Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: - SANS Internet Storm Center


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
podcast logo

ISC StormCast for Monday, March 24th 2014

Episode 1251 A daily summary of events from the SANS Internet Storm Center
Author:Johannes Ullrich
See below for a schedule of classes I teach.
Created: Monday, March 24th 2014
Length: 5:53 minutes
Today's Headline:

If you like this podcast, then please consider telling others about it. Use this button to Tweet about this episode: click here. Errors? Corrections? Complaints? Player Problems? Please let us know here: https://isc.sans.edu/contact.html

Plain HTML5 Player
Fancy Player (with skip back/forward)

Show Notes

Individual Account Compromisse Leads to Spam Incident
https://isc.sans.edu/forums/diary/How+the+Compromised+of+a+User+Account+Lead+to+a+Spam+Incident/17843

Microsoft Using Employees Private Hotmail Account To Track Down Intellecutal Property Leak
http://www.zdnet.com/how-microsoft-tracked-down-a-spy-who-leaked-its-secrets-7000027545

Andorid Privilege Escalation Via Updating
http://www.informatics.indiana.edu/xw7/papers/privilegescalationthroughandroidupdating.pdf

Chrome will require Certificate Transperancy from all EV Certificate Authorities after February 2015.
https://sites.google.com/site/certificatetransparency/ev-ct-plan

Discussion

The Hotmail account Microsoft accessed wasn't that of their (former) employee, but that of the journalist he had sent the source code to. Which might not make a big difference legally, but it does make it more embarrassing for Microsoft.
Posted by Martijn Grooten on Mon Mar 24 2014, 10:36

New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form

Interested in attending one of my classes? See below for my current schedule.

Intrusion Detection In-DepthSan AntonioAug 6th - Aug 11th 2018
Defending Web Applications Security EssentialsAmsterdamSep 3rd - Sep 8th 2018
Defending Web Applications Security EssentialsLas VegasSep 23rd - Sep 28th 2018
Intrusion Detection In-DepthTysonsOct 15th - Oct 20th 2018
Defending Web Applications Security EssentialsDenverOct 24th - Oct 29th 2018
Intrusion Detection In-DepthWashingtonDec 13th - Dec 18th 2018