<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cisco Blog &#187; Nicholas Leali</title>
	<atom:link href="http://blogs.cisco.com/author/NicholasLeali/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.cisco.com</link>
	<description></description>
	<lastBuildDate>Tue, 18 Jun 2013 21:29:28 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Oracle Java Zero Day Vulnerabilities Risks and Mitigations Part 2</title>
		<link>http://blogs.cisco.com/security/oracle-java-zero-day-vulnerabilities-risks-and-mitigations-part-2/</link>
		<comments>http://blogs.cisco.com/security/oracle-java-zero-day-vulnerabilities-risks-and-mitigations-part-2/#comments</comments>
		<pubDate>Wed, 05 Sep 2012 21:35:53 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[java security]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[vulnerabilities]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=81953</guid>
		<description><![CDATA[In the previous <a title="Oracle Java Zero Day Vulnerabilities Risk and Mitigations Part 1" href="http://blogs.cisco.com/security/new-java-vulnerability-used-in-targeted-attacks/">Part 1 post</a> , I discussed the initial response, risk, and mitigations for the recently-disclosed zero day Oracle Java vulnerabilities [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/oracle-java-zero-day-vulnerabilities-risks-and-mitigations-part-2/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>New Java Vulnerability Used in Targeted Attacks</title>
		<link>http://blogs.cisco.com/security/new-java-vulnerability-used-in-targeted-attacks/</link>
		<comments>http://blogs.cisco.com/security/new-java-vulnerability-used-in-targeted-attacks/#comments</comments>
		<pubDate>Tue, 28 Aug 2012 15:22:52 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[client side attacks]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[java security]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=81291</guid>
		<description><![CDATA[Security researchers discovered a Java vulnerability (documented in IntelliShield alert <a title="Unpatched Java Vulnerability" href="http://tools.cisco.com/security/center/viewAlert.x?alertId=26751" target="_blank">26751</a>) that attackers are using to install malicious software on a victim's systems.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/new-java-vulnerability-used-in-targeted-attacks/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Have You Hacked Yourself Lately?</title>
		<link>http://blogs.cisco.com/security/have-you-hacked-yourself-lately/</link>
		<comments>http://blogs.cisco.com/security/have-you-hacked-yourself-lately/#comments</comments>
		<pubDate>Wed, 25 Apr 2012 16:03:20 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[penetration testing]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=67125</guid>
		<description><![CDATA[This post stresses the need for organization to periodically and frequently perform testing of incident response policies, procedures, and plans prior to the "real thing" occurring on their networks.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/have-you-hacked-yourself-lately/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Steam Forum Compromise is the Latest Effort in Possible Credential Aggregation</title>
		<link>http://blogs.cisco.com/security/steam-forum-compromise-is-the-latest-effort-in-possible-credential-aggregation/</link>
		<comments>http://blogs.cisco.com/security/steam-forum-compromise-is-the-latest-effort-in-possible-credential-aggregation/#comments</comments>
		<pubDate>Mon, 21 Nov 2011 21:26:23 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[strong passwords]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=51977</guid>
		<description><![CDATA[Either someone is doing some serious academic work in researching password strengths, or someone is building a really great hashed password dictionary.  The Steam community forum compromise, in which attackers gained access to a database containing usernames, encrypted passwords, and e-mail addresses, is just the latest in a series of compromises targeting a subset of the online community: gamers.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/steam-forum-compromise-is-the-latest-effort-in-possible-credential-aggregation/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>NCSAM Tip #8: Patch Verification with MBSA and Cisco IOS Software Checker</title>
		<link>http://blogs.cisco.com/security/ncsam-tip-8-patch-verification-with-mbsa-and-cisco-ios-software-checker/</link>
		<comments>http://blogs.cisco.com/security/ncsam-tip-8-patch-verification-with-mbsa-and-cisco-ios-software-checker/#comments</comments>
		<pubDate>Wed, 12 Oct 2011 13:00:38 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[cyber-security-month-2011]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=46211</guid>
		<description><![CDATA[For Cyber Security Awareness Month I'd like to address patching; more specifically, verifying patches in your environment.  Patching is a big part of any security policy.  It's also very important to verify that the patches and updates deployed have actually been installed.  Whether you have one host or thousands, using a tool to scan your environment to verify those patches can save a lot of time and serve as a check on your patch processes.

There are some very good vulnerability scanners out there that can help locate and identify vulnerabilities and missing patches, but many are complex and expensive.  I'd like to talk about two free and simple tools you can use to check that systems in your environments have secure configurations and are running up-to-date software.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/ncsam-tip-8-patch-verification-with-mbsa-and-cisco-ios-software-checker/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Post-Exploitation Techniques from Black Hat 2011</title>
		<link>http://blogs.cisco.com/security/post-exploitation-techniques-from-black-hat-2011/</link>
		<comments>http://blogs.cisco.com/security/post-exploitation-techniques-from-black-hat-2011/#comments</comments>
		<pubDate>Mon, 08 Aug 2011 14:46:53 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Black Hat]]></category>
		<category><![CDATA[Exploit]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security research]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=39113</guid>
		<description><![CDATA[In many exploit scenarios, an attacker finds a target and, if possible, establishes remote control over the system through known or unknown exploits. Whether the attacker uses a buffer overflow, insecure configuration, phishing for credentials, or cookie-stealing, the goal is clear: get a remote shell and gain complete control. Then what?

