-same-group-behind-dnc-hack/
http://www.bankinfosecurity.com/those-suing-anthem-seek-security-audit-documents-a-9498
https://it.slashdot.org/story/16/11/05/1744231/it-workers-facing-layoffs-jolted-by-ceos-message

Nov 2, 2016 • 1h 6min
Defensive Security Podcast Episode 175
http://www.securityweek.com/shadow-brokers-leaks-servers-allegedly-hacked-nsa
http://www.bankinfosecurity.com/online-ad-industry-threatened-by-security-issues-a-9488
http://m.elpasoinc.com/news/local_news/article_92e82ee0-9f84-11e6-b429-0b2b853bae0b.html?mode=jqm
http://researchcenter.paloaltonetworks.com/2016/10/unit42-psa-conference-invite-used-lure-operation-lotus-blossom-actors/

Oct 24, 2016 • 41min
Defensive Security Podcast Episode 174
Serious Dirty Cow Linux Vulnerability Under Attack
http://news.softpedia.com/news/hackers-steal-research-and-user-data-from-japanese-nuclear-research-lab-509380.shtml
https://www.databreaches.net/rainbow-childrens-clinic-notifies-33368-patients-of-ransomware-attack/
https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powered-todays-massive-internet-outage/

Oct 16, 2016 • 40min
Defensive Security Podcast Episode 173
http://conferences.oreilly.com/security/network-data-security-ny/public/content/buy-one-get-one-discount
https://www.eventbrite.com/e/bsides-atlanta-2016-tickets-27895813128
http://www.cnbc.com/2016/10/14/british-banks-keep-cyber-attacks-under-wraps-to-protect-image.html
http://www.lexology.com/library/detail.aspx?g=f17c1e55-5768-4ea6-a7e6-d555c4052eef
https://www.nist.gov/news-events/news/2016/10/security-fatigue-can-cause-computer-users-feel-hopeless-and-act-recklessly

Oct 3, 2016 • 43min
Defensive Security Podcast Episode 172
http://cybersecurity.oxfordjournals.org/content/early/2016/08/08/cybsec.tyw001
The psychological reasons behind risky password practices
http://www.nytimes.com/2016/09/29/technology/yahoo-data-breach-hacking.html?_r=0
http://www.databreachtoday.com/blogs/yahoo-breach-great-nation-state-cop-out-p-2260

Sep 22, 2016 • 58min
Defensive Security Podcast Episode 171
http://www.csoonline.com/article/3119965/security/a-single-ransomware-network-has-pulled-in-121-million.html
https://www.sans.org/reading-room/whitepapers/dataprotection/data-breaches-prevention-practical-37267
http://www.bankinfosecurity.com/aligning-cyber-framework-organizations-strategy-goals-a-9401
http://arstechnica.com/security/2016/09/swift-fraudsters-detection-system-bangladesh-bank-heist/
http://www.bankinfosecurity.com/blogs/ransomware-victims-please-come-forward-p-2255
http://www.nytimes.com/2016/09/17/business/dealbook/wells-fargo-warned-workers-against-fake-accounts-but-they-needed-a-paycheck.html