InfoSec ICU

British Airs GDPR Mega Fine, Attacking Outlook for Fun and Profit , and DoH for Bad Guys


Listen Later

Gerry and Steve discuss a looming $240 Million dollar GDPR non-compliance fine for British Airways for an incident you may not think is GDPR coverable. They follow by talking about how malicious actors are abusing weaknesses in Outlook to establish persistence on corporate systems. Finally they discuss the proliferation of DNS over HTTP to make the Internet a more secure place, and how bad guys are weaponizing it.
As always they end with One Cool Thing.
Show Notes

Resources:
British Airways GDPR Potential Fine
https://www.theverge.com/2019/7/8/20685830/british-airways-data-breach-fine-information-commissioners-office-gdpr
Malware using Outlook
https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/
DNS over HTTPS for malicious intent
https://www.techspot.com/news/80791-meet-godlua-first-known-malware-leverages-dns-over.html

One Cool Thing
Cicerone
https://www.cicerone.org/

TrackThis.link
https://trackthis.link/

Contact
Twitter:

* Gerry Auger (@Gerald_Auger)
* Steven Cardinal (@sgcardinal)

...more
View all episodesView all episodes
Download on the App Store

InfoSec ICUBy Information Security at the Medical University of South Carolina