Security Weekly
Security Weekly NewsSubscribe
Vulnerability Management, Malware, Breach

SprySocks, Lazarus, Fortinet, Juniper, CISA, AI Art, More News, & Jason Wood – SWN #326

SprySocks, Lazarus, Fortinet, Juniper, CISA, Transparent Tribe, AI Art, More News, and Jason Wood on the Security Weekly News.

Full episode and show notes

Hosts

Doug White
Doug White
Professor at Roger Williams University
  1. 1. Fortinet Patches High-Severity Vulnerabilities in FortiOS, FortiProxy, FortiWeb Products
  2. 2. Thousands of Juniper devices vulnerable to unauthenticated RCE flaw
  3. 3. CISA Releases New Identity and Access Management Guidance
  4. 4. APT36 state hackers infect Android devices using YouTube app clones
  5. 5. Misconfigured SAS token by Microsoft’s AI team exposes 38TB of GitHub data
  6. 6. Multiple crypto raids net Lazarus Group $290M in 15 weeks
  7. 7. Chinese hackers have unleashed a never-before-seen Linux backdoor
  8. 8. Bizarre AI-generated products are in stores. Here’s how to avoid them.
Jason Wood
Jason Wood
Senior Researcher at CrowdStrike
  1. 1. Cryptojackers spread their nets to capture more than just EC2

    sysdig article - AWS’s Hidden Threat: AMBERSQUID Cloud-Native Cryptojacking Operation

Related

Incident Response
Making tabletop exercises better! – Ryan Fried – ESW #332

If you've ever played Dungeons & Dragons, you probably know that the quality of the experience depends on how prepared, experienced, and talented the Dungeon Master is. Today, we'll talk to InfoSec DM and practitioner extraordinaire Ryan Fried about some of the key elements that separate a good cybersecurity tabletop exercise from a bad one! T...