Update: We updated the audio file due to some issues with the first version.

This podcast is brought to you by the Greater Lafayette Security Professionals (GLSP) group and the Center for Education and Research in Information Assurance and Security (CERIAS) at Purdue University.

Show Notes

Hosts

• Preston Wiley, CISSP, CCNA
• Mike Hill, CISSP
• Keith Watson, CISSP, CISA

Announcements

• No announcements at this time.

Security Updates

• Microsoft released an out-of-band update in order to revoke 2 intermediate CA certificates. One of these was a forged certificate that was used by the Flame malware, June 3 >
• Mozilla Firefox and Thunderbird were updated to release 13, correcting 7 vulnerabilities, 4 critical, 2 high, June 5

Articles

• Week of Password Leaks
  • LinkedIn, Millions of LinkedIn passwords reportedly leaked - take action NOW by Graham Cluley (nakedsecurity blog), Bad day for LinkedIn: 6.5 million hashed passwords reportedly leaked – change yours now by Matt Brian (The Next Web), Change Your LinkedIn Password Right Now! by Dylan Love (Business Insider), LinkedIn was hacked, confirmed by LinkedIn on 6/6/2012 (LastPass)
  • eHarmony, Update on Compromised Passwords (eHarmony), Users of dating website eHarmony told their passwords have been stolen by Graham Cluley (nakedsecurity blog)
  • Last.fm, Last.fm Password Security Update (Last.fm), Last.fm Passwords Also Leaked; Change Yours Now by Melanie Pinola (LifeHacker)

• Flame malware certificate forgery, Microsoft speaks out on Flame malware certificate forgery by Paul Ducklin (nakedsecurity blog), Microsoft’s reaction to Flame shows seriousness of ‘Holy Grail’ hack by Gregg Keizer (ComputerWorld), CWI cryptanalist discovers new cryptographic attack variant in Flame spy malware (Centrum Wiskunde & Informatica)

• US and Israel developed Stuxnet, Obama Order Sped Up Wave of Cyberattacks Against Iran by David E. Sanger (NY Times), Confirmed: US and Israel created Stuxnet, lost control of it by Nate Anderson (Ars Technica), Serious about Security podcast, episode 3