

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
Jerry Bell and Andrew Kalat
Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.
Episodes
Mentioned books

Jun 22, 2017 • 42min
Defensive Security Podcast Episode 194
https://hotforsecurity.bitdefender.com/blog/heartbleed-still-hurting-hard-uk-council-fined-100000-after-data-breach-18205.html
https://threatpost.com/ransomware-attack-hobbles-prestigious-university-college-london/126299/
http://www.securityweek.com/web-hosting-provider-pays-1-million-ransomware-attackers
https://infosec.engineering/improving-the-effectiveness-of-vulnerability-remediation-targeting/

Jun 12, 2017 • 31min
Defensive Security Podcast Episode 193
http://www.csoonline.com/article/3198492/security/ceos-risky-behaviors-compromise-security.html
https://www.bleepingcomputer.com/news/security/ex-admin-deletes-all-customer-data-and-wipes-servers-of-dutch-hosting-provider
http://thehackernews.com/2017/06/intel-amt-firewall-bypass.html
http://thehackernews.com/2017/06/microsoft-powerpoint-malware.html

Jun 6, 2017 • 36min
Defensive Security Podcast Episode 192
http://www.csoonline.com/article/3198496/compliance/sometimes-it-is-necessary-to-bend-the-rules-a-bit.html
http://www.securityweek.com/nature-vs-nurture-bad-cybersecurity-our-dna
http://gizmodo.com/top-defense-contractor-left-sensitive-pentagon-files-on-1795669632
https://nakedsecurity.sophos.com/2017/06/02/onelogin-warns-that-attacker-could-be-able-to-decrypt-data/

May 25, 2017 • 48min
Defensive Security Podcast Episode 191
https://arstechnica.com/security/2017/05/windows-7-not-xp-was-the-reason-last-weeks-wcry-worm-spread-so-widely/
http://www.publictechnology.net/articles/news/nhs-cyber-attack-forces-week-long-council-email-block
https://www.washingtonpost.com/business/technology/nsa-officials-worried-about-the-day-its-potent-hacking-tool-would-get-loose-then-it-did/2017/05/16/50670b16-3978-11e7-a058-ddbb23c75d82_story.html
https://www.grahamcluley.com/companies-keeping-bitcoin-hand-case-ransomware-attacks/
http://www.eweek.com/security/zomato-docusign-breaches-reveal-common-security-risks

May 10, 2017 • 1h 49min
Defensive Security Podcast Episode 190
http://www.verizonenterprise.com/resources/reports/rp_DBIR_2017_Report_en_xg.pdf

Apr 25, 2017 • 52min
Defensive Security Podcast Episode 189
https://www.wsj.com/articles/cybersecurity-startup-tanium-exposed-california-hospitals-network-in-demos-without-permission-1492624287
https://hotforsecurity.bitdefender.com/blog/95-of-enterprise-risk-assessments-find-employees-using-tor-private-vpns-to-bypass-security-report-says-17902.html
http://www.csoonline.com/article/3191286/security/most-employees-willing-to-share-sensitive-information-survey-says.html
https://www.bleepingcomputer.com/news/security/over-36-000-computers-infected-with-nsas-doublepulsar-malware/

Apr 17, 2017 • 1h 4min
Defensive Security Podcast Episode 188
https://arstechnica.com/security/2017/04/purported-shadow-brokers-0days-were-in-fact-killed-by-mysterious-patch/
https://www.bleepingcomputer.com/news/security/former-sysadmin-accused-of-planting-time-bomb-in-companys-database/
http://www.computerworld.com/article/3189059/security/what-prevents-breaches-process-technology-or-people-one-answer-is-pc-and-one-is-right.html
http://www.csoonline.com/article/3187422/network-security/report-30-of-malware-is-zero-day-missed-by-legacy-antivirus.amp.html
https://www.wired.com/2017/04/hackers-hijacked-banks-entire-online-operation/
http://news.softpedia.com/news/two-laptops-with-hong-kong-s-3-7-million-voters-data-stolen-514346.shtml
http://researchcenter.paloaltonetworks.com/2017/03/unit42-threat-brief-credential-theft-keystone-shamoon-2-attacks/

Mar 28, 2017 • 48min
Defensive Security Podcast Episode 187
http://www.itworld.com/article/3182431/security/some-https-inspection-tools-might-weaken-security.html
https://www.bleepingcomputer.com/news/legal/former-it-admin-accused-of-leaving-backdoor-account-accessing-it-700-times/
http://www.securityweek.com/what-cisos-can-learn-er-doctors
http://www.csoonline.com/article/3180762/data-breach/inside-the-russian-hack-of-yahoo-how-they-did-it.html
https://arstechnica.com/security/2017/03/microsofts-silence-over-unprecedented-patch-delay-doesnt-smell-right/

Mar 14, 2017 • 56min
Defensive Security Podcast Episode 186
http://www.bankinfosecurity.com/emory-healthcare-database-breach-what-happened-a-9745
http://www.networkworld.com/article/3176718/security/dealing-with-overwhelming-volume-of-security-alerts.html#tk.rss_security
http://www.networkworld.com/article/3175030/security/trend-micro-report-ransomware-booming.html
https://www.helpnetsecurity.com/2017/03/02/yahoo-cookie-forging-incident/
http://www.darkreading.com/risk/new-cybersecurity-regulations-begin-today-for-ny-banks/d/d-id/1328295
http://www.pcworld.com/article/3179348/security/after-cia-leak-intel-security-releases-detection-tool-for-efi-rootkits.html
https://arstechnica.com/security/2017/03/wikileaks-publishes-what-it-says-is-trove-of-cia-hacking-tools/
http://www.csoonline.com/article/3177994/security/cia-false-flag-team-repurposed-shamoon-data-wiper-other-malware.html

Feb 28, 2017 • 53min
Defensive Security Podcast Episode 185
https://www.bleepingcomputer.com/news/security/malware-used-to-attack-polish-banks-contained-false-flags-blaming-russian-hackers/
http://www.csoonline.com/article/3173639/security/bleeding-clouds-cloudflare-server-errors-blamed-for-leaked-customer-data.html
http://www.csoonline.com/article/3174153/security/carders-capitalize-on-cloudflare-problems-claim-150-million-logins-for-sale.amp.html
http://www.securityweek.com/what-hackers-think-your-defenses
http://www.csoonline.com/article/3171154/security/verizon-knocks-off-350m-from-yahoo-deal-after-breaches.html


