Hello, welcome to the Wednesday, June 22nd, 2016 edition of the Sansonet Storm Center's Stormcast. My name is Johannes Ulrich and today I'm recording from Jacksonville, Florida. Apple released an update for its airport base station. It also covers the time capsule, which does contain the same Wi-Fi and router component as the

airport base stations. The vulnerability that's being addressed by this patch is a remote

code execution vulnerability in the DNS data parsing code. It's not really clear how this particular vulnerability would be exploited.

It could be as simple as something in an admin interface that could be used in order to execute arbitrary code.

The attacker, of course, would have to log in first. The advisory as typical for Apple

is very brief and there isn't really any detail here about whether or not it would require

authentication. Remote of course just means across the network. So I recommend you probably should

go ahead and update your firmware within the next

few days. And the SSL certificate marketplace is certainly starting to shake up somewhat with the

free Let's Encrypt service being online now for a few months. Startcom, an SL certificate authority that has issued free certificates for a few months. Startcom an SL certificate authority that has issued free certificates

for a few years now. Also now has an API that you can use to automate some of the certificate

issuing related tasks. StartCom's API, of course, does not just support their free offerings,

but also their for pay offerings like EV certificates. And the main purpose of the service

is not the free certificates, which they already had, but to make managing your certificates

simpler.

And criminals are now using some of the same techniques they have used in order to steal

online banking credentials to steal Bitcoin credentials from users. Of course, in particular,

with the recent search in Bitcoin value that has become a rather attractive target.

Also the increased interest in Bitcoin that comes with the increase in value has led to a lot of new users that may not necessarily be quite aware how Bitcoin works or what particular sites look like and how they

function. The domains being used in these attacks are typically typo squatting domains. So these

are domains that differ from the real domains with a couple of letters. In addition, these fake

domains are being advertised using Google Adverts.

...