Security Weekly
Security Weekly NewsSubscribe
Vulnerability Management, AI/ML, Phishing

Bots, Citrix, Mitre, Solarwinds, Naked Nudes, Scarlett, Aaran Leyland, and More News – SWN #339

Bots, Citrix, Mitre, Solarwinds, Naked Nudes, Scarlett, Aaran Leyland, and More News on the Security Weekly News.

Full episode and show notes

Hosts

Professor at Roger Williams University
  1. 1. Mass Exploitation of ‘Citrix Bleed’ Vulnerability Underway
  2. 2. MITRE Releases ATT&CK v14 With Improvements to Detections, ICS, Mobile
  3. 3. AI gives security pros employment jitters, study says
  4. 4. SEC charges SolarWinds, CISO with fraud in 2020 supply chain attacks
  5. 5. NodeStealer Malware Hijacking Facebook Business Accounts for Malicious Ads
  6. 6. ‘Scarred Manticore’ Unleashes the Most Advanced Iranian Cyber Espionage Yet
  7. 7. Chatbots are so gullible, they’ll take directions from hackers
  8. 8. Scarlett Johansson takes legal action over fake AI advert
Cyber security lead EMEA at Defence
  1. 1. New CVSS 4.0 vulnerability severity rating standard released

    The Forum of Incident Response and Security Teams (FIRST) has officially released CVSS v4.0, the next generation of its Common Vulnerability Scoring System standard, eight years after CVSS v3.0, the previous major version.

    https://www.scmagazine.com/news/cvss-4-0-keys-in-on-threat-intelligence-metrics-and-ot-ics-and-iot

    https://thehackernews.com/2023/11/first-announces-cvss-40-new.html?m=1

    https://cybersecuritynews.com/cvss-v4-0-vulnerability-scoring/?amp

Related

5G Hackathons – Casey Ellis – BTS #28

Casey recently was involved in an event that brought hackers and 5G technology together, tune-in to learn about the results and how we can use bug bounty programs to improve the security of "things". This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!