Security Weekly News Subscribe

Application security, Physical security, Threat intelligence, Vulnerability management, Zero trust

UEFI Trickboot, Krebs, Slack, & Docker Vulns – Wrap Up – SWN #86

December 4, 2020

This week, Dr. Doug talks Krebs, slack, docker vulnerabilities, Jeff Man finds fake news, a massive IoS article, and UEFI, all this and show wrap ups on the Security Weekly News Wrap Up!

Full episode and show notes

Host

Doug White

Doug White

Professor at Roger Williams University

https://securedigitallife.com/

1. Trickbot turns into TrickBoot with UEFI add ons
2. Joff Thyer’s Course
It's cheap.
3. Security Weekly Unlocked
4. Holiday Hack Challenge 2020
It's Free.
5. Krebs said that Cyber Command Deployed Personnel to Estonia to protect from Russian Election Interference
https://www.cbsnews.com/video/chris-krebs-to-60-minutes-2020-election-was-secure/
6. iOS zero-click radio proximity exploit odyessy
7. Who is the Smartest Man in the Room working with Sidney Powell?
https://www.instapaper.com/read/1367260663
8. Salesforce to Acquire Slack for 27.7 billion
9. Four million Docker Containers reveal 51% have critical flaws
10. EGregor takes out the Vancouver Metro
11. Arecibo collapse caught on up close drone video

Related

Managed services

Generative AI Security Implications, Protecting Web Applications – Liam Mayron – PSW #786

May 24, 2023

Liam Mayron from Fastly comes on the show to talk about his unique path into information security, the security implications of generative AI, advances in technologies to protect web applications, detecting bots, and enabling better MSP services! This segment is sponsored by Fastly. Visit https://securityweekly.com/fastly to learn more about them!...

Managed services

Are MSSPs Snubbing Web Security? Why Websites Take a Back Seat to Network Needs – CFH #22

May 23, 2023

It's understandable why many organizations' cyber investments heavily concentrate on protecting core networks and data centers from breaches and ransomware attacks. But let's not overlook the importance of ensuring that your website remains operational, especially when it directly drives revenue through sales or advertisements. Threats such as DDoS...

New TLDs Zip By, eBPF Fuzzer, Microsoft Rocks Rust, Unwanted Tracking Spec – ASW #242

May 22, 2023

New TLDs are already old news, fuzzing eBPF validators, Microsoft sets to kill bug classes, draft RFC to track location trackers, a top ten list with directory traversal on it, conference videos from Real World Crypto and BSidesSF, and an attack tree generator from markdown.