WatchGuard Security Week in Review: Episode 38 – miniFlame

Oracle Updates, miniFlame, and Steam Hack

There was once a time when I had to subscribe to many obscure mailing lists, lurk on underground forums and channels, and visit a ton of buried pages at vendor sites to learn about the latest vulnerabilities, exploits, and breaches. That’s no longer the case.

Today, mainstream media reports on more information and network security news every week than most IT administrators can keep up with. Thus, this weekly security news round-up video. We consolidate and concentrate all the most important security stories into one digestible video each week—throwing in some practical security tips along the way.

This week’s episode includes security updates from Oracle and Apple, a new advanced nation-state threat called miniFlame, and a few fun security stories involving popular gaming platforms and zombie apocalypses. Watch the video below for quick highlights, and check out the Reference section for more details.

Thanks for watching, and keep frosty out there.

(Episode Runtime: 11:11)

Direct YouTube Link: http://www.youtube.com/watch?v=hCYaXy5oUnY

Episode References:

• Software Updates:
  • Oracle CPU patch, and related Apple OS X update – WGSC
  • Oracle October CPU advisory – Oracle
  • Oracle October Java update – Oracle
  • Apple OS X Java update – Apple
    
• Whitehouse finds no proof of backdoor in Huawei devices – Reuters
• Kaspersky’s finds new APT threat called miniFlame – Securelist blog
  
• Deep miniFlame analysis – Securelist blog
• UK will not extradite NASA hacker (Gary Mckinnon) – Wired
• ReVuln finds zero day flaws in Steam – ReVuln
• The Walking Dead video streams hide malware – Softpedia

• Extra Stories
  • Kaspersky to release a secure OS for ICS systems – The Register
  • Github DDoS Attack – ZDNet
    
  • Hackers can kill with pacemaker vulnerabilites – The Week
  • More DDoS attacks against banks – ZDNet
  • iOS 6 tracking you again (but you can disable) – Ars Technica
  • Cross platform attack infects mobiles and PCs – HNS

— Corey Nachreiner, CISSP (@SecAdept)

Share This: