Latest Hacking News

Interview with Karl Sigler, Security Research Manager for Trustwave SpiderLabs, on the recently disclosed vulnerability impacting Lifesize video products.

Today's Agenda is as follows:

About Trustwave SpiderLabs

Overview of Lifesize products and the organizations that use them.

Details on the Lifesize vulnerability and discovery.

Implications of the vulnerability.

Disclosing the flaw to the company.

Walkthrough of Trustwave's Proof-of-Concept exploit and POC release date.

You can read Trustwave's blog post on the vulnerability here: https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/lifesize-team-room-passport-networker-remote-os-command-injection/

If you would like to add the podcast to your Alexa flash briefings you can do so here.

Australian Parliament computer network compromised, new phishing attack using Google Translate, and Apple patches FaceTime bug as well as two zero-days Google says were exploited in the wild on episode 216 of our daily cybersecurity podcast.

MacOS zero-day flaw discovered but researcher won't share with Apple, Google cautions Nest users against poor password practices, and Mozilla Firefox to get site isolation feature on episode 215 of our daily cybersecurity podcast.

RDP vulnerabilities make new reverse RDP attacks possible, new Google Chrome extension warns users of leaked passwords, and OpenOffice and LibreOffice vulnerabilities on episode 214 of our daily cybersecurity podcast.

A new Linux backdoor trojan discovered, Jack'd app exposes private user images, and Huddle House POS system breach on episode 213 of our daily cybersecurity podcast.

A new sextortion scam claims to infect users through popular adult website, Chrome to warn of lookalike URLs, and Houzz suffers user data breach on episode 212 of our daily cybersecurity podcast.

FaceTime bug allows users to spy on each other, authorities shut down hacked server marketplace, and data of over 14,000 diagnosed with HIV leaks online on episode 211 of our daily cybersecurity podcast.

Today's Agenda is as follows:

FaceTime Bug Discovered

Authorities Shut Down Hacked Server Marketplace

Data of over 14,000 Diagnosed with HIV Leaks Online

If you would like to add the podcast to your Alexa flash briefings you can do so here.

New exploit code leads to active attacks on Cisco routers, abandoned Wordpress plug-in leads to active attacks on websites, and DailyMotion suffers a credential stuffing attack on episode 210 of our daily cybersecurity podcast.

Today's Agenda is as follows:

Cisco Routers Actively Targeted With New Exploits

Abandoned Wordpress Plug-in Leaving Sites Open to Attack

DailyMotion Discloses Credential Stuffing Attack

If you would like to add the podcast to your Alexa flash briefings you can do so here.

New Microsoft Exchange Zero-Day and iPhoneX jailbreak attacks based on known vulnerabilities and a wave of attacks using App Engine Google Cloud Platform to deliver malware on episode 209 of our daily cybersecurity podcast.

Image based malware targeting Mac users through ads, phishing campaign using fake voicemail messages to steal passwords, and banking trojan rotating tactics to evade detection on episode 208 of our daily cybersecurity podcast.