State Hackers Blow up Red Hat Linux from the Inside!

FromSecurity This Week

Start listening View podcast show

State Hackers Blow up Red Hat Linux from the Inside!

FromSecurity This Week

ratings:

Length:

34 minutes

Released:

Apr 6, 2024

Format:

Podcast episode

Description

Red Hat warns of backdoor in XZ tools used by most Linux distros

Released:

Apr 6, 2024

Format:

Podcast episode

Titles in the series (100)

Enterprise security topics are discussed through the lens of current events, which catapult us into a discussion about hacking methods, security measures, and outcomes. Your hosts are Carl Franklin, Patrick Hynds, and Duane LaFlotte

Skip carousel

Not a good week for Microsoft: Several attacks against Microsoft properties this week. They can't catch a break! by Security This Week
48 min listen
From Russia, with Love: Looks like Russia is hacking Ukraine. Who knew? by Security This Week
38 min listen
Living in a Zero-Trust World: A US government mandate requires authentication systems to start adopting zero-trust policies. Are you ready? by Security This Week
35 min listen
It's the Little Things: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
Rowhammer Time!: What happens when the digital world collides with the physical world? by Security This Week
45 min listen
Watch out for the Dirty Pipe!: As the kinetic war (and cyberwar) between Ukraine and Russia marches on, a new Linux exploit wreaks havoc on all Linux (and therefore Android) systems. Patch it! by Security This Week
45 min listen
Cash for Hacks: Disgruntled employee participates in a ransomware attack against their own company! Also, what's a public/private key pair? by Security This Week
48 min listen
Introducing Security This Week: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
VPNs and Cruise Missiles: Carl and Patrick (no Duane this week) talk about the Colonial Pipeline ransomware hack, and Pat's thoughts on how to shut down ransomware. by Security This Week
42 min listen
This Week in Ransomware: Phishing is when a bad actor sends you an email that looks like it came from Microsoft, Amazon, Google, or some other legit company that you probably use. They give you a link to click on for some reason, and with a single click, your entire hard... by Security This Week
47 min listen
The Internet is Burning!: No, really. You NEED to listen to this episode before you do anything else. by Security This Week
39 min listen
Redemption: Microsoft and Apple go on a Patch Rampage! by Security This Week
45 min listen
We were just trying to help by Security This Week
38 min listen
The Pyramid of Threats: Patrick talks about the Pyramid of Threats, a mental model to categorize threats according to their popularity (biggest at the base). The higher you go up the pyramid, the harder it is to defend yourself against the threats. by Security This Week
44 min listen
Not Really the Last Pass: Enable 2 Factor Authentication on your LastPass account! by Security This Week
30 min listen
More Log4j Stuff: We think we'll be talking about Log4j for a long time. by Security This Week
45 min listen
Don't look a grift horse in the mouth!: If you have an Android phone and get apps from the Google Play store, you might have been robbed. by Security This Week
38 min listen
Trick or Treat!: This week there have been some tricks, but you'll get a treat at the end! by Security This Week
52 min listen
Hackers Get Involved!: As Russia wages war on Ukraine, we see stories emerging of hacking groups on both sides joining the cyberwar. by Security This Week
43 min listen
OK, Facebook!: One good thing about last week's Facebook outage is that our kids now know what DNS is. by Security This Week
29 min listen
Skim This!: Nefarious individuals can steal your credit card right underneath your nose! by Security This Week
49 min listen
Macros Shmacros!: This week, Microsoft got around to disabling Internet macros in Office apps by default. Brilliant! by Security This Week
40 min listen
Beware Sharp Edges!: Ransomware is the overwhelming theme for this show. As for the sharp edges, you'll have to listen to get that reference. by Security This Week
40 min listen
Pull up your Breaches!: You will be a breach victim sooner or later. If you don't take measures to mitigate risk, and you get breached, you could be sued. by Security This Week
38 min listen
Google says Oops!: Last week, Google sent a security patch to 3.2 billion users of Chrome by Security This Week
43 min listen
Hoisted by their own Petard: Last week cyberspies infected themselves with their own malware by Security This Week
31 min listen
Russia and Facebook Cancel Each Other: Facebook blocked Russia right after Russia blocked Facebook by Security This Week
47 min listen
The Neverending Side Story: The three amigos can't seem to stop going on tangents when discussing ransomware and other hacks. by Security This Week
39 min listen
What if you lost your phone?: Prepare for the prospect that someday your phone may be lost or stolen. by Security This Week
43 min listen
Happy Christmahaunukwanzadan!: More Log4j developments, more career advice for criminals, and more reasons to not click on email links. by Security This Week
34 min listen

