Security Researchers Are Threat Actors - PSW #929

Author: Security Weekly - A CRA Resource - Bewertung: 1x - Views:4

This week in the security news:



- Security Researchers Are Threat Actors according to Microsoft

- Hands-free malicious firmware

- If you've ever typed "ls" in Windows, this is for you

- Cisco makes more patches, wants you to pay

- Ambiguous Secure Boot bypass

- Threat actors love network edge devices, and I have the chat logs and leaks to prove it

- The downside of chip sanctions

- Your VoIP phone is hacked

- Vulnerability disclosure and incentives

- Claude reccovers Bitcoin wallet

- an Instagram "Exploit"

- Turn the plane around

- The worms will continue

- PAN-OS global protect vulnerability

- The 1-Click Github token stealer

- Data-nuking prompt injection

- Turning Buses into spies

- SymJack

- NIST NVD mistakes, and how CNAs need to up their game



Visit https://www.securityweekly.com/psw for all the latest episodes!



Show Notes: https://securityweekly.com/psw-929



Chapters



00:00 Security News Roundup

02:51 SALTCON Insights and Reflections

10:58 NIST Vulnerability Database Issues

22:13 The Value of CVEs and Patching Strategies

27:08 The Challenge of Open Source Vulnerabilities

28:46 The Role of AI in Vulnerability Research

30:20 The Patch Dilemma: Finding and Applying Fixes

32:36 Vendor Incentives and Security Practices

36:22 SaaS Solutions and Security Responsibilities

38:34 The Future of AI in Software Security

41:05 Vulnerabilities in Consumer Devices

45:28 AI and Social Engineering Vulnerabilities

50:34 Microsoft's Stance on Vulnerability Disclosure

53:42 The BitLocker Bypass Controversy

56:39 Vulnerability Disclosure and Microsoft's Response

59:22 The Shadow Brokers and Historical Context

01:01:07 Dutch Police and the IOT Botnet Shutdown

01:04:40 Reflections on the Evolution of Hacking

01:06:21 The First Documented Computer Hack for Profit

01:14:43 Air Travel and Bluetooth Mishaps

01:20:37 Bluetooth Vulnerabilities and Security Risks

01:29:01 Accidental Discoveries in Tech

01:32:28 Exploring Arduino and Tamper Protection

01:33:30 Nightmare Eclipse and Secure Boot Vulnerabilities

01:35:05 Impact of US Sanctions on China's Tech Innovation

01:38:01 Challenges in Domestic Chip Manufacturing

01:40:46 Nuclear Energy and Its Role in Future Power Needs

01:43:41 Data Center Power Demands and Cooling Solutions

01:48:05 Phishing Attacks and Cybersecurity Awareness

01:49:46 Legislative Concerns Over Location Data Privacy