Podcast Detail

jQuery-File-Upload Scans; Oracle OOB Patch; NPM Hijack Detection; Account Pre-Hijacking

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://chrt.fm/track/2748D7/https://traffic.libsyn.com/securitypodcast/8020.mp3

previous
next
Podcast Logo
SANS Daily Network Security Podcast (Stormcast) for Tuesday, May 24th, 2022
00:00

Interested in Internet Storm Center stickers? Check here if there are still some available for today.

Attacker Scanning for jQuery-File-Upload
https://isc.sans.edu/forums/diary/Attacker+Scanning+for+jQueryFileUpload/28674/

Oracle Security Alert Advisory - CVE-2022-21500
https://www.oracle.com/security-alerts/alert-cve-2022-21500.html

How to find NPM dependencies vulnerable to account hijacking
https://www.theregister.com/2022/05/23/npm_dependencies_vulnerable/

Pre-hijacked accounts
https://arxiv.org/pdf/2205.10174.pdf