Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)
Or the video archive on Youtube (@DAY[0])
[00:05:23] Apple v. Corellium[00:12:04] Firefox to Discontinue Sideloaded Extensions[00:16:52] Delegated Credentials for TLS[00:23:02] North Korean Malware Found on Indian Nuclear Plant's Network[00:28:20] The Pirate Bay Downtime Caused by Malicious Search Queries[00:29:30] Web.com Breach (allegedly includes NetworkSolutions.com and Register.com)[00:32:28] BlueKeep attacks are happening, but it's not a wormhttps://www.kryptoslogic.com/blog/2019/11/bluekeep-cve-2019-0708-exploitation-spotted-in-the-wild/[00:36:13] Untitled Goose Game - Insecure Deserialization[00:39:58] Two Chrome 0Days get Patched[00:42:45] NFC Beaming Bypasses Security Controls in Android [CVE-2019-2114][00:45:43] Abusing HTTP Hop-by-hop Request Headers[00:50:54] Let's Make Windows Defender Angry: Antivirus Can be an Oracle! -icchyhttps://en.wikipedia.org/wiki/EICAR_test_file[00:56:54] rConfig v3.9.2 authenticated and unauthenticated RCE (CVE-2019-16663) and (CVE-2019-16662)[01:02:26] Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors[01:07:26] Silhouette: Efficient Intra-Address Space Isolation for Protected Shadow Stacks on Embedded Systems[01:19:46] unfork(2)[01:23:51] Destroying x86_64 instruction decoders with differential fuzzinghttps://github.com/zyantific/zydis