Security Noise

By TrustedSecNews Technology Tech News

Security Noise episodes

November 21, 2022 5.14 - Nothing to See Here, Move Along
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Kurt Muhl, Justin Bollinger, and David Boyd

Title: A simple Android lock screen bypass bug landed a researcher $70,000

URL: https://techcrunch.com/2022/11/14/android-lock-screen-bypass-google-pixel/

Author: Zack Whittaker

Title: NSA Releases Guidance on How to Protect Against Software Memory Safety Issues

URL: https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/3215760/nsa-releases-guidance-on-how-to-protect-against-software-memory-safety-issues/

Author: NSA

Title: Flight Radar Report Shows FTX Co-Founder's Private Jet Flew to Argentina, SBF Says He's Still in the Bahamas

URL: https://news.bitcoin.com/flight-radar-report-shows-ftx-co-founders-private-jet-flew-to-argentina-sbf-says-hes-still-in-the-bahamas/?fbclid=IwAR3iBvfrTl471Im9-OFdhuaoaBiJuG8PF8TFwcGtBO_8tf4SL_cWMAsO43g

Author: Jamie Redman
21 min
November 07, 2022 5.13 - A Dastardly End for Windows 7
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Alex Hamerstone, Joe Sullivan, and Whitney Phillips.

Announcements

Join the TrustedSec Discord Community

TrustedSec is on Discord! Join our server to interact with the security community and the TrustedSec team. Go to discord.gg/trustedsec to join.

Stories

Title: Security certification body (ISC)² defends 'undemocratic' bylaw changes

URL: https://portswigger.net/daily-swig/security-certification-body-isc-defends-undemocratic-bylaw-changes

Author: Emma Woollacott

Title: Chrome will finally force you to upgrade from Windows 7 in 2023

URL: https://www.androidpolice.com/chrome-windows-7-support/

Author: Stephen Schenck

Tool Time

Link: https://portswigger.net/burp/dastardly

Dastardly TL:DL

docker run --user $(id -u) --rm -v $(pwd):/dastardly -e \ DASTARDLY_TARGET_URL=https://ginandjuice.shop -e \ DASTARDLY_OUTPUT_FILE=/dastardly/dastardly-report.xml \ public.ecr.aws/portswigger/dastardly:latest
20 min
October 17, 2022 5.12 - BYO-Driver and GrrCon
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bollinger, Luke Bremer, and Whitney Phillips.

Stories

Title: No fix in sight for mile-wide loophole plaguing a key Windows defense for years

URL: https://arstechnica.com/information-technology/2022/10/no-fix-in-sight-for-mile-wide-loophole-plaguing-a-key-windows-defense-for-years/

Author: Dan Goodin

Title: Intel's Alder Lake BIOS Source Code Reportedly Leaked Online

URL: https://www.tomshardware.com/news/intels-alder-lake-bios-source-code-reportedly-leaked-online

Author: Paul Alcorn

Live-ish From GrrCon

Our panel discusses their experience at GrrCon 2022 so far. Luke mentions some research into recovering old botnets ("Botnets Don't Die") by Aamir Lakhani.
22 min
September 27, 2022 5.11 - Word Clouds, Password Clouds
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Scott White, Justin Bollinger, and Patrick Mayo.

Stories

URL: https://www.bleepingcomputer.com/news/security/lastpass-says-hackers-had-internal-access-for-four-days/?mibextid=d3iphx

Author: Sergiu Gatlan

Title: Microsoft Edge and Google Chrome enhanced spellcheck feature exposes passwords

URL: https://www.neowin.net/news/microsoft-edge-and-google-chrome-enhanced-spellcheck-feature-exposes-passwords/

Author: Steve Bennett

Title: AttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes

URL: https://www.wiz.io/blog/attachme-oracle-cloud-vulnerability-allows-unauthorized-cross-tenant-volume-access

Author: Elad Gabay
28 min
September 27, 2022 5.10 - Uber Responsibility
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Skyler Tuter, Alex Hamerstone, and David Boyd.

Stories

Title: Google Chrome Emergency Update Fixes New Zero-Day Used in Attacks

URL: https://www.bleepingcomputer.com/news/security/google-chrome-emergency-update-fixes-new-zero-day-used-in-attacks/

Author: Sergiu Gatlan

Title: IRS says it exposed some confidential taxpayer data on website

URL: https://www.marketwatch.com/story/irs-says-it-exposed-some-confidential-taxpayer-data-on-website-11662148381

Author: Richard Rubin
34 min
August 29, 2022 5.9 - Pre-Shared (Private) Keys
SHOW NOTES

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Steve Erwin, Alex Hamerstone, and Melvin Langvik.

