Topics covered

• Sony Pictures is having a very, very bad couple of days - and it could keep getting worse.
  • http://www.theverge.com/2014/11/24/7277451/sony-pictures-paralyzed-by-massive-security-compromise
  • http://www.csoonline.com/article/2852982/data-breach/sales-contracts-and-other-data-published-by-sonys-attackers.html
• A newly discovered (but old) comment bug in Wordpress affects ~86% of sites. The story isn't what you think it is-
  • http://www.consumeraffairs.com/news/newly-discovered-comment-security-bug-affects-86-of-wordpress-blogs-112414.html
• The Australian government is blaming a data breach from February on ... "awareness"? Michael disagrees (and he's right).
  • http://www.esecurityplanet.com/network-security/australian-government-data-breach-linked-to-poor-security-training.html
• The public release of the research on Regin malware has it pegged as the most advanced thing since the computer - so what?
  • http://money.cnn.com/2014/11/23/technology/security/regin-malware-symantec/index.html?hpt=hp_t2
  • https://firstlook.org/theintercept/2014/11/24/secret-regin-malware-belgacom-nsa-gchq/
  • Symantec whitepaper: http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/regin-analysis.pdf
• The Justice Department is using a 225 year old law to tackle a modern problem of encrypted cell phones through the manufacturer.
  • http://blogs.wsj.com/digits/2014/11/25/case-suggests-how-government-may-get-around-phone-encryption/
• The court system...works? 440 year jail threat down to a misdemeanor in no time flat
  • http://www.wired.com/2014/11/from-440-years-to-misdemeanor/
• Updates:
  • Target doesn't feel like all the banks' losses are their problem, here's why - http://arstechnica.com/tech-policy/2014/11/targ

Support the show

>>> If you're reading this, consider clicking the link above to support the show!
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
YouTube home: https://youtube.com/playlist?list=PLyo0dkKRvfVtWXjRxNISrhme1MgBj3C2U&si=scHDiTuLXSEQ9qHq
LinkedIn Page: https://www.linkedin.com/company/down-the-security-rabbithole-podcast/
X/Twitter: https://twitter.com/dtsr_podcast