Security Weekly News Subscribe

Cloud Security, Privacy, Incident Response, Application security, Data Security, Compliance Management, Threat Management

Fitbit Spyware, Facebook Bug Bounty Club, & FAA Gets Airline Warning – SWN #73

October 13, 2020

This week, Dr. Doug talks Facebook Bug Bounty club, Zuck reverses, Trickbot, the FAA gets airline warning, IoT, Zerologon, and Fitbit! Jason Wood returns for Expert Commentary on Office 365: A Favorite for Cyberattack Persistence!

Visit https://www.securityweekly.com/swn for all the latest episodes!

Follow us on Twitter: https://www.twitter.com/securityweekly Like us on Facebook: https://www.facebook.com/secweekly

View Show Index

Full Audio

Segments

1. Facebook Bug Bounty Club, Fitbit Spyware, FAA Gets Airline Warning – SWN #73

This week, Dr. Doug talks Facebook Bug Bounty club, Zuck reverses, Trickbot, the FAA gets airline warning, IoT, Zerologon, and Fitbit! Jason Wood returns for Expert Commentary on Office 365: A Favorite for Cyberattack Persistence!

Hosts

Doug White

Doug White

Professor at Roger Williams University

https://securedigitallife.com/

1. Facebook Debuts Bug Bounty ‘Loyalty program’
2. You can get network access for the one low price of 300$
3. So, it was Microsoft who went after Trickbot
4. Zerologon targetting US Government Networks in Chained Attacks
CVE-2020-1472 CVE-2020-15505 CVE-2018-13379
5. GAO warns FAA that planes may need a bit more pen testing
6. How to pinpoint rogue IoT devices on your network
7. Fitbit API can be used to push malicious watch faces.
8. Facebook does 180 and blocks holocaust deniers

Jason Wood

Senior Researcher at CrowdStrike

1. Office 365: A Favorite for Cyberattack Persistence

Related

Splunk Acquisition and The Blob with Allie Mellen – ESW #333

September 28, 2023

This week, we changed things up a bit for the news segment and Allie Mellen joins us as a surprise guest host! We discuss Cisco's Splunk acquisition and what it means for Splunk customers, and "The Blob" - Allie's term describing the negative forces responsible for much of the overhyped marketing, silly trends, and substandard products we see in th...

Security’s Role in Edge Computing Today – Theresa Lanowitz, Chris Goettl – ESW #333

September 28, 2023

The concept of Edge computing has evolved over the years and now has a distinct role alongside public cloud. Theresa Lanowitz, from AT&T Cybersecurity, and Chris Goettl from Ivanti join us to discuss what edge computing means for the market and for cybersecurity. Specifically, we'll discuss how: Strong use cases in the market today for edge c...

Cloud Threat Visibility: High-fidelity Forensics Plus Exposure Management – Ward Cobleigh – ISW23 #2

September 26, 2023

Why are we seeing a re-emergence of the demand for packet and flow-based forensic data in cloud environments? In this session, we’ll discuss three reasons why IT leaders still need the same if not even better visibility in the cloud than they have in their data centers. We’ll also discuss the growing demand for Threat Exposure Management (TEM). W...