Security, Spoken

Latest Episodes:

The Leaked NSA Spy Tool That Hacked the World Mar 08, 2018

Show notes

An elite Russian hacking team, a historic ransomware attack, an espionage group in the Middle East, and countless small time cryptojackers all have one thing in common. Though their methods and objectives vary, they all lean on leaked NSA hacking tool EternalBlue to infiltrate target computers and spread malware across networks. Leaked to the public not quite a year ago, EternalBlue has joined a long line of reliable hacker favorites.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Spy v. Spy: An NSA Leak Reveals the Agency's List of Enemy Hackers Mar 07, 2018

Show notes

When the still-unidentified group calling itself the Shadow Brokers spilled a collection of NSA tools onto the internet in a series of leaks starting in 2016, they offered a rare glimpse into the internal operations of the the world's most advanced and stealthy hackers. But those leaks haven't just let the outside world see into the NSA's secret capabilities. They might also let us see the rest of the world's hackers through the NSA's eyes.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

In US v. Microsoft, a Decades-Old Law Leaves Few Good Options Mar 07, 2018

Show notes

On Tuesday, the Supreme Court heard oral argument in United States v. Microsoft, a case that many observers believe could have significant ramifications for how cloud computing and other technology companies interact with the US government. If it were up to the justices themselves, however, those implications would end up being short-lived.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Uber 'Surprised' by Totally Unsurprising Pennsylvania Data Breach Lawsuit Mar 06, 2018

Show notes

Uber faces more potential legal consequences for waiting to make public a major hack until a over a year after it happened. The Pennsylvania Attorney General filed a lawsuit against Uber Monday for violating the state's data breach notification law, which says hacks should be disclosed within a "reasonable" time frame. Uber didn't merely keep quiet about the massive breach; it reportedly paid a $100,000 ransom to the perpetrators in exchange for their silence.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Security News This Week: Equifax Found 2.4 Million More People Affected by Its 2017 Breach Mar 06, 2018

Show notes

It was a wild west week in security, as GitHub succeeded in surviving the biggest DDoS attack ever (1.35 terabits per second!) and analysts scrutinized the "false flag" techniques Russian hackers have used in their attacks to shift blame and throw off investigators. Researchers found an unexpected method for executing phishing attacks against some "unphishable" Yubikey two-factor authentication tokens. (Not the one included in WIRED's subscription package.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Facebook Doesn't Know How Many People Followed Russians on Instagram Mar 05, 2018

Show notes

For more than a year, Jonathan Albright has served as something of a one-man General Accounting Office for the tech industry. The researcher at Columbia University's Tow Center for Digital Journalism has dug into the details on how political Twitter trolls manipulate the media, and unearthed an intricate web of conspiracy theory videos on YouTube. Last weekend, while digging through Facebook’s testimony to the Senate Judiciary Committee from last fall, something else caught his eye.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Covert 'Replay Sessions' Have Been Harvesting Passwords by Mistake Mar 05, 2018

Show notes

Yes, websites track your behavior online. But some go much further than what you'd reasonably expect, using so-called session replays to create a detailed log of everything you do and type on a site. And new research shows that in some cases these movie-like recordings are even storing your passwords. Bulk data collection is always a privacy red flag.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Chrome Lets Hackers Phish Even 'Unphishable' Yubikey Users Mar 02, 2018

Show notes

There's no better way to protect yourself from the universal scourge of phishing attacks than with a hardware token like a Yubikey, which stymies attackers even if you accidentally hand them your username and password. But while Yubikey manufacturer Yubico describes its product as "unphishable," a pair of researchers has proven the company wrong, with a technique that allows clever phishers to sidestep even Yubico's last bastion of login protection.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

GitHub Survived the Biggest DDoS Attack Ever Recorded Mar 02, 2018

Show notes

On Wednesday, at about 12:15pm ET, 1.35 terabits per second of traffic hit the developer platform GitHub all at once. It was the most powerful distributed denial of service attack recorded to date—and it used an increasingly popular DDoS method, no botnet required. GitHub briefly struggled with intermittent outages as a digital system assessed the situation. Within 10 minutes it had automatically called for help from its DDoS mitigation service, Akamai Prolexic.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected