Apple Flaws and Cyber Sanctions – WSWiR Episode 163

Are you interested in the latest security news, but have no time to source it yourself? No problem! Let our weekly video summarize the latest for you in ten minutes or less. If you want to watch the video Friday, subscribe to our YouTube channel. Otherwise, we’ll post the weekly episode on the first day of the following week.

This week’s “traveling” episode included a story about US cyber sanctions, two different threats to Apple products, and news of a security breach to Mozilla’s bug tracking system. Watch below, and check out the references for more of last week’s infosec news.

(Episode Runtime: 7:55)

Direct YouTube Link: https://www.youtube.com/watch?v=sJ993RVG48s

EPISODE REFERENCES:

• Monday: Cyber Espionage Sanctions – Daily Security Byte EP.134
  • Article on Obama admin’s rumored cyber sanctions – The Washington Post
  • US considering sanction against Russia as well – Reuters
• Tuesday: iOS KeyRaider – Daily Security Byte EP.135
  • KeyRaider iOS malware targets jailbroken devices – PC World
  • Article on iCloud pirates stealing thousands of accounts – The Register
  • Original researcher blog post on iOS KeyRaider threat – Palo Alto Networks
  • How to tell if you’re a KeyRaider victim – BGR
• Wednesday:
  • N/A
• Thursday: OS X Keychain Broken – Daily Security Byte EP.136
  • Beirut researchers disclose zero day OS X Keychain vulnerability – Engadget
  • Adware caught using the Keychain vulnerability – Ars Technica
  • Attackers may have exploited this a far back as 2011 – Ars Technica
• Friday: Mozilla Hacked – Daily Security Byte EP.137
  • Article about attackers spying on Mozilla bugs – The Register
  • Mozilla’s FAQ on their bugzilla network breach [PDF] – Mozilla

EXTRAS:

• Researcher finds flaws in Siemen’s ICS software – The Register
• Smart phones shipping with malware pre-installed – SC Magazine
• Sony reaches a settlement with employees over hack – CNET
• French hacker pwns road signs – The Register
• How to disable the Win10 “keylogger” – PC World
• Gozi malware author pleads guilty – Ars Technica
• Leaked docs shows how NSA treats 0day – The Register
• Match.com had malicious ads – Tech World
• A new way to remember complex passwords – PC World
• Browsers shunning RC4 – SC Magazine
• My HTTPS interfaces suffer SSL flaw – Ars Technica
  • Original research paper [PDF] – Redhat

— Corey Nachreiner, CISSP (@SecAdept)

Share This: