Security Weekly
Security Weekly NewsSubscribe
Vulnerability Management, Malware, Government Regulations

TikTok, Flowmon, Cisco, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland – SWN #381

TikTok, Flowmon, Arcane Door, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland, and More, on this edition of the Security Weekly News.

Full episode and show notes

Hosts

Professor at Roger Williams University
  1. 1. Maximum severity Flowmon bug has a public exploit, patch now
  2. 2. ArcaneDoor hackers exploit Cisco zero-days to breach govt networks
  3. 3. Google patches critical type-confusion flaw in Chrome browser
  4. 4. New ‘Brokewell’ Android Malware Spread Through Fake Browser Updates
  5. 5. Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability
  6. 6. Man arrested for ‘framing colleague’ with AI-generated voice
  7. 7. The FTC banned noncompetes. What that means for workers and companies.
  8. 8. Fight, Sell, or Shut Down: What’s Next for TikTok?
Cyber security lead EMEA at Defence
  1. 1. North Korea’s Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

    https://decoded.avast.io/luiginocamastra/from-byovd-to-a-0-day-unveiling-advanced-exploits-in-cyber-recruiting-scams/

Related

Hacking AI Bias with Human Techniques – Keith Hoodlet – ASW #284

We already have bug bounties for web apps so it was only a matter of time before we would have bounties for AI-related bugs. Keith Hoodlet shares his experience winning first place in the DOD's inaugural AI bias bounty program. He explains how his education in psychology helped fill in the lack of resources in testing an AI's bias. Then we discuss ...
Automated Pentesting in the Cloud – Jay Mar-Tang – RSA24 #1

Despite building up impressive security stacks in the Cloud, organizations are still struggling to keep their environments safe. Pentera recently introduced it's latest product, Pentera Cloud as the first tool to provide automated pentesting capabilities for cloud environments. This conversation will focus on the challenge of security validation ...