Dennis Fisher talks with Tom Kellermann of Core Security about the Google attack, the priorities for new cyber coordinator Howard Schmidt and the economic and political realities of advanced persistent threats.
*Podcast audio courtesy of sykboy65
Subscribe to the Digital Underground podcast on 
Microsoft is warning of an increase in activity around the Febipos.A Trojan, which is a malicious Chrome or Firefox browser extension that enables attackers backdoor access to a machine.
Researchers at Cylance released details of a custom exploit designed to defeat a vulnerability in a Tridium Niagara Framework device installed at Google’s Sydney, Australia campus.
On Friday, Jay Freeman announced on Twitter that he exploited a known vulnerability and subsequently achieved root access to his developer-model of Google Glass – Google’s highly anticipated, wearable, head-mounted computer.
“Patents against innovation”. Sounds as paradoxical as “bees against honey”, “hamburger patties against buns”, “students against sex” or “rock ...
Fostering knowledge exchange among different generations of security researchers is maybe one of the best traits of a good security conference. Judging by its attendance, NoSuchCon can easily claim to...
Olga Rumyantseva began her 7 Volcanoes expedition in Antarctica as the first Russian woman to climb Mount Sidley. Mount Sidley (4,285 m) is the highest and most imposing of the five volcanic mountai...
Cybersecurity for the next generation!
One of Schmidt’s priorities should be to deal with the ‘insider threat’ within Carnegie Mellon’s CyLab: http://www.PrintcafeSecuritiesFraud.com
Google, a multinational corporation, ships its development to a Communist country and maintains lax security standards that allows for a massive intrusion (among the other 30 corporations or so that were attacked as well). Somehow Tom sympathizes with their plight as though they had no “faith” in the american govt and had to deal with their reckless business operations themselves? And this equates to the lack of a rule of law? What utter crap. Outsourcing to a Communist country bit these multinationals in the ass. Too bad folks. You get what you pay for. In the current american system, who is held accountable? Google’s board of directors? Please. The shareholders are going to throw out top executives or sue them for negligence? Don’t think so. It doesn’t work. We used to think that america didn’t have to take offensive measures on other country’s companies because their technology wasn’t worth stealing. That may not be true in a few years because of irresponsible executive decisions and a system that does not hold them accountable.
And did Tom really not know that the “aurora” attackers had access to the global authentication system developed by Google? The worst case scenario did occur.
Otherwise, interesting stuff. especially talk about holding Howard Schmidt accountable, and the discussion of countries harboring and enabling groups of cyberattackers — the Somalia or Yemen of the internet, and his opinion of Google’s breach disclosure.