Application security, Email security, Physical security

TDoS, Crippled Video Drivers, APT31, Typing Inference, & “Shadow Attacks” – SWN #101

February 23, 2021

This week Dr. Doug talks Bad typing, Crippled Video Drivers from NVDIA, TDOS, APT31, Malformed URLs, and more! Also, Jason Wood returns for Expert Commentary!

Visit https://www.securityweekly.com/swn for all the latest episodes!

Like us on Facebook: https://www.facebook.com/secweekly

View Show Index

Full Audio

Segments

1. Crippled Video Drivers, TDoS, APT31, Typing Inference, & “Shadow Attacks” – SWN #101

This week Dr. Doug talks Bad typing, Crippled Video Drivers from NVDIA, TDOS, APT31, Malformed URLs, and more! Also, Jason Wood returns for Expert Commentary!

Hosts

Doug White

Professor at Roger Williams University

https://securedigitallife.com/

Jason Wood

Senior Researcher at CrowdStrike

1. Creating Your Own Training Exercise – Qakbot in a response to Full Disclosure post

Application security

OpenAI Info Leak, BitCoin ATM Hack, GitHub RSA SSH Key, Measuring AI Security – ASW #234

March 27, 2023

Ferrari refuses ransomware, OpenAI deals with security issues from cacheing, video killed a crypto ATM, GitHub rotates their RSA SSH key, bypassing CloudTrail, terms and techniques for measuring AI security and safety

Application security

Real-life Examples. Benefits, Risk & Security Implications of AI – Frank Catucci – ASW #234

March 27, 2023

With the increased interest and use of AI such as GTP 3/4, ChatGPT, GitHub Copilot, and internal modeling, there comes an array of use cases and examples for increased efficiency, but also inherent security risks that organizations should consider. In this talk, Invicti’s CTO & Head of Security Research Frank Catucci discusses potential use cas...

DevOps

PassTheHash from Outlook, RCE in Modem Chipset, OpenSSH Sandboxes, Curl’s Anniversary – ASW #233

March 20, 2023

Outlook can leak NTLM hashes, potential RCE in a chipset for Wi-Fi calling in phones (and autos!?), the design of OpenSSH's sandboxes, more on the direction of OWASP, celebrating 25 years of Curl.