Security Weekly
Security Weekly NewsSubscribe
Data Security, Supply chain, Security Staff Acquisition & Development

TREXes, WooCommerce, 3CX, Zimbra, OneNote, ChatGPT, ProPump, & Aaran Leyland – SWN #285

Flappy TREX lips, WooCommerce, 3CX, Zimbra, OneNote, ChatGPT, ProPump, Aaran Leyland, and More on this episode of the Security Weekly News.

Full episode and show notes

Hosts

Professor at Roger Williams University
  1. 1. Hackers inject credit card stealers into payment processing modules

  2. 2. Hackers compromise 3CX desktop app in a supply chain attack

  3. 3. Pro-Russia cyber spies target US, European govt agencies

  4. 4. Microsoft OneNote will block 120 dangerous file extensions

  5. 5. ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation

  6. 6. Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks

  7. 7. Sorry, Jurassic Park: T. Rex Had Lips

Cyber security lead EMEA at Defence
  1. 1. ‘Vulkan files’ leak reveals Putin’s global and domestic cyberwarfare tactics

    Documents leaked by whistleblower angry over Ukraine war

    Private Moscow consultancy bolstering Russian cyberwarfare

    Tools support hacking operations and attacks on infrastructure

    Documents linked to notorious Russian hacking group Sandworm

    Russian program aims to control internet and spread disinformation

    Youtube on setting up Velociraptor: youtube.com/watch?v=EA40rztSOd4

    https://github.com/Velocidex/velociraptor

    Tutorial on how to Approach Typical DFIR Cases with Velociraptor

    https://blog.compass-security.com/2022/10/tutorial-on-how-to-approach-typical-dfir-cases-with-velociraptor/

Related

It’s A Minifilter! – PSW #823

pfSense switches to Linux (April Fools?), Flipper panic in Oz, Tales from the Krypt, Funding to secure the Internet, Abusing SSH on Windows, Blinding EDR, more hotel hacking, Quantum Bleed, and more!
Why cyber hygiene requires curious talent – Clea Ostendorf – ESW #355

Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed another major factor in folks that brought a lot of value to security teams: diversity. Diversity of ...