WatchGuard Security Week in Review: Episode 41 – Coke Cracked

Coca-Cola Cracked, Fawkes Day Fail, and Lots of Updates

This week’s security news round-up includes a story about an old Coca-Cola network breach, the results of Anonymous’ Fawkes Day fiasco, a little Twitter password hiccup, and lots of software security updates. If you have a little extra time on Fridays to catch up on the latest information security news, watch the video below.

Of course, if you have no time for videos, and would prefer to pick and choose your news items, see the Reference section below for link to all this week’s security headlines.

Show Note: I will be out for vacation starting the middle of next week, so will not be posting any WatchGuard Security Week in Review videos for the next couple of weeks. See you again at the end of November, and stay frosty out there.

(Episode Runtime: 10:42)

Direct YouTube Link: http://www.youtube.com/watch?v=S3LyJUK3MLw

Episode References:

• Apple’s November Quicktime security update - Apple
• Cisco Secure ACS November update - Cisco
• Adobe’s Flash update and Reader X zero day - WGSC
• More detail on Reader X zero day - Group-IB
• Microsoft November Patch Day notification - WGSC
• Anonymous Fawkes Day stories:
  • Anonymous Fawkes Day hacking spree - Computer World
  • More Anonymous Nov. 5 hacking - The Register
• Major Coca-Cola network breach in 2009 - Bloomberg
• PixSteal trojan steals images and DMP files – Computer World
• Twitter accidentally resets passwords - Ubergizmo
• Borderlands 2 graveyard “virus” issue fixed - G4TV

• Extra Stories
  • Google hacker finds AV file parsing vulnerabilities - PDF Report
    
  •  US government says China is cyber enemy #1 - Network World
  • Skype accused of illegally sharing users data – Heise Online
    
  • SEC staffer breached at Black Hat - The Register

— Corey Nachreiner, CISSP (@SecAdept)