Take 1 Security Podcast: Episode 5

Take 1 Security Podcast: Episode 5



START CONTENT


* Anthem, the second largest healthcare company, had a major breach


* They lost around 80 million socials, addresses, emails, etc., which is roughly double the Target breach
* There’s speculation that it was China, trying to penetrate government, but it’s early
* Watch for phishing scams related to it
* The megabreaches continue…weee!

* A WordPress plugin called FancyBox had a serious compromise in it last week, which affected thousands of websites


* If you’re going to run WordPress, understand that Plugins are the best way to get yourself hacked
* Specifically, the type of plugins that handle user input and do something with it that affects the site’s output
* Image manipulation plugins have been particularly vulnerable, usually to XSS

* There was another critical Flash vulnerability this week


* Like I said last week, and the week before, there’s a first time for everything

* Three bug hunters at HP received the 125,000 prize for finding a major vulnerability in Internet Explorer


* Because they work for HP they couldn’t take the cash, and instead donated it to charity

* Microsoft released Outlook for iOS last week, which looks pretty slick


* Unfortunately it is riddled with security flaws
* Recommendation: wait for a few updates, and for them to get a security assessment


END CONTENT


Play Podcast

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(545)

Debating the Morality of Dario Amodei

Debating the Morality of Dario Amodei

A debate with Zack Korman on the morality of Dario Amodei specifically, and Anthropic in general. Zack's version of the video: https://youtu.be/mQ9-YoE9ykEBecome a Member: https://danielmiessler.com/u...

9 Juli 1h 14min

Rethinking AI Harnesses

Rethinking AI Harnesses

Why we should think of the AI harness not as a coding tool, but as an Intent Engineering system that manages your entire life — a LifeOS. https://github.com/danielmiessler/LifeOSBecome a Member: https...

9 Juli 12min

Why We Need Some AI Model Controls

Why We Need Some AI Model Controls

My argument for why we need some AI model controls.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

9 Juli 36min

AI Predicts the Text of Answers

AI Predicts the Text of Answers

A logical argument and demonstration of how AI has one type of understanding while lacking another. https://aiunderstands.ai Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/liste...

3 Juni 8min

Most Companies Aren't Anywhere Near Ready for AI

Most Companies Aren't Anywhere Near Ready for AI

Most Companies Aren't Anywhere Near Ready for AI. It's not that companies aren't using AI—it's that they can't.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privac...

3 Maj 5min

We're All Building a Single Digital Assistant

We're All Building a Single Digital Assistant

There's tons of confusion about what we're all building towards with Personal AI. Are we building Agents? AI Harnesses? To what end? In this video I lay why I think we're all heading towards a single ...

15 Apr 32min

Why AI  Will Replace Knowledge Workers

Why AI Will Replace Knowledge Workers

A longer form discussion on exactly how and why AI will replace knowledge workers.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

21 Mars 1h 16min

Why I Believe in SOTA Models Over Custom Ones

Why I Believe in SOTA Models Over Custom Ones

I think the future is cheaper and Open Source SOTA models combined with context, not custom, narrow models.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy in...

11 Mars 1min

Populärt inom Teknik

uppgang-och-fall
elbilsveckan
market-makers
natets-morka-sida
rss-elektrikerpodden
skogsforum-podcast
rss-technokratin
rss-uppgang-och-fall
developers-mer-an-bara-kod
bli-saker-podden
rss-heja-framtiden
allt-du-behover-veta-om-ny-teknik
rss-veckans-ai
rss-en-ai-till-kaffet
rss-inet-patch-notes
vi-bilagares-podcast
cyber-chats-chill
rss-upplyst-entreprenordirektor
rss-fabriken-2
rss-snacka-om-ai