ISC StormCast for Monday, December 1st 2014

By Johannes Ullrich CDN attacked by SEA using last years tricks; SONY: another breach – new lessons? Order confirmation spam; Do you have a plan?
Attack on CDN used to inject content into many high profile websites
http://blog.gigya.com/regarding-todays-service-attack/
“Order Confirmation” Spam on the rise after Black Friday
https://isc.sans.edu/forums/diary/Lots+of+Black+Friday+SPAM+Phishing/19003
Do you have a data breach response plan?
https://isc.sans.edu/forums/diary/Do+you+have+a+Data+Breach+Response+Plan+/19005
SONY victim of yet another massive breach
http://www.reddit.com/r/hacking/comments/2n9zhv/i_used_to_work_for_sony_pictures_my_friend_still/ More Here