Stories

Title: PayPal Phishing Scam Uses Invoices Sent Via Paypal

URL: https://krebsonsecurity.com/2022/08/paypal-phishing-scam-uses-invoices-sent-via-paypal/

Author: Brian Krebs

Title: Hyundai Uses Example Keys for Encryption System

URL: https://www.theregister.com/2022/08/17/software_developer_cracks_hyundai_encryption/

Author: Thomas Claburn

The Interview

Melvin Langvik talks TeamFiltration

URL: https://github.com/Flangvik/TeamFiltration

24 min
August 05, 2022 5.8 - Who is Reading Your Gmail?
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Steve Erwin, Justin Bollinger, and Skyler Tuter.

Stories

Title: New Gmail Attack Bypasses Passwords And 2FA To Read All Email

URL: https://www.forbes.com/sites/daveywinder/2022/08/02/gmail-warning-as-new-attack-bypasses-passwords--2fa-to-read-all-email/?sh=711642763a12

Author: Davey Winder

Title: Post-quantum encryption contender is taken out by single-core PC and 1 hour

URL: https://arstechnica.com/information-technology/2022/08/sike-once-a-post-quantum-encryption-contender-is-koed-in-nist-smackdown/

Author: Dan Goodin

The Interview

A talk with Steve Marchewitz on his visit to the Gartner Conference.
28 min
July 22, 2022 5.7 - Privacy Screen
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bollinger, Alex Hamerstone, and Edwin David.

Stories

Title: Your Phone's Lock Screen Is Getting a Big Revamp

URL: https://www.cnet.com/tech/mobile/your-phone-lock-screen-is-getting-a-big-revamp/

Author: Lisa Eadicicco

Title: Facebook has started to encrypt links to counter privacy-improving URL Stripping

URL: https://www.ghacks.net/2022/07/17/facebook-has-started-to-encrypt-links-to-counter-privacy-improving-url-stripping/

Author: Martin Brinkmann

Tool Time

A burp plugin by Geoff Walton to locate relationships between UUID/GUID request parameters and appearances of the same identifiers in HTTP responses to other resources.

https://github.com/GeoffWalton/UUID-Watcher/blob/main/UUID.rb
21 min
July 05, 2022 5.6 - A Nice Relaxing Dip into Powershell
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bollinger, Skyler Tuter, and Costa Petros.

Stories

Title: Mega says it can't decrypt your files. New POC exploit shows otherwise

URL: https://arstechnica.com/information-technology/2022/06/mega-says-it-cant-decrypt-your-files-new-poc-exploit-shows-otherwise/

Author: Dan Goodin

Title: NSA shares tips on securing Windows devices with PowerShell

URL: https://www.bleepingcomputer.com/news/security/nsa-shares-tips-on-securing-windows-devices-with-powershell/

Author: Ionut Ilascu

Link: https://media.defense.gov/2022/Jun/22/2003021689/-1/-1/1/CSI_KEEPING_POWERSHELL_SECURITY_MEASURES_TO_USE_AND_EMBRACE_20220622.PDF

Title: Security flaws in internet-connected hot tubs exposed owners' personal data

URL: https://techcrunch.com/2022/06/22/jacuzzi-flaws-admin-exposed-users/

Author: Carly Page
24 min
June 17, 2022 5.5 - Outspending the Ransomware Gangs
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bollinger, Travis Kaun, and David Boyd.

Stories

Title: Most Security Product Byers Aren't Getting Promised Results

URL: https://www.esecurityplanet.com/trends/most-security-product-buyers-arent-getting-promised-results/

Author: Paul Shread

Title: NSA: Ransomware Gangs Are Getting Rich Enough to Buy Zero-Day Exploits

URL: https://www.pcmag.com/news/nsa-ransomware-gangs-are-getting-rich-enough-to-buy-zero-day-exploits

Author: Michael Kan

Interview

Guest: Travis Kaun

Subject: PWNton Pack!

Links: https://www.trustedsec.com/blog/pwnton-pack-an-unlicensed-802-11-particle-accelerator/
24 min

About Security Noise

From the publisher's feed

In the security industry, it's easy to get overwhelmed by the constant barrage of information and buzzy trends. On Security Noise, we help you sort through the noise and identify the information that truly matters. Listen to hear from practitioners in the field who are using the latest tools and methodologies to stay ahead. Whether you're a seasoned security pro or an industry newcomer, our podcast has something for anyone in the business of making the world secure.