https://feeds.blubrry.com/feeds/wstr.xml The Weekly Security and Tech Review http://www.blubrry.com/wstr/ http://www.blubrry.com/wstr/ episodic The Weekly Security and Tech Review hosted by en-us Copyright 2019 The Weekly Security and Tech Review podcast@blubrry.com (Blubrry Podcasting) podcast@blubrry.com http://www.blubrry.com/wstr/ https://www.blubrry.com/themes/blubrry4/images/cover.png The Weekly Security and Tech Review Blubrry Podcasting: https://www.blubrry.com/ no http://blogs.law.harvard.edu/tech/rss Wed, 03 Apr 2019 18:00:00 -0400 Wed, 03 Apr 2019 18:00:00 -0400 The WSTR Discussion Series: Exquifax data breach, where is the data? https://www.blubrry.com/wstr/42954694/the-wstr-discussion-series-exquifax-data-breach-where-is-the-data/ http://www.blubrry.com/wstr/42954694/the-wstr-discussion-series-exquifax-data-breach-where-is-the-data/ Wed, 03 Apr 2019 18:00:00 -0400 <p> </p> <p>Jesse Lesperance, Stanley Chan and Robert Smith discuss some theories on why data that was stolen in the 2017 Equifax breach has yet to show up on the dark web.</p> <p>With the breach taking place in late 2017, and with the data not turning up on the dark web, some security experts are suspecting that the responsible party may be a State-sponsored actor with the goal of using the data for spying.</p>  

Jesse Lesperance, Stanley Chan and Robert Smith discuss some theories on why data that was stolen in the 2017 Equifax breach has yet to show up on the dark web.

With the breach taking place in late 2017, and with the data not turning up on the dark web, some security experts are suspecting that the responsible party may be a State-sponsored actor with the goal of using the data for spying.

]]> no   Jesse Lesperance, Stanley Chan and Robert Smith discuss some theories on why data that was stolen in the 2017 Equifax breach has yet to show up on the dark web. With the breach taking place in late 2017,   Jesse Lesperance, Stanley Chan and Robert Smith discuss some theories on why data that was stolen in the 2017 Equifax breach has yet to show up on the dark web. With the breach taking place in late 2017, and with the data not turning up on the dark web, some security experts are suspecting that the responsible party may be a State-sponsored actor with the goal of using the data for spying. Inaugural episode of The Weekly Secuity and Tech Review podcast https://www.blubrry.com/wstr/42940294/inaugural-episode-of-the-weekly-secuity-and-tech-review-podcast/ http://www.blubrry.com/wstr/42940294/inaugural-episode-of-the-weekly-secuity-and-tech-review-podcast/ Sun, 31 Mar 2019 01:53:21 -0400 <p>NOTE: Jesse’s headset mic stopped working part way through the episode, causing him to have to use his system’s built in mic.</p> <p>Topics covered in this week’s episode:</p> <ul class="public-DraftStyleDefault-ul"> <a href="https://www.businessinsider.com/spotify-eu-antitrust-complaint-against-apple-2019-3" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Spotify files Anti-trust claim against Apple in EU</a> <p><a href="https://www.zdnet.com/article/marriott-ceo-shares-post-mortem-on-last-years-hack/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Marriott CEO shares post-mortem on last year’s hack</a></p> <p><a href="https://threatpost.com/microsoft-patches-two-win32k-bugs-under-active-attack/142742/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Microsoft patches two bugs under active attack</a></p> <p><a href="https://arstechnica.com/information-technology/2019/03/citrix-says-its-network-was-breached-by-international-criminals/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Citrix says its network was breached by international criminals</a></p> <p><a href="https://news.google.com/articles/CAIiEK8ASuqVghQI2qbZJo3wPxUqFggEKg0IACoGCAows4UBMMAaMJTJxgU" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Apple among high profile companies to have data exposed through box</a></p> <p><a href="https://blog.mozilla.org/blog/2019/03/12/introducing-firefox-send-providing-free-file-transfers-while-keeping-your-personal-information-private/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Firefox Send</a></p> <p><a href="https://www.bleepingcomputer.com/news/security/multi-factor-auth-bypassed-in-office-365-and-g-suite-imap-attacks/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">2FA bypass on GSuite/Office 365 Imap attacke</a></p> <p><a href="https://www.forbes.com/sites/daveywinder/2019/03/10/2-billion-unencrypted-records-leaked-in-marketing-data-breach-what-happened-and-what-to-do-next/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">(Updated) 2 Billion Unencrypted Records Leaked In Marketing Data Breach –What To Do Next</a></p> <p><a href="https://www.pcmag.com/news/366997/jigsaw-chrome-extension-tunes-out-internet-toxicity" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">New chrome extension to filter out toxicity</a></p> <p><a href="https://techcommunity.microsoft.com/t5/Windows-Kernel-Internals/DTrace-on-Windows/ba-p/362902" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">DTrace on Windows</a></p> </ul> NOTE: Jesse’s headset mic stopped working part way through the episode, causing him to have to use his system’s built in mic.

