Episode #151 - PyPI 2FA, CSO's Blues, Volt Typhoon

It's 5:05! Daily cybersecurity and open source briefing

Player FM - Internet Radio Done Right

הוסף לפני three שנים

תוכן מסופק על ידי Contributors from Around the World. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Contributors from Around the World או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/motivational-speeches-inspiration-real-talk-with-reginald-d-motivational-speechesinspirational-stories">Motivational Speeches, Inspiration & Real Talk with Reginald D (Motivational Speeches/Inspirational Stories)</a></span>

1
Motivational Speeches, Inspiration & Real Talk with Reginald D (Motivational Speeches/Inspirational Stories)

בטל רישום

לפני יומייםלפני 2d ago

בטל רישום

שבועי+

Your Weekly Boost of Motivation and Faith-Based Inspiration! Welcome to Real Talk With Reginald D , a top-rated motivational/inspirational podcast hosted by Minister, Motivational Coach, and Motivational/Inspirational and spirituality Speaker, Reginald D. Sherman . This motivational/inspirational podcast is your go-to source for powerful motivational speeches, inspirational stories, transformative advice, and faith-based wisdom to help you overcome life’s challenges and unlock your extraordinary potential. Every Tuesday, Reginald D delivers powerful impactful motivational speeches that will motivate and inspire you on your journey. And, on Fridays, engaging inspirational interviews with dynamic guests—from CEOs and athletes to artists, activists, and everyday individuals—sharing their personal journeys of triumph, purpose, and perseverance. Each episode is packed with raw, unfiltered insights to ignite your passion, strengthen your faith, and inspire and motivate you to pursue a life of meaning and success. Real Talk With Reginald D goes beyond motivation; it’s a platform for self-discovery, empowerment, and transformation. Whether you're conquering obstacles, chasing dreams, or seeking purpose, Reginald D provides the guidance and encouragement to help you rise above and embrace the incredible potential within yourself. Why Listen? Gain weekly motivation and inspiration to conquer anything. Learn faith-based strategies for personal growth and resilience. Hear riveting motivational/inspirational stories of success and perseverance from diverse guests. Discover practical tools for creating a life filled with purpose and joy. "The only limits that exist are the ones we impose upon ourselves." — Reginald D #Motivation #motivational speeches #motivational #ChristianMotivation #MotivationalSpeaker #motivational/inspirational #inspirational

לפני שנתיים 12:01

MP3•בית הפרקים

Hey, it's 5:05 Monday, May 29th. 2023. From the Sourced Podcast Network in New York City, this is your host, Pokie Huang. Stories in today's episode come from Edwin Kwon in Sydney, Australia, Trac Bannon in Camp Hill, Pennsylvania, Katy Craig in San Diego, California, Marcel Brown in St. Louis, Missouri.

Let's get to it.

300 פרקים

#Open Source

Episode #151 - PyPI 2FA, CSO's Blues, Volt Typhoon

It's 5:05! Daily cybersecurity and open source briefing

published לפני שנתיים

שתפו

MP3•בית הפרקים

Let's get to it.

Mandatory 2FA Coming to PyPI

🇦🇺 Edwin Kwan, Sydney, Australia ↗

Securing PyPI accounts via Two-Factor Authentication - The Python Package Index

CSO’s Blues

🇺🇸 Tracy (Trac) Bannon, Camp Hill, Pennsylvania↗

Former Uber CSO Joe Sullivan and lessons learned from the infamous 2016 Uber breach | CSO Online

Majority of US IT Pros Told to Keep Quiet About Data Breaches

Guilty verdict in the Uber breach case makes personal liability real for CISOs | CSO Online

Volt Typhoon in US Critical Infrastructure

🇺🇸 Katy Craig, San Diego, California ↗

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques | Microsoft Security Blog

