SSCC 145 – Zero-days x2, fixing Heartbleed x2, and security-by-design [PODCAST]

An 0-day in IE and an 0-day in Flash; two approaches to fixing OpenSSL after Heartbleed; how to get a free pass to Infosec Europe 2014; and why security happens by design and not by accident! Join Chet and Duck for another podcast in the weekly Chet Chat series…

Apple fixes hole that leaked employees’ and developers’ personal info

Apple quietly slipped its Developer Center offline on Sunday night to patch a serious security hole that let anybody access personal contact information for any registered Mac, iOS or Safari developer; every Apple Retail and corporate employee; and some key partners.

Big data can be used to discriminate, says government review

Big data can be used as a tool to discriminate against Americans in areas including housing and employment, according to a soon-to-be-released government review of big-data use. For example, employers can decide not to hire us if they think we live too far away, while banks can use data brokers’ products to target financially vulnerable people with high-interest loans.

Monday review – the hot 26 stories of the week

Make sure you’re up to date with everything we wrote in the last seven days – it’s weekly roundup time.

The internet of everything – bringing more risk to more places

The Internet of Things (IoT) is a ubiquitous buzz-phrase these days. The idea is that just about everything we make or use could be connected, allowing anything to be remotely controlled or monitored. What could possibly go wrong?

Anonymous takes on Boston Children’s Hospital in #opJustina

Last week, outrage over the case of Justina Pellitier rose to a head and burst into cyber warfare when people affiliating themselves with Anonymous launched #opJustina. DDoS attacks preceded the #op launch and continued throughout the week.