Xwo scans for default credentials and exposed web services. [Research Saturday]

FromCyberWire Daily

Start listening View podcast show

Xwo scans for default credentials and exposed web services. [Research Saturday]

FromCyberWire Daily

ratings:

Length:

17 minutes

Released:

Jun 8, 2019

Format:

Podcast episode

Description

Researchers at AT&T Alien Labs have been tracking a new malware family they've named "Xwo" that's scanning systems for default credentials and vulnerable web services.
Tom Hegel is security researcher with AT&T Alien Labs, and he share their findings.
The original research is here:
https://www.alienvault.com/blogs/labs-research/xwo-a-python-based-bot-scanner

Released:

Jun 8, 2019

Format:

Podcast episode

More Episodes from CyberWire Daily

Skip carousel

Geopolitical tensions rise with China. [Research Saturday] by CyberWire Daily
35 min listen
Ransomware attack turns legal attack. by CyberWire Daily
40 min listen
Dropbox sign breach exposes secrets. by CyberWire Daily
41 min listen
Retirement plan breach shakes financial giant. by CyberWire Daily
40 min listen
Ransomware is just a prescription for chaos. by CyberWire Daily
31 min listen
An unprecedented surge in credential stuffing. by CyberWire Daily
32 min listen
Encore: Jack Rhysider: Get your experience points in everything. [Media] [Career Notes] by CyberWire Daily
8 min listen
Cerber ransomware strikes Linux. [Research Saturday] by CyberWire Daily
16 min listen
Cyber Talent Insights: Strengthening the cyber talent pipeline apparatus. (Part 3 of 3) [Special Edition] by CyberWire Daily
55 min listen
Kaiser Permanente's privacy predicament. by CyberWire Daily
29 min listen
The shadowy adversary in Cisco's crosshairs. by CyberWire Daily
30 min listen
Iran's covert cyber operations exposed. by CyberWire Daily
42 min listen
Visa crackdown against spyware swindlers. by CyberWire Daily
36 min listen
Renewed surveillance sparks controversy. by CyberWire Daily
36 min listen
Cloud Architect vs Detection Engineer: Mutual benefit. [CyberWire-X] by CyberWire Daily
18 min listen
Encore: Kiersten Todt: problem solving and building solutions. [Policy] [Career Notes] by CyberWire Daily
7 min listen
The art of information gathering. [Research Saturday] by CyberWire Daily
32 min listen
Cyber Talent Insights: Charting your path in cybersecurity. (Part 2 of 3) [Special Edition] by CyberWire Daily
53 min listen
Swift responses to cyberattacks. by CyberWire Daily
31 min listen
From phishing to felony. by CyberWire Daily
34 min listen
The rebirth of Russia's cyber warfare. by CyberWire Daily
32 min listen
Weathering the phishing front. by CyberWire Daily
36 min listen
Hunting vulnerabilities. by CyberWire Daily
32 min listen
AWS in Orbit: Extending the resilient edge to space. [T-Minus AWS in Orbit]: We speak to AWS Aerospace and Satellite, and Iridium about extending the resilient edge to space. by CyberWire Daily
25 min listen
Encore: Stu Sjouwerman: Trying for a win, win, win game. [CEO] [Career Notes] by CyberWire Daily
6 min listen
AWS in Orbit: Building a resilient outernet. [T-Minus AWS in Orbit]: We speak to AWS Aerospace and Satellite, and Rivada Space Networks about enabling secure point-to-point global connectivity, and the opportunities of establishing a low-latency optical-link communication mesh network in low earth orbit. by CyberWire Daily
22 min listen
Breaking down a a high-severity vulnerability in Kubernetes. [Research Saturday] by CyberWire Daily
16 min listen
Privacy, power, and the path forward. by CyberWire Daily
31 min listen
Cyber Talent Insights: Navigating the landscape for enterprise organizations. (Part 1 of 3) [Special Edition] by CyberWire Daily
44 min listen
Apple's worldwide warning on mercenary attacks. by CyberWire Daily
43 min listen

