

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
Jerry Bell and Andrew Kalat
Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.
Episodes
Mentioned books

Mar 29, 2016 • 39min
Defensive Security Podcast Episode 154
https://threatpost.com/apt-attackers-flying-more-false-flags-than-ever/116814/
http://www.csoonline.com/article/3048334/security/verizons-breach-experts-missed-one-right-under-their-noses.html
http://www.wsj.com/articles/hackers-in-bangladesh-bank-account-heist-part-of-larger-breach-1458582678
http://krebsonsecurity.com/2016/03/hospital-declares-internet-state-of-emergency-after-ransomware-infection/

Mar 15, 2016 • 48min
Defensive Security Podcast Episode 153
http://www.csoonline.com/article/3043975/security/compromised-data-goes-public-as-staminus-recovers-from-attack.html#tk.rss_all
http://www.darkreading.com/endpoint/patch-management-still-plagues-enterprise/d/d-id/1324615
http://www.welivesecurity.com/2016/03/09/android-trojan-targets-online-banking-users/
http://arstechnica.com/security/2016/03/a-typo-costs-bank-hackers-nearly-1b/
http://www.cnet.com/news/home-depot-offers-19m-to-settle-customers-hacking-lawsuit/

Mar 7, 2016 • 1h 1min
Defensive Security Podcast Episode 152
http://www.intelsecurity.com/advanced-threat-research/content/Analysis_SamSa_Ransomware.pdf?_ga=1.157194172.685877305.1433735448
https://blog.agilebits.com/2015/06/17/1password-inter-process-communication-discussion/
http://www.verizonenterprise.com/resources/reports/rp_data-breach-digest_xg_en.pdf

Feb 28, 2016 • 40min
Defensive Security Podcast Episode 151
http://www.databreachtoday.com/anthem-breach-lessons-one-year-later-a-8897
http://www.dw.com/en/hackers-hold-german-hospital-data-hostage/a-19076030
http://krebsonsecurity.com/2016/02/breached-credit-union-comes-out-of-its-shell/
http://arstechnica.com/security/2016/02/hackers-did-indeed-cause-ukrainian-power-outage-us-report-concludes/

Feb 25, 2016 • 47min
Defensive Security Podcast Episode 150
http://www.scmagazineuk.com/russian-bank-licences-revoked-for-using-hackers-to-withdraw-funds/article/474464/
http://arstechnica.com/security/2016/02/hospital-pays-17k-for-ransomware-crypto-key/
http://news.softpedia.com/news/us-school-agrees-to-pay-8-500-to-get-rid-of-ransomware-500684.shtml
http://www.scmagazineuk.com/44-of-ransomware-victims-in-the-uk-have-paid-to-recover-their-data/article/475426/
http://arstechnica.com/security/2016/02/extremely-severe-bug-leaves-dizzying-number-of-apps-and-devices-vulnerable/

Feb 16, 2016 • 50min
Defensive Security Podcast Episode 149
http://www.tripwire.com/state-of-security/latest-security-news/cisco-patches-critical-asa-ike-buffer-overflow-vulnerability/
http://www.securityweek.com/we-cant-give-preventing-breaches
http://www.csoonline.com/article/3033160/security/ransomware-takes-hollywood-hospital-offline-36m-demanded-by-attackers.html
http://arstechnica.com/security/2016/02/clever-bank-hack-allowed-crooks-to-make-unlimited-atm-withdrawals/

Feb 11, 2016 • 57min
Defensive Security Podcast Episode 148
http://www.theregister.co.uk/2016/02/04/norse_corp_ceo_fired/
http://www.secureworks.com/resources/blog/ransomware-used-as-a-distraction/
http://www.zdnet.com/article/most-windows-flaws-mitigated-by-removing-admin-rights-says-report/
http://mobile.reuters.com/article/idUSKCN0VD14X
http://www.csoonline.com/article/3025787/security/defending-against-insider-security-threats-hangs-on-trust.html
http://www.securityforrealpeople.com/2016/02/poor-ux-leads-to-poorly-secured-soho.html

Feb 1, 2016 • 42min
Defensive Security Podcast Episode 147
Hack in the Box: https://conference.hitb.org/
Circle City Con: https://circlecitycon.com/tickets/
http://www.theregister.co.uk/2016/01/28/nsas_top_hacking_boss_explains_how_to_protect_your_network_from_his_minions/?page=1
https://www.youtube.com/watch?v=bDJb8WOJYdA
http://krebsonsecurity.com/2016/01/sources-security-firm-norse-corp-imploding/
http://arstechnica.com/security/2016/01/secret-ssh-backdoor-in-fortinet-hardware-found-in-more-products/

Jan 27, 2016 • 40min
Defensive Security Podcast Episode 146
https://blog.malwarebytes.org/intelligence/2016/01/draft-lechiffre-a-manually-run-ransomware/
http://www.tripwire.com/state-of-security/security-data-protection/boeing-supplier-hacked-claims-55-million-worth-of-damage-as-stock-price-falls/
http://krebsonsecurity.com/2016/01/firm-sues-cyber-insurer-over-480k-loss/
http://shawnetuma.com/2016/01/08/supervalu-data-breach-class-action-dismissed-for-lack-of-harm/
Hack in the Box: https://conference.hitb.org/
Circle City Con: https://circlecitycon.com/tickets/

Jan 21, 2016 • 36min
Defensive Security Podcast Episode 145
http://arstechnica.com/security/2016/01/security-firm-sued-for-filing-woefully-inadequate-forensics-report/
http://arstechnica.com/security/2016/01/et-tu-fortinet-hard-coded-password-raises-new-backdoor-eavesdropping-fears/
http://www.csoonline.com/article/3021774/security/trend-micro-flaw-could-have-allowed-attacker-to-steal-all-passwords.html


