Springtime brings a Spring Vulnerability

FromSecurity This Week

Start listening View podcast show

Springtime brings a Spring Vulnerability

FromSecurity This Week

ratings:

Length:

38 minutes

Released:

Apr 2, 2022

Format:

Podcast episode

Description

A new vulnerability in the Spring framework, a tool for programmers, may become the new Log4J

Released:

Apr 2, 2022

Format:

Podcast episode

Titles in the series (100)

Enterprise security topics are discussed through the lens of current events, which catapult us into a discussion about hacking methods, security measures, and outcomes. Your hosts are Carl Franklin, Patrick Hynds, and Duane LaFlotte

Skip carousel

Beware Sharp Edges!: Ransomware is the overwhelming theme for this show. As for the sharp edges, you'll have to listen to get that reference. by Security This Week
40 min listen
Cash for Hacks: Disgruntled employee participates in a ransomware attack against their own company! Also, what's a public/private key pair? by Security This Week
48 min listen
Hacker Takes down North Korea's Internet in his Pajamas: Why North Korea's Internet was wearing the hacker's pajamas we'll never know! by Security This Week
39 min listen
Introducing Security This Week: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
VPNs and Cruise Missiles: Carl and Patrick (no Duane this week) talk about the Colonial Pipeline ransomware hack, and Pat's thoughts on how to shut down ransomware. by Security This Week
42 min listen
Not a good week for Microsoft: Several attacks against Microsoft properties this week. They can't catch a break! by Security This Week
48 min listen
We were just trying to help by Security This Week
38 min listen
It's the Little Things: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
The Pyramid of Threats: Patrick talks about the Pyramid of Threats, a mental model to categorize threats according to their popularity (biggest at the base). The higher you go up the pyramid, the harder it is to defend yourself against the threats. by Security This Week
44 min listen
UK Government Porn Site: The Dirty Dangers of DNS! by Security This Week
41 min listen
This Week in Ransomware: Phishing is when a bad actor sends you an email that looks like it came from Microsoft, Amazon, Google, or some other legit company that you probably use. They give you a link to click on for some reason, and with a single click, your entire hard... by Security This Week
47 min listen
Redemption: Microsoft and Apple go on a Patch Rampage! by Security This Week
45 min listen
OK, Facebook!: One good thing about last week's Facebook outage is that our kids now know what DNS is. by Security This Week
29 min listen
Don't look a grift horse in the mouth!: If you have an Android phone and get apps from the Google Play store, you might have been robbed. by Security This Week
38 min listen
Trick or Treat!: This week there have been some tricks, but you'll get a treat at the end! by Security This Week
52 min listen
World War Hack!: Nation-states are ramping up the cyberwar by Security This Week
49 min listen
Pull up your Breaches!: You will be a breach victim sooner or later. If you don't take measures to mitigate risk, and you get breached, you could be sued. by Security This Week
38 min listen
Not Really the Last Pass: Enable 2 Factor Authentication on your LastPass account! by Security This Week
30 min listen
Living in a Zero-Trust World: A US government mandate requires authentication systems to start adopting zero-trust policies. Are you ready? by Security This Week
35 min listen
Government go for security. No get.: US Federal Network Hacked. Doh! by Security This Week
44 min listen
The Game that Takes Down Russia: You can play a game that, when you play it, will help take down Russian websites. by Security This Week
40 min listen
Skim This!: Nefarious individuals can steal your credit card right underneath your nose! by Security This Week
49 min listen
More Log4j Stuff: We think we'll be talking about Log4j for a long time. by Security This Week
45 min listen
The Neverending Side Story: The three amigos can't seem to stop going on tangents when discussing ransomware and other hacks. by Security This Week
39 min listen
Bitcoin ATMs Hacked for $1.5 Million: Hackers drain bitcoin ATMs of $1.5 million by exploiting zero-day bug. by Security This Week
41 min listen
Holy Crap! My Fridge is on TikTok!: Carl is horrified at how hackable your smart TV actually is! by Security This Week
40 min listen
To Quantum and NOT to Quantum: Schrödinger's cat is dead! Or is it? by Security This Week
36 min listen
Rowhammer Time!: What happens when the digital world collides with the physical world? by Security This Week
45 min listen
Hoisted by their own Petard: Last week cyberspies infected themselves with their own malware by Security This Week
31 min listen
Space Pirates Attack!: Chinese Space Pirates are hacking Russian aerospace firms. Film at 11. by Security This Week
45 min listen