This Day in Tech History

🇺🇸 Marcel Brown, St. Louis, Missouri ↗

http://thisdayintechhistory.com/05/27

http://thisdayintechhistory.com/05/28

http://thisdayintechhistory.com/05/29

300 פרקים

#Open Source

כל הפרקים

1
Weekly Cybersecurity and Open-source News Updates 7:30

לפני 1 year7:30

7:30

It's April 5th, 2024, and time for your weekly cybersecurity and open-source news updates. We have news updates from Trac Bannon in Camp Hill, Pennsylvania, Julie Chatman in Washington, DC, Katy Craig in San Diego, California, Edwin Kwan in Sydney, Australia, and Olimpiu Pop in Transylvania, Romania. We'll start with Julie Chatman Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
POV Friday: The Rise Of Low Code/No Code Citizen Developers 15:36

לפני 1 year15:36

15:36

It's March 29th, 2024 and time for Point of View Friday, where we cover a single topic from multiple perspectives. Today's point of discussion is around low-code/no-code solutions and their implications. Today we have perspectives from Julie Chatman in Washington, DC, Katy Craig in San Diego, California, Trac Bannon in Camp Hill, Pennsylvania, Edwin Kwan in Sydney, Australia, and Olimpiu Pop reporting from KubeCon Paris. We'll start with Katy Craig. Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
POV Friday: CISA got hacked!? 16:54

לפני 1 year16:54

16:54

It's March 15th, 2024, and time for Point of View Friday, where we cover a single topic from multiple perspectives. Today's point of discussion is around the recent Cybersecurity and Infrastructure Security Agency hack, and it's suspected perpetrators and implications. We have perspectives from Julie Chatman in Washington, D.C., Katy Craig in San Diego, California, Trac Bannon in Camp Hill, Pennsylvania, and Olimpiu Pop from Transylvania, Romania. We also have a couple of interviews from last month's, AFCEA cybersecurity conference held in San Diego, California. We'll start with Katy Craig. Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
POV Friday: Backdoored AI 20:20

לפני 1 year20:20

20:20

It's March 8th, 2024, International Women's Day, and time for Point of View Friday, where we cover a single topic from multiple perspectives. Today's point of discussion is around the risk of backdoored AI. We have perspectives from Julie Chatman in Washington, D.C., Katy Craig in San Diego, California, Trac Bannon in Camp Hill, Pennsylvania, and Olimpiu Pop from Transylvania, Romania. We also have a couple of news stories at the end, and some interviews from the annual AFCEA conference held in San Diego, California last month. We'll start with Julie Chatman. Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
POV Friday: Apple's PQ3 raises the bar on postquantum encryption 9:15

לפני 1 year9:15

9:15

It's March 1st, 2024 and time for Point of View Friday, where we cover a single topic from multiple perspectives. Today's point of discussion is around the anticipation of advancements in quantum computing and the massive overhauls of technology taking place. We have perspectives from Trac Bannon in Camp Hill, Pennsylvania, Olimpiu Pop from Transylvania, Romania, and Katy Craig in San Diego, California. We'll start with Trac Bannon. Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
POV Friday: Disinformation a weapon in an election year? 13:50

לפני 1 year13:50

13:50

It's February 23rd, 2024 and time for point of view Friday, where we cover a single topic from multiple perspectives. Today's point of discussion is around the increasing threat of deepfakes to democracies worldwide. We have perspectives from Trac Bannon in Camp Hill, Pennsylvania, Olimpiu Pop from Transylvania, Romania, Hillary Coover in Washington, DC, and Katy Craig in San Diego, California. We'll start with Katie Craig. Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
POV Friday: The Securities and Exchange Commission's change in cybersecurity disclosure rules. 12:00

לפני 1 year12:00

12:00

It's February 16th, 2024 and time for Point of View Friday, where we cover a single topic from multiple perspectives. Today's point of discussion is the Securities and Exchange Commission's change in cybersecurity disclosure rules. We have perspectives today from Trac Bannon in Camp Hill, Pennsylvania, Olimpiu Pop from Transylvania, Romania, and Katy Craig in San Diego, California. We'll start with Trac Bannon Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
POV Friday: Recent large-scale Microsoft breach. 12:00

