Technado (Archived)

Salt Security’s Roey Eliyahu joined Technado to discuss one of the most vulnerable things security teams often overlook: APIs. They dissected an API issue at Uber that left accounts open to attack. Then, in the news, the guys covered Vint Cerf’s plan for Internet in space, Microsoft throttling availability of their October 2020 Windows 10 update, Ubuntu’s Groovy Gorilla, and a group of hackers stealing from the rich and giving just a little to the poor. Finally, in the run-up to the US elections, they discussed a largely unsuccessful hack from China masquerading as McAfee Antivirus as well as a successful ransomware attack that affected a Georgia county’s election database.

This week on Technado, Dr. Tirthankar Ghosh from the University of West Florida Center for Cybersecurity joined the panel to share many of the amazing things their center is doing. He also helped the team understand the implications of the IoT Cybersecurity Improvement Act of 2020. In the news, the guys discussed the Raspberry Pi Compute Module 4, Microsoft ending Office 2010 support, a warning from the US Cyber Command to patch a TCP/IP bug, a for-profit botnet proxy service, and the hacking charges filed against Russian military officers.

Symmetry Systems’ Mohit Tiwari joined Technado this week to talk about his journey from university professor to start-up CEO. He explained the company’s focus on data store and object security before sharing his worst IT nightmare with the group. In the news, the team looked at a cyberattack that affected online classes in Massachusetts, Microsoft’s role in taking down the TrickBot botnet, VS Code coming to Raspberry Pi and Chromebook, VMWare’s ESXi Arm edition, and Apple paying out more than a quarter-million-dollar bug bounty. Finally, in the WTF segment, they dissected the story of a library employee’s $1.3M toner theft.

The new CISO at NetEnrich, Brandon Hoffman, was this week’s guest on Technado, where he discussed the role of the SOC in a company’s security strategy. He also shared his take on a new worm phishing campaign in the segment “Who Got Pwned.” After the break, Don and Daniel dissected Microsoft’s explanation for their Azure AD outage in “Deja News.” Finally, they talked about new x64 emulation that will help Windows on ARM, AT&T shelving DSL, OWC’s new Thunderbolt 4 hub, and leaked Windows XP code that could impact current Windows versions.

Microsoft MVP and Nerdio CTO Bas van Kaam joined Technado this week to talk about all things cloud. He also helped the crew breakdown the major Microsoft Office 365 outage. In other news, the team looked at how an old TV took out a Welsh village’s broadband for 18 months, the drop in Firefox’s usage compared to their CEO’s compensation, the new Red Pro and Purple drives from Western Digital, a corporate phishing test that backfired, and a major cyberattack affecting UHS hospitals.

In this episode of Technado, Balaji Parimi from CloudKnox joined the crew to talk about staying secure across multiple cloud providers. He also discussed a study that shows that large cloud providers are less likely to be breached. In other news, the team talked about Microsoft’s Linux kernel update, the quality of Walmart’s Gateway computers, an FBI report about credential stuffing attacks on banks, the Zerologon attack, and how much IoT traffic is from a single botnet.

This week, Technado welcomed back an old friend, Corey Thuen from Gravwell, to tell us all about their Big Bang product launch. Corey also talked about some of the unique ways people are using Gravwell to analyze their data. In other news, the team discussed Nvidia’s $40 billion acquisition of ARM, and debate how much they’d sell one of their arms for. Then they looked at Yubico’s new USB-C Yubikey, the resurfacing of Microsoft’s underwater data center experiment, Gartner’s hot takes on AWS, Azure, and Google Cloud, and a scary WordPress plugin flaw.

Heather Paunet from Untangle joined the Technado crew this week to talk about how organizations can develop the best cyber security possible while still meeting budgetary restraints. She also added her expertise to a discussion on the recent Twitter hack and the role working from home may have played. In other news, the team looked at the new Fedora ThinkPad laptop from Lenovo, Western Digital getting creative with how they define RPM, a proposed ‘911’ for security flaws, Apple’s approval of notorious malware, and how the FBI botched their hack warning to the DNC back in 2016.

What do you do when you create a groundbreaking network monitoring tool? You post the source code on GitHub and Reddit for all the world to use. This week’s guest, Costa Tsaousis of Netdata, tells the Technado crew about the nightmare that led him to create the product and why he chose to go open source. Then, in the news, the team discussed a US plan to invest $1B in AI and quantum computing, a breakdown of the CenturyLink/Level(3) outage, why a Microsoft Teams Retention Policy is so important, a Russian “tourist” offering up loads of cash for a Tesla employee to inject malware, and a disgruntled AWS engineer burning his bridges (and 456 Cisco WebEx VMs) on his way out the door.

If you want to talk Python, you can’t go wrong with Python Software Foundation Fellow and host of two Python podcasts, Michael Kennedy. After discussing his podcasts, Python Bytes and Talk Python To Me, Michael played a game of ‘Python, Python, or Python,’ where he and the panel guessed if headlines were about snakes, programming, or Monty Python. In the news, the team talked about the viability of a new password generator called DiceKeys, Ubuntu backporting WSL 2 to earlier Windows builds, a Chrome feature that’s causing strain on global root DNS servers, a major Gmail bug fix, and concerns about Malicious AWS community AMIs.