The Security box, podcast 21: The beginning of Shaken and Stir

Hello folks, the RSS feed had the podcast up yesterday, but its time to get the show notes up here. We’ve got quite a bit in the news notes category, as it was quite interesting what we found. There may be more coming soon that we’ve not blogged about, so feel free to check out the blog for more.

Download the Security box, podcast 21 (164.6mb)

Welcome to podcast 21 of the security box. This week, I thought it would be interesting to take you through the Shaken and Stir protocol. This protocol is supposed to go through and make sure we get adequate caller ID.

Below, please find resources that we found on the Internet for the Shaken and Stir protocol, and I’ll be working on braille material so that I have something in writing. We hope that you enjoy the program today.

Topic:

• Combating Spoofed Robocalls with Caller ID Authentication Federal Communications Commition
• STIR/SHAKEN Wikipedia

News Notes

Home Depot

• Home Depot really has it bad. Not only did they settle for 46 out of 50 states and the District of Columbia, they had another breach in Canada. Why aren’t the rest of the companies paying for their breaches? What about target? Home Depot to pay states $17.5 million over massive 2014 data breach is the article coming from Cyber Scoop.

Tik Tok

• Tik Tok is back in the news, and I believe that this may be a good thing. I blogged about this and it may be a good thing. TikTok making it possible to skip videos that may cause seizures? is my article. I think they need to fix their PR first, and their security problems to boot first.

Ghosts in our machines

• I’ve been beta testing software for many years of all kinds. Cisco, the makers of Webex, the conferencing platform, fixed a bug where someone could pretty much be a ghost in your conference and you’d never know it. Cyberscoop has the details as the article is entitled Ghost in the machine: Researchers find Webex vulnerabilities allow hidden visitors and they’re definitely hidden until recently, anyway.

Breach News

• A networking giant recently got owned with data leaking out on their employees and business partners. Is your data like that insecure?
  

  Belden, a U.S. manufacturer of networking and industrial cable products, said Tuesday that unidentified attackers had accessed and copied data on current
  and former employees, and some of its business partners.

  The company is based in St. Louis, and they made over 2 billion dollars this past year. Wonder how much is going toward cleaning this up and what happened with them? Networking giant Belden says hackers accessed data on employees, business partners is the article for this one.

Ransomware

• An article that finally talks about the fact that these actors aren’t quitting? I’ll have my full thoughts posted on the blog, but boy why does this not surprise me that Phishlabs is finally saying this? I said it back in April. Ransomware Groups Break Promises, Leak Data Anyway is the article, and boy its a good one.

There may be more that I’m not going to post here in the notes, so make sure that you check out the blog and other sources for what may be of interest to you. Thanks for checking out the program as usual!