לפני 1 year12:00

12:00

It's February 9, 2024 and time for Point of View Friday where we cover a single topic from multiple perspectives. Today's point of discussion is the recent large-scale Microsoft breach. We have perspectives from Trac Bannon in Camp Hill, Pennsylvania, Olimpiu Pop in Transylvania, Romania and Shannon Lietz in San Diego, California. We'll start with Katy Craig also in San Diego, connecting the dots between the HPE breach and Microsoft. Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
PoV Friday: 2024 Predictions for AI and Cyber Legislation with Trac Bannon, Edwin Kwan, Olimpiu Pop, and Shannon Lietz 12:55

לפני 1 year12:55

12:55

It's January 12th, 2024, and time for Point of View Friday, where we cover a single topic from multiple perspectives. Today's point of discussion is what does the future look like for AI and cyber legislation? We have perspectives from Edwin Kwan in Sydney, Australia, Trac Bannon and Camp Hill, Pennsylvania, Olympia Pop from Transylvania, Romania. We'll begin with Shannon Lietz in San Diego, California on the Win, Lose or Draw when considering cyber legislation. Resources and 300+ episodes, all free, all ungated: https://505updates.com/…

1
PoV Friday: 2024 Predictions for AI with Edwin Kwan, Trac Bannon, Olimpiu Pop and Shannon Lietz 15:39

לפני 1 year15:39

15:39

From @Sourced Network Productions, It's 5:05!, the Podcast , with your daily cybersecurity and opensource news headlines. 🎙️ Free, ungated access to 300+ episodes of “It’s 5:05!” on your favorite podcast platforms: bit.ly/505-updates It’s January 5, 2024, and time for Point of View Friday, where we cover a single topic from multiple perspectives. Today’s point of discussion is “What does the near future look like for AI, what should you consider when utilizing AI for your personal use or business solution?” Today’s contributors are Trac Bannon from Camp Hill Pennsylvania, Olimpiu Pop from Transylvania Romania, Shannon Lietz from San Diego California, and Edwin Kwan from Sydney Australia. We’ll start with Edwin’s thoughts on an algorithm that can give a thumbs up or down to your job application. 🎙️ Free access to 300+ episodes of “It’s 5:05!” on your favorite podcast platforms: bit.ly/505-updates #newspodcast #PoVFriday…

1
Episode #304: Edwin Kwan: Google Chrome Safety Check Feature Enhancements; Shannon Lietz: EU CRA: Win | Lose | Draw; Olimpiu Pop: Year in Review: Ukraine and the cyberwar; Marcel Brown: This Day in… 14:26

לפני 1 year14:26

14:26

Free, ungated access to all 300+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 31st, 1999. The world waits in anticipation of the year 2000 and the potential disasters that might be brought about by the Y2K bug. Just for fun, I set up my home with a remote control to turn off all the lights in my house and the TV our friends would be watching at our New Year's Eve party. Seconds after midnight, I pushed the remote control in my pocket, and everything went out. There were definitely a few people in my house that night who thought the apocalypse had come. Edwin Kwan: One of the features of Chrome Safety Check is that it will check if any saved passwords have been compromised. In addition, users will receive alerts in the Chrome menu about flagged dangerous extensions, outdated Chrome versions, or disabled safe browsing. Shannon Lietz: For the last couple of years, the EU has been talking about how it might address some of the cybersecurity issues that are plaguing its economy. As part of this, addressing the 189 pages of a potential act to come, it's hard to look at it and be both excited and petrified at the same time. There's lots to think about. Olimpiu Pop: In 2023, the cyber warfare aspect of the Ukraine war provided concrete examples of both resilience and evolving nature of cyber threats. Ukrainian cyber defenses, although not unbreakable, effectively countered a variety of Russian cyber attacks…

1
Episode #303: Edwin Kwan: Chrome Users Infected via Fake VPNs in Video Game Torrents; Ian Garrett: 6 Key Aspects of SEC Rules for Data Breaches; Olimpiu Pop: Cybersecurity Legislation (CRA, US… 9:16