More Episodes from Security This Week

Skip carousel

Microsoft AI. Secure?: Hear about what Carl learned about AI Security while at Microsoft Build in Seattle last week. by Security This Week
30 min listen
WiFi Hacked Again!: New WiFi Flaw Leaves All Devices Vulnerable to ‘SSID Confusion’ Attacks by Security This Week
33 min listen
Is Your Software USDA Approved?: The US Government Is Asking Big Tech to Promise Better Cybersecurity by Security This Week
44 min listen
Is DropBox Done?: An SEC security breach filing has us wondering! by Security This Week
37 min listen
AI Attacks!: GPT-4 Can Exploit Most Vulns Just by Reading Threat Advisories by Security This Week
43 min listen
The Last Pass for LastPass?: Hackers targeted LastPass employee in failed deep fake CEO call. by Security This Week
51 min listen
Hey Microsoft, is your House Clean?: Microsoft employees exposed internal passwords in security lapse by Security This Week
27 min listen
Dyslexic Vampire Sends Rouge iMessages!: New Darcula phishing service targets iPhone users via iMessage by Security This Week
28 min listen
They can hear what you're typing!: New acoustic attack determines keystrokes from typing patterns by Security This Week
36 min listen
TikTok. Time's a Wastin!: House passes bill that would ban TikTok if its Chinese owners don't sell the popular app. by Security This Week
38 min listen
Repo Man Confused. Film at 11.: Over 100,000 Infected Repos Found on GitHub! by Security This Week
31 min listen
Is C# Dead?: White House urges devs to switch to memory-safe programming languages by Security This Week
42 min listen
Is Your AI Writing Rubber Checks?: Air Canada must honor refund policy invented by airline’s chatbot by Security This Week
30 min listen
Hey Canada, Where's My Car?: Canada to ban the Flipper Zero to stop surge in car thefts by Security This Week
36 min listen
Spoutible Exposes Sensitive User Data!: At least the API was thorough! by Security This Week
38 min listen
The Mother of All Breaches!: Mother of all breaches reveals 26 billion records! by Security This Week
46 min listen
Is Bitcoin no longer anonymous?: How a 27-year-old busted the myth of Bitcoin’s anonymity by Security This Week
39 min listen
Kerberos Bug Fixed! Film at 11!: Microsoft fixes critical flaws in Windows Kerberos, Hyper-V by Security This Week
35 min listen
PornHub Complaining Again: PornHub blocks North Carolina, Montana over new age verification laws by Security This Week
33 min listen
Ultimate Job Interview Fail!: Blockchain dev's wallet emptied in "job interview" using npm package by Security This Week
41 min listen
Yes, Virginia, They ARE Listening to You: Marketing Company Claims That It Actually Is Listening to Your Phone and Smart Speakers to Target Ads by Security This Week
36 min listen
WordPress... WTF!: 50K WordPress sites exposed to RCE attacks by critical bug in backup plugin by Security This Week
34 min listen
Got LogoFAIL? You're Screwed!: LogoFAIL exploit bypasses hardware and software security measures and is nearly impossible to detect or remove by Security This Week
39 min listen
Is Your iPhone Exploiting You?: Last week there was a scare about the NameDrop feature in iOS 17. What's the real story? by Security This Week
29 min listen
What's wrong with Password123?: The guys check out a list of the top 200 most common passwords used all over the world. by Security This Week
38 min listen
Apparently Crime Pays!: Fraudsters make $50,000 a day by spoofing crypto researchers by Security This Week
50 min listen
OpenAI Goes Down. Film at 11: OpenAI confirms DDoS attacks behind ongoing ChatGPT outages by Security This Week
37 min listen
Who's That Knocking at Your Windows?: Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover by Security This Week
32 min listen
Revenge of the Windows Phone!: Windows Phone gets revenge on YouTube from the grave by helping users bypass its ad-blocker-blocker by Security This Week
34 min listen
Elmer Fudd Shoots Linux!: 'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover by Security This Week
40 min listen