Topics covered in this week’s episode:

]]> no NOTE: Jesse’s headset mic stopped working part way through the episode, causing him to have to use his system’s built in mic. Topics covered in this week’s episode: - Spotify files Anti-trust claim against Apple in EU NOTE: Jesse’s headset mic stopped working part way through the episode, causing him to have to use his system’s built in mic. Topics covered in this week’s episode: Spotify files Anti-trust claim against Apple in EU (https://www.businessinsider.com/spotify-eu-antitrust-complaint-against-apple-2019-3) Marriott CEO shares post-mortem on last year’s hack (https://www.zdnet.com/article/marriott-ceo-shares-post-mortem-on-last-years-hack/) Microsoft patches two bugs under active attack (https://threatpost.com/microsoft-patches-two-win32k-bugs-under-active-attack/142742/) Citrix says its network was breached by international criminals (https://arstechnica.com/information-technology/2019/03/citrix-says-its-network-was-breached-by-international-criminals/) Apple among high profile companies to have data exposed through box (https://news.google.com/articles/CAIiEK8ASuqVghQI2qbZJo3wPxUqFggEKg0IACoGCAows4UBMMAaMJTJxgU) Firefox Send (https://blog.mozilla.org/blog/2019/03/12/introducing-firefox-send-providing-free-file-transfers-while-keeping-your-personal-information-private/) 2FA bypass on GSuite/Office 365 Imap attacke (https://www.bleepingcomputer.com/news/security/multi-factor-auth-bypassed-in-office-365-and-g-suite-imap-attacks/) (Updated) 2 Billion Unencrypted Records Leaked In Marketing Data Breach –What To Do Next (https://www.forbes.com/sites/daveywinder/2019/03/10/2-billion-unencrypted-records-leaked-in-marketing-data-breach-what-happened-and-what-to-do-next/) New chrome extension to filter out toxicity (https://www.pcmag.com/news/366997/jigsaw-chrome-extension-tunes-out-internet-toxicity) DTrace on Windows (https://techcommunity.microsoft.com/t5/Windows-Kernel-Internals/DTrace-on-Windows/ba-p/362902) WSTR: Week of March 17, 2019 https://www.blubrry.com/wstr/42940268/wstr-week-of-march-17-2019/ http://www.blubrry.com/wstr/42940268/wstr-week-of-march-17-2019/ Sun, 31 Mar 2019 01:52:02 -0400 <p>This week, Jesse, Stan and Kevin discuss Facebook storing users passwords in plain text, Critical Flaws in Medtronic Defibrillators, Drone Tech creating a blended threat, Microsoft rebrands Windows Defender, Zero-Days in Counter Strike 1.6 clients and Wind Power</p> <p>Reference articles on the topics covered:</p> <p><a href="https://www.buzzfeednews.com/article/leticiamiranda/facebook-employees-had-access-to-hundreds-of-millions-of" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Facebook Employees had access to hundreds of millions of plain text passwords</a></p> <p><a href="https://threatpost.com/medtronic-defibrillators-have-critical-flaws-warns-dhs/143068/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Medtronic Defibrillators Have Critical Flaws, Warns DHS</a></p> <p><a href="https://threatpost.com/drones-breach-cyberdefenses/143075/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Drone Tech creates new type of blended threat</a></p> <p><a href="https://arstechnica.com/gadgets/2019/03/microsoft-ships-anti-virus-for-macos-as-windows-defender-becomes-microsoft-defender/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Microsoft ships antivirus for macOS as Windows Defender becomes Microsoft Defender</a></p> <p><a href="https://threatpost.com/zero-days-counter-strike-botnet/142823/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">Zero-Days in Counter-Strike Client Used to Build Major Botnet</a></p> <p><a href="https://arstechnica.com/science/2019/03/people-who-live-near-wind-turbines-prefer-them-to-solar-and-fossil-plants/" class="_4X_-components-SimpleRichTextEditor-components-LinkSpan--linkSpan">People who live near wind turbines prefer them to solar and fossil plants</a></p> This week, Jesse, Stan and Kevin discuss Facebook storing users passwords in plain text, Critical Flaws in Medtronic Defibrillators, Drone Tech creating a blended threat, Microsoft rebrands Windows Defender, Zero-Days in Counter Strike 1.6 clients and Wind Power

