Security Researchers Are Threat Actors - PSW #929
Shownotes
This week in the security news:
- Security Researchers Are Threat Actors according to Microsoft
- Hands-free malicious firmware
- If you've ever typed "ls" in Windows, this is for you
- Cisco makes more patches, wants you to pay
- Ambiguous Secure Boot bypass
- Threat actors love network edge devices, and I have the chat logs and leaks to prove it
- The downside of chip sanctions
- Your VoIP phone is hacked
- Vulnerability disclosure and incentives
- Claude reccovers Bitcoin wallet
- an Instagram "Exploit"
- Turn the plane around
- The worms will continue
- PAN-OS global protect vulnerability
- The 1-Click Github token stealer
- Data-nuking prompt injection
- Turning Buses into spies
- SymJack
- NIST NVD mistakes, and how CNAs need to up their game
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-929