

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
Jerry Bell and Andrew Kalat
Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.
Episodes
Mentioned books

Oct 24, 2016 • 41min
Defensive Security Podcast Episode 174
Serious Dirty Cow Linux Vulnerability Under Attack
http://news.softpedia.com/news/hackers-steal-research-and-user-data-from-japanese-nuclear-research-lab-509380.shtml
https://www.databreaches.net/rainbow-childrens-clinic-notifies-33368-patients-of-ransomware-attack/
https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powered-todays-massive-internet-outage/

Oct 16, 2016 • 40min
Defensive Security Podcast Episode 173
http://conferences.oreilly.com/security/network-data-security-ny/public/content/buy-one-get-one-discount
https://www.eventbrite.com/e/bsides-atlanta-2016-tickets-27895813128
http://www.cnbc.com/2016/10/14/british-banks-keep-cyber-attacks-under-wraps-to-protect-image.html
http://www.lexology.com/library/detail.aspx?g=f17c1e55-5768-4ea6-a7e6-d555c4052eef
https://www.nist.gov/news-events/news/2016/10/security-fatigue-can-cause-computer-users-feel-hopeless-and-act-recklessly

Oct 3, 2016 • 43min
Defensive Security Podcast Episode 172
http://cybersecurity.oxfordjournals.org/content/early/2016/08/08/cybsec.tyw001
The psychological reasons behind risky password practices
http://www.nytimes.com/2016/09/29/technology/yahoo-data-breach-hacking.html?_r=0
http://www.databreachtoday.com/blogs/yahoo-breach-great-nation-state-cop-out-p-2260

Sep 22, 2016 • 58min
Defensive Security Podcast Episode 171
http://www.csoonline.com/article/3119965/security/a-single-ransomware-network-has-pulled-in-121-million.html
https://www.sans.org/reading-room/whitepapers/dataprotection/data-breaches-prevention-practical-37267
http://www.bankinfosecurity.com/aligning-cyber-framework-organizations-strategy-goals-a-9401
http://arstechnica.com/security/2016/09/swift-fraudsters-detection-system-bangladesh-bank-heist/
http://www.bankinfosecurity.com/blogs/ransomware-victims-please-come-forward-p-2255
http://www.nytimes.com/2016/09/17/business/dealbook/wells-fargo-warned-workers-against-fake-accounts-but-they-needed-a-paycheck.html

Sep 11, 2016 • 59min
Defensive Security Podcast Episode 170
http://news.softpedia.com/news/retiring-sysadmin-fakes-cyber-attack-to-get-away-with-data-theft-507992.shtml
https://oversight.house.gov/wp-content/uploads/2016/09/The-OPM-Data-Breach-How-the-Government-Jeopardized-Our-National-Security-for-More-than-a-Generation.pdf
http://money.cnn.com/2016/09/08/investing/wells-fargo-created-phony-accounts-bank-fees/index.html
http://spectrum.ieee.org/view-from-the-valley/computing/it/facebook-engineers-crash-data-centers-in-realworld-stress-test
http://www.bloomberg.com/news/articles/2016-09-08/cisco-s-network-bugs-are-front-and-center-in-bankruptcy-fight

Aug 30, 2016 • 45min
Defensive Security Podcast Episode 169
http://www.csoonline.com/article/3110975/techology-business/how-do-you-measure-success-when-it-comes-to-stopping-phishing-attacks.html
http://www.databreachtoday.com/equation-group-hacking-tool-dump-5-lessons-a-9358
http://www.csoonline.com/article/3109982/security/attackers-dont-need-vulnerabilities-when-the-basics-work-just-as-well.html
http://www.securityweek.com/attacker-uses-virtual-machine-hide-malicious-activity
http://www.networkworld.com/article/3110653/security/imperva-application-layer-ddos-attacks-are-on-the-rise.html
http://arstechnica.com/security/2016/08/actively-exploited-ios-flaws-that-hijack-iphones-likely-spread-for-years/

Aug 21, 2016 • 51min
Defensive Security Podcast Episode 168
https://nakedsecurity.sophos.com/2016/08/18/nists-new-password-rules-what-you-need-to-know/
http://www.extremetech.com/extreme/234031-your-guide-to-the-shadow-brokers-nsa-theft-which-puts-the-snowden-leaks-to-shame
http://phys.org/news/2016-08-people-software-percent.html
http://www.csoonline.com/article/3108025/cyber-attacks-espionage/cerber-ransomware-earns-2-3mil-with-0-3-response-rate.html

Aug 14, 2016 • 1h 3min
Defensive Security Podcast Episode 167
http://www.csoonline.com/article/3101863/security/report-only-3-percent-of-u-s-companies-pay-attackers-after-ransomware-infections.html
http://www.bankinfosecurity.com/fed-reserve-a-9282
http://www.tripwire.com/state-of-security/featured/does-dropping-malicious-usb-sticks-really-work-yes-worryingly-well/
http://arstechnica.com/security/2016/08/frequent-password-changes-are-the-enemy-of-security-ftc-technologist-says/
http://spectrum.ieee.org/tech-talk/telecom/security/nigerian-scammers-infect-themselves-with-own-malware-revealing-new-wirewire-fraud-scheme
http://www.csoonline.com/article/3106076/data-protection/disable-wpad-now-or-have-your-accounts-and-private-data-compromised.html
http://fortune.com/2016/08/12/delta-airlines-outages/

Jul 25, 2016 • 48min
Defensive Security Podcast Episode 166
http://www.bankinfosecurity.com/report-new-york-fed-fumbled-cyber-heist-response-a-9281
http://motherboard.vice.com/read/ransomware-gang-claims-fortune-500-company-hired-them-to-hack-the-competition
http://www.lexology.com/library/detail.aspx?g=d0f4e774-6c6a-4783-b993-4f165f1dcc7e

Jul 17, 2016 • 58min
Defensive Security Podcast Episode 165
Tiaracon: http://tiaracon.org/
http://www.cbc.ca/news/technology/antivirus-software-1.3668746
http://www.csoonline.com/article/3089439/business-continuity/9-critical-controls-for-todays-threats.html
http://www.bankinfosecurity.com/interviews/heartbleed-update-america-vulnerable-i-3242
http://www.bankinfosecurity.com/blogs/av-wars-sophos-vs-cylance-p-2172
http://www.reuters.com/article/us-cyber-fdic-china-idUSKCN0ZT20M
http://blog.talosintel.com/2016/07/ranscam.html


