Watch out for the Dirty Pipe!

FromSecurity This Week

Start listening View podcast show

Watch out for the Dirty Pipe!

FromSecurity This Week

ratings:

Length:

45 minutes

Released:

Mar 12, 2022

Format:

Podcast episode

Description

As the kinetic war (and cyberwar) between Ukraine and Russia marches on, a new Linux exploit wreaks havoc on all Linux (and therefore Android) systems. Patch it!

Released:

Mar 12, 2022

Format:

Podcast episode

Titles in the series (100)

Enterprise security topics are discussed through the lens of current events, which catapult us into a discussion about hacking methods, security measures, and outcomes. Your hosts are Carl Franklin, Patrick Hynds, and Duane LaFlotte

Skip carousel

Not a good week for Microsoft: Several attacks against Microsoft properties this week. They can't catch a break! by Security This Week
48 min listen
From Russia, with Love: Looks like Russia is hacking Ukraine. Who knew? by Security This Week
38 min listen
Living in a Zero-Trust World: A US government mandate requires authentication systems to start adopting zero-trust policies. Are you ready? by Security This Week
35 min listen
It's the Little Things: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
Rowhammer Time!: What happens when the digital world collides with the physical world? by Security This Week
45 min listen
Watch out for the Dirty Pipe!: As the kinetic war (and cyberwar) between Ukraine and Russia marches on, a new Linux exploit wreaks havoc on all Linux (and therefore Android) systems. Patch it! by Security This Week
45 min listen
Cash for Hacks: Disgruntled employee participates in a ransomware attack against their own company! Also, what's a public/private key pair? by Security This Week
48 min listen
Introducing Security This Week: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
VPNs and Cruise Missiles: Carl and Patrick (no Duane this week) talk about the Colonial Pipeline ransomware hack, and Pat's thoughts on how to shut down ransomware. by Security This Week
42 min listen
This Week in Ransomware: Phishing is when a bad actor sends you an email that looks like it came from Microsoft, Amazon, Google, or some other legit company that you probably use. They give you a link to click on for some reason, and with a single click, your entire hard... by Security This Week
47 min listen
The Internet is Burning!: No, really. You NEED to listen to this episode before you do anything else. by Security This Week
39 min listen
Redemption: Microsoft and Apple go on a Patch Rampage! by Security This Week
45 min listen
We were just trying to help by Security This Week
38 min listen
The Pyramid of Threats: Patrick talks about the Pyramid of Threats, a mental model to categorize threats according to their popularity (biggest at the base). The higher you go up the pyramid, the harder it is to defend yourself against the threats. by Security This Week
44 min listen
Not Really the Last Pass: Enable 2 Factor Authentication on your LastPass account! by Security This Week
30 min listen
More Log4j Stuff: We think we'll be talking about Log4j for a long time. by Security This Week
45 min listen
Don't look a grift horse in the mouth!: If you have an Android phone and get apps from the Google Play store, you might have been robbed. by Security This Week
38 min listen
Trick or Treat!: This week there have been some tricks, but you'll get a treat at the end! by Security This Week
52 min listen
Hackers Get Involved!: As Russia wages war on Ukraine, we see stories emerging of hacking groups on both sides joining the cyberwar. by Security This Week
43 min listen
OK, Facebook!: One good thing about last week's Facebook outage is that our kids now know what DNS is. by Security This Week
29 min listen
Skim This!: Nefarious individuals can steal your credit card right underneath your nose! by Security This Week
49 min listen
Macros Shmacros!: This week, Microsoft got around to disabling Internet macros in Office apps by default. Brilliant! by Security This Week
40 min listen
Beware Sharp Edges!: Ransomware is the overwhelming theme for this show. As for the sharp edges, you'll have to listen to get that reference. by Security This Week
40 min listen
Pull up your Breaches!: You will be a breach victim sooner or later. If you don't take measures to mitigate risk, and you get breached, you could be sued. by Security This Week
38 min listen
Google says Oops!: Last week, Google sent a security patch to 3.2 billion users of Chrome by Security This Week
43 min listen
Hoisted by their own Petard: Last week cyberspies infected themselves with their own malware by Security This Week
31 min listen
Russia and Facebook Cancel Each Other: Facebook blocked Russia right after Russia blocked Facebook by Security This Week
47 min listen
The Neverending Side Story: The three amigos can't seem to stop going on tangents when discussing ransomware and other hacks. by Security This Week
39 min listen
What if you lost your phone?: Prepare for the prospect that someday your phone may be lost or stolen. by Security This Week
43 min listen
Happy Christmahaunukwanzadan!: More Log4j developments, more career advice for criminals, and more reasons to not click on email links. by Security This Week
34 min listen