Related podcast episodes

Skip carousel

The Hidden Dangers of Artificial Intelligence with Ben Zhao: The development of artificial intelligence has begun to feel inevitable and promising. But University of Chicago computer scientist, Ben Zhao, has spent much of his career testing how the security of these systems can break down. Zhao’s study involving Yelp reviews generated by A.I. show how these system could be used to distort our perceptions of reality, especially in this era of fake news. Music: BurrowBurrow, Lumber Down, House of Grendel, Tralaga, and Cicle DR Valga by Blue Dot Sessions by Big Brains
22 min listen
A Decade of AI Safety and Trust // Petar Tsankov // MLOps Podcast #218 by MLOps.community
58 min listen
Elastic Security Opens Public Detections Rules Repo - James Spiteri - PSW #667: Following the release of our detection engine, Elastic opened up a new GitHub repo of our public detection rules. See: https://github.com/elastic/detection-rules. This is where our security intelligence and analytics team develops rules, creates... by Security Weekly Podcast Network (Video)
56 min listen
Knowbella Tech - Collaboration Powered Open Science: Jason Barkeloo - Founder of Knowbella tech joins Future Tech Podcast. Knowbella Tech www.Knowbella.Tech crowdsources scientists around orphan/dormant intellectual properties (IP). By... by Finding Genius Podcast
25 min listen
Episode 144: Aleo with Howard Wu: In this episode, we invite Howard Wu back to the show to share more about his new project Aleo - a privacy-focused blockchain that enables fully private applications. We chat about why you need programming languages for SNARKs, what it is like to switch from VC/Academia to being a founder and the two important things missing in web services, high programmability and true user privacy. The project enables private applications with both data privacy and functional privacy - where the nature of the program running and all activity remains private. It is based on the ZEXE protocol and Proof-of-Succinct-Work. by Zero Knowledge
58 min listen
The Ethereum Merge Settles In as Next Crypto Narrative: This episode is sponsored by , , and . On today’s episode, NLW covers the crypto industry chatter around the Ethereum Merge. Last week, ETH devs pointed to September as a likely date for the transition from proof-of-work to proof-of-stake,... by The Breakdown
17 min listen
A Primer on Balaji’s “Network State”: This episode is sponsored by , , and . On this week’s Long Reads Sunday, NLW reads the “essay” version of Balaji Srinivasan’s new book - is a security-first platform where you can buy, exchange and borrow against your crypto.... by The Breakdown
19 min listen
Scanning For Default Credentials With Python - PSW #715: We've been working on this Python project that will use the Nmap Python library to scan the local network, enumerate select systems and devices, try to login with default or known credentials, and send a Slack message if it finds anything. The initial... by Security Weekly Podcast Network (Video)
32 min listen
Minimum Safe Distance - ASW #148: We start with the article about "Researchers Secretly Tried To Add Vulnerabilities to Linux Kernel, Ended Up Getting Banned" and explore its range of issues from ethics to securing huge, distributed software projects. It's hardly novel to point out... by Security Weekly Podcast Network (Audio)
73 min listen
2733: Securing the Open Source World: I sat down with Gal Elbaz, the co-founder and CTO of Oligo Security, to discuss the vulnerabilities and challenges within open-source software. Gal Elbaz, renowned for his pivotal discovery of a critical vulnerability in an open source library used... by The Tech Talks Daily Podcast
48 min listen
Episode 154: ZK for authentication with Nolan and Locke from NuID: In this week’s episode, Anna spoke with Nolan Smith and Locke Brown, co-founders at NuID - a zero knowledge authentication solution. They explore the use-case of zero knowledge powered password management and how this relates to Identity. by Zero Knowledge
53 min listen
S12:E3 - How to hack legally and penetrate the security field (Karen Miller): If you try, even you can hack it...just do it legally. by CodeNewbie
42 min listen
THE BREAKDOWN: A Primer on Balaji’s “Network State” by CoinDesk Podcast Network
19 min listen
Putting the “Fun” in Functional with Frank Chen: Almost everyone is using Slack, and a lot of that is because of the work of those like Frank Chen, Slack’s Senior Staff Software Engineer. Frank is here to tell us how Slack keeps us all angrily typing. But equally as important is his own trajectory which by Screaming in the Cloud
36 min listen
Holy Guacamole - PSW #715: The business of Security is gaining in maturity, from being an obscure corner of IT to becoming a core part of the C-Suite. How is this transformation happening and what can we learn from the similar trend that occurred in IT for the last decade?... by Security Weekly Podcast Network (Audio)
