Security Weekly
Security Weekly NewsSubscribe

Iranian Code, WordPress Vuln, MFA Fatigue, & Free Crypto! (Scams) – Wrap Up – SWN #188

Ukraine accuses Russia of cyber-attack on two banks and its defence ministry https://www.theguardian.com/world/2022/feb/16/ukraine-accuses-russia-of- cyber-attack-on-two-banks-and-its-defence-ministry

Iranian State Broadcaster Clobbered by ‘Clumsy, Buggy’ Code https://threatpost.com/iranian-state-broadcaster-clumsy-buggy-code/178524/

Phishers Spoof Power BI to Visualize Your Credential Data https://cofensestaging.wpengine.com/blog/phishers-spoof-power-bi-to-visualize- your-credential-data?web_view=true

Vulnerability found in WordPress plugin with over 3 million installations https://www.zdnet.com/article/vulnerability-found-in-wordpress-plugin-with-over- 3-million-installations/?&web_view=true

MFA fatigue attacks: Users tricked into allowing device access due to overload of push notifications https://portswigger.net/daily-swig/mfa-fatigue-attacks-users-tricked-into- allowing-device-access-due-to-overload-of-push-notifications?&web_view=true

FreeCryptoScam - A New Cryptocurrency Scam That Leads to Installation of Backdoors and Stealers https://www.zscaler.com/blogs/security-research/freecryptoscam-new- cryptocurrency-scam-leads-installation-backdoors-and?&web_view=true

Full episode and show notes

Host

Cyber security lead EMEA at Defence

Related

Threat Modeling and Understanding Inherent Threats – Adam Shostack – ESW #359

This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the subject. Adam recently released a whitepaper that focuses on and defines inherent threats. Resources: ...
How GenAI Can Improve SecOps – Ely Kahn – ESW #359

We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some of the use cases are obvious, while others were a complete surprise to me. Check out this episode if...