January 25, 2013 
Red October, Cisco WLAN Updates, and Expelled Hacker
Welcome to another “on the road” edition of WatchGuard Security Week in Review, the video podcast dedicated to summarizing the biggest InfoSec stories each week. This week’s episodes covers a Cisco wireless controller security update, Kaspersky’s investigation into the Red October cyber-espionage campaign, and the controversy surrounding an expelled “white hat” hacker. For more details on those stories and others, watch the short video below. You can also check out the ?Reference section for more details on any of these topics.
(Episode Runtime: 6:48)
Direct YouTube Link: http://www.youtube.com/watch?v=Q08Gcu_7EXo
Episode References:
- Fake Java update installs malware - CNET
- Sony fined 250,000 pounds for PSN breach - BBC
- Kaspersky’s Red October investigation
- Red October Campaign blog post - Securelist blog
- Red October details (part 1) - Securelist blog
- Red October details (part 2) - Securelist blog
- Red October Java exploit vector - Securelist blog
- Cisco wireless controller security update - Cisco
- Hacker Expelled for reporting College web application vulnerability - Gizmodo
- Web application company offers expelled hacker a job - The Globe and Mail
- EXTRAS
- Researchers report more 0day in Java - Full Disclosure
- 0day flaw in Cisco Linksys routers – Defensecode blog
- Latest web server attacks backdoor SSH - Computer World
- Barracuda appliances contain a backdoor - Sec-Consult
- Researchers report more 0day in Java - Full Disclosure
I haven’t checked in here for some time because I thought it was getting boring, but the last several posts are good quality so I guess I will add you back to my daily bloglist. You deserve it my friend :
I guess being called boring shouldn’t put a smile on my face.. yet it did. I’m glad the latest posts weren’t as boring as the previous ones. In any case, if you want to share any details on what was boring, and what isn’t, I’ll try to concentrate on the good stuff.