Podcasts
The Weekly Cyber Security Podcast covers a variety of security topics from security vulnerabilities, ransomware, data breach, password security and more. Join Brendon Asciak and Stuart Sanders for an in-depth discussion on the latest trends and issues in cyber security.
Brendon Asciak is the founder of ABSH Computers and a technology evangelist. He holds a Bachelor of Computer Science from RMIT and is a Microsoft certified technology specialist with 15 years’ experience. With a passion for technology and a technology strategist he has appeared as a guest speaker at Telstra small business forums and is the go to man for technology news and strategy for organisations including The Pancake Parlour and Telstra Business Centres.
Stuart Sanders has been in Hong Kong since 1993 and has over 18 years of experience in delivering IT services and cyber-security consulting. For over 10 of those years Stuart ran his own company successfully delivering IT solutions to funds and other business in Hong Kong including a Hang Seng main board listed firm. He now consults to funds on IT and cyber-security issues under both the Hong Kong and Singapore regulatory authorities. In 2015 Stuart co-authored an Amazon Best Selling Book on cyber-security called Under Attack, and he is passionate about advising firms and individuals on the constantly changing landscape and threats that we face in an ever more connected world.
Episodes
Friday, 28 October 2016
Weekly CyberSecurity Podcast EP. 22
Topics:
- New code injection attack (AtomBomb) works on all Windows versions
- Apple Security Updates
- Critical Vulnerabilities Patched in Joomla CMS
- Major Security Vulnerability Found in Schneider Electric Unity Pro
- Australian Red Cross Blood Service data breach: personal data of 550,000 donors compromised
- Dyn DNS DDoS follow up
- News Bytes:
- Hacker Dwayne Hans caught attempting to steal $1.5 Million from US Financial Institution
- Several people charged in India Call Center Scam
- Trend Micro Hackathon
Friday, 21 October 2016
Weekly CyberSecurity Podcast EP. 21
Topics:
- The Shadow Brokers crowdfunding $6 Million dollars for the rest of NSA hacking tools
- Oracle issued Critical Patch Update
- Massive DDoS attack struck Paypal, Spotify, Twitter, and other sites
- Hackers Hits U.S. Senate GOP Committee website
- News Bytes
- Dyre malware resurfaces as TrickBot now targeting Australian banks
- The Advent of Quantum Computing
Friday, 14 October 2016
Weekly CyberSecurity Podcast EP. 20
Topics:
- Microsoft Patch Tuesday
- Adobe Security Update
- Google Releases Security Update for Chrome
- Nextbit Robin update rolling out with security patches
- Certificate validation vulnerability of Android app Nine
- IP's involved in massive DDoS attack
- Multiple vulnerabilities found in AvTech IP Camera, NVR and DVR devices
- Another Hacker Group target SWIFT users again
- SafeBreach Hackers Playbook TM expands to nearly 4 Million breach methods
- News Bytes: 55% of financial services firms recently surveyed by SANS list ransomware as the top attack threat
Friday, 07 October 2016
Weekly CyberSecurity Podcast EP. 19
Topics:
- Android Lock Setting Vulnerability
- Firefox and Apple stop trusting Chinese certificate authority
- Source code for Botnet responsible in a massive DDoS attack against KrebsOnSecurity has been publicly released
- Yahoo secretly scanned users emails for U.S. government
- PWC: Global State of Information Security@ Survey 2017
- Mastercard app lets online shoppers pay with a selfie
Friday, 30 September 2016
Weekly CyberSecurity Podcast EP. 18
Topics:
- 990 Gbps record-breaking DDoS Attack
- Cisco critical flaw in Email Security Appliance
- Multiple vulnerabilities found in the Dlink DWR-932B
- BIND Name Server Software security patch
- Yahoo's security
- Australian attorney general announces to amend the Privacy Act law
- Trend Micro Report: Mobile App Reputation Service
- RAND Corp. Report: It's cheaper to get hacked than build strong IT defenses
- News bytes: Zerodium Triples its iOS 10 Bounty to $1.5 Million
Friday, 23 September 2016
Weekly CyberSecurity Podcast EP. 17
Topics:
- Additional Microsoft Patch Update
- Apple macOS Sierra Fixes 68 Vulnerabilities
- Remote Hack of Tesla Model S