More Episodes from Security This Week

Skip carousel

Microsoft AI. Secure?: Hear about what Carl learned about AI Security while at Microsoft Build in Seattle last week. by Security This Week
30 min listen
WiFi Hacked Again!: New WiFi Flaw Leaves All Devices Vulnerable to ‘SSID Confusion’ Attacks by Security This Week
33 min listen
Is Your Software USDA Approved?: The US Government Is Asking Big Tech to Promise Better Cybersecurity by Security This Week
44 min listen
Is DropBox Done?: An SEC security breach filing has us wondering! by Security This Week
37 min listen
AI Attacks!: GPT-4 Can Exploit Most Vulns Just by Reading Threat Advisories by Security This Week
43 min listen
The Last Pass for LastPass?: Hackers targeted LastPass employee in failed deep fake CEO call. by Security This Week
51 min listen
Hey Microsoft, is your House Clean?: Microsoft employees exposed internal passwords in security lapse by Security This Week
27 min listen
State Hackers Blow up Red Hat Linux from the Inside!: Red Hat warns of backdoor in XZ tools used by most Linux distros by Security This Week
34 min listen
Dyslexic Vampire Sends Rouge iMessages!: New Darcula phishing service targets iPhone users via iMessage by Security This Week
28 min listen
They can hear what you're typing!: New acoustic attack determines keystrokes from typing patterns by Security This Week
36 min listen
TikTok. Time's a Wastin!: House passes bill that would ban TikTok if its Chinese owners don't sell the popular app. by Security This Week
38 min listen
Repo Man Confused. Film at 11.: Over 100,000 Infected Repos Found on GitHub! by Security This Week
31 min listen
Is C# Dead?: White House urges devs to switch to memory-safe programming languages by Security This Week
42 min listen
Is Your AI Writing Rubber Checks?: Air Canada must honor refund policy invented by airline’s chatbot by Security This Week
30 min listen
Hey Canada, Where's My Car?: Canada to ban the Flipper Zero to stop surge in car thefts by Security This Week
36 min listen
Spoutible Exposes Sensitive User Data!: At least the API was thorough! by Security This Week
38 min listen
The Mother of All Breaches!: Mother of all breaches reveals 26 billion records! by Security This Week
46 min listen
Is Bitcoin no longer anonymous?: How a 27-year-old busted the myth of Bitcoin’s anonymity by Security This Week
39 min listen
Kerberos Bug Fixed! Film at 11!: Microsoft fixes critical flaws in Windows Kerberos, Hyper-V by Security This Week
35 min listen
PornHub Complaining Again: PornHub blocks North Carolina, Montana over new age verification laws by Security This Week
33 min listen
Ultimate Job Interview Fail!: Blockchain dev's wallet emptied in "job interview" using npm package by Security This Week
41 min listen
Yes, Virginia, They ARE Listening to You: Marketing Company Claims That It Actually Is Listening to Your Phone and Smart Speakers to Target Ads by Security This Week
36 min listen
WordPress... WTF!: 50K WordPress sites exposed to RCE attacks by critical bug in backup plugin by Security This Week
34 min listen
Got LogoFAIL? You're Screwed!: LogoFAIL exploit bypasses hardware and software security measures and is nearly impossible to detect or remove by Security This Week
39 min listen
Is Your iPhone Exploiting You?: Last week there was a scare about the NameDrop feature in iOS 17. What's the real story? by Security This Week
29 min listen
What's wrong with Password123?: The guys check out a list of the top 200 most common passwords used all over the world. by Security This Week
38 min listen
Apparently Crime Pays!: Fraudsters make $50,000 a day by spoofing crypto researchers by Security This Week
50 min listen
OpenAI Goes Down. Film at 11: OpenAI confirms DDoS attacks behind ongoing ChatGPT outages by Security This Week
37 min listen
Who's That Knocking at Your Windows?: Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover by Security This Week
32 min listen
Revenge of the Windows Phone!: Windows Phone gets revenge on YouTube from the grave by helping users bypass its ad-blocker-blocker by Security This Week
34 min listen