More Episodes from Security This Week

Skip carousel

Zoom Invents Time Machine. Film at 11.: Zoom adds 'post-quantum' encryption for video nattering by Security This Week
47 min listen
Microsoft AI. Secure?: Hear about what Carl learned about AI Security while at Microsoft Build in Seattle last week. by Security This Week
30 min listen
WiFi Hacked Again!: New WiFi Flaw Leaves All Devices Vulnerable to ‘SSID Confusion’ Attacks by Security This Week
33 min listen
Is Your Software USDA Approved?: The US Government Is Asking Big Tech to Promise Better Cybersecurity by Security This Week
44 min listen
Is DropBox Done?: An SEC security breach filing has us wondering! by Security This Week
37 min listen
AI Attacks!: GPT-4 Can Exploit Most Vulns Just by Reading Threat Advisories by Security This Week
43 min listen
The Last Pass for LastPass?: Hackers targeted LastPass employee in failed deep fake CEO call. by Security This Week
51 min listen
Hey Microsoft, is your House Clean?: Microsoft employees exposed internal passwords in security lapse by Security This Week
27 min listen
State Hackers Blow up Red Hat Linux from the Inside!: Red Hat warns of backdoor in XZ tools used by most Linux distros by Security This Week
34 min listen
Dyslexic Vampire Sends Rouge iMessages!: New Darcula phishing service targets iPhone users via iMessage by Security This Week
28 min listen
They can hear what you're typing!: New acoustic attack determines keystrokes from typing patterns by Security This Week
36 min listen
TikTok. Time's a Wastin!: House passes bill that would ban TikTok if its Chinese owners don't sell the popular app. by Security This Week
38 min listen
Repo Man Confused. Film at 11.: Over 100,000 Infected Repos Found on GitHub! by Security This Week
31 min listen
Is C# Dead?: White House urges devs to switch to memory-safe programming languages by Security This Week
42 min listen
Is Your AI Writing Rubber Checks?: Air Canada must honor refund policy invented by airline’s chatbot by Security This Week
30 min listen
Hey Canada, Where's My Car?: Canada to ban the Flipper Zero to stop surge in car thefts by Security This Week
36 min listen
Spoutible Exposes Sensitive User Data!: At least the API was thorough! by Security This Week
38 min listen
The Mother of All Breaches!: Mother of all breaches reveals 26 billion records! by Security This Week
46 min listen
Is Bitcoin no longer anonymous?: How a 27-year-old busted the myth of Bitcoin’s anonymity by Security This Week
39 min listen
Kerberos Bug Fixed! Film at 11!: Microsoft fixes critical flaws in Windows Kerberos, Hyper-V by Security This Week
35 min listen
PornHub Complaining Again: PornHub blocks North Carolina, Montana over new age verification laws by Security This Week
33 min listen
Ultimate Job Interview Fail!: Blockchain dev's wallet emptied in "job interview" using npm package by Security This Week
41 min listen
Yes, Virginia, They ARE Listening to You: Marketing Company Claims That It Actually Is Listening to Your Phone and Smart Speakers to Target Ads by Security This Week
36 min listen
WordPress... WTF!: 50K WordPress sites exposed to RCE attacks by critical bug in backup plugin by Security This Week
34 min listen
Got LogoFAIL? You're Screwed!: LogoFAIL exploit bypasses hardware and software security measures and is nearly impossible to detect or remove by Security This Week
39 min listen
Is Your iPhone Exploiting You?: Last week there was a scare about the NameDrop feature in iOS 17. What's the real story? by Security This Week
29 min listen
What's wrong with Password123?: The guys check out a list of the top 200 most common passwords used all over the world. by Security This Week
38 min listen
Apparently Crime Pays!: Fraudsters make $50,000 a day by spoofing crypto researchers by Security This Week
50 min listen
OpenAI Goes Down. Film at 11: OpenAI confirms DDoS attacks behind ongoing ChatGPT outages by Security This Week
37 min listen
Who's That Knocking at Your Windows?: Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover by Security This Week
32 min listen

Discover this podcast and so much more

Springtime brings a Spring Vulnerability

Springtime brings a Spring Vulnerability

Description

Titles in the series (100)

More Episodes from Security This Week