Posted on November 20, 2009 by datasecurityblog
EXCLUSIVE – For Friday November 20th, we depart from our regular format for those with an advanced understanding of information security technologies.
This is part two of two special editions featuring technical conversations with newsmakers on new counter measures to fight web drive-by downloads. Part two features Louis Hughes, Chairman and CEO of InZero Systems; [...]
Filed under: Annoucements, Exclusive, Interview Only Edition, Podcast, darkweb, web server security | Tagged: Drive-by download, endpoints, InZero Systems, web application security | Leave a Comment »
Posted on November 5, 2009 by datasecurityblog
For Thursday November 5th, we depart from our regular format for those with an advanced understanding of information security technologies. This episode is a one-topic special edition, providing coverage of a major man-in-the-middle flaw discovered in the SSL protocol (see, we told you it was for security geeks).
We will return to our regular format of [...]
Filed under: Annoucements, Breach, Exclusive, darkweb | Tagged: SSL, Marsh Ray, PhoneFactor | 1 Comment »
Posted on September 30, 2009 by datasecurityblog
Reporting from the ISACA Security and Risk Management Conference in Las Vegas, we have breaking security news this morning.
Organized cyber criminals have added a new damaging element to an already viscous cyber attack. Yuval Ben-Itzhak, CTO of Finjan spoke by phone with the Data Security Podcast about a frightening new twist to the surge of [...]
Filed under: Annoucements, Breach, Conference Coverage, Court Cases, Exclusive, Vulnerabilities, criminal forensics, darkweb, ediscovery, web server security | Tagged: darkweb, ediscovery, Drive-by download, XSS, web application security | Leave a Comment »
Posted on August 24, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law…..(plus or minus five)
On this week’s program:
* The security lessons from Heartland data breach – what the newscasters didn’t tell you. Details on our Tales from The Dark Web segment.
* What if you discovered a web security flaw and their customer service staff ignored your [...]
Filed under: Annoucements, Breach, Court Cases, Exclusive, Podcast, Vulnerabilities, criminal forensics, darkweb, ediscovery, web server security | Tagged: American Express, Ameriprise, EMP, Heartland, ReportSecurityFlaws.com, SQL Injection, TJX | Leave a Comment »
Posted on August 4, 2009 by datasecurityblog
30 minutes every week on data security, privacy, and the law….(plus or minus five)
On this week’s program:
SPECIAL DEFCON17 Coverage From Las Vegas
* Is YOUR tax return sitting out there on the Internet? Maybe not yours, but Larry Pesce tells us about the tax returns — and the other stuff he found without much [...]
Filed under: Breach, Conference Coverage, Exclusive, Podcast, Vulnerabilities, darkweb, eMail Security, web server security | Tagged: darkweb, DefCon17, Drive-by download, lockpicking, MiFI, RFID, Smart Grid, SSL, two factor, web application security, WiFi, XSS | Leave a Comment »
Posted on August 3, 2009 by datasecurityblog
The Data Security Podcast went to DefCon this past weekend. DefCon is the world’s largest hacker conference. We have team coverage in Episode 64, scheduled to post in the next 24 hours. Coverage will include:
-> Can you really trust an SSL Encryption Certificate?
-> Is YOUR web site on the list vulnerable to common cross site [...]
Filed under: Exclusive, Podcast | Tagged: darkweb, DefCon, web application security | Leave a Comment »
Posted on June 14, 2009 by datasecurityblog
30 minutes each week on data security, privacy, and the law…. (plus or minus five)
On this week’s program:
Is Al-Qaida getting funding by stealing minutes from business phone systems?
$10,000 was paid out to the security researchers that uncovered the flaws in StrongWebMail. Could your email be vulnerable to that same attack? A conversation with StrongWebMail’s top [...]
Filed under: Breach, Business Continuity, Court Cases, Exclusive, Podcast, Vulnerabilities, criminal forensics, darkweb, ediscovery, web server security | Tagged: darkweb, ediscovery, web application security, HIPAA, EFF, StrongWebMail | Leave a Comment »