Related podcast episodes

Skip carousel

Updates on Russia’s invasion of Ukraine, and the cyber phases of a hybrid war. Hacktivists and privateers. New Chinese malware described. Registration-bombing. by CyberWire Daily
29 min listen
A look at the cyber aspects of Russia’s war, on the first anniversary of the invasion of Ukraine. And a few notes from elsewhere in cyberspace. by CyberWire Daily
31 min listen
Swapping propaganda shots. ICANN will not block the Internet in Russia. Hacktivists achieve a nuisance-level of success. NVIDIA gets a most curious demand. And there’s no US draft.: Swapping propaganda shots. ICANN will not block the Internet in Russia. Hacktivists achieve a nuisance-level of success. NVIDIA gets a most curious demand. And there’s no US draft. by CyberWire Daily
26 min listen
Espionage, both online and in-person. Sabotage, both kinetic and (maybe eventually) cyber. Waterin holes, deepfakes, and the pushing of naughty words. by CyberWire Daily
31 min listen
GRU operators masquerade as Ukrainian telecommunications providers. 2K Games Support compromised to spread malware. Developments in the cyber underworld. by CyberWire Daily
30 min listen
Disinformation and cyberattacks in Russia’s hybrid war against Ukraine. DDoS attack hits Israeli telcos. Captured tools are old news. Recent trends in cybercrime.: Disinformation and cyberattacks in Russia’s hybrid war against Ukraine. DDoS attack hits Israeli telcos. Captured tools are old news. Recent trends in cybercrime. by CyberWire Daily
28 min listen
Updates on the hybrid war: hacktivism and hunting forward. Election security. Trends in phishing. The return of Emotet. by CyberWire Daily
28 min listen
Thu. 06/09 – Who Needs A Gaming Console? Not Xbox Or Samsung. by Techmeme Ride Home
16 min listen
Ransomware updates: TrueBot, Cl0p, and Royal. Iranian cyberattacks. An update on the cyberattack against the Met. Notes on the hybrid war, with a focus on allies and outside actors. by CyberWire Daily
27 min listen
Cyber dimensions of Russia’s hybrid war against Ukraine. Hacktivists and cybercriminals choose sides. Lapsu$ releases NVIDIA and Samsung data (and says a victim hacked back). by CyberWire Daily
27 min listen
A new loader variant for wiper campaigns. Sanctions, hacktivism, and disinformation. Conti’s toxic branding. Happy birthday, US Cyber Command. by CyberWire Daily
23 min listen
Hacktivism, protestware, and information operations in a hybrid war. Brazi-based cyber gangs active in extortion. Steganography opens a backdoor. A free decryptor for Diavol ransomware.: Hacktivism, protestware, and information operations in a hybrid war. Brazi-based cyber gangs active in extortion. Steganography opens a backdoor. A free decryptor for Diavol ransomware. by CyberWire Daily
26 min listen
Traffers and the threat to credentials. WiFi protocol flaw. Cross-chain bridge attacks. A shift in Russian cyber operations. Piracy is patriotic. by CyberWire Daily
24 min listen
Episode 24: FUD for Thought | LUP 24: The battle lines have been drawn and the assault against upstart is in full force. We’ll discuss the heat being put on Canonical, the CLA, and upstart with our virtual LUG. Then we’ll bust some Linux switching FUD that’s been popping up. by LINUX Unplugged
74 min listen
Episode 39: Fragmentation Timebomb | LUP 39: Ubuntu will be rolling out their first generation Qt based desktop environment, Mir, Wayland and X11 are competing, and developers are crying fragmentation. But how would we shape the future if we could wave a magic wand? And is fragmentation a problem? by LINUX Unplugged
