Lots of Patches, Celebrity Hacks, and a SSL/TLS Weakness
If you’re anything like the average IT professional, you’re probably too busy putting out proverbial IT helpdesk fires, and installing new business IT solutions to spend much time each week staying on top of the latest security news and threats. That’s where we come in! For a quick recap of the biggest information and network security news from the week, check out the YouTube video below.
In this episode, I cover a ton of software updates from the week (it was Patch Day after all), the latest celebrity hack incident, an ironic breach of a security organization’s web site, and yet another weakness in the SSL/TLS encryption protocol. I even share a tip on how webmasters can learn to recover from web site hacks.
Enjoy the episode, and share your thoughts, suggestions, and questions in the comment section below. You can also find more details about these stories in the Reference section. Thanks for watching, and enjoy your St. Patty’s Day weekend.
(Episode Runtime: 11:00)
Episode References:
- Microsoft Patch Day March 2013 - WGSC
- Adobe Flash Update March 2013 - WGSC
- Apple Updates OS X and Safari – Apple
- Attacker leaks PII for many celebrities – Hollywood Reporter
- Facebook hacker finds another OAuth vulnerability – Nir Goldshlanger blog
- NIST NVD web site breached due to Cold Fusion issue - InfoSecurity
- New weakness found in SSL/TLS RC4 implementation [Slides PDF] - Forbes
- Pro-Tip: Google teaches webmasters how to recover from hacks - Google
— Corey Nachreiner, CISSP (@SecAdept)
