Application security, Compliance, DevOps, Identity and access, Physical security, Privacy, Social engineering

Sarwent Malware, Rogue Drones, & Microsoft MFA Attack – SWN #37

May 26, 2020

This week, Defcon is still cancelled, Cyber insurance?, Phishing, rogue drones, the return of the dark web, Sarwent malware, and Dutch Grandmothers in trouble. Jason Wood joins us for the Expert Commentary on how eBay users spot the online auction house port-scanning their PCs!

Visit https://www.securityweekly.com/swn for all the latest episodes!

Like us on Facebook: https://www.facebook.com/secweekly

View Show Index

Full Audio

Segments

1. Rogue Drones, Sarwent Malware, Microsoft MFA Attack – SWN #37

Hosts

Doug White

Professor at Roger Williams University

https://securedigitallife.com/

Jason Wood

Senior Researcher at CrowdStrike

DevOps

PassTheHash from Outlook, RCE in Modem Chipset, OpenSSH Sandboxes, Curl’s Anniversary – ASW #233

March 20, 2023

Outlook can leak NTLM hashes, potential RCE in a chipset for Wi-Fi calling in phones (and autos!?), the design of OpenSSH's sandboxes, more on the direction of OWASP, celebrating 25 years of Curl.

DevOps

Automating Security With Static Analysis – Josh Goldberg – ASW #233

March 20, 2023

Static analysis is the art of scrutinizing your code without building or running it. Common static analysis tools are formatters (which change whitespace and other trivia), linters (which detect likely best practice and style issues), and type checkers (which detect likely bugs). Each of these can aid in improving application security by detecting ...

DevOps

How to Secure Your CI/CD Pipeline by Prioritizing Cyber-Risk Management – Tal Morgenstern – ESW #309

March 16, 2023

The CI/CD pipeline is the backbone of the software development process, so it's critical to ensure you are meeting and exceeding the most critical security measures. Throughout this podcast, Tal Morgenstern, Co-founder and CSO of Vulcan Cyber, will break down the process of how organizations can properly secure a CI/CD pipeline into a checklist of ...

Sarwent Malware, Rogue Drones, & Microsoft MFA Attack – SWN #37

Full Audio

Segments

1. Rogue Drones, Sarwent Malware, Microsoft MFA Attack – SWN #37

Hosts

Related

PassTheHash from Outlook, RCE in Modem Chipset, OpenSSH Sandboxes, Curl’s Anniversary – ASW #233

Automating Security With Static Analysis – Josh Goldberg – ASW #233

How to Secure Your CI/CD Pipeline by Prioritizing Cyber-Risk Management – Tal Morgenstern – ESW #309