לפני 1 year9:16

9:16

Free, ungated access to all 300+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 28th, 1895. The world's first projected movie screening takes place at the Salon Indien du Grand Café in Paris, France. 33 people attend at the admission price of 1 franc each to view 10 films at about 50 seconds each. Edwin Kwan: Three malicious Chrome extensions disguised as VPNs infected approximately 1. 5 million users. The extensions - netPlus, netSafe, and netWin - were distributed through an installer hidden in pirated copies of popular video games like Grand Theft Auto and Assassin's Creed. Ian Garrett: New Year, New Data Breach Disclosure Rules issued by the U. S. Securities and Exchange Commission to reshape the cybersecurity landscape for publicly owned companies. Recently, starting on December 18th, these companies must now comply with the stringent rules requiring them to disclose material cyber incidents within 96 hours. Olimpiu Pop: The EU Cybersecurity Schemes, born from the EU Cybersecurity Act, are being developed for different industry categories such as ICT, Cloud services and 5G networks, and will consist of a comprehensive set of rules, technical requirements, standards and evaluation procedures for certification.…

1
Episode #302: Edwin Kwan: Developers Ignore Critical Flaw in Apache Struts 2 Framework; Hillary Coover: The Quantum Computing Revolution and Global Security; Olimpiu Pop: 2023 in Review: AI… 9:52

לפני 1 year9:52

9:52

Free, ungated access to all 300+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 27th, 1968. Apollo 8 splashes down in the Pacific Ocean, ending the first manned orbit of the moon. When the spacecraft hit the water, the parachutes dragged it over and left it upside down. Because they were being buffeted by 10 foot swells, astronaut Frank Borman actually got sick and vomited. Welcome back to Earth, Frank. Edwin Kwan: A critical remote code execution vulnerability in the Apache Struts 2 framework is reportedly being ignored by developers, leaving approximately 80 percent of recent Strut downloads exposed to the flaw. The severity of the vulnerability, rated as 9. 8 out of 10 in CVSS, arises from a logic bug in the File Upload feature. Hillary Coover: Quantum computers operate on subatomic particle properties, enabling them to perform complex calculations and process information at unparalleled speeds compared to today's computers. However, a current challenge is the instability of qubits, the key processing units in quantum computers, which limits their ability to decrypt substantial amounts of data. Olimpiu Pop: In 2023, the European Union made significant strides in AI legislation with the introduction of the EU AI Act. This groundbreaking legislation, agreed upon on December 9, 2023, is the world's first dedicated law on AI and sets a global precedent.…

1
Episode #301: Edwin Kwan: Critical Vulnerability Threatens SSH Security; Hillary Coover: National Grid Removes China-Based Supplier's Components; Ian Garrett: Ransomware Evolves to Extortionware… 14:35

לפני 1 year14:35

14:35

Free, ungated access to all 300+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 25th, 1990. Merry Christmas, everyone. Tim Berners Lee, a British scientist working at the European Organization for Nuclear Research, otherwise known as CERN, along with his associate, Robert Kaliau, were operating the first web server, info.cern.Ch, and first web browser slash editor, World Wide Web, which were reportedly able to communicate over the internet by this date. Edwin Kwan: A groundbreaking attack named Terrapin has been uncovered posing a significant threat to the security of the SSH secure shell protocol. What sets Terrapin apart is its ability to undermine cryptographic SSH protections that were previously considered to be immune to such attacks Hillary Coover: Britain's National Grid is taking steps to remove components provided by a subsidiary of China-backed Nari Technology from its electricity transmission network due to concerns about cybersecurity. Ian Garrett: Cyber criminals in their quest to maximize disruption and ransom demands are evolving their strategies. A notable example is the ransomware group gang known as BlackCat, which recently employed a novel extortion tactic. This incident is the first of its kind, and likely a precursor to future trends in cyber extortion. Olimpiu Pop: In 2023, cybersecurity and supply chain issues evolved significantly. Software supply chain attacks, especially targeting open source software libraries, saw a dramatic increase. The growing reliance on open source software, under the pressure of rapid development cycles, made these libraries prime targets for exploitation.…

1
Episode #300: Edwin Kwan: SMTP Smuggling ByPasses Email Security Controls; Hillary Coover: Researchers Seek to Unmask Hackers Through Code Analysis and AI; Marcel Brown: This Day in Tech History;… 16:48

