InfoSec Daily Podcast Episode 837 for February 1, 2013. Tonight's podcast is hosted by Geordy Rostad, Boris Sverdlik, aricon and Justin Brown
Announcements
ShmooCon
When: February 15-17, 2013
Where: Washington DC
http://shmoocon.org
Spridel is going, Them is going, IronGeek is going, Bill is going.
CarolinaCon
When: March 15-17, 2013
Where: Raleigh, NC
CactusCon
When: March 22, 2013
Where: Tempe, AZ
Cost: Free
http://www.cactuscon.com/
Call for Sponsors is Open
CFP closes January 31
BSidesROC
When: April 6, 2013
Where: Cathedral Hall inside the Rochester Auditorium Center
http://www.bsidesroc.com/speakers/
BSidesPuertoRico
When: April 5-7, 2013
Where: San Juan, Puerto Rico
http://bsidespr.org/
CFP is open
Cost: TBD.
BSides Orlando
When: April 13-14, 2013
Where: Orlando, FL
http://bsidesorlando.com/
CFP is open http://www.securitybsides.com/w/page/61141960/BSidesOrlandoCFP
AIDE 2013
When: April 15-19, 2013
Where: Huntington, WV
http://appyide.org
CFP is open and plain text emails Bill (dot) Gardner (at) marshall (dot) edu
Charlotte ISSA Summit
When: April 17 Training (Hands on Course)
When: April 18 Summit
https://www.charlotteissa.org/2013%20Annual%20Summit
CFP is open
Cost: $20 for members, $50 for partners, and $80 for Non-members
BSidesLondon
@bsideslondon
When: April 24, 2013
Where: London. England
http://www.securitybsides.com/w/page/59132020/BSidesLondon-2013
https://docs.google.com/spreadsheet/viewform?formkey=dGYyQzA0N1hlY2J0cDEwS2RYcUk5WFE6MQ#gid=0
Thotcon
When: April 25-27, 2013
Where: Chicago, IL
http://www.thotcon.org/schedule.html
BSidesMemphis
When: May 18, 2013
Where: Southwest Tennessee Community College
http://www.securitybsides.com/w/page/59761145/BsidesMemphis2013
BsidesLV 2013 “Science Fair”
http://blog.uncommonsensesecurity.com/2012/08/the-bsides-las-vegas-2013-innovation.html
DerbyCon 3
When: September 25-29, 2013
Where: Louisville, KY
http://derbycon.com
Call for Training is OPEN!
Tickets and CFP opens April 1, 2013
For easy use of the Amazon Affiliate link, use AffiliateFox. Configure it for amazon.com with infdaipod05-20, and for amazon.co.uk with infdaipod-21. Thanks for supporting the podcast!
Stories:
Source: http://www.theregister.co.uk/2013/01/31/java_security_update/
An application developer reports that the latest Java 7 update "silently" deletes Java 6, breaking applications in the process.
Java 7 update 11 was released two weeks ago to deal with an unpatched vulnerability which had gone mainstream with its incorporation into cybercrook toolkits such as the Blackhole Exploit Kit in the days beforehand. Attacks were restricted to systems running Java browser add-ons.
But Oracle's response appears to have caused some collateral damage.
JNBridge, which provides Java and .NET interoperability tools, reports that customers of software providers who use its technology came a cropper in cases where users had applied the latest Java update (Java 7u11). The software developer blogged about the issue here.
…
Source: http://www.theregister.co.uk/2013/02/01/symantec_responds_nyt_apt/
Symantec has taken the unusual step of commenting on a story about a customer, issuing a robust statement denying its anti-virus products were to blame for sophisticated targeted attack on the New York Times.
The Gray Lady revealed yesterday that it had been persistently attacked for four months by China-based cyber insurgents. They used classic APT-style techniques to breach defences before lifting New York Times staff passwords in an attempt to find out more information on an expose run by the paper into outgoing Premier Wen Jiabao.
…
Source: http://news.cnet.com/8301-1009_3-57566995-83/wall-street-journal-china-hackers-hit-us-too/
The Wall Street Journal said today that it's been the target of Chinese hackers stemming from its coverage of China, echoing reports from other news organizations.
Hackers infiltrated the newspaper's computer system through its Beijing bureau in order to monitor the paper's coverage of China, according to the report. Paula Keve, chief spokeswoman for the Journal's parent company, Dow Jones, issued a statement that said the hacks "are not an attempt to gain commercial advantage or to misappropriate customer information." The company completed a "network overhaul" on Thursday to increase security.
…
Source: http://allthingsd.com/20130201/twitter-hacked-250000-user-accounts-compromised/
Twitter disclosed on Friday evening that its systems had been attacked in the past week by an unidentified group of hackers. As a result of the the attack, the hackers may have had access to the usernames, email addresses and other sensitive information of nearly a quarter of a million twitter users.
“This week, we detected unusual access patterns that led to us identifying unauthorized access attempts to Twitter user data. We discovered one live attack and were able to shut it down in process moments later,” the company said in a blog post. “However, our investigation has thus far indicated that the attackers may have had access to limited user information – usernames, email addresses, session tokens and encrypted/salted versions of passwords – for approximately 250,000 users.”
On Friday evening, Twitter sent out emails to those users whose accounts may have been compromised, notifying them that the company had automatically reset their user passwords, and that they would need to create a new password in order to access the service again.
…
[END]
