Breach Trio – WSWiR Episode 118

Healthcare, UPS, and US Nuclear Organization Breached

Need to learn the latest security news so you can figure out how to protect your network from evolving threats? Well, this weekly video series will help. Every Friday I summarize the biggest security stories and share some advice in a video, as well as compile a list of other important stories below. Subscribe to this blog and the YouTube channel to follow along.

This week’s episode is all about breaches. Three organizations disclosed major network and data breaches this week; a healthcare record management company, UPS, and the US Nuclear Regulator Commission. Today’s video covers those breaches, and more importantly explores what we can learn about them. Watch below.

As an aside, sorry the episode is going up a bit late. Note to the video producers out there… Always check that your microphone is on so you don’t have to shoot the whole thing twice. Oops! Have a great weekend.

(Episode Runtime: 10:16 plus a optional extra)

Direct YouTube Link: https://www.youtube.com/watch?v=oDHCnCNBq7w

Episode References:

• Chinese hackers allegedly stole 4.5M US health records – Gizmodo
  • Government posting announcing the breach – Sec.gov
  • Security group says attack due to Heartbleed issue – Gigaom
• US Nuclear Regulatory Commission (NRC) hacked three times in three years – NextGov
• UPS stores suffer payment information data breach – Phys.org
  • UPS security alert and affected stores – UPS

Extras:

• My silly #ALSIceBucketChallenge video (donate to ALSA.org) – YouTube
• More on traffic light hacking research (same wireless sensor issue) – Time
• Ad-hijacking malware infects 76k jailbroken iOS devices – IT Pro
  • Virus Bulletin’s AdThief PDF – Virus Bulletin
• Latest Reveton ransomware variant now steals passwords – Computer World
• Horrible Facebook criminals already exploiting Robin Williams’ death – The Hacker News
• Chinese hackers allegedly steal data from MH370 investigators computers – Business Insider
• UCSD researchers find (phsycial) security flaws in backscatter X-ray scanners – Phys.org
• Figure out what PII hackers may have of yours based on recent breaches – CNN
• Another Cryptolocker copycat called TorrentLocker – Security Week
• Researchers create new “Binder” that can attach malware to legit downloads [PDF] – Packet Storm
• Tesla to hire 30 hackers to help make their computer filled cars safer – Computing
• Be careful of “Ebola” being used to lure you to malware – CBR Online
• Site created to shame web companies that don’t encrypt traffics – HTTP Shaming Tumbler
• Israel dealt with cyber attacks during physical attacks – Business Insider
• New report illustrates how NSA intercepts and hijacks network traffic – Citizen Lab
• Recent 300Gbps DDoS due to unpatched flaw on 100k server – Computer World
• Judge questions felony charges for DoS attacks – The Register
• Researcher finds iOS and app flaws that allow links to force phone calls – Algorithm.dk
• Researchers analyze firmware from thousands of IoT devices, and find lots of 0day – The Register

— Corey Nachreiner, CISSP (@SecAdept)

Share This: