Cyberattack Lateral Movement Explained

Lightly edited transcript of the video above Hi there, Mark Nunnikhoven from Trend Micro Research, I want to talk to you about the concept of lateral movement. And the reason why I want to tackle this today is because I've had some conversations in the last few days that have really kind of hit...

On xDedic, a Flash Zero Day, Facial Recognition, and More

Mike Mimoso and Chris Brook discuss the news of the week, including a password issue at Github, the xDedic marketplace, another Flash zero day, and how the poorly the FBI is doing with facial recognition software. Download: ThreatpostNewsWrapJune172016.mp3 Music by Chris Gonsalves...

Martijn Grooten on the Anti-Virus Industry, This Year's Virus Bulletin Conference, and More

Virus Bulletin’s Martijn Grooten joins Ryan Naraine on the podcast to talk about the changing face of the anti-virus industry, the emergence of APTs as a priority for anti-malware researchers and the highlights of the 25th annual VB Conference. Download: martijngrooten10915.mp3 Music by Chris...

Dennis Fisher and Mike Mimoso Discuss Black Hat, Android Security, and the Oracle Debacle

Dennis Fisher and Mike Mimoso talk about the news from Black Hat, car hacking, the Mary Ann Davidson blog post, and the Android security mess. Download: digitalunderground216.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso Discuss the Hacking Team Hack and the OPM Breach

Dennis Fisher and Mike Mimoso discuss the Hacking Team hack and the continued fallout from the OPM breach. Download: digitalunderground212.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso on the End of the Patch Tuesday Era, Section 215 and More

Dennis Fisher and Mike Mimoso talk about the end of the Patch Tuesday era for most Microsoft customers, the appeals court ruling on Section 215 metadata collection and Dennis’s idea for a security industry commission. Download: digitalunderground201.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso Discuss the MySQL bug, OpenSSL and the House Crypto Hearing

Dennis Fisher and Mike Mimoso discuss the post-RSA news, including the MySQL bug, the progress of the OpenSSL overhaul and the wildly entertaining House hearing on crypto backdoors. Download: digitalunderground200.mp3 Music by Chris Gonsalves...

PODCAST: News from RSA 2015

Dennis Fisher, Mike Mimoso and Brian Donohue discuss the news of the week from the RSA Conference. Download: digitalunderground198.mp3 Music by Chris Gonsalves Flickr photo via @jf10...

Dennis Fisher and Mike Mimoso Discuss the Apple and Adobe Zero Days, and More

Dennis Fisher and Mike Mimoso talk about all of the zero days that were dropped this week on Adobe and Apple, the Oracle backdoor drama and the upcoming Kaspersky Security Analyst Summit in Cancun. Then, Dennis calls Brian Donohue to talk about the wonders of the Blackhat movie and Brian’s dog...

Podcast Discussing WordPress Security, Anti-Surveillance

Dennis Fisher and Mike Mimoso talk about the news from the past week, including the out-of-band Microsoft patch, the compromised Joomla and WordPress plug-in attack campaign and the Detekt anti-surveillance tool.​ Download: digitalunderground172.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso Discuss All Things Apple Security, Home Depot and Microsoft

Dennis Fisher and Mike Mimoso talk abut the crazy news of the last couple of weeks, the Apple privacy and Apple Pay announcements, the details of the Home Depot breach and the end of the Microsoft Trustworthy Computing unit. Download: digitalunderground167.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso Discuss Edward Snowden, NSA and the new OpenSSL Vuln

Dennis Fisher and Mike Mimoso discuss the changes in the year since the first stories broke regarding Edward Snowden and the NSA and the new OpenSSL vulnerability.​ Download: digitalunderground155.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso Discuss Heartbleed, Apple's Patches and the DBIR Report

Dennis Fisher and Mike Mimoso discuss the Apple OSX and iOS patches, the continuing OpenSSL Heartbleed soap opera and the Verizon DBIR report. Download: digitalunderground152.mp3...

Matthew Green on the NSA and Crypto Backdoors

Dennis Fisher talks with Matthew Green of Johns Hopkins University about the paper he co-authored on the Extended Random extension for Dual EC DRBG and whether it could be considered a backdoor. Download: digitalunderground149.mp3...

Costin Raiu on the Intricacies of the miniDuke Malware Campaign

With Dennis Fisher out of pocket at the RSA Conference in San Francisco, Ryan Naraine hijacks the Digital Underground podcast and gets on the phone with Kaspersky Lab research guru Costin Raiu to talk about the intricacies of the miniDuke malware campaign. Download: digitalunderground113 Subscrib...

Mike Mimoso on the Evolution of Security

Dennis Fisher talks with Mike Mimoso, the new editor of Threatpost, about his decade covering security, how the industry and threat landscape have changed and how security researchers are like Bill Parcells. Download: digitalunderground104 Podcast audio courtesy of sykboy65 Subscribe to the Digit...

Bruce Schneier on Liars and Outliers

Dennis Fisher talks with cryptographer and author Bruce Schneier about his new book, Liars and Outliers, the role of trust in society and security, the ways in which technology helps promote trust and how various groups and actors defect the norm and take advantage of that trust. Podcast audio...

Paul Kocher on the RSA Attack

Dennis Fisher talks with Paul Kocher of Cryptography Research about the details of the attack on RSA, what the attackers might have stolen and what the compromise of the seed file for the SecurID tokens would mean for customers. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

Anup Ghosh on PDF Exploits and Sandboxes

Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks. Podcast audio courtesy of...

Alex Hutton on the VERIS Community App and Data Breaches

Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...