Plastic Bags, NSA Playsets, Megs Insecure, PHP Strikes Back, & Gamification – PSW #745
In the Security News for this week: appliances with holes, gamification and its pitfalls, false rocket sirens, PHP strikes again, new laws we may actually agree with, hacking jacuzzis, Icefall and the state of ICS security, Adobe is blocking anti-virus, Mega is Mega insecure, Microcorruption CTF and DIY NSA playset!
Announcements
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.
Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!
Hosts
Paul Asadoorian
Principal Security Researcher at Eclypsium
- 1. Cisco warns of security holes in its security appliances
- 2. Gamification of Ethical Hacking and Hacking Esports
- 3. Authorities Suspect Cyber Attack Behind False Rocket Sirens in Israel
- 4. Critical PHP flaw exposes QNAP NAS devices to RCE attacks
- 5. Senate bill would ban data brokers from selling location and health data
- 6. Hacking into the worldwide Jacuzzi SmartTub network
- 7. Icefall: 56 flaws impact thousands of exposed industrial devices
- 8. Zero Day Initiative — CVE-2022-23088: Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack
- 9. Adobe Acrobat may block antivirus tools from monitoring PDF files
- 10. Mega says it can’t decrypt your files. New POC exploit shows otherwise
- 11. Meta Platforms Hacks CXL Memory Tier Into Linux
- 12. Microcorruption
- 13. NSA Playset
Tyler Robinson
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element