192 min listen
Episode 284: Using Formal Verification on ZK Systems with Jon Stephens: This week Anna Rose chats with Jon Stephens, Computer Science Ph.D. student in the UToPiA group at UT Austin and co-founder of Veridise. Veridise is a blockchain auditing firm that audits smart contracts and ZK systems. They discuss what led Jon to work on system security, what tools are available to test the security of ZK systems and the process of performing formal verification on ZK systems. They also cover general ZK security, why this topic matters and ways we can incentivise ethical disclosures when bugs and vulnerabilities are found. by Zero Knowledge
80 min listen
Deceptive Diffs From Subversive Submitters - ASW #148: We start with the article about "Researchers Secretly Tried To Add Vulnerabilities to Linux Kernel, Ended Up Getting Banned" and explore its range of issues from ethics to securing huge, distributed software projects. It's hardly novel to point out... by Security Weekly Podcast Network (Video)
38 min listen
Deceptive Diffs From Subversive Submitters - ASW #148: We start with the article about "Researchers Secretly Tried To Add Vulnerabilities to Linux Kernel, Ended Up Getting Banned" and explore its range of issues from ethics to securing huge, distributed software projects. It's hardly novel to point out... by Application Security Weekly (Video)
38 min listen
THE BREAKDOWN: A K-Shaped Recession? by CoinDesk Podcast Network
18 min listen
Elon Pulls Out: This episode is sponsored by , , and . After months of dithering, Elon Musk announced last Friday he would officially be pulling out of his deal to acquire Twitter for $44 billion. He cited as his reason a lack of transparency or clarity... by The Breakdown
17 min listen
The Battle Around Three Arrows Capital: This episode is sponsored by , , and . On today’s episode of “The Breakdown,” NLW looks at the latest in the battle involving toppled former crypto giant hedge fund Three Arrows Capital, including accusations from liquidators the... by The Breakdown
16 min listen
BREAKDOWN: The Battle Around Three Arrows Capital by CoinDesk Podcast Network
16 min listen
Daily: Ransomware updates. IP camera vulnerabilities. Steganography makes a comeback. Controlling content, with or without Internet autarky. Zo replaces Tay?: Daily: Ransomware updates. IP camera vulnerabilities. Steganography makes a comeback. Controlling content, with or without Internet autarky. Zo replaces Tay?  by CyberWire Daily
17 min listen
Episode 151: John Adler on Optimistic vs ZK Rollup and the data availability problem: In this episode, we chat with John Adler - co-founder of Lazy Ledger and Fuel Labs. We compare Optimistic Rollups and ZK Rollups as well as discuss how Ethereum, specifically Eth1, could look over the next few years. We also talk about the data availability challenge in blockchains and how Lazy Ledger aims to solve this. by Zero Knowledge
71 min listen
Tue. 03/16 – The 2nd Gen Nest Hub Gets Sleep Tracking by Techmeme Ride Home
18 min listen
Vigilantes in the IoT. Bad actors find a friend in the ShadowBrokers. BankBot is back in the PlayStore. Pixel-tracking for target recon. A very big Oracle patch.: Vigilantes in the IoT. Bad actors find a friend in the ShadowBrokers. BankBot is back in the PlayStore. Pixel-tracking for target recon. A very big Oracle patch. by CyberWire Daily
16 min listen
On Shaping the Global Terrain of AI Competition with Tim Hwang: Stanford AI Lab PhD Andrey Kurenkov interviews Tim Hwang, Research Fellow at Georgetown’s Center for Security and Emerging Technology (CSET) about his new report “Shaping the Terrain of AI Competition” and more. Subscribe: RSS | iTunes | Spotify | Y... by Last Week in AI
46 min listen
Peering into the Home w/ Aerial.ai's Wifi Motion Analytics - TWiML Talk #107: In this episode I’m joined by Michel Allegue and … by The TWIML AI Podcast (formerly This Week in Machine Learning & Artificial Intelligence)
41 min listen
Filtering Out All the [Market] Noise - Andrew Morris - ESW #264: There's a LOT of noise in the security industry. We've catalogued over 10,000 cybersecurity products and each of the companies behind these products has a marketing team, a twitter account, a blog, and a ton of content to blast at enterprise security... by Enterprise Security Weekly (Video)
61 min listen
Filtering Out All the [Market] Noise - Andrew Morris - ESW #264: There's a LOT of noise in the security industry. We've catalogued over 10,000 cybersecurity products and each of the companies behind these products has a marketing team, a twitter account, a blog, and a ton of content to blast at enterprise security... by Security Weekly Podcast Network (Video)
61 min listen

Discover this podcast and so much more

Xwo scans for default credentials and exposed web services. [Research Saturday]

Xwo scans for default credentials and exposed web services. [Research Saturday]

Description

More Episodes from CyberWire Daily

Related podcast episodes