meta_pixel
Tapesearch Logo
Log in
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

ISC StormCast for Thursday, June 30th 2016

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS ISC Handlers

Tech News, News, Technology

4.9696 Ratings

🗓️ 30 June 2016

⏱️ 5 minutes

🧾️ Download transcript

Summary

Daily 5 min infosec news summary. News, patches, vulnerabilities and trends in information security. Critical Symantec AV Vulnerabilities; Google My Activity; Linux Priv Esc Vuln

Transcript

Click on a timestamp to play from that location

0:00.0

Hello, welcome to the Thursday, June 30th, 2016 edition of the Sandton and Storm Center's

0:06.5

Stormcast.

0:07.5

My name is Johannes Ulrich and I'm recording from Salt Lake City, Utah.

0:12.3

If you're running a Symantec anti-malware product, it's time for you to update Google

0:19.1

published a number of vulnerabilities in Semantics endpoint protection.

0:24.9

This affects a series of different Symantec and Norton antivirus products because it really

0:31.5

affects the core engine that's behind a lot of the virus and anti-malware scanning in these products.

0:40.1

The problem here is that while signatures are typically updated automatically multiple times

0:45.2

a day, the product itself may not be automatically updated.

0:49.8

So absolutely make sure that you update your Symantec or Norton problem, make sure you are running

0:56.6

the latest version. There are proof of concept exploits already available that Google published

1:02.8

as part of the release of the vulnerabilities. Some of these vulnerabilities can lead to remote

1:09.4

code execution as system or as the administrator.

1:13.6

This is not that uncommon for antivirus products.

1:16.6

Google over the last couple years has revealed a number of vulnerabilities like this in different products.

1:23.6

Again, it does affect, for example, unpackers that are included in antivirus engines, but

1:29.6

also in some of these cases here with Symantec, some of the heuristic engines that are

1:36.1

part of Symantex antivirus products.

1:39.9

So quick summary, patch, patch quickly.

1:43.2

And sticking with Google here for another story, Google rolled out a new tool My Activity.

1:49.0

Essentially what it is, it summarizes everything that Google knows about you, which YouTube

1:55.0

videos you watched, which Google search terms you used, and the like.

...

Please login to see the full transcript.

Disclaimer: The podcast and artwork embedded on this page are from SANS ISC Handlers, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of SANS ISC Handlers and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.

Copyright © Tapesearch 2025.