56 min listen
Software supply chains, C2C markets, criminals, and cyber auxiliaries in a hybrid war. CISA releases its Stakeholder Specific Vulnerability Categorization (SSVC). by CyberWire Daily
28 min listen
The Chris Voss Show Podcast – Cold War 2.0: Artificial Intelligence in the New Battle between China, Russia, and America by George S. Takach by The Chris Voss Show
49 min listen
Interpol scores against BEC, online fraud, and money laundering. Developments in C2C markets. Versioning vulnerability. Cyber war and cyber escalation. by CyberWire Daily
28 min listen
CosmicEnergy: OT and ICS malware from Russia, maybe for red teaming. Updates on Volt Typhoon. Legion malware upgraded for the cloud. Natural-disaster-themed online fraud. by CyberWire Daily
27 min listen
George S. Takach, "Cold War 2.0: Artificial Intelligence in the New Battle between China, Russia, and America" (Pegasus Book, 2024): An interview with George S. Takach by New Books in Science, Technology, and Society
68 min listen
George S. Takach, "Cold War 2.0: Artificial Intelligence in the New Battle between China, Russia, and America" (Pegasus Book, 2024): An interview with George S. Takach by New Books in Political Science
68 min listen
"Cylance" ransomware (no relation to Cylance). Update on the 3CX incident. The FSB's arrest of Evan Gershkovich. Ukrainian hacktivist social engineering in the hybrid war. by CyberWire Daily
31 min listen
George S. Takach, "Cold War 2.0: Artificial Intelligence in the New Battle between China, Russia, and America" (Pegasus Book, 2024): An interview with George S. Takach by New Books in Chinese Studies
68 min listen
The Playground and the Stage (Ep. 5): Mitch and Blake propose a framework for understanding user-generated content in games based on two central metaphors -- the playground and the stage -- representing the two ways users "create" content in games through play and performance. They... by Gamecraft
71 min listen
States, disunited: the controversy around cluster bombs by The Intelligence from The Economist
27 min listen
States, disunited: the controversy around cluster bombs by Economist Podcasts
27 min listen
Ukraine Two Years On – Your Questions Answered: The Global News Podcast and Ukrainecast have come together to answer your questions by Global News Podcast
29 min listen
The who's who of darknet forums: In the second episode of our series on darknet marketplaces, we look at the personalities that helped build popular darknet forums and learn about the communication technologies and cryptocurrencies their members rely on. We also dig into how the geopolitics of the Russia-Ukraine war changed the nature of cooperation amongst cyber criminals on the dark net. by POLITICO Tech
17 min listen
Updates on Russia’s hybrid war against Ukraine. The leader of the Lapsus$ Gang may be a 16-year-old living with his Mom. Wanted cybercriminals. Hacktivism’s sometimes wayward aim. by CyberWire Daily
26 min listen
Lithuania warns of DDoS. Some limited Russian success in cyber phases of its hybrid war. Spyware infestations in Italy and Kazakstan. Tabletop exercises. Ransomware as misdirection by CyberWire Daily
28 min listen

Discover this podcast and so much more

Watch out for the Dirty Pipe!

Watch out for the Dirty Pipe!

Description

Titles in the series (100)

More Episodes from Security This Week

Related podcast episodes