WatchGuard Security Week in Review: Episode 16

Lots of New Malware, Microsoft Patch Day, and Oracle Updates

This week’s security summary podcast includes information about Microsoft’s upcoming Patch Day, stories about three interesting new malware variants, and updates to a few stories from previous episodes. Watch the video below for the details.

If you’d prefer to read, see the “Reference” section for links to all these security stories. I’ve seen a few late-breaking stories since I shot this week’s video, so be sure to check out those updates below. Also, don’t forget to share your thoughts or feedback in the comments section. (Episode Runtime: 8:37)

Direct YouTube Link: http://www.youtube.com/watch?v=guqTuUatEwc

Episode References:

• Microsoft’s May Patch Day notification – WatchGuard Security Center
• Interesting Malware:
  • Cross-platform Java malware – ZDNET
  • U.S. Dept. of Justice ransomware – ThreatPost
  • Android drive-by download malware (NotCompatible) – Ars Technica
    • Lookout’s analysis of NotCompatible – Lookout Blog
• Updates to Past Stories:
  • VMware source code
    • Attacker plans to release VMware source Saturday – Computing.co.uk
    • UPDATE: VMware releases emergency patches related to source leak – VMware
  • Flashback Updates
    • Flashback variant uses Twitter C&C – Security Week
    • Oxford University’s OxCERT talks about Flashback – OxCERT
  • Oracle Patch Day update fixes zero day exploit – Oracle
• LATE BREAKING UPDATE
  • Adobe releases critical Flash patch for zero day exploit – Adobe

— Corey Nachreiner, CISSP (@SecAdept)