SANS Daily Network Security Podcast (Stormcast) for Wednesday, August 28th 2013

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://traffic.libsyn.com/securitypodcast/3503.mp3

00:00

See us at SANSFIRE in Washington DC, July 11th-16th. Handler talks, Internet Storm Center Keynote, Honeypot Workshop following the keynote. Click here for details.

My Next Class

Application Security: Securing Web Apps, APIs, and Microservices	Washington	Jul 11th - Jul 16th 2022
Application Security: Securing Web Apps, APIs, and Microservices	Online	Jul 11th - Jul 16th 2022

… more classes

Help us make this podcast better by participating in a simple two question survey

NYTimes/Twitter Compromise
https://isc.sans.edu/forums/diary/NY+Times+DNS+Compromised/16451

MSFT Refreshed Patches
https://isc.sans.edu/forums/diary/Microsoft+Releases+Revisions+to+4+Existing+Updates/16448

NIST SP800-40 Document about Patch Management
http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-40r3.pdf

HTTP Nowhere
http://threatpost.com/firefox-extension-http-nowhere-allows-users-to-browse-in-encrypted-only-mode/102108

iTunes

MP3 Download

RSS Feed

Google

Stitcher

Podbean

Amazon Echo

YouTube

Spreaker

iOS App

Spotify

Discussion

What about the Domain Lock feature offered by Registrars? As I understand it, additional credentials are required to change a DNS record. Would that have thwarted the attack since only the login credentials were compromised and leveraged to facilitate the attack?

Posted by LawsonPoling on Thu Aug 29 2013, 13:58

Are there any utilities available to easily monitor your DNS zones for changes?

Posted by ChrisL1977 on Wed Aug 28 2013, 23:29

New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form

Top of page

Application Security: Securing Web Apps, APIs, and Microservices	Washington	Jul 11th - Jul 16th 2022
Application Security: Securing Web Apps, APIs, and Microservices	Online	Jul 11th - Jul 16th 2022
Application Security: Securing Web Apps, APIs, and Microservices	Tokyo	Aug 29th - Sep 3rd 2022
Application Security: Securing Web Apps, APIs, and Microservices	Online \| Japan Standard Time	Aug 29th - Sep 3rd 2022
Intrusion Detection In-Depth	Riyadh	Oct 8th - Oct 13th 2022
Intrusion Detection In-Depth	Online \| Arabian Standard Time	Oct 8th - Oct 13th 2022
Application Security: Securing Web Apps, APIs, and Microservices	San Francisco	Dec 5th - Dec 10th 2022
Application Security: Securing Web Apps, APIs, and Microservices	Online \| US Pacific	Dec 5th - Dec 10th 2022