Reference articles on the topics covered:

Facebook Employees had access to hundreds of millions of plain text passwords

Medtronic Defibrillators Have Critical Flaws, Warns DHS

Drone Tech creates new type of blended threat

Microsoft ships antivirus for macOS as Windows Defender becomes Microsoft Defender

Zero-Days in Counter-Strike Client Used to Build Major Botnet

People who live near wind turbines prefer them to solar and fossil plants

]]> no This week, Jesse, Stan and Kevin discuss Facebook storing users passwords in plain text, Critical Flaws in Medtronic Defibrillators, Drone Tech creating a blended threat, Microsoft rebrands Windows Defender, Zero-Days in Counter Strike 1. This week, Jesse, Stan and Kevin discuss Facebook storing users passwords in plain text, Critical Flaws in Medtronic Defibrillators, Drone Tech creating a blended threat, Microsoft rebrands Windows Defender, Zero-Days in Counter Strike 1.6 clients and Wind Power Reference articles on the topics covered: Facebook Employees had access to hundreds of millions of plain text passwords (https://www.buzzfeednews.com/article/leticiamiranda/facebook-employees-had-access-to-hundreds-of-millions-of) Medtronic Defibrillators Have Critical Flaws, Warns DHS (https://threatpost.com/medtronic-defibrillators-have-critical-flaws-warns-dhs/143068/) Drone Tech creates new type of blended threat (https://threatpost.com/drones-breach-cyberdefenses/143075/) Microsoft ships antivirus for macOS as Windows Defender becomes Microsoft Defender (https://arstechnica.com/gadgets/2019/03/microsoft-ships-anti-virus-for-macos-as-windows-defender-becomes-microsoft-defender/) Zero-Days in Counter-Strike Client Used to Build Major Botnet (https://threatpost.com/zero-days-counter-strike-botnet/142823/) People who live near wind turbines prefer them to solar and fossil plants (https://arstechnica.com/science/2019/03/people-who-live-near-wind-turbines-prefer-them-to-solar-and-fossil-plants/) The WSTR Discussion Series: Youth and mobile devices https://www.blubrry.com/wstr/42940228/the-wstr-discussion-series-youth-and-mobile-devices/ http://www.blubrry.com/wstr/42940228/the-wstr-discussion-series-youth-and-mobile-devices/ Sun, 31 Mar 2019 01:48:35 -0400 <p>The hosts: Jesse Lesperance, Stanley Chan and Kevin Champa discuss the topic of providing youth with mobile devices. What are the motivations and potential ramifications for providing mobile devices to individuals at a young age?</p> The hosts: Jesse Lesperance, Stanley Chan and Kevin Champa discuss the topic of providing youth with mobile devices. What are the motivations and potential ramifications for providing mobile devices to individuals at a young age?

