Multiple iOS 0-Days, Intel Malware Defense, & Windows 0-Day Under Attack – PSW #673

Announcements

• Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

• Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

Hosts

Paul Asadoorian

Principal Security Researcher at Eclypsium

@0offset

https://securitypodcaster.com

1. 1. WordPress Pushes Out Multiple Flawed Security Updates
2. 2. Ryuk ransomware behind one third of all ransomware attacks in 2020 – Help Net Security
3. 3. 6 Cybersecurity Lessons From 2020
4. 4. State threat-sharing center warns of multiple PHP vulnerabilities – CyberScoop
5. 5. Changing Cybersecurity Culture
6. 6. Games in Microsoft Store Can Be Abused for Privilege Escalation on Windows
7. 7. What Keyboard Trackers Are For – Latest Hacking News
8. 8. Deception Technology: No Longer Only A Fortune 2000 Solution
9. 9. Git LFS vulnerability allows attackers to compromise targets’ Windows systems (CVE-2020-27955) – Help Net Security
10. 10. Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched
11. 11. California Proposition 24 Passes – Schneier on Security
12. 12. GitHub denies getting hacked
13. 13. Hackers are exploiting unpatched VoIP flaws to compromise business accounts
14. 14. Customers Are Demanding Privacy
15. 15. Deloitte’s ‘Test your Hacker IQ’ site fails itself after exposing database user name, password in config file
16. 16. Pornhub Has Been Blocked In Thailand, And People Aren’t Happy
    https://flip.it/wDg4zJ
17. 17. One Clear Message From Voters This Election? More Privacy
    https://flip.it/CREsbo
18. 18. Russian authorities make rare arrest of malware author
    https://flip.it/6hn7vv
19. 19. Massachusetts voters pass a right-to-repair measure, giving them unprecedented access to their car data – TechCrunch
    https://flip.it/w17LQA
20. 20. Back to Basics: Make Cocktails Normal Again – The Bulwark
    https://flip.it/nSiYNu
21. 21. Google to GitHub: Time’s up – this unfixed ‘high-severity’ security bug affects developers
    https://flip.it/mCnpwd
22. 22. New Chrome Zero-Day Under Active Attacks – Update Your Browser
23. 23. Mark Cuban: The World’s First Trillionaire Is Learning This Skill and Discovering How to Use It in Now Unimaginable Ways
    https://flip.it/-eDJbP
24. 24. Windows 10 zero-day could allow hackers to seize control of your computer
    https://flip.it/89.bLv
25. 25. A Nameless Hiker and the Case the Internet Can’t Crack
    https://flip.it/fLuD4x
26. 26. Hacker group uses Solaris zero-day to breach corporate networks
    https://flip.it/UzXovQ
27. 27. Google patches second Chrome zero-day in two weeks
    https://flip.it/eH0Y0a

Doug White

Professor at Roger Williams University

https://securedigitallife.com/

Joff Thyer

Security Analyst at Black Hills Information Security

https://www.blackhillsinfosec.com/team/joff-thyer/

Lee Neely

Retired Senior Cyber Advisor at Lawrence Livermore National Laboratory

Tyler Robinson

Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

@trob#6466

http://darkelement.io/