Application security, Identity and access, Insider threat, Security awareness

SIGRed RCE, Google Cloud ‘Confidential VMs’, & Twitter Hack Crypto Scam – ASW #115

July 20, 2020

This week, SIGRed – Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers, Introducing Google Cloud Confidential Computing with Confidential VMs, Internet of Things devices: Stick to these security rules or you could face a ban, Google Cloud Unveils 'Confidential VMs' to Protect Data in Use, and more!

Full episode and show notes

Announcements

Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

Hosts

Mike Shema

Security Partner at Square

John Kinsella

Co-founder & CTO at Cysense

Matt Alderman

VP, Product at Living Security

Application security

Auth Problems from Parsing, Slack’s Password Hashes, Twitter’s Info Breach – ASW #207

August 8, 2022

Nextauth.js account takeover due to parsing flaw, URL parsing flaw in Go's net/url, another path traversal, Slack exposes password hashes (whaaat!?), Twitter exposes 5.4 million accounts, ransomware and research against PyPI and GitHub, videos from fwd:cloudsec 2022.

Application security

Agility Broke AppSec. Now It’s Going to Fix It – Chen Gour Arie – ASW #207

August 8, 2022

In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain visibility and control over their environments. Rather...

Application security

Atlassian Vuln, Attacking OAuth, OpenSSF Security Audits, Tabletop Exercises – ASW #205

July 25, 2022

Vuln in an Atlassian Confluence app, "Dirty Dancing" in OAuth flows, security audits of sigstore and slf4j, flaws in fleet management app, conducting tabletop exercises.

SIGRed RCE, Google Cloud ‘Confidential VMs’, & Twitter Hack Crypto Scam – ASW #115

Announcements

Hosts

Related

Auth Problems from Parsing, Slack’s Password Hashes, Twitter’s Info Breach – ASW #207

Agility Broke AppSec. Now It’s Going to Fix It – Chen Gour Arie – ASW #207

Atlassian Vuln, Attacking OAuth, OpenSSF Security Audits, Tabletop Exercises – ASW #205