A firewall wake up call. [Research Saturday]
CyberWire Daily9 Marras 2024

A firewall wake up call. [Research Saturday]

Enjoy this special encore episode, where we are joined by Jon Williams from Bishop Fox, as he is sharing their research on "It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable." SonicWall published advisories for CVE-2022-22274 and CVE-2023-0656 a year apart after finding that NGFW series 6 and 7 devices are affected by two unauthenticated denial-of-service vulnerabilities. The research states "Our research found that the two issues are fundamentally the same but exploitable at different HTTP URI paths due to reuse of a vulnerable code pattern." They also found that when they scanned SonicWall firewalls with management interfaces exposed to the internet, they found that 76% are vulnerable to one or both issues. The research can be found here: It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(3754)

A beast by any other name. [Research Saturday]

A beast by any other name. [Research Saturday]

Today we are joined by Brigid O Gorman, Senior Intelligence Analyst on Symantec Threat Hunter team, discussing their work on “GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable ...

12 Syys 23min

You might want to watch what you say.

You might want to watch what you say.

WeWorm has China’s attention. Calls for an AI slowdown continue. OpenAI calls for mandatory AI regulation. Anthropic disrupts Russian cyberespionage. The EU’s 24 hour reporting requirement goes into e...

11 Syys 29min

Making cybercrime more difficult.

Making cybercrime more difficult.

The FBI lays out its new Cyber Strategy. CISA plans a federal cyber overhaul. Anthropic discloses another unauthorized AI intrusion. Treasury sanctions a Chinese-language cybercrime marketplace. Anoth...

10 Syys 28min

Clear your calendar, it’s Patch Tuesday.

Clear your calendar, it’s Patch Tuesday.

Patch Tuesday is a doozy. The Feds warn China-based AI companies are distilling U.S. AI models. A new ClickFix campaign goes straight for the browser. Smart TVs get nosy. Hackers gift themselves a $47...

9 Syys 30min

Worming its way through WeChat.

Worming its way through WeChat.

Researchers build a self-propagating attack against WeChat. Threat actors move toward multi-agent AI frameworks. N-able issues an emergency patch for a maximum-severity bug under active exploitation. ...

8 Syys 30min

This call may be monitored. [Special Edition]

This call may be monitored. [Special Edition]

In this Special Episode, Maria Varmazis and Dave Bittner are joined by friend of the show, Brandon Karpf, to unpack a new bipartisan congressional investigation into the lingering presence of Chinese ...

7 Syys 38min

When hackers control the clock. [T-Minus: Space-Cyber Briefing]

When hackers control the clock. [T-Minus: Space-Cyber Briefing]

The accurate timing data from spacecraft has become an invaluable tool for nearly every critical infrastructure sector and a greater target for malicious actors. Host Maria Varmazis and ⁠Andy Davis⁠,...

6 Syys 23min

RMM-ber this ransomware. [Research Saturday]

RMM-ber this ransomware. [Research Saturday]

Ismael Valenzuela, Vice President of Labs, Threat Research and Intelligence at Arctic Wolf, sits down with Dave to discuss their work tracking Anubis. Arctic Wolf Labs details a series of 2026 Anubis ...

5 Syys 19min

Suosittua kategoriassa Politiikka ja uutiset

uutiscast
vallattomat
aikalisa
politiikan-puskaradio
rss-viihde-media
rss-ootsa-kuullut-tasta
ootsa-kuullut-tasta-2
rss-vaalirankkurit-podcast
otetaan-yhdet
rss-podme-livebox
tervo-halme
rss-voi-venaja
the-ulkopolitist
rss-kaikki-uusiksi
rikosmyytit
rss-ulkopoditiikkaa
rss-asiastudio
rss-raha-talous-ja-politiikka
rss-girls-finish-f1rst
rss-seksicast