- Vulnerability Patched in WordPress Theme Neosense version 1.7
- Security Researcher found Facebook Vulnerability to Hack Any Facebook Page
- CyberArk Windows Safe Mode could potentially be used as a remote Attack vector
- Hackers hit some Cisco customers with leaked NSA Hacking Tools
- Cisco released security updates to address vulnerabilities in multiple products
- Cisco confirmed 24 of their Small Business product impacted by certificate reuse
- Yahoo confirmed half a billion user accounts have been stolen by state-sponsored hack
- Hackers claim they breached Australian point-of-sale tech firm H&L
Friday, 16 September 2016
Weekly CyberSecurity Podcast EP. 16
Topics:
- Dropbox Hacked: 2012 breach with 68 million account details compromised confirmed by executives
- OneLogin reports security breach that exposed customers' Secure Notes data in clear text
- Swift a global banking system warns customers of multiple cyber fraud cases
- FireEye Lab: ATM Malware dubbed as "Ripper" used to steal 12 Million Bath from Thailand ATMs
- Chinese Certificate Authority mistakenly handing out duplicate SSL certificates
- Security Vulnersbilities in Medical Devices
- Large Microsoft Patch Tuesday Update
- Apple iOS 10.0.1 Security Update
- Adobe Security Update
- ClixSense Suffers Massive Data Breach - 6 Million user's recrod compromised
- Pokemon gamer accounts hacked on popular fan site
- 911 emergency services can be shut down by a mobile botnet
- Ponemon Institute Survey Report: 2016 Cost of Insider Threats
- News bytes:
- No More Ransom alliance gives users decryption and defence tools
- If its free your are the product
Friday, 09 September 2016
Weekly CyberSecurity Podcast EP. 15
Topics:
- Google Patches Vulnerabilities in Android
- Security researchers found vulnerability in Apply's OS X software
- SEC Consult Report: House of Keys
- Trend Micro Survey Report reveals true scale of ransomware attacks in the UK: 1 in 5 companies pay the ransom but don't get their data back
- Congressional report in U.S. Office of Personnel Management (OPM) data breach
- News bytes
- Sophos breaking Windows machine
- Flaws found in report on St. Jude Medical Device Security
- Rob Fuller demonstrated how USB can steal credentials from locked computers
Friday, 02 September 2016
Weekly CyberSecurity Podcast EP. 14
Topics:
- Dropbox Hacked: 2012 breach with 68 million account details compromised confirmed by executives
- OneLogin reports security breach that exposed customers' Secure Notes data in clear text
- Swift a global banking system warns customers of multiple cyber fraud cases
- FireEye Lab: ATM Malware dubbed as "Ripper" used to steal 12 Million Bath from Thailand ATMs
- Chinese Certificate Authority mistakenly handing out duplicate SSL certificates
- Security Vulnersbilities in Medical Devices
Friday, 26 August 2016
Weekly CyberSecurity Podcast EP. 13
Topics:
- Targeted Crypto Campaigns
- Apple iOS 9.3.5 vulnerabilities dubbed as "Trident" were used to target an Arab activist
- FireEye M-Trends® Report for Asia Pacific region
- Cerber Ransomware-as-a-Service earns over $2 Million per year
- Trend Micro Report: The Reign of Ransomware
Friday, 19 August 2016
Weekly CyberSecurity Podcast EP. 12
Topics:
- NSA's Hacking Group Hacked! Private Hacking Tools and Exploits Leaked
- Praetorian Report: Top 5 attack vectors that were part of a "Kill chain" leading to compromise or access to sensitive information
- Kaspersky Lab has discovered a new wave of targeted attacks against industrial and engineering organizations worldwide
- News Bytes:
- Locky targets hospitals and industries in US, Japan, and South Korea in a massive wave of Ransomware Attacks
- New Ransomware-as-a-Service
- Guy tricks tech support scammer into installing Locky Ransomware
- Security Vulnerability found in Allen-Bradley Rockwell Automation MicroLogix 1400 Programmable Logic Controllers (PLCs)
- Australia's National Census 2016 update
Friday, 12 August 2016
Weekly CyberSecurity Podcast EP. 11
Topics:
- Microsoft Patch Tuesday
- Project Sauron Malware Found Stealing Sensitive Data from 30 Government Networks Worldwide after Five Years Undetected
- DefCon Security Conference: Andrew Tierney and Ken Munro from Pen Test Partners demonstrated their proof-of-concept ransomware for smart thermostats
