Gartner IT Expo – WSWiR Episode 80

Two IE Zero Days, iOS vs. Android, and DNS Hijacking

Today’s weekly InfoSec video comes to you on the road, from Gartner’s IT Expo Symposium.

WatchGuard had a busy week here in Orlando. I spoke on Data Security; we announced and released a new visibility tool called Dimension; and we released XTM Fireware 11.8, which includes a new data loss prevention (DLP) service.

Nonetheless, the show must go on. This week’s quick episode includes info on the latest Microsoft Patch Day, one humorous highlight from the show, a story about a bunch of hijacked security sites, and even a bit of good news. Click play below for the details, and have a great weekend!

(Episode Runtime: 7:51)

Direct YouTube Link: http://www.youtube.com/watch?v=jGLG-RsUfxM

Episode References:

• Gartner’s IT Expo Symposium
  • Google’s executive chairman says Android is more security than iOS – ZDNet
  • WatchGuard announces Dimension visibility tool – WatchGuard
    • Sign-up for Dimension demo for a chance to win 3D printer – WatchGuard
  • WatchGuard ships DLP service for XTM – WatchGuard
• Microsoft Patch Day
  • Microsoft October Patch Day Summary – WGSC
  • IE update fixes two zero day flaws – WGSC
  • Consolidated Microsoft Windows alert – WGSC
  • Consolidated Microsoft Office products alert – WGSC
• Adobe Patch Day
  • Adobe updates Reader XI and RoboHelp – WGSC
• Palestinian attackers hijack security sites – Softpedia
  • DNS provider responsible for the hijack – Softpedia
• Reports suggest Blackhole exploit creator arrested – Techworld

Extras:

• Cisco releases security updates for ASA firewall – ComputerWorld
• Microsoft pays first 100K bounty for memory protection bypass technique – Threatpost

— Corey Nachreiner, CISSP (@SecAdept)