WatchGuard Security Week in Review: Episode 49 – Expelled Hacker

Red October, Cisco WLAN Updates, and Expelled Hacker

Welcome to another “on the road” edition of WatchGuard Security Week in Review, the video podcast dedicated to summarizing the biggest InfoSec stories each week. This week’s episodes covers a Cisco wireless controller security update, Kaspersky’s investigation into the Red October cyber-espionage campaign, and the controversy surrounding an expelled “white hat” hacker. For more details on those stories and others, watch the short video below. You can also check out the ?Reference section for more details on any of these topics.

(Episode Runtime: 6:48)

Direct YouTube Link: http://www.youtube.com/watch?v=Q08Gcu_7EXo

Episode References:

• Fake Java update installs malware - CNET
  
• Sony fined 250,000 pounds for PSN breach - BBC
• Kaspersky’s Red October investigation
  • Red October Campaign blog post - Securelist blog
  • Red October  details (part 1) - Securelist blog
  • Red October  details (part 2) - Securelist blog
  • Red October Java exploit vector - Securelist blog
• Cisco wireless controller security update - Cisco
• Hacker Expelled for reporting College web application vulnerability - Gizmodo
• Web application company offers expelled hacker a job - The Globe and Mail
• EXTRAS
  • Researchers report more 0day in Java - Full Disclosure
    
  • 0day flaw in Cisco Linksys routers – Defensecode blog
    
  • Latest web server attacks backdoor SSH - Computer World
  • Barracuda appliances contain a backdoor - Sec-Consult

— Corey Nachreiner, CISSP (@SecAdept)