It is this post-exploitation environment that has interested me at this year's Black Hat 2011. Several talks and trainings discuss post-exploitation techniques, and I'd like to share them in the interest of research – and defense.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/post-exploitation-techniques-from-black-hat-2011/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Security Concerns in Vehicle Networks Mirror Those in Computer Networks</title>
		<link>http://blogs.cisco.com/security/security-concerns-in-vehicle-networks-mirror-those-in-computer-networks/</link>
		<comments>http://blogs.cisco.com/security/security-concerns-in-vehicle-networks-mirror-those-in-computer-networks/#comments</comments>
		<pubDate>Thu, 27 Jan 2011 16:30:09 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/?p=18511</guid>
		<description><![CDATA[An emerging standard, IEEE 802.11p, is one communication method to be used in networks between mobile vehicles, including aircraft and automobiles.  Vehicle networks, often referred to as an intelligent transportation system (ITS), promise to improve vehicle safety as well as lower costs in terms of reduced travel time and fuel consumption by allowing vehicles and their operators to exchange traffic, speed, and weather information to allow better awareness and assist operators in decision making.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/security-concerns-in-vehicle-networks-mirror-those-in-computer-networks/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Blizzard Real ID Privacy Concerns</title>
		<link>http://blogs.cisco.com/security/blizzard_real_id_privacy_concerns/</link>
		<comments>http://blogs.cisco.com/security/blizzard_real_id_privacy_concerns/#comments</comments>
		<pubDate>Wed, 14 Jul 2010 20:00:00 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/david_beckham_goes_around_the_world_in_90_minutes_using_cisco_telepresence</guid>
		<description><![CDATA[As discussed in <a href="http://www.cisco.com/web/about/security/intelligence/CRR_jul5-11.html#5" target="_blank">this week&#8217;s Cyber Risk Report</a> , Blizzard Entertainment, developers of the popular Warcraft, StarCraft, and World of Warcraft video game franchises, <a href="http://forums.battle.net/thread.html?topicId=25626109041" target="_blank">proposed a potential plan</a> for [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/blizzard_real_id_privacy_concerns/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Microsoft Windows SMB2 Vulnerability</title>
		<link>http://blogs.cisco.com/security/microsoft_windows_smb2_vulnerability/</link>
		<comments>http://blogs.cisco.com/security/microsoft_windows_smb2_vulnerability/#comments</comments>
		<pubDate>Tue, 22 Sep 2009 20:00:00 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/pretty_good_privacy</guid>
		<description><![CDATA[Independent security researchers announced a new vulnerability in Microsoft Windows Vista and Windows Server 2008 on the day of the [...]]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/microsoft_windows_smb2_vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lessons From an Insider Attack on SCADA Systems</title>
		<link>http://blogs.cisco.com/security/lessons_from_an_insider_attack_on_scada_systems/</link>
		<comments>http://blogs.cisco.com/security/lessons_from_an_insider_attack_on_scada_systems/#comments</comments>
		<pubDate>Thu, 20 Aug 2009 20:00:00 +0000</pubDate>
		<dc:creator>Nicholas Leali</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blogs.cisco.com/why_the_flip_camera_should_be_in_your_pr_toolkit</guid>
		<description><![CDATA[The <a href="http://www.cisco.com/web/about/security/intelligence/CRR_jun29-jul5.html" target="_blank">Cyber Risk Report For June 29 to July 5</a> covered the story of an insider attack at a Dallas, Texas (United States) hospital.  The attacker, Jesse "GhostExodus" McGraw, allegedly was able to leverage his position as a night security guard at the hospital to gain physical access to heating, ventilation, and cooling (HVAC) control systems and manipulate those systems.  The intrusion was discovered when security researcher <a href="http://www.mcgrewsecurity.com/" target="_blank">Robert Wesley McGrew</a> from Mississippi State University discovered screenshots taken from the control systems.  McGrew approached the United States Federal Bureau of Investigation (FBI) with this evidence, who then took action against the security guard.  The guard was recently indicted by the FBI under felony charges of "transmitting a malicious code" according to the <a href="http://dallas.fbi.gov/dojpressrel/pressrel09/dl072309a.htm" target="_blank">Department of Justice press release</a>.]]></description>
		<wfw:commentRss>http://blogs.cisco.com/security/lessons_from_an_insider_attack_on_scada_systems/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>
