HNNCast.2011.02.25

HNNCast for the last week of February, 2011

Top Story
Two Minutes of Hate, Two Weeks of FUD, Too Long Behind Bars

News
HB Gary’s Fake Friends, Cenzic Can’t DO so they patent and SUE, We R All Up in Yer Musics

T00l T1m3
updated: Mod Security, Nikto, Seccubus, SAMHAIN, THICKNET, Autologon

new: Volatility, Splunk for OSSEC, NiX, inSSIDer

NetWitness Note

Quickies

Celebrity Twits: Kim Kardassian, BBC World News
Cyber Mumbo Jumbo, Cyber UL
Defacements: Voice of America, Avira
Med School Compromise, Dutch Banking DDoS, MFA No Panacea, ODDJOB, CyberFool Index, Patch Time

Con Fu
X’d CaliberCon, PST CFP, DC19 CFP

Stack of Shame

count: 54 (-4)

10 (-2) OVERDUE! ; 2/4/11 (-21):
>ZDI-CAN-830 Novell [RISK=10] (245 days) – thanks Stephen Fewer (Harmony Security)
>ZDI-CAN-767 Microsoft [RISK=10] (323 days) thanks: Anonymous
>ZDI-CAN-733 Apple [RISK=10] (338 days) thanks: Anonymous
>ZDI-CAN-713 Sun Microsystems [RISK=10] (348 days) thanks: Anonymous
>ZDI-CAN-691 Apple [RISK=10] (365 days) thanks: wushi (team509)
>ZDI-CAN-672 Microsoft [RISK=10] (386 days) thanks: Moti Joseph
>ZDI-CAN-244 Borland [RISK=10] (462 days) thanks: Anonymous
>ZDI-CAN-543 Microsoft [RISK=10] (566 days) thanks: Peter Vreugdenhil
>ZDI-CAN-533 Microsoft [RISK=10] (580 days) thanks: surerun
>ZDI-CAN-348 RealNetworks [RISK=10] (973 days) thanks: Matteo Memelli (ryujin)

HNNCast 120409

HNNCast for the First Week of December, 2009
Also on YouTube (for 3GP mobile or 720p true HD users):
PART 1: Lead Stories and News
PART 2: Courtnee & the Quickies
Lead Stories

• Forskningsavd Raided, Military Sheister, Climategate Hack, MS Tries to Stop Free COFEE, Computer-World Trail of Shame, Astaro Sponsors HNNCast

News

• UNU is Back, IIRG is Back, HFC Needs Micro-Financing,
• Courtnee: Software Certification
• From Rick-Roll to Payroll, Facebook Herpies, Solo no Longer Frozen like Han, Defacements

Quickies

• Max Vision Sentence Delay, Anonymous Dinged for DDoS, Fire-Eye Puts Out Mega-D, South Korea Cyber Warescare, US Site on China Targetted, Twitnick, HitB Dubai CFP, NSA and Microsoft Sittin in a Tree…, UK Daily Defaced, Mininova Complies, Hack This Zine #8, You Shot the Sherrif 4 CFP, THOTful Offer for THOTful People Only, the Next HOPE Early Registration, NOTACON 6 Vidz, Schmoo Tix Sellout Again, Lazlo

Stack of Shame:

• 132

HNNCast 103009

HNNCast for the Last Week of October, 2009
Also on YouTube (for 3GP mobile or 720p true HD users):
PART 1: Lead Stories and News
PART 2: Quickies
Lead Stories:

• The Internet is Full of Adminholes, TWC Customers Still Vuln., Unu Injections on Banks, Parliament and ‘sorta’ barrackobama.com, News and Police Sites Swim with Swedish Fishes

News:

• 9k Facebook Apps Vuln., UK Guardian Claims Attack ‘Serious’ But Has No Details, Solo Extradition Stalled, Nigeria EFCC Busts Some Kung-Fu?, Vishing Small Banks, HNN Job Bank

Quickies:

• Anti Phishing WG Report: finger@Avalanche, UCSniff Live Release @ToorCon, Gift Card Cloning Scam, PhonSnoop for Blackberry, Australian Booksmart; not Street Smart, FBI Banking Trojan Figures, Atheists Nailed to a T-1, Gizmodo Ad-pology, Thotcon Call For Sponsors, Zeus FDIC PDF Trick Not a Treat, BONY Employee Pulls a Ballsy One, Pro ‘Unknown’ Targets Swiss Booty

Stack of Shame:

• 117; Note: Now includes vulnerabilities under 30 days old.

HNNCast 091109

HNNCast for the second week of September, 2009

• WordPress Worm, EchoMatrix Privacy Invasion, Kaohsiung Film Festival Defaced, OpenBSD in Financial Straights, Security Tube Con CFP, Gordon Brown Recognizes Alan Turing
• Canvas 6.5 w/ Hydrogen Cyanide, FanCheck and Month of Facebook App Bugs, London Police Arrest Online Tax Defrauder, BSOD is Back, Password Cracking Services, High Profile Banking Intrusions
• Quickies: Solo Running out of Options, New Zealand Arrests Bulgarian ATM Robbers, F-Secure Internet Security 2010, Conficker-D Outbreak, Hackers for Charity Needs NC Help, Mitsubishi Breach, Thotcon Contest, HAR now on Security Tube, O2 Patch Pending, Usenet Lights-Out, AirCrack-NG1.0, Cutwail IRS SPAM, DOT Prank, Anonymous DDoS v. Australia, NYU Polytech Cyber War Games
• Programming Notes