Share Microsoft Email Breaches, API Security Concerns, and Irresponsible Vulnerability Disclosure

Copy link

April 17, 2019

Microsoft Email Breaches, API Security Concerns, and Irresponsible Vulnerability Disclosure

42 minutes

The guys discuss a recent privileged account compromise at Microsoft corporate that resulted in an email breach. They speak high-level of API security concerns and what to expect in the future. Finally they cover a recent example of vulnerability disclosure done poorly that left potentially 160,000 WordPress websites being exploited.

As always they end with One Cool Thing.

Show Notes

Resources:

Microsoft admits email hack

https://www.darkreading.com/attacks-breaches/microsoft-downplays-scope-of-email-attack-/d/d-id/1334423

API Security Concerns

https://www.scmagazine.com/home/opinion/5-things-you-need-to-know-about-api-protection/

Security researcher dropping 0-days

https://arstechnica.com/information-technology/2019/04/a-security-researcher-with-a-grudge-is-dropping-web-0days-on-innocent-users/

One Cool Thing

The Data Map: https://thedatamap.org/

Monitor Darkly: https://www.youtube.com/watch?v=zvP2FEfOSsk