CanSecWest: Let's talk about non-targeted attacks<p>Today is the last day of CanSecWest - a security conference taking place in Vancouver, Canada. On Wednesday I filled in for Costin Raiu and talked about our forensics work into Duqu's C&C servers.</p><p><p>As I'm writing this, Google Chrome just got popped. <a href="http://www.zdnet.com/blog/security/teenager-hacks-google-chrome-with-three-0day-vulnerabilities/10649">Again.</a> The general feeling is that $60k, even with a sandbox escape, isn't a whole lot of money for a Chrome zero-day. So, to see multiple zero-days against Chrome is quite the surprise, especially when considering the browser's Pwn2Own track record.<p><p>Separately, I found the Q&A session following Facebook's Alex Rice’s presentation immensely intriguing.</p>
Source:
CanSecWest: Let's talk about non-targeted attacks
