Security Nation
Jen Ellis and Tod Beardsley
Recent Episodes
Interview links
Rapid Rundown links
- Risky Business Newsletter on fake PoCs: "GitHub aflood with fake and malicious PoCs"
- The cited paper: "How security professionals are being attacked: A study of malicious CVE proof of concept exploits in GitHub"
- Also relevant is Honeysploit by Curtis Brazzell
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
Interview Links
- Prior Security Nation episode in which loads of PortSwigger references were dropped:
- https://www.rapid7.com/blog/post/2021/08/18/security-nation-daniel-crowley/
- New research from James about browser-powered desync attacks:
- https://portswigger.net/research/browser-powered-desync-attacks
Rapid Rundown Links
- Semi-secret Fortinet advisory:
- CVE Details as they come:
- Existence of Fortinet CVE-2022-40684 PoC posted, but not the PoC itself:
- The Hidden Harms of Silent Patches:
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
Interview Links
- Check out Panasonic's delightful PSIRT page – especially if you have a vulnerability in one of Panasonic's many, many products to report.
Rapid Rundown Links
- Check out Inti's research on "oops, we made a surveillance system" at notmyplate.com.
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
Interview Links
- Check out the CVE blog post on handling cloud vulnerabilities.
- Read up on the rules for assigning CVEs.
- See an example cloud CVE affecting Microsoft Azure.
- Read the Microsoft Security Response Center’s blog post on cloud vulnerabilities.
Rapid Rundown Links
- Check out Dominic White’s tweet on iOS remembered networks.
- Read the update on the recently released RFC 9293.
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.