- News Bytes:
- QuadRooter vulnerabilities found in Qualcomm modem chipsets
- Flaw found in Volkswagen keyless entry systems (we mistakenly said Volvo)
- Brit network 02 sends out virus infested USB pens
- VMware Security Updates
- Apple iOS 9.3A released security update to patch Pangu jailbreak
- Cryptoransomware News
- Australian 2016 Census update
Friday, 05 August 2016
Weekly CyberSecurity Podcast EP. 10
Topics:
- Malwarebytes survey report entitled "State of Ransomware" released at Black Hat USA 2016
- Jeep Hackers Charlie Miller and Chris Valasek were back at Black Hat 2016
- Hackers stole $67 Million in bitcoins from a Hong Kong exchange
- 200 million Yahoo account details for sale on the Dark Web
- Cloud-based backup vendor IDrive turned on 2FA for selected users
- News Bytes:
- Audacity & Classic Shell hacked with compromised update
- Australian 2016 Census
- Apple Security Update for Mac
Friday, 29 July 2016
Weekly CyberSecurity Podcast EP. 09
Topics:
- Zero-day vulnerability in the password manager LastPass Firefox extensions
- KeySniffer Vulnerability found in Wireless Keyboards
- NIST calls for the end of SMS-based two-factor authentication
- Petya ransomware leaked 3,500 decryption keys for its competitor Chimera ransomware
- Health care organizations 114 times more likely to be ransomware victims than financial firms
- Cisco Report. The Future of Ransomware
- Malvertising Adobe Flash responsible for 80% successful exploit attempts
- News Bytes: IoT Lighting device vulnerabilities
Friday, 22 July 2016
Weekly CyberSecurity Podcast EP. 08
Topics:
- Apple Patches Vulnerabilities in IOS & OSX
- Flaws found in security products from AVG, Symantec & McAfee
- Google Chrome Malware
- Ponemon Institute & Atlanta Law Firm Kilpatrick Townsends Report - 60% Companies believe trade secrets have fallen into the hand of rivals
- UK's National Crime Agency (NCA) Report- Cybercrime surpasses traditional crime in UK
- News Bytes: SoakSoak Botnet pushing CryptXXX Ransomware
Friday, 15 July 2016
Weekly CyberSecurity Podcast EP. 07
Topics:
- Pokemon Go App
- DroidJack Malware infects unofficial Pokemon Go App
- Ransomware payment system went down
- Ranscam Malware
- CryptoDrop — a system that is believed to be 100% effective in detecting over 492 distinct ransomware samples.
- News Bytes
- Black Hat
- Microsoft & Adobe Patch Tuesday
Friday, 8 July 2016
Weekly CyberSecurity Podcast EP. 06
Topics:
- Development of Malware on Mobile Devices
- Distributed Denial of Service (DDoS) attacks
- Attack on Lenovo Thinkpad - vulnerability in the Intel reference code for its 8-series chipset
- British Telecom & KPMG Report: Emerging threats from profit-oriented highly-organized cybercriminal group
- Kapersky Lab Report Reveals Business Executives Are Exposing Critical Corporate Data while Travelling
- News Bytes
Friday, 1 July 2016
Weekly Cyber Security Podcast EP. 05
Topics:
- Microsoft Office 365 hit with a massive Cerber ransomware attack
- Symantec Software Flaws found by Google security Researcher
- Skycure Mobile Threat Intelligence Report - Massive Botnet found in 25,000 CCTV cameras
- Botnet used in political purposes
- News bytes: CryptXXX Ransomware
Friday, 24 June 2016
Weekly Cyber Security Podcast EP. 04
Topics:
- Password reuse attacks
- GoToMyPC password reset
- Googles New Codeless Two-Factor Authentication
- Rise of the Dark Web
- BadTunnel - some calling it the worst flaw in Microsoft history
- News Bytes
Friday, 17 June 2016
Weekly Cyber Security Podcast EP. 03
Topics:
- Microsoft Patch Tuesday
- Adobe Patch - Adobe Flash zero-day vulnerability
- Cyber Attacks on Small to Midsize businesses (SMBs)
- FBI estimates $3.1 Billion cost of ransomware attack as of June 2016
- North Korea hacked 143,000 computers at 160 South Korean Firms
Friday, 10 June 2016
Weekly Cyber Security Podcast EP. 02
Topics:
- Is TeamViewer Hacked?
- University of Calgary paid $20K in ransomware attack
- How Ransomware run now?
- How to mitigate damage?
- Security Awareness
Friday, 27 May 2016
Weekly Cyber Security Podcast EP. 01
Topics:
- Hacker selling 117 million LinkedIn emails and passwords on Dark web
- Reports on Data Breach
- New Ransomware DMA Locker 4.0
- Password Security, Two- Factor Authentication