In this episode--

• Would you be OK with your credit card company tracking you, to decrease fraud rates? Visa wants to track your smartphone.
  • http://triblive.com/business/headlines/7774328-74/visa-card-fraud
• Your stolen healthcare data is increasingly being sold on the black market
  • http://www.ihealthbeat.org/articles/2015/2/19/security-experts-health-data-increasingly-being-sold-on-black-market
• Lenovo has shipped software that performs a man-in-the-middle (MITM) attack against all SSL connections on some of its consumer laptops. This is really, really, really bad, but Lenovo doesn't seem to get it.
  • http://arstechnica.com/security/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/
  • http://blog.erratasec.com/2015/02/extracting-superfish-certificate.html
• The web browser is totally broken, and a haven for malware. Long live the web browser?
  • http://securityintelligence.com/broken-web-browsers-malwares-new-address/

In this episode

• Traveler's Insurance files suit against a web developmeent company for failing to provide adequate security, resulting in a breach of one of its customers
  • http://www.law360.com/articles/614158/travelers-blames-web-designer-in-bank-website-data-breach
  • We discuss whether security standards are now "implied"?
  • Does Traveler's have any standing to sue? (Shawn thinks not)
• FTC goes after LabMD for a data breach
  • http://healthitsecurity.com/2015/01/23/ftc-healthcare-data-breach-case-v-labmd-continues/
  • Is the FTC over-reaching?
  • We discuss this statement from the FTC website: "[LabMD failed to] ..reasonably protect the security of consumers’ personal data, including medical information"
• Social media company TopFace pays a ransom to hackers
  • http://www.forbes.com/sites/davelewis/2015/01/31/topface-facepalms-as-it-surrenders-to-data-breach-hacker-blackmail/
  • Face + Palm.
  • We lament why this absolutely terrible decision may have far-reaching repercussions

Guest

• Shawn Tuma ( @ShawnETuma ) - In addition to being a perennial favorite on this show, Shawn is an attorney with expertise in computer fraud, social media law, data security, intellectual property, privacy, and litigation. He's a Texan, a Christian, a family man, an author & and speaker - and an all-around awesome guy.

Topics covered

• Massive breach at American Health Insurer Anthem - from the "haven't we done this once before?" department as Queen - Another One Bites the Dust plays in the background
  • https://gigaom.com/2015/02/05/oops-another-big-data-breach-this-time-at-anthem/
  • http://money.cnn.com/2015/02/05/investing/anthem-hack-stocks/index.html?sr=twmoney020615anthemwallst0600story
  • (Obligatory OMG China! hype link) http://krebsonsecurity.com/2015/02/china-to-blame-in-anthem-hack/
• Hackers target brokers, financial advisors -- SEC "does something"
  • http://thehill.com/policy/cybersecurity/231649-hackers-targeting-brokerages-and-financial-advisers
  • SEC weighs cybersecurity disclosure rules (why SEC?) - http://thehill.com/policy/cybersecurity/229431-sec-weighs-cybersecurity-disclosure-rules
• A promising new technology which detects hacks in - milliseconds? -but what's the use-case?
  • http://www.bloomberg.com/news/articles/2015-02-03/new-technology-detects-hacks-in-milliseconds
• Google launches vulnerability research grants program - because bug bounties just aren't enough
  • http://www.scmagazine.com/google-launches-vulnerability-research-grants-program/article/395694/
• Sony Pictures Entertainment (the company that was so thoroughly hacked) CEO Amy Pascal is out! But is this proof of anything, for security? Ask Michael...
  • http://www.csoonline.com/article/2880600/security-leadership/the-conversation-security-leaders-need-to-have-about-amy-pascal-s-departure.html

This is the 7th installment (call it a rebirth) of the MicroCast. Short and to the point, Michael and James talk about the phrase breached companies use - "We take your security seriously..."

 .. join the conversation at #DtSR on Twitter!

Fans - If you haven't booked your ticket for InfoSec World 2015 in sunny Orlando, FL check this out. Register using our code CLD15/RABBIT for 15% off.

If you want a chance to go for FREE, listen to Episode 127 for your chance!

In this episode...

• John gives us a little lesson on markets, and why they move up/down, commentary for the information security professional
• John discusses what #BTFD means
• John uses the Target example of why security professionals, marketers, and much of the media got it completely wrong
• John educates us on insurance, compliance and liability
• My head explodes...

Guest

• John Foster ( @dearestleader ) - Mr. Foster has 19 years of technology experience but left technical infosec in 2003 to pursue a career in Compliance and Ethics. He now focuses on bribery & corruption, environmental issues, and other interesting topics, but infosec keeps appearing in compliance and finance. He is an investor with experience in stock, foreign exchange, options, and futures which allows him to see past the data breach hype. He is a Certified Treasury Professional, Six Sigma Black Belt, and holds certificates in ISO 9001, 14001, 20000, 22301, 27001, & 28000 from PECB. He is a partner at Bianco Foster Group, LLC which provides training and education services in ISO standards and an investor in several early stage startups.

Links

• Short portfolio http://dearestleader.me/2015/01/portfolio-update/
• S&P no material impact http://dearestleader.me/2015/01/standard-poors-says-breaches-have-no-material-impact/
• Home Depot earnings call analysis http://dearestleader.me/2014/12/home-depot-earnings-indicate-there-is-no-fear/
• Target sales up 40% over last year http://dearestleader.me/2014/11/target-continues-to-conquer-all/
• Initial Target analysis http://dearestleader.me/2014/03/target-data-breach-not-a-disaster/