Take 1 Security Podcast: Episode 4

Take 1 Security Podcast: Episode 4



START CONTENT


* Ghost bug in PHP could affect millions of servers


* Flaw is in glibc, which is extensively by all Linux distributions
* Patch and reboot using yum or aptitude

* The US Army Released DShell, a malware forensics tool


* This is an interesting trend where we see tons of formerly secret groups flock to Github. Great to see

* Reddit released its first transparency report last week


* Says it received 55 requests for user information
* Says it complied with 64% of state and federal requests
* Says it received 218 requests for content removal, and complied with 31 percent of those
* I am pleased to see them releasing these numbers, and I hope more organizations do the same

* The GHCQ was using a program called BADASS to collect data leaked by games such as Angry Birds


* Luckily it only affected the 11 people still playing that game

* Russian dating site, Topface, got hacked for 20 million usernames
* The FBI busted up a Tom Clancy book plot in New York City


* The plan was to get information about wall street trading algorithms and hopefully destabilize the markets
* All they managed to do was embarrass themselves by commenting on how they couldn’t recruit young women

* China is demanding to be able to build backdoors into any code sold to its banking sector


* Some people call this news, but with China we just call this Wednesday

* Apple released a Yosemite update that fixed Thunderstrike, among other things
* Anonymous and Lizard Squad are going after each other


* Anonymous is the famous hacking group known for all sorts of things
* Lizard Squad is known for taking down the XBox and Playstation networks around Christmas time
* Anonymous DDoS’d the Lizard Squad website, and then Twitter suspended a couple of their handles
* Interesting to see these groups going after each other

* BMW and the internet of things is in the news, with BMW owners receiving an automatic push to around 2 million cars


* A vulnerability was present that could allow attacks to spoof cell towers and possibly control onboard systems
* BMW pushed a patch that ensures all such communications go over HTTPS
* It’s interesting that, like printers, cars are likely to become a primary IoT platform just because there are so many of them
* The key is to figure out what normal things exist in the world today en mass, and then imagine those things being connected
* Printers, cars, furniture, clothing, etc. It’s the regular stuff that makes it interesting because of how much attack surface they represent, and how prevalent the perspective they’ll offer into our daily lives



END CONTENT

Play Podcast

Notes


* Intro is from Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Episoder(532)

NO. 394 — Vegas Recap, CISA MS Alert, China/US AI Fight, Deceased Kid AI, Following vs. Leading…

NO. 394 — Vegas Recap, CISA MS Alert, China/US AI Fight, Deceased Kid AI, Following vs. Leading…

In this episode: 🎰 Back from Vegas: Event Recap🔬 Covid Testing: Importance of Correct Method🔥 Burnout and Addiction: Shared Root Cause🪳 Vulnerabilities🎩 Black Hat Highlights: Tool Releases👥 Lapsus$ Tactics: Simple Techniques, Big Breaches🤖 AI Cyber Challenge: DARPA's Call to Arms🔒 Cybersecurity Standings: US vs China🌐 Render's Cloudflare Issue: Network Errors🔍 PromQL Guardrails: Code Scanning with Semgrep🔭 Tool & Article Discovery➡️ The Recommendation of the Week🗣️ The Aphorism of the WeekBecome a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

16 Aug 202319min

No. 393 - Hacker Week, Deleting Google Info, And Creating High-Entropy Content

No. 393 - Hacker Week, Deleting Google Info, And Creating High-Entropy Content

In this episode: 🎉 HackerCon Week: BSides, Blackhat, DEFCON🔒 Google's Privacy Update: Control Your Data🤖 AI Vulnerability: Adversarial Attacks on Chatbots🛡️ NIST CSF Changes: Are You Ready?📊 Breach Disclosure Rules: SEC's New Mandate🔧 Tech Giants' Security Fixes: Apple, Google, Microsoft📚 Penetration Testing Guide: Understanding Cybersecurity Risks🤖 Google's AI Pivot: Supercharged Assistant📦 Musk's Grid Warning: Invest in Energy Transition🔭 Tool & Article Discovery➡️ The Recommendation of the Week🗣️ The Aphorism of the Week 📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of security 📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and securityBecome a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

10 Aug 202330min

NO. 392 — Trail of Bits Testing Handbook, Startups Freefall, and Chinese Propaganda Escalation…

NO. 392 — Trail of Bits Testing Handbook, Startups Freefall, and Chinese Propaganda Escalation…

In this episode: 💡 Burnout and Addiction: A New Perspective🚦 UL RSS Live: Stay Updated🔍 Security News: Testing Handbook, IDOR Vulnerability, Lazarus Hacks📈 Technology News: Startup Decline, iPhone Dominance, AI Girlfriends🌍 Human News: Longevity Habits, Unemployment Rates, Math Crisis💭 Ideas & Analysis: AI Tooling and Reading🎨 Hacker Art by Rez0🛠️ Discovery: New Tools and Insights👥 Managerial Pitfalls: Transitioning Roles👜 Birkin Bag Economics: The World's Most Expensive Handbag🔭 Tool & Article Discovery➡️ The Recommendation of the Week🗣️ The Aphorism of the Week 📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of security 📢Sponsored by: Panoptica.app - Simplify container deployment, monitoring, and securityBecome a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

