GOZeus Down – WSWiR Episode 110

NSA Facial Recognition, OpenSSL Patch, and Zeus Takedown

It’s that time again. If you have a hankering for the latest InfoSec news, this is the place to get it. You can watch me summarize all of the week’s biggest security stories in one short video.

Today I talk about the NSA scanning the Internet for our pictures, a big OpenSSL security update, and the latest botnet takedown that puts a damper on GOZeus and Cryptolocker. Watch the video for the scoop, and check out the Extras below for other news.

Hope you have a great weekend, and stay safe out there.

(Episode Runtime: 8:33)

Direct YouTube Link: https://www.youtube.com/watch?v=gp46hzT6G1E

Episode References:

• Microsoft to release seven bulletins next week – Microsoft
• Snowden Leak: NSA scanning the web using facial recognition – NYTimes
• OpenSSL Updates fix six vulnerabilities – OpenSSL
  • MitM discoverer’s blog post on CCS Injection – Lepidom
  • WatchGuard’s post on the OpenSSL update – WGSC
• Global task force takes down GOZeus, scan and clean your computer now – The Guardian
  • DoJ’s official statement on the takedown – DoJ
  • Microsoft helped too – Microsoft

Extras:

• 1. Latest Cupid OpenSSL flaw details (heartbleed attack on wireless EAP) – Ars Technica
  2. The UK Queen says hackers should get life – The Guardian
  3. Sydney teen falsely arrested for SWATing – Naked Security
  4. Some “Get Safe Online” sites offer bad security advice – Ars Technica
  5. GnuTLS suffers serious buffer overflow vulnerability – Radare Blog
  6. Soraya malware targets POS systems – SC Magazine
  7. Another white hat researcher jumps on the car hacking bandwagon – Network World
  8. Bad guys use UDP a lot to attack and hide malicious activity – Network World
  9. Security flaws found in WordPress SEO plugins – PCWorld
  10. Car hacking short documentary – Vice
  11. Google launches an online game to help find web application security researchers – The Register
  12. Check out Sabu’s (Anonymous hacker) chat logs with Brazilian hackers – The Guardian
  13. Hacking office IP telephones (hacking IoT) – Wired
  14. Microsoft will finally patch the 0day ZDI disclosed – ThreatPost

— Corey Nachreiner, CISSP (@SecAdept)

Share This: