Security Weekly
Paul's Security WeeklySubscribe
Vulnerability management, Leadership

Plastic Bags, NSA Playsets, Megs Insecure, PHP Strikes Back, & Gamification – PSW #745

In the Security News for this week: appliances with holes, gamification and its pitfalls, false rocket sirens, PHP strikes again, new laws we may actually agree with, hacking jacuzzis, Icefall and the state of ICS security, Adobe is blocking anti-virus, Mega is Mega insecure, Microcorruption CTF and DIY NSA playset!

Full episode and show notes

Announcements

  • Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

  • Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

Hosts

Paul Asadoorian
Paul Asadoorian
Founder at Security Weekly
  1. 1. Cisco warns of security holes in its security appliances
  2. 2. Gamification of Ethical Hacking and Hacking Esports
  3. 3. Authorities Suspect Cyber Attack Behind False Rocket Sirens in Israel
  4. 4. Critical PHP flaw exposes QNAP NAS devices to RCE attacks
  5. 5. Senate bill would ban data brokers from selling location and health data
  6. 6. Hacking into the worldwide Jacuzzi SmartTub network
  7. 7. Icefall: 56 flaws impact thousands of exposed industrial devices
  8. 8. Zero Day Initiative — CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack
  9. 9. Adobe Acrobat may block antivirus tools from monitoring PDF files
  10. 10. Mega says it can’t decrypt your files. New POC exploit shows otherwise
  11. 11. Meta Platforms Hacks CXL Memory Tier Into Linux
  12. 12. Microcorruption
  13. 13. NSA Playset
Josh Marpet
Josh Marpet
Executive Director at RM-ISAO
Tyler Robinson
Tyler Robinson
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

Related

Vulnerability management
Armoring the Unified Extensible Firmware Interface (UEFI), from Standards to Open Source – Vincent Zimmer – BTS #6

This session will provide an overview of the history of host firmware, or BIOS, focusing on the arc of the Unified Extensible Firmware Interface. It will include the development of defenses like UEFI Secure Boot and the challenges in scaling assurance across a broad ecosystem. It will close on works-in-progress and opportunities to build upon the s...
prestitial ad