Handler on Duty: Guy Bruneau
Threat Level: green
Podcast Detail
Can SONY Software still be trusted? D-Link Routers Hunted; InititeWP / X-Window Patches; Problems wi
If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://traffic.libsyn.com/securitypodcast/4271.mp3
My Next Class
Application Security: Securing Web Apps, APIs, and Microservices | Orlando | Apr 13th - Apr 18th 2025 |
Application Security: Securing Web Apps, APIs, and Microservices | San Diego | May 5th - May 10th 2025 |
Can SONY Software still be trusted? D-Link Routers Hunted; InititeWP / X-Window Patches; Problems with #MSFT #Exchange patch
SONY Private Key Leaked, Used in PoC to sign malware
https://isc.sans.edu/forums/diary/Malware+Signed+With+Valid+SONY+Certificate+Update+This+was+a+Joke+/19049
D-Link Router SSH Password Brute Forcing
https://isc.sans.edu/forums/diary/Odd+new+ssh+scanning+possibly+for+D-Link+devices/19055
InfiniteWP SQL Injection Vulnerability
https://www.securityweek.com/sql-injection-other-vulnerabilities-found-infinitewp-admin-panel
Old X-Window Bug Found and Patched
http://lists.x.org/archives/xorg-announce/2014-December/002500.html
Microsoft Exchange Patch Causing Problems
http://www.edugeek.net/forums/enterprise-software/146585-outlook-client-issues-following-exchange-2010-rollup-8-a.html
SONY Private Key Leaked, Used in PoC to sign malware
https://isc.sans.edu/forums/diary/Malware+Signed+With+Valid+SONY+Certificate+Update+This+was+a+Joke+/19049
D-Link Router SSH Password Brute Forcing
https://isc.sans.edu/forums/diary/Odd+new+ssh+scanning+possibly+for+D-Link+devices/19055
InfiniteWP SQL Injection Vulnerability
https://www.securityweek.com/sql-injection-other-vulnerabilities-found-infinitewp-admin-panel
Old X-Window Bug Found and Patched
http://lists.x.org/archives/xorg-announce/2014-December/002500.html
Microsoft Exchange Patch Causing Problems
http://www.edugeek.net/forums/enterprise-software/146585-outlook-client-issues-following-exchange-2010-rollup-8-a.html
Discussion
New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form
Application Security: Securing Web Apps, APIs, and Microservices | Orlando | Apr 13th - Apr 18th 2025 |
Application Security: Securing Web Apps, APIs, and Microservices | San Diego | May 5th - May 10th 2025 |
Network Monitoring and Threat Detection In-Depth | Baltimore | Jun 2nd - Jun 7th 2025 |
Application Security: Securing Web Apps, APIs, and Microservices | Washington | Jul 14th - Jul 19th 2025 |
Application Security: Securing Web Apps, APIs, and Microservices | Las Vegas | Sep 22nd - Sep 27th 2025 |