31 Jul 202318min

NO. 391 — AI Manipulation Defenders, .MIL Leak, And The NPC Phenomenon

NO. 391 — AI Manipulation Defenders, .MIL Leak, And The NPC Phenomenon

In this episode: 🤖 How AI Will Defenders Protect Us📈 AI's Role in K-Shaped Recovery📧 Military Email Leak🔐 VirusTotal Data Leak🇨🇳 Great Firewall Expansion🍏 Apple vs UK Surveillance🚗 TikTok Theft Tutorials👁️ AI Surveillance Expansion🔧 Tech Scam Evolution🤖 OpenAI's Persistent Context🍏 Apple's AI Chatbot📰 AI Journalism🔭 Tool & Article Discovery➡️ The Recommendation of the Week🗣️ The Aphorism of the Week 📢Sponsored by: Moonlock.com - understand how Mac users navigate the increasingly complex security landscape 📢Sponsored by: Mimecast.com - Protect yourself against vulnerabilities with an added layer of securityBecome a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

24 Jul 202322min

NO. 390 — Voice Scams, FrontView Mirrors, and Idea Molecules

NO. 390 — Voice Scams, FrontView Mirrors, and Idea Molecules

In this episode: 🚨 VoiceFake Scams on the Rise🔑 FrontView Mirror, 2024 Edition: Trends and Preparations🎙️ AI and Content Creation: A Discussion on The Phillip Wylie Show🔒 Chinese Email Hack: A Sophisticated Espionage Effort🌐 Transatlantic Data Flow: A New EU-US Data Privacy Framework🔍 Docker Security Flaws: Sensitive Data in Docker Images🏥 HCA Healthcare Breach: Impacting 11 Million Patients⚖️ Orca Suing Wiz: A Case of Patent Infringement🤖 AI-Enabled Cybercrime: The Rise of WormGPT🐦 Twitter Struggles: Ad Revenue Plummets by Nearly 50%🎵 TikTok Music Launches: A New Competitor for Apple Music and SpotifyBecome a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

17 Jul 202320min

NO. 389 — The Creativity Friction Coefficient, Lockbit v TSMC, and Detecting Smart Errors

NO. 389 — The Creativity Friction Coefficient, Lockbit v TSMC, and Detecting Smart Errors

📚 The Real Internet of Things: A Look into the Future of Technology🔒 Pentera's Unique Approach to Automated Security Validation🌐 AI and the Reduction of the Creativity Friction Coefficient🔐 LockBit vs. TSMC: A Tale of Ransomware and Supply Chain Dependencies☁️ The US's Move to Block Chinese Cloud Usage: A National Security Matter🔥 Fortinet Fallout: A Critical Bug in FortiGate Firewalls🇨🇳 New Chinese APT Tradecraft: Volt Typhoon's Stealthy Approach🔍 Google's Privacy Policy Update: Feeding the AI🌞 Solar Hacking: The Exposure of Renewable Energy Units📋 And more… Sponsor: https://pentera.io Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

10 Jul 202318min

Sponsored Interview: Pentera

Sponsored Interview: Pentera

Alright, in this Sponsored Interview I’m talking with Aviv Cohen. Aviv is an engineer turned Chief Marketing Officer with Pentera, so if he sounds more technical than most CMOs, that’s why. We talk about Pentera’s Automated Security Validation platform, which he says is similar but different to automated pen testing and attack surface management, and we discuss multiple dimensions of that, from the space they play in, the problem with existing solutions, and a lot more. And with that, there’s my conversation with Aviv Cohen. https://pentera.io Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

10 Jul 202346min

NO. 388 — Context Reflections, Critical Thinking, China's Decline, and NFC

NO. 388 — Context Reflections, Critical Thinking, China's Decline, and NFC

In this episode: 📚 Using Reflections to Compress LLM Context Data 🎧 My Appearance on the Critical Thinking Podcast 🍏 Apple's Critical Security Updates ⌚ Suspicious Smartwatches Targeting Military Personnel 🔥 Databricks Acquires Generative AI Company 🌐 Cloudflare's Observatory Performance Monitoring Tool 📺 LG Integrates AirPlay 2 and HomeKit into Hotel TVs 💼 Remote Work as a Competitive Advantage for Small Tech Companies 🐝 Beehiiv Raises $12.5 Million 🔍 AI Zoom Magic by Midjourney 🇨🇳 China's Economic Countdown? 🧠 Illusion of Moral Decline 📸 Smartphone Domination in Photography 💡 The Worst Intellectual Trait: NFC 🌍 Climate Change vs. Familial Self-preservation Instincts 🚢 Titanic Belief and Ignoring DangerBecome a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

26 Jun 202316min

Populært innen Teknologi

romkapsel
rss-avskiltet
teknisk-sett
tomprat-med-gunnar-tjomlid
energi-og-klima
shifter
rss-impressions-2
nasjonal-sikkerhetsmyndighet-nsm
elektropodden
smart-forklart
rss-alt-som-gar-pa-strom
rss-snakk-om-sikkerhet
i-loopen
kunstig-intelligens-med-morten-goodwin
rss-bouvet-bobler
teknologi-og-mennesker
pedagogisk-intelligens
rss-digitaliseringspadden
rss-alt-vi-kan
rss-heis