Handler on Duty: Johannes Ullrich
Threat Level: green
Podcast Detail
Exchange ProxyShell; Synology and Router Attacks; Firefox Experiment; Messanging Bugs; HTTP2
If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://chrt.fm/track/2748D7/https://traffic.libsyn.com/securitypodcast/7622.mp3
My Next Class
Network Monitoring and Threat Detection In-Depth | Singapore | Nov 18th - Nov 23rd 2024 |
Application Security: Securing Web Apps, APIs, and Microservices | Washington | Dec 13th - Dec 18th 2024 |
Interested in Internet Storm Center stickers? Check here if there are still some available for today.
Microsoft Exchange ProxyShell
https://isc.sans.edu/forums/diary/ProxyShell+how+many+Exchange+servers+are+affected+and+where+are+they/27732/
Synology Warns of Brute Force Attacks
https://www.synology.com/en-global/company/news/article/BruteForce/Synology®%20Investigates%20Ongoing%20Brute-Force%20Attacks%20From%20Botnet
Router Auth Bypass
https://threatpost.com/auth-bypass-bug-routers-exploited/168491/
Firefox Version 100 Experiment
https://bugzilla.mozilla.org/show_bug.cgi?id=1719070
Interaction Less Vulnerabilities in Messaging Apps
https://www.ehackingnews.com/2021/08/the-interaction-less-flaws-in-messaging.html
HTTP2 Vulnerabilities
https://portswigger.net/research/http2#conclusion
https://isc.sans.edu/forums/diary/ProxyShell+how+many+Exchange+servers+are+affected+and+where+are+they/27732/
Synology Warns of Brute Force Attacks
https://www.synology.com/en-global/company/news/article/BruteForce/Synology®%20Investigates%20Ongoing%20Brute-Force%20Attacks%20From%20Botnet
Router Auth Bypass
https://threatpost.com/auth-bypass-bug-routers-exploited/168491/
Firefox Version 100 Experiment
https://bugzilla.mozilla.org/show_bug.cgi?id=1719070
Interaction Less Vulnerabilities in Messaging Apps
https://www.ehackingnews.com/2021/08/the-interaction-less-flaws-in-messaging.html
HTTP2 Vulnerabilities
https://portswigger.net/research/http2#conclusion
Discussion
New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form
Network Monitoring and Threat Detection In-Depth | Singapore | Nov 18th - Nov 23rd 2024 |
Application Security: Securing Web Apps, APIs, and Microservices | Washington | Dec 13th - Dec 18th 2024 |
Application Security: Securing Web Apps, APIs, and Microservices | Online | US Eastern | Jan 27th - Feb 1st 2025 |