Application security, Cloud security, Data security, Identity and access, Insider threat, Privacy, Security awareness

DoD, Microsoft, Alexa, Intel, Aaran Leyland, & Side Channel Attacks – SWN #105

March 9, 2021

This week Dr. Doug talks More Microsoft attacks and more info on the Exchange server attacks, a new Intel Side Channel attack, Your python may be poisoned, the DoD let down its guard on contractors, & Aaran Leyland returns for guest Expert Commentary!

Visit https://www.securityweekly.com/swn for all the latest episodes!

Like us on Facebook: https://www.facebook.com/secweekly

View Show Index

Full Audio

Segments

1. Microsoft, DoD, Alexa, Intel, Aaran Leyland, & Side Channel Attacks – SWN #105

Hosts

Doug White

Professor at Roger Williams University

https://securedigitallife.com/

1. Fake Google reCaptcha attack phishes for Office365 Users
2. Hafnium attack explained with source code examples.
3. New Side Channel Attack targets Intel with Ring Interconnect latency attack
https://www.instapaper.com/read/1393789534 -- source code
4. GAO reports that DoD contractors are not subject to Cybersecurity Requirements
5. Poisoned Python Packages Proliferate
6. Can Alexa listen to your heartbeat out there in the dark?

Aaran Leyland

CEO at Restricted Access, Ltd

aaran#2621

http://restrictedaccessltd.co.uk/

1. Singapore Airlines the latest victim of supply chain attack

Cloud security

AWS AppSync Vuln, Zero-Initialization, HTTP/3 Connections, Thinkst Quarterly – ASW #221

November 28, 2022

Crossing tenants with AWS AppSync, more zeros in C++ to defeat vulns, HTTP/3 connection contamination, Thinkst Quarterly review of research, building a research team

Application security

Searching on Encrypted Data: MongoDB’s Queryable Encryption – Kenn White – ASW #221

November 28, 2022

MongoDB recently announced the industry’s first encrypted search scheme using breakthrough cryptography engineering called Queryable Encryption. This technology gives developers the ability to query encrypted sensitive data in a simple and intuitive way without impacting performance, with zero cryptography experience required. Data remains encrypt...

Security awareness

Billbug, Pushwoosh, Github, FTX, Eli Lilly, & Peter Klimek – SWN #256

November 15, 2022

This week Dr. Doug talks: Billbug, Pushwoosh, GitHub, FTX, K-12 schools without security, say it isn't so, Eli Lilly, and is joined by Peter Klimek for Expert Commentary! All that and more on the Security Weekly News! This segment is sponsored by Imperva. Visit https://securityweekly.com/imperva to learn more about them!