Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

8/2/2016
02:45 PM
Marilyn Cohodas
Marilyn Cohodas
Commentary
Connect Directly
Twitter
LinkedIn
RSS
E-Mail vvv
50%
50%

Dark Reading Radio at Black Hat 2016: 2 Shows, 4 #BHUSA Presenters

Even if you can't physically be at Black Hat USA 2016, Dark Reading offers a virtual alternative to engage with presenters about hot show topics and trends.

Couldn’t make the trip? Not to worry. Dark Reading editors over the last few weeks have interviewed key Black Hat figures and presenters to give you a taste of the show in two pre-recorded Dark Reading Radio episodes to be broadcast Wednesday Aug 3 and Thursday Aug 4.

Here’s the lineup:

Dark Reading Radio at Black Hat 2016, Episode 1:
Date/Time: Wednesday, August 03, 2016, 1:00 p.m. New York / 10:00 a.m. Las Vegas
Guests: Black Hat General Manager Steve Wylie & Bugcrowd Senior Director of Researcher Operations Kymberlee Price

In this episode, Editor In Chief Tim Wilson talks with Black Hat General Manager Steve Wylie about the many programs and sessions being offered at this week’s Black Hat USA conference, highlighting some of the show’s most important keynote adresses, hot topics in the briefings, and new programs built around security careers and startup companies. He also tells Tim what makes Black Hat a different type of information security event – from in-depth training to social functions that bring security pros together.

In the second segment of the radio show, Kymberlee Price, give yours truly a behind the scenes look at how to build a security incident response team using crowd sourcing. Kymberlee is senior director of researcher operations at Bugcrowd. She’ll be offering some takeaways and tips from her Black Hat 16 briefing Building a Product Security Incident Response Team: Learnings from the Hivemind, which she is presenting this week at the Mandalay Bay in Las Vegas.

Dark Reading Radio at Black Hat 2016, Episode 2
Date/Time: Thursday, August 04, 2016, 1:00 p.m. New York / 10:00 a.m. Las Vegas
Guests:  Wesley McGrew, Director of Cyber Operations at Horne Cyber & Konstantin Berlin, Senior Research Engineer at Invincea Labs

In this special episode of Dark Reading Radio, Executive Editor Kelly Jackson Higgins talks to Wesley McGrew, director of cyber operations at Horne Cyber, about his research on hacking penetration testers, "Secure Penetration Testing Operations: Demonstrated Weaknesses In Learning Material And Tools." McGrew over the past few years has been examining vulnerabilities and security weaknesses in penetration testing tools, processes, and practices, and will release his homegrown Snagterpreter tool at Black Hat that allows an attacker to hijack, monitor, and alter traffic between the pen tester and his or her target/client.

Capping things off, is Sara Peters interview with Konstantin Berlin, senior research engineer at Invincea Labs. Berlin hones in one of the key cybersecurity promises of machine learning (particularly "deep learning") for security analysis, with a focus on how to take give organizations more information about unfamiliar code than simply "it's benign" or "it's malicious." His talk is, "An AI Approach To Malware Similarity Analysis: Mapping The Malware Genome with a Deep Neural Network."

Hope you to see you in the radio studio on Wednesday and Thursday. And if you can't make it this week, you can view the show in our archives at your convenience. (Registration is Required.)

 

 

Marilyn has been covering technology for business, government, and consumer audiences for over 20 years. Prior to joining UBM, Marilyn worked for nine years as editorial director at TechTarget Inc., where she launched six Websites for IT managers and administrators supporting ... View Full Bio
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Stop Defending Everything
Kevin Kurzawa, Senior Information Security Auditor,  2/12/2020
Small Business Security: 5 Tips on How and Where to Start
Mike Puglia, Chief Strategy Officer at Kaseya,  2/13/2020
Architectural Analysis IDs 78 Specific Risks in Machine-Learning Systems
Jai Vijayan, Contributing Writer,  2/13/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-2412
PUBLISHED: 2020-02-17
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4531. Reason: This candidate is a duplicate of CVE-2012-4531. Notes: All CVE users should reference CVE-2012-4531 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental u...
CVE-2014-4981
PUBLISHED: 2020-02-17
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters.
CVE-2014-7236
PUBLISHED: 2020-02-17
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.
CVE-2014-8089
PUBLISHED: 2020-02-17
SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte.
CVE-2015-8751
PUBLISHED: 2020-02-17
Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.