About
"Distrust and caution are the parents of security" - Benjamin Franklin
Kuala Lumpur, Malaysia
Booked as “Asia’s Premier Deep Knowledge
Security Conference,” HITB is in its 8th year and has since expanded
into other countries in the Middle East and Europe. Modeled on shows like Black Hat, HITB offers both training sessions
and a multi track security conference and draws top security professionals from
around the world.
Vancouver, British Columbia, Canada
San Diego, California, U.S.
Southern California’s premiere hacking event,
ToorCon is in its 12th year, after being launched by San Diego area
2600 user group members David Hulton (aka h1kari) and Ben Greenberg in
1999. No industry event, ToorCon is for serious security practitioners, offering detailed presentations on everything from protocol analysis to tools and attacks, as well
as standard security con fare like the Lock Picking Village.
You could be excused for thinking that the world of security
conferences was limited to industry shin-digs like the RSA show in San Francisco, and mega events
like the Black Hat Briefings and Defcon conferences in Las Vegas.
Stuxnet Redux and The
Wire: United States
Governments, the Internet and security were the theme as Internet wiretapping, trans national cyber laws and the further
proliferation of Stuxnet – a computer virus believed to have state backing – topped this week’s news.
Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero
days.
[swf
file=”http://www.threatpost.com/sites/default/files/newswrap_23.mp3]
Web insecurity was in the news this week, with a major flaw in the security of ASP.NET and some sobering statistics on Web site infections. When your bank account gets hacked – is it your fault? And, with a patch out for one of four (!) zero day exploits used by Stuxnet, security experts wonder if its the most sophisticated malware…ever!?
Summer may have reached its unofficial end with the Labor Day holiday, but there was no break from security news this week, as both the Gov 2.0 Conference in Washington D.C. and a raft of warnings and patches from leading vendors kept the heat on high.
Do not use public computers to log on to
your personal accounts. No airport internet machines, no hotel business
center, nothing. I know how many times you really need to check your
email from a friend’s computer – just don’t do it. You have no idea
what’s running on that machine.
This advice can be extended to general online activity, not just social
networks, and most importantly, not just Twitter. You should care at
least as much for the security of your e-mail account, especially if it
was used to register your Twitter or Facebook accounts. Basically, a
compromised email account opens op new ways for the bad guys to get into
your other accounts: the password reset function usually sends a link
to your email address for confirmation.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
