029: Exploits to get your English teeth into

Microsoft gives us a Patch Tuesday shock, malware grows up for the Mac, and your mouse movements might reveal if you're an identity thief.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Javvad Malik of AlienVault.

Follow the show on Twitter at @SmashinSecurity, or http://www.smashingsecurity.com/ (visit our website) for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.
Special Guest: Javvad Malik.
Sponsored By:
https://securetour.foursys.co.uk/ (Foursys): https://securetour.foursys.co.uk/ (IT security professionals! Register for your free place at SecureTour17, being held at Manchester United's Old Trafford stadium on July 6 2017, and hear security experts (and Graham) talk about threats and the latest technology to fight them.)

https://www.patreon.com/smashingsecurity (Support Smashing Security)
Links:
https://blogs.technet.microsoft.com/msrc/2017/06/13/june-2017-security-update-release/ (June 2017 security update release) — Microsoft reveals it is releasing security updates for older versions of Windows that are no longer officially supported.
https://technet.microsoft.com/en-us/library/security/4025685.aspx (Microsoft security advisory) — Guidance related to June 2017 security update release.

https://support.microsoft.com/en-gb/help/4025687/microsoft-security-advisory-4025685-guidance-for-older-platforms (Microsoft security advisory - guidance for older platforms)
https://www.alienvault.com/blogs/labs-research/macspy-os-x-rat-as-a-service (MacSpy: OS X RAT as a Service) — Information from experts at AlienVault on the MacOS malware-as-a-service threat.
https://blog.fortinet.com/2017/06/09/macransom-offered-as-ransomware-as-a-service (MacRansom: Offered as Ransomware as a Service) — Fortinet's analysis of MacRansom.
https://qz.com/1003221/identity-theft-can-be-thwarted-by-artificial-intelligence-analysis-of-a-users-mouse-movements/ (Identity theft can be thwarted by artificial intelligence analysis of a user's mouse movements) — Your mouse movements can indicate whether you're lying.
http://journals.plos.org/plosone/article?id=10.1371/journal.pone.0177851#sec008 (The detection of faked identity using unexpected questions and mouse dynamics) — Check out the technical paper by Monaro, Gamberini and Sartori.
https://www.youtube.com/watch?v=U2Mr0V7SReo (Rude security video from Javvad Malik) — Why spend thousands on complex and innovative security awareness activities, when all you need to do, is train your staff to be rude.
https://blogs.microsoft.com/next/2017/06/14/divide-conquer-microsoft-researchers-used-ai-master-ms-pac-man/#sm.000jjtxcn14wufqgy2q23tdff39d0 (Divide and conquer: How Microsoft researchers used AI to master Ms. Pac-Man - Next at Microsoft) — Microsoft's researchers have been busy...
https://www.youtube.com/watch?v=zQyWMHFjewU (Video of Microsoft's Ms Pac Man-playing AI.)
https://maxhawkins.me/work/randomized_living.html (Max Hawkins's website) — "For the past two years I’ve been letting randomized computer programs decide what I do."
http://www.npr.org/sections/alltechconsidered/2017/06/08/531796329/eager-to-burst-his-own-bubble-a-techie-made-apps-to-randomize-his-life?sc=17&f=1001 (Eager To Burst His Own Bubble, A Techie Made Apps To Randomize His Life) — NPR take a look at the odd lifestyle of Max Hawkins.
https://en.wikipedia.org/wiki/The_Dice_Man (The Dice Man) — 1971 novel by Luke Rhinehart.
https://arstechnica.com/gadgets/2017/06/logitech-powerplay-mouse-pad-wireless-charging/ (Logitech finally finds a good use for wireless charging: A mouse pad) — Would you...

Microsoft gives us a Patch Tuesday shock, malware grows up for the Mac, and your mouse movements might reveal if you're an identity thief.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Javvad Malik of AlienVault.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Javvad Malik.

Sponsored By:

Foursys: IT security professionals! Register for your free place at SecureTour17, being held at Manchester United's Old Trafford stadium on July 6 2017, and hear security experts (and Graham) talk about threats and the latest technology to fight them.

Support Smashing Security

Links:

June 2017 security update release — Microsoft reveals it is releasing security updates for older versions of Windows that are no longer officially supported.Microsoft security advisory — Guidance related to June 2017 security update release.
Microsoft security advisory - guidance for older platformsMacSpy: OS X RAT as a Service — Information from experts at AlienVault on the MacOS malware-as-a-service threat.MacRansom: Offered as Ransomware as a Service — Fortinet's analysis of MacRansom.Identity theft can be thwarted by artificial intelligence analysis of a user's mouse movements — Your mouse movements can indicate whether you're lying.The detection of faked identity using unexpected questions and mouse dynamics — Check out the technical paper by Monaro, Gamberini and Sartori.Rude security video from Javvad Malik — Why spend thousands on complex and innovative security awareness activities, when all you need to do, is train your staff to be rude.Divide and conquer: How Microsoft researchers used AI to master Ms. Pac-Man - Next at Microsoft — Microsoft's researchers have been busy...Video of Microsoft's Ms Pac Man-playing AI.Max Hawkins's website — "For the past two years I’ve been letting randomized computer programs decide what I do."Eager To Burst His Own Bubble, A Techie Made Apps To Randomize His Life — NPR take a look at the odd lifestyle of Max Hawkins.The Dice Man — 1971 novel by Luke Rhinehart.Logitech finally finds a good use for wireless charging: A mouse pad — Would you buy one of these? Seriously?