Tenable Network Security Podcast - Episode 87

Welcome to the Tenable Network Security Podcast - Episode 87

Hosts: Paul Asadoorian, Product Evangelist, Ron Gula, CEO/CTO, Carlos Perez, Lead Vulnerability Researcher, Jack Daniel, Product Manager

Announcements

Stories

  • Patching Flash - CVE-2011-2110 post-mortem - People patch Flash quicker than Java, however we can still get an improperly signed Java application to execute code. In fact, we can even purchase a certificate, rid ourselves of the warning, and still get code execution, and to throw in a bonus we can bypass anti-virus. You don't need a vulnerability to compromise a system.

  • Most Common iPhone Passcodes - "1234", that's also the password to my luggage.

  • Sony lawsuit: security experts fired prior to breach - I bet there are a few people sitting around saying, "I told you so".

  • DNS cache poisoning: still works and still makes lots of damage - Why can't we as a community work to prevent this type of attack, or can we?

  • Are All Networks Vulnerable? - Is yours? Johannes makes a good point, it's not about protecting 100% of the security incidents.

  • Rootkit infection requires Windows reinstall, says Microsoft - Get this, it's a "boot sector" virus, remember those?

  • Disgruntled IT guy slips porn into CEO's PowerPoint - A few lessons learned here: 1) Never give a presentation while your laptop has a network/Internet connection, 2) Don't anger your IT department, 3) Maintain the integrity of your laptop.

  • Virtualization and cloud computing race ahead of security practices - I mean, really, what is all the fuss about virtualization security? Your systems can be virtual or real, security is still a problem. I just don't get all the fuss.
  • Download Tenable Podcast Episode 87

    Tenable Network Security


    The official BLOG of Tenable Network Security and the Nessus vulnerability scanner.