Malware in Microsoft's GitHub Repo?! | Technado Ep. 357
Рет қаралды 3,105
Күн бұрынCheats, breaches, and weaknesses abound on this week's Technado! Cybercriminals are threatening to leak millions of records from the World-Check database, and millions more were affected by this week's Frontier Communications broadband shutdown. In our biggest story of the week, MITRE got pwned by nation-state hackers via our old friends, the Ivanti zero-days. CrushFTP is dealing with a vuln that lets attackers download system files, and our Don't Make No Sense feature is a twofer: fake game cheats are being used to spread malware, and it all started with...Microsoft's GitHub repo?
Of course, it wouldn't be Technado without a deep dive, and this one's a doozy: a SafeBreach researcher uncovered FOUR CVEs by exploiting a long-standing issue that supports Windows backwards-compatibility.
Like what you heard? Check this episode's stories below:
www.theregister.com/2024/04/1...
www.itpro.com/security/cyber-...
www.helpnetsecurity.com/2024/...
www.infosecurity-magazine.com...
thehackernews.com/2024/04/new...
www.bleepingcomputer.com/news...
www.safebreach.com/blog/magic...
@mwyn5085 2 ай бұрын
Learning is always fun with Daniel & Sophie! 👍🏻😃 Love Thursdays because of Technado w/these two entertaining techies! ❤️
@V1N_574 2 ай бұрын
Gamer here, many many times when I get cheat codes (mainly older games back in the day) was to make it more fun, like infinite ammo, or god mode, or super jumps, stuff like that. However if it is competitive game specially online, thats just wrong and unethical unless you are on a server specifically to play with cheats which needs to be clearly informed to all players before joining.
@jamesdriscoll1658 2 ай бұрын
The first two stories is exactly why organizations need to invest in third party risk management. We see these types of attacks more and more these days.
@GeoPeter 2 ай бұрын
Thanks for another great video!
@mwyn5085 2 ай бұрын
We never got to see those Elvis impersonations! 😟😂
@nicholastoo858 2 ай бұрын
Just found your channel, great content 👍
@MikeSauce 2 ай бұрын
How are they not scanning uploaded attachments
@carsonjamesiv2512 2 ай бұрын
That MITRE ATT&CK JOKE?,😂😂
@OGmolton1 Ай бұрын
Great video. Are yall familiar with the weird ascii character right to left trick to hide an .exe or .msi extension in windows? scary stuff. I bet that's how they did the .msi as a zip so effective. it runs it silently and still opens the zip. they use winrar in the process to i think. That exploit mustve been there FOREVER
@mikereese15 2 ай бұрын
Mini dump😂
@johndoe1156 Ай бұрын
I use arch btw
@Rogueferula 2 ай бұрын
Nmap uses lua.
@user-nt5ib6me6f Ай бұрын
It's 4 am I lost my sleep I saw him so I came right away The guy The one
@mppdidi9436 2 ай бұрын
is this a re-run of the muppet show ?
@fauxhound5061 2 ай бұрын
??
Security Now
Рет қаралды 10 М.