Hack Naked News Subscribe

Hack Naked News #198 – November 27, 2018

November 27, 2018

Full Audio

View Show Index

Segments

1. NodeJS, Rowhammer, & FBI FedEx –

Disastrous Rowhammer bitflips, malicious developer steals Bitcoin with nodeJS module, Germany proposes router security guidelines, Uber fined 148$ Million for data breach cover-up, Microsoft yanks 2 buggy Office patches, and a malvertising campaign impacts millions of iOS users! Jason Wood from Paladin Security joins us for expert commentary to discuss how The FBI created a Fake FedEx Website to Unmask a Cybercriminal!

Full Show Notes: https://wiki.securityweekly.com/HNNEpisode198

Hosts

Paul Asadoorian

Principal Security Researcher at Eclypsium

https://securitypodcaster.com

Security Researcher

https://jasonwood.io/

2. NodeJS, Rowhammer, & FBI FedEx – Hack Naked News #198

Disastrous Rowhammer bitflips, malicious developer steals Bitcoin with nodeJS module, Germany proposes router security guidelines, Uber fined 148$ Million for data breach cover-up, Microsoft yanks 2 buggy Office patches, and a malvertising campaign impacts millions of iOS users! Jason Wood from Paladin Security joins us for expert commentary to discuss how The FBI created a Fake FedEx Website to Unmask a Cybercriminal! Full Show Notes: https://wiki.securityweekly.com/HNNEpisode198 Visit http://hacknaked.tv to get all the latest episodes!

Related

Final fundings for 2024, Blackberry sells Cylance cheap, Product Testing Drama – ESW #388

December 19, 2024

In the enterprise security news, a final few fundings before the year closes out Arctic Wolf buys Cylance from Blackberry for cheap, a sentence that feels very weird to say the quiet HTTPS revolution passkeys are REALLY catching on resilience keeps showing up in the titles of news items Apple Intelligence insults the BBC’s intelligence MITRE ATT...

Risk Assessments/Management

D3FEND 1.0: A Milestone in Cyber Ontology – Peter Kaloroumakis – ESW #388

December 19, 2024

Since D3FEND was founded to fill a gap created by the MITRE ATT&CK Matrix, it has come a long way. We discuss the details of the 1.0 release of D3FEND with Peter in this episode, along with some of the new tools they've built to go along with this milestone. To use MITRE's own words to describe the gap this project fills: "it is necessary tha...

Vulnerability Management

2024 End-of-Year News and Wrapup – ESW #388

December 19, 2024

As we wrap up the year, we have an honest discussion about how important security really is to the business. We discuss some of Katie's predictions for AppSec in 2025, as well as "what sucks" in security!