SAMBA Vuln. Exploited;
My Next Class
Defending Web Applications Security Essentials | Online | US Pacific | Mar 15th - Mar 20th 2021 |
Intrusion Detection In-Depth | Online | US Eastern | Apr 26th - May 1st 2021 |
SAMBA Vulnerability Exploited To Install Bitcoin Miners
https://securelist.com/78674/sambacry-is-coming/
Intel's AMT Technology Used For Covert Channel
https://blogs.technet.microsoft.com/mmpc/2017/06/07/platinum-continues-to-evolve-find-ways-to-maintain-invisibility/
Broadcom Vulnerablities to be Announced
https://www.blackhat.com/us-17/briefings.html#broadpwn-remotely-compromising-android-and-ios-via-a-bug-in-broadcoms-wi-fi-chipsets
Release Lag In National Vulnerablity Database
https://www.recordedfuture.com/vulnerability-disclosure-delay/
https://securelist.com/78674/sambacry-is-coming/
Intel's AMT Technology Used For Covert Channel
https://blogs.technet.microsoft.com/mmpc/2017/06/07/platinum-continues-to-evolve-find-ways-to-maintain-invisibility/
Broadcom Vulnerablities to be Announced
https://www.blackhat.com/us-17/briefings.html#broadpwn-remotely-compromising-android-and-ios-via-a-bug-in-broadcoms-wi-fi-chipsets
Release Lag In National Vulnerablity Database
https://www.recordedfuture.com/vulnerability-disclosure-delay/
Discussion
New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form
Defending Web Applications Security Essentials | Online | US Pacific | Mar 15th - Mar 20th 2021 |
Intrusion Detection In-Depth | Online | US Eastern | Apr 26th - May 1st 2021 |
Defending Web Applications Security Essentials | Online | Central European Summer Time | Jun 14th - Jun 19th 2021 |
Part 1
https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html
Part 2
https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_11.html
As smart phone operating systems present more and more difficult targets to attackers, expect attackers to start looking into other system components as a way in: Cellular baseband, Wifi, bluetooth, NFC, etc. These things are made by third parties and often there is very little known about them, so you can guess that security is not going to be as good. They are ripe grounds for new vulnerabilities and they will only become more attractive to attackers.