Security Weekly
Paul's Security WeeklySubscribe
Vulnerability Management, Distributed Workforce

Discord Vulnerabilities, Chrome 0-Day, & Severe WordPress Flaw – PSW #671

In the Security News, Testing firm NSS Labs closes up shop, stringing vulnerabilities together to pwn the Discord desktop app, a Wordpress plugin aimed at protecting Wordpress does the opposite, the FDA approves the use of a new tool for medical device vulnerability scoring, 8 new hot, steamy, moist cybersecurity certifications, and 5 things you can do to secure your home office without hiring an expert!

Full episode and show notes

Announcements

  • Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

  • Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

Hosts

Principal Security Evangelist at Eclypsium
Professor at Roger Williams University
  1. 1. Donald Trump says “nobody gets hacked”
    Yes, it bugged me.
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
  1. 1. We Hacked Apple for 3 Months: Here’s What We Found
  2. 2. Dutch Ethical Hacker Logs into Trump’s Twitter Account
  3. 3. NSS Labs Shuttered
  4. 4. US Indicts Sandworm, Russia’s Most Destructive Cyberwar Unit
  5. 5. When ‘code rot’ becomes a matter of life or death, especially in the Internet of Things
Senior Cyber Advisor at Lawrence Livermore National Laboratory
  1. 1. Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020-5135
  2. 2. Dickey’s Barbecue Pit Investigating Possible Breach Affecting 3M Payment Cards
  3. 3. New Emotet campaign uses a new ‘Windows Update’ attachment
  4. 4. Albion Online game maker discloses data breach
  5. 5. Discord desktop app vulnerability chain triggered remote code execution attacks
  6. 6. US charges six Russian intelligence officers with hacking Ukraine, 2018 Olympics, and Skripal investigation
  7. 7. VoIP Firm Broadvoice Leaks 350 Million Customer Records
    An unsecure, Elasticsearch database cluster belonging to Los Angeles, Calif.-based voice over internet protocol (VOIP) provider Broadvoice was found exposed online on Oct. 1 containing more than 275 million Broadvoice XBP customers' full names, identification numbers, phone numbers, and states and cities of residence.
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

Related

Why Is Your TV & NAS On The Internet? – PSW #824

Ahoi new VM attacks ahead! HTTP/2 floods, USB Hid and run, forwarded email tricks, attackers be scanning, a bunch of nerds write software and give it away for free, your TV is on the Internet, Rust library issue, D-Link strikes again, EV charging station vulnerabilities, and rendering all cybersecurity useless.