SANS ISC: SANS Daily Network Security Podcast (Stormcast) for Wednesday, July 6th 2016

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS Daily Network Security Podcast (Stormcast) for Wednesday, July 6th 2016

My Next Class

… more classes

Help us make this podcast better by participating in a simple two question survey

Apache Fixes Critical HTTP/2 TLS Authentication Flaw
https://isc.sans.edu/forums/diary/Apache+Update+TLS+Certificate+Authentication+Bypass+with+HTTP2+CVE20164979/21223/

Gigabyte and HP Motherboards Affected by "ThinkPwn" UEFI Vulnerability
https://twitter.com/al3xtjames

UK Police Data Breaches
https://www.bigbrotherwatch.org.uk/wp-content/uploads/2016/07/Safe-in-Police-Hands.pdf

Mac Malware Uses Tor For C&C
https://labs.bitdefender.com/2016/07/new-mac-backdoor-nukes-os-x-systems/

Front Door Intercom Backdoor
http://www.synacktiv.ninja/ressources/NDH-Intercoms_presentation_Dudek.pdf

wget arbitrary command line execution with redirects
https://blogs.securiteam.com/index.php/archives/2701

Discussion