Related podcast episodes

Skip carousel

556: The xz Backdoor Exposed ?: We're breaking down the attack: how it works, how it was hidden, and why time was running out for the attacker. by LINUX Unplugged
70 min listen
356: Dig in Deeper: TrueNAS is Multi-OS, Encrypted ZFS on NetBSD, FreeBSD’s new Code of Conduct, Gaming on OpenBSD, dig a little deeper, Hammer2 and periodic snapshots, and more. by BSD Now
32 min listen
395: Tracing ARM’s history: Tracing the History of ARM and FreeBSD, Make ‘less’ more friendly, NomadBSD 1.4 Release, Create an Ubuntu Linux jail on FreeBSD 12.2, OPNsense 21.1.2 released, Midnight BSD and BastilleBSD, and more. by BSD Now
38 min listen
Technado, Ep. 251: What’s up with Atlassian? by Technado
44 min listen
556: Cozy OpenBSD: OpenBSD is a Cozy Operating System, Lichee Console 4A - RISC-V mini laptop, Lessons learned with XZ vulnerability, Techies vs spies: the xz backdoor debate, Not Not Porting 9front to Power64, One less Un\*xy option for 32-bit PowerPC, and more by BSD Now
54 min listen
$556: Cozy OpenBSD: OpenBSD is a Cozy Operating System, Lichee Console 4A - RISC-V mini laptop, Lessons learned with XZ vulnerability, Techies vs spies: the xz backdoor debate, Not Not Porting 9front to Power64, One less Un\*xy option for 32-bit PowerPC, and more$
314: Swap that Space: Unix virtual memory when you have no swap space, Dsynth details on Dragonfly, Instant Workstation on FreeBSD, new servers new tech, Experimenting with streaming setups on NetBSD, NetBSD’s progress towards Steam support thanks to GSoC, and more. by BSD Now
48 min listen
Risky Business #743 -- A chat about the xz backdoor with the guy who found it: PLUS: The CSRB mauls Microsoft… by Risky Business
20 min listen
338: iocage in Jail: Distrowatch reviews FuryBSD, LLDB on i386 for NetBSD, wpa_supplicant as lower-class citizen, KDE on FreeBSD updates, Travel Grant for BSDCan open, ZFS dataset for testing iocage within a jail, and more. by BSD Now
63 min listen
578 Learn Linux: Good Idea Or Not? (2018 & Beyond) - Simple Programmer Podcast: ► Learn Linux: Good Idea Or Not? (2018 & Beyond) ◄ Linux is definitely among one of the most popular programming languages nowadays. Linux. It’s been around since the mid ‘90s, and has since reached a user-base that spans industries and... by Simple Programmer Podcast
8 min listen
113: Red Hat + Flatpak, KDE Neon, Darktable, RetroArch, HBO Max Drops Linux: Quick note: episode republished to fix mp3 download issue. On this episode of This Week in Linux, we’ve got a lot of great news and also a few unfortunate things to talk about. Red Hat announces their Flatpak Runtime for Desktop Containers. by This Week in Linux
43 min listen
Linux and FOSS Supply Chain Issues - Hal Pomeranz - PSW #772: Linux systems are a collection of free and Open Source software-- some packaged by your distro, some built from source. How do you verify that your upstream isn't polluted by bad actors? Segment Resources: Visit for all... by Security Weekly Podcast Network (Video)
69 min listen
523: Literally Unix: The Elements Of Style: UNIX As Literature, The shell and its crappy handling of whitespace, Theo de Raadt on Zenbleed, OPNsense 23.7 released, illumos gets a new C compiler, fixing Thinkpad X1 WIFI on FreeBSD, and more by BSD Now
40 min listen
335: FreeBSD Down Under: Hyperbola Developer interview, why you should migrate from Linux to BSD, FreeBSD is an amazing OS, improving the ptrace(2) API in LLVM 10, First FreeBSD conference in Australia, and a guide to containers on FreeNAS. by BSD Now
54 min listen
371: Wildcards running wild by BSD Now
41 min listen

Discover this podcast and so much more

State Hackers Blow up Red Hat Linux from the Inside!

State Hackers Blow up Red Hat Linux from the Inside!

Description

Titles in the series (100)

More Episodes from Security This Week

Related podcast episodes