- 1 Paul's Security Weekly Episode #665 - September 03, 2020
- 2 1. Lovable Security: Be a Data Custodian, Not a Data Owner - 06:00 PM-06:45 PM
- 3 2. Cybersecurity & Patient Safety - 07:00 PM-07:45 PM
- 4 3. Slack RCE, Tesla Dodges Ransomware, & Cisco Router 0-Day - 08:00 PM-09:30 PM
- 4.1 Announcements
- 4.2 Description
- 4.3 Hosts
- 4.4 Doug White's Content:
- 4.5 Joff Thyer's Content:
- 4.6 Larry Pesce's Content:
- 4.7 Lee Neely's Content:
- 4.8 Matt Alderman's Content:
- 4.9 Paul Asadoorian's Content:
- 4.10 Tyler Robinson's Content:
Paul's Security Weekly Episode #665 - September 03, 2020
Subscribe to all of our shows and mailing list by visiting: https://securityweekly.com/subscribe
1. Lovable Security: Be a Data Custodian, Not a Data Owner - 06:00 PM-06:45 PM
BSides Boston is back in action for their 10 year anniversary! The conference will be held on Saturday, September 26th & tickets are only $10! You can get yours at https://bsidesbos.org! Some of the Security Weekly team will be in our own channel on the BSides Boston Discord server answering questions and possibly doing some contests!
Loveable Security: Flee's approach to cybersecurity is that is should be "loveable." He thinks cybersecurity perpetuates a myth of an elite, isolated team of stealth insiders who are seen as enforcers, instead of as enablers who accelerate innovation by removing obstacles. Data Privacy + CCPA: Flee believes that tech companies should operate as data custodians, instead of data owners, and that CCPA should be the bare minimum that companies do to ensure data privacy.
Fredrick "Flee" Lee
Fredrick "Flee" Lee is CSO at Gusto
Fredrick "Flee" Lee is the Chief Security Officer at Gusto, where he leads information and physical security strategies including consumer protection, compliance, governance and risk. Before Gusto, Lee spent more than 15 years leading global information security and privacy efforts at large financial services companies and technology startups, most recently as Square's Head of Information Security. He previously held senior security and privacy roles at Bank of America, NetSuite and Twilio. Lee was born and raised in Mississippi and holds a bachelor's degree in computer engineering from the University of Oklahoma.
2. Cybersecurity & Patient Safety - 07:00 PM-07:45 PM
Security Weekly is ramping up our webcast/technical training schedule for the rest of 2020! In September you can Learn How to Extend the Enterprise Network for Remote Workers and Protect Your Home Network, Find out Why Traditional Data Security Can’t Be Zero Trust, and Learn how to reduce the blast radius of your cloud infrastructure. Visit https://securityweekly.com/webcasts to see what we have coming up! Or visit securityweekly.com/ondemand to view our previously recorded webcasts!
Successful attacks on healthcare entities are steadily increasing. Sophisticated criminals and nation states are focusing more attention on healthcare than ever before. The main goals are to steal money, data and intellectual property, execute ransomware, and attack critical infrastructure. Why do the hackers continue to succeed and what are some effective strategies and tactics to combat this scourge of ransomware?
An Insider Look at Cybersecurity - registration required - https://info.meditech.com/webinar-an-insider-look-at-cybersecurity-0
Justin Armstrong is responsible for the security of MEDITECH applications and platforms, including coordinating critical updates to MEDITECH software and communicating with customers when questions arise about MEDITECH’s security stance. Justin stays up to date on evolving security standards and regulations, best practices, threats, and software vulnerabilities by remaining active in the security community inside and outside of MEDITECH. He is a Certified Information Systems Security Professional (CISSP) and a proud member of the FBI’s InfraGard program as well as the Cyber Health Working Group (CHWG), (ISC)2, ISSA, OWASP, EHRA Privacy and Security Workgroup, and the H-ISAC.
Joff Thyer - Security Analyst at Black Hills Information Security
3. Slack RCE, Tesla Dodges Ransomware, & Cisco Router 0-Day - 08:00 PM-09:30 PM
Join the Security Weekly Mailing List for webcast/virtual training announcements and to receive your personal invite to our Discord server by visiting https://securityweekly.com/subscribe and clicking the button to join the list!
Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!
The NSA Makes Its Powerful Cybersecurity Tool Open Source, The bizarre reason Amazon drivers are hanging phones in trees near Whole Foods, Elon Musk Confirms Serious Russian Bitcoin Ransomware Attack On Tesla, Foiled By The FBI, Attackers are exploiting two zero-day flaws in Cisco enterprise-grade routers, and the FBI is investigating after an alarmed pilot tells the LAX tower: We just passed a guy in a jet pack!
Doug White's Content:
- IT Director gets jail time for selling government Cisco gear on ebay.
- Hackers are exploiting a flaw affecting 350000 Wordpress sites.
Joff Thyer's Content:
Larry Pesce's Content:
Lee Neely's Content:
- Texas University Expels China-Funded Visiting Scholars Amid US-China Tensions a Texas university has expelled visiting scholars who were funded by a Chinese government scholarship program.
- Miami-Dade Public Schools' remote learning platform endures days of cyber attacks The Miami Herald reported that the school district — the country's fourth largest — was hit with 12 cyber attacks Wednesday morning, some local and some from outside the United States. Attack overwhelmed servers, and they are implementing mitigation strategies.
- State voter registration systems have not been hacked, officials say Federal and state officials said Tuesday that despite fears to the contrary, there's no evidence that any state's voter registration database has been hacked this year.
- Lemon_Duck Cryptominer Malware Now Targets Linux Devices The Lemon_Duck cryptomining malware has reportedly been updated to allow attackers to compromise Linux systems using SSH brute-force attacks in order to exploit Windows systems vulnerable to the SMBGhost vulnerability (CVE-2020-0796) and infect servers running Hadoop and Redis.
- New APT Pioneer Kitten Linked to Iranian Government The Advanced Persistent Threat (APT) group known as Pioneer Kitten, believed to have ties to the Iranian government, has been gaining and maintaining access on North American and Israeli targeted networks. Also known as "Fox Kitten"- they have been seen scanning for publicly disclosed vulnerabilities in VPN applications.
- Former Cisco Employee Pleads Guilty to Hacking, Damaging Company Systems Last week in a federal court in San Jose, Calif., former Cisco employee Sudhish Kasaba Ramesh, 30, pleaded guilty to intentionally accessing a protected computer without authorization and causing damage five months after resigning from the company in April 2018.
- Russian Internet Trolls Hired U.S. Journalists to Push Their News Website, Facebook Says
- CISA Alert AA20-245A Technical Approaches to Uncovering and Remediating Malicious Activity Alert highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
Matt Alderman's Content:
- CyberRisk Alliance Acquires Security Weekly - The link will work on Tuesday, 9/8/2020, at 10 AM EDT
Paul Asadoorian's Content:
- I Bought a New Router. It Told Me I Was Hacked.
- The Evolution of Phishing: Welcome "Vishing" | SecurityWeek.Com
- The NSA Makes Its Powerful Cybersecurity Tool Open Source
- The bizarre reason Amazon drivers are hanging phones in trees near Whole Foods
- Elon Musk Confirms Serious Russian Bitcoin Ransomware Attack On Tesla, Foiled By The FBI
- FBI investigating after alarmed pilot tells LAX tower: We just passed a guy in a jet pack
- Exclusive: Trojan apparently infects NCR, posing possible supply-chain risk
- Maximum Lifespan of SSL/TLS Certificates is 398 Days Starting Today
- Avoid this text message scam about package deliveries
- Attackers are exploiting two zero-day flaws in Cisco enterprise-grade routers - Help Net Security
- Critical vuln that lets miscreants hijack computers via Slack? *Sucks in air* We'll give you $1,750 for it
- FBI worried that Ring doorbells are spying on police
- Hackers tricked Apple into approving malicious Adobe Flash Player update Graham Cluley
- Persistent WordPress User Injection
- Cross-Origin Resource Sharing (CORS) and the Access-Control-Allow-Origin Header | Acunetix