Podcast Detail

Lockdroid Ransomsware and Exploiting OS X Sparkle Updates with Bettercap

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://chrt.fm/track/2748D7/https://traffic.libsyn.com/securitypodcast/4847.mp3

SANS Daily Network Security Podcast (Stormcast) for Monday, February 1st 2016

00:00

My Next Class

Application Security: Securing Web Apps, APIs, and Microservices	Washington	Dec 13th - Dec 18th 2024
Application Security: Securing Web Apps, APIs, and Microservices	Online \| US Eastern	Jan 27th - Feb 1st 2025

… more classes

Interested in Internet Storm Center stickers? Check here if there are still some available for today.

Lockdroid Ransomware Exploits Android Flaw
http://www.symantec.com/connect/blogs/android-ransomware-variant-uses-clickjacking-become-device-administrator

February 1st "Change Your Password Day"
http://gizmodo.com/5879669/february-1-is-change-your-password-day-ive-decided

iOS "Hot Patching" May Bypass Appstore Control
https://www.fireeye.com/blog/threat-research/2016/01/hot_or_not_the_bene.html

Exploiting Sparkle Updater For OS X
https://www.evilsocket.net/2016/01/30/osx-mass-pwning-using-bettercap-and-the-sparkle-updater-vulnerability/

iTunes

MP3 Download

RSS Feed

Google

Podbean

Amazon Echo

YouTube

Spreaker

Spotify

Discussion

Would you please post a link to the Python URL scripts you mentioned at the beginning of this podcast? Thank you!!

Posted by JTTrey3 on Mon Feb 01 2016, 14:08

Sorry I forgot to add the links. These are diaries written here on the ISC site:
https://isc.sans.edu/forums/diary/All+CVE+Details+at+Your+Fingertips/20671/
https://isc.sans.edu/forums/diary/Scripting+Web+Categorization/20669/

Posted by Johannes on Mon Feb 01 2016, 15:10

New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form

Application Security: Securing Web Apps, APIs, and Microservices	Washington	Dec 13th - Dec 18th 2024
Application Security: Securing Web Apps, APIs, and Microservices	Online \| US Eastern	Jan 27th - Feb 1st 2025
Network Monitoring and Threat Detection In-Depth	Baltimore	Mar 3rd - Mar 8th 2025
Application Security: Securing Web Apps, APIs, and Microservices	Orlando	Apr 13th - Apr 18th 2025