Security Weekly
Security Weekly NewsSubscribe
Application security, Breach, Cloud security, Cybercrime, Data security, Device Security, Email security, Malware, Network security, Privacy, Security awareness, Vulnerability management

CISA Lists, UPnP, Samba, SMS Trickery, Secret Pixels, & Lazarus Returns – SWN #183

This Week in the Security News: UPnP strikes back, Lazarus, Samba, CISA, SMS Scams, secret pixels, OMB Zero Trust, and Wordle, along with the Expert Commentary of Jason Wood on this edition of the Security Weekly News!

Visit https://www.securityweekly.com/swn for all the latest episodes!

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

View Show Index

Full Audio

Segments

1. UPnP, Samba, CISA Lists, SMS Trickery, Secret Pixels, & Lazarus Returns – SWN #183

This Week in the Security News: UPnP strikes back, Lazarus, Samba, CISA, SMS Scams, secret pixels, OMB Zero Trust, and Wordle, along with the Expert Commentary of Jason Wood on this edition of the Security Weekly News!

Hosts

Doug White
Doug White
Professor at Roger Williams University
  1. 1. 277,000 routers exposed to Eternal Silence attacks via UPnP
  2. 2. Lazarus hackers use Windows Update to deploy malware
  3. 3. Samba bug can let remote attackers execute code as root
  4. 4. CISA adds 8 vulnerabilities to list of actively exploited bugs
  5. 5. Coronavirus SMS scam offers home PCR testing devices – don’t fall for it!
  6. 6. Companies know what you do inside your email inbox. Here’s how to block them.
  7. 7. The Zero-Trust Timer Is on for Federal Agencies — How Ready Are They?
  8. 8. New York Times acquires hit game Wordle for seven-figure sum
Jason Wood
Jason Wood
Senior Researcher at CrowdStrike
  1. 1. Cyberattacker hits German service station petrol terminal provider
    Other links: ZDNet - https://www.zdnet.com/article/shell-forced-re-route-oil-supplies-after-cyberattack-on-german-companies/ Ransomware rumors on Twitter - https://twitter.com/uuallan/status/1488528693131632645

Related

DevOps
Automating Security With Static Analysis – Josh Goldberg – ASW #233

Static analysis is the art of scrutinizing your code without building or running it. Common static analysis tools are formatters (which change whitespace and other trivia), linters (which detect likely best practice and style issues), and type checkers (which detect likely bugs). Each of these can aid in improving application security by detecting ...
prestitial ad