Sophos Podcasts

Paul Ducklin and Chester Wisniewski investigate the what, the why and the how of dealing with the impending end of support for Windows XP in 2014. Don't worry: even if you have computers that you simply won't be able to update in time, for example because they run bespoke industrial control software, or a legacy financial application, Duck and Chet have some healthy suggestions for you. They also share some insights into why Microsoft hasn't simply packed all the improved security components from Windows 7 and 8 into the aging XP, leading to the 08 April 2014 deadline.

Chet and Duck deal with: November's Patch Tuesday, whether or not hacking attacks are getting worse, whether Anonymous defacements count as "hacking", an esoteric bug in OpenSSH, and the lessons to learn from Adobe's megabreach.

Chet and Duck discuss the latest Microsoft zero-day, the latest code verification flaw in Android (the third bug of the same sort in the same part of the code!), and whether version numbers are becoming an irrelevancy as products "just update" anyway.

Chet and Duck discuss WordPress autoupdating; OS X's giant new wave, Mavericks; iCloud and 2FA; smartphone tracking by retailers; and security in pacemakers and other medical devices.

Chet and Duck discuss Oracle's monster Java patch, Joel's backdoor in D-Link routers, Cryptolocker and WhatsApp's demonstration of why you shouldn't roll your own crypto.

Chet interviews Robert Slade a well known anti-virus expert for National Cyber Security Awareness Month #NCSAM. Rob shares his thoughts on how average folks can stay safer online.

Chet and Duck are back on the regular schedule and talked about the 10th anniversary of Patch Tuesday, Adobe going "open source" and the alleged demise of the Dread Pirate Roberts.

In the last third of Sophos Security Chet Chat 118 Chet interviews Vanja Svajcer from SophosLabs about his presentation on potentially unwanted Android apps. Many users are being inundated with advertising pop-ups and other pesky behaviours, leading security vendors toward providing tools to block these apps.

As a reminder to everyone that it is National Cyber Security Awareness Month #NCSAM, Chet and Duck remind our listeners to do the three things to help themselves and others stay safer online.

Chester interviews James Wyke of SophosLabs UK about his presentation on the Zero Access Trojan at this year's Virus Bulletin conference in Berlin, Germany.

This week Chet and Duck talk about Apple, Apple, iOS, Apple, OS X, lots of patches, browser trust and Facebook privacy.

Make sense of vulnerability jargon by listening to this 15 minute podcast... With recent updates from Microsoft (three times), Adobe, Oracle, Apple and Firefox, the timing could scarcely be better.

In this episode of SSCC Chet and Duck talk about Google Authenticator temporarily forgetting its seeds, Apple bugs, Facebook data probes and an increase in WordPress phishing.

Chet and Duck discuss XP "as a giant 0-day", password practices in light of LastPass's recent vulnerability and the next generation of the HTTP protocol.

Chet welcomes series regular Paul 'Duck' Ducklin to discuss the latest security news: Android random number flaw implicated in Bitcoin thefts, OpenX ad servers "pre-compromised", Lavabit and Silent Circle suspend operation, winners of Black Hat 2013 #sophospuzzle.

Chet and Duck talk about the stolen "master Android keys", Tumblr security flaws, Club Nintendo password woes and the new Sophos puzzle for BlackHat 2013.

In this podcast Chester and Duck tackle 'Keyjacking', obfuscated data breach notification letters and Apple's iOS WPA2 passphrases being a little too easy.

Security experts Chester 'Chet' Wisniewski and Paul 'Duck' Ducklin discuss the latest security news: the leak behind PRISM, Swedish against Google's cloud, and BlackBerry ships Flash on its latest smartphones.

Chet welcomes series regular Paul 'Duck' Ducklin to discuss the latest security news: Microsoft reading Skype messages, the IP Commission Report, small business cybersecurity, and AusCERT 2013 #SophosPuzzle.

Chet welcomes series regular Paul 'Duck' Ducklin to discuss the latest security news: Name.com breach (and others), laptop theft, casher crews, LulzSec busts, Patch Tuesday.