]]> no The hosts: Jesse Lesperance, Stanley Chan and Kevin Champa discuss the topic of providing youth with mobile devices. What are the motivations and potential ramifications for providing mobile devices to individuals at a young age? The hosts: Jesse Lesperance, Stanley Chan and Kevin Champa discuss the topic of providing youth with mobile devices. What are the motivations and potential ramifications for providing mobile devices to individuals at a young age? WSTR: Week of March 24, 2019 https://www.blubrry.com/wstr/42940154/wstr-week-of-march-24-2019/ http://www.blubrry.com/wstr/42940154/wstr-week-of-march-24-2019/ Sun, 31 Mar 2019 01:44:00 -0400 <p>This week hosts Jesse Lesperance, Stanley Chan and Kevin Champa are joined by guest host Robert “Robby” Smith.</p> <p>The topics discussed this week include:</p> <ul> <li><a href="https://www.bleepingcomputer.com/news/security/fema-data-leak-exposes-personal-info-of-23m-disaster-survivors/">Fema Data leak exposes persion info of 2.3M disaster survivors</a></li> <li><a href="https://www.microsoft.com/security/blog/2019/03/25/from-alert-to-driver-vulnerability-microsoft-defender-atp-investigation-unearths-privilege-escalation-flaw/">From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw</a> </li> <li><a href="https://threatpost.com/ftc-demands-broadband-providers-reveal-data-handling-practices/143217/">FTC Demans Broadband providers reveal data handling practices</a></li> <li><a href="https://www.mercurynews.com/2019/03/27/ibm-purged-gray-hairs-and-old-heads-as-it-launched-millennial-corps-lawsuit/">IBM purged ‘gray hairs’ and ‘old heads’ as it launched ‘Millennial Corps’: lawsuit</a></li> <li><a href="https://www.washingtonpost.com/business/2019/03/28/hud-charges-facebook-with-housing-discrimination/?noredirect=on&amp;utm_term=.8115dd5032f6">HUD accuses Facebook of violating housing advertisement laws</a></li> </ul> This week hosts Jesse Lesperance, Stanley Chan and Kevin Champa are joined by guest host Robert “Robby” Smith.

The topics discussed this week include:

]]> no This week hosts Jesse Lesperance, Stanley Chan and Kevin Champa are joined by guest host Robert “Robby” Smith. The topics discussed this week include: - Fema Data leak exposes persion info of 2.3M disaster survivors This week hosts Jesse Lesperance, Stanley Chan and Kevin Champa are joined by guest host Robert “Robby” Smith. The topics discussed this week include: * Fema Data leak exposes persion info of 2.3M disaster survivors (https://www.bleepingcomputer.com/news/security/fema-data-leak-exposes-personal-info-of-23m-disaster-survivors/) * From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw (https://www.microsoft.com/security/blog/2019/03/25/from-alert-to-driver-vulnerability-microsoft-defender-atp-investigation-unearths-privilege-escalation-flaw/) * FTC Demans Broadband providers reveal data handling practices (https://threatpost.com/ftc-demands-broadband-providers-reveal-data-handling-practices/143217/) * IBM purged ‘gray hairs’ and ‘old heads’ as it launched ‘Millennial Corps’: lawsuit (https://www.mercurynews.com/2019/03/27/ibm-purged-gray-hairs-and-old-heads-as-it-launched-millennial-corps-lawsuit/) * HUD accuses Facebook of violating housing advertisement laws (https://www.washingtonpost.com/business/2019/03/28/hud-charges-facebook-with-housing-discrimination/?noredirect=on&utm_term=.8115dd5032f6)