לפני 1 year16:48

16:48

Free, ungated access to all 300+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 22nd, 1882. Edward Johnson, an associate of Thomas Edison, has walnut sized bulbs made specifically for him to wire his Christmas tree with electric light. The eighty red, white, and blue bulbs formed the first set of electric Christmas tree lights in history. Edwin Kwan: A recently discovered SMTP smuggling technique is allowing cyber attackers to sidestep email security protocols, posing a significant threat to organizations. The techniques exploit zero-day flaws in messaging servers, allowing attackers to send malicious emails with fake sender addresses. Hillary Coover: In an effort to combat cybercrime, U. S. government researchers are embarking on a 30 month project to investigate whether computer code used in cyberattacks can reveal clues about the hackers behind them. Katy Craig: The SEC's legal action against the former CISO of SolarWinds is a justified step towards greater accountability in corporate cybersecurity. It highlights the need for individuals in charge to diligently comply with federal safeguards and rules and to report incidents. Trac Bannon: The charges against Joe Sullivan and Timothy Brown have dramatic ramifications for industry. There is the increased scrutiny of CSOs and CISOs. The precedent is set for personal accountability for both cybersecurity practices and disclosures. This means corporate security officers face scrutiny and legal responsibilities similar to CFOs and their responsibility for financial disclosures. Olimpiu Pop: Whether we like it or not, we are at war. The CISO should stop preaching, and transform their slides into actions . Actions, translatable into automated tools that cannot be circumvented or ignored. More than that, as CISO, you should be the north star in terms of ethical conduct.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #299: Edwin Kwan: Terminated Bank Cloud Engineer Sabotages Systems; Hillary Coover: Unauthorized Access to MongoDB Corporate Systems; Ian Garrett: Insights from the Microsoft Digital Defense… 6:55

לפני 1 year6:55

6:55

Free, ungated access to all 295+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Edwin Kwan: A former cloud engineer at a bank was terminated for violating company policies, including inappropriate laptop use. After he was fired, the employee went home and used a company issued laptop to launch attacks on the bank's network. Hillary Coover: Database management company MongoDB is currently investigating a security incident that has led to the exposure of some customer information. Certain corporate systems were compromised, containing customer names, phone numbers, email addresses, and other unspecified customer account metadata. For one customer, system logs were accessed. Ian Garrett: Microsoft recently released their Digital Defense Report of 2023, which provides crucial insights into the evolving cybersecurity landscape. Let's jump into the 10 essential insights of cybersecurity from the report.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #298: Edwin Kwan: Ubiquiti User Accounts Suffer Data Breach; Katy Craig: Xfinity Acknowledges 36 Million Customer Accounts Breached; Hillary Coover: L.L. Bean's Surprising Stance on Data… 9:00

לפני 1 year9:00

9:00

Free, ungated access to all 295+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 20th, 1996. In a surprise move at the time, Apple Computer announces their intention to purchase Steve Jobs' company, NeXT, and bring Steve Jobs on board as an advisor to CEO Gil Amelio. Along with the leadership of future CEO Steve Jobs, the resurgence of Apple in the 2000s, and the emergence of the new world of technology can be traced back to this major event in technology history. Hillary Coover: In Maine's data privacy debate, L.L. Bean has surprisingly aligned with global tech giants, highlighting the power of local national business alliances in shaping legislation. This unusual alliance between a family-owned retailer and tech giants illustrates the complexity of the national data privacy law debate, primarily occurring at the state level. Edwin Kwan: Ubiquiti users were reporting last week that they were seeing other people's notification and had access to their devices. The incident was first reported on Reddit, where a user received a notification from UniFi ProTech, including an image from someone else's security camera. Katy Craig: Today we're discussing a significant cyber security incident. Xfinity has recently experienced a major data breach, potentially impacting around 36 million customers . Compromised data includes usernames, hashed passwords, the last four digits of social security numbers, security questions, birthdates, and contact details.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #297: Edwin Kwan, My Personal Experience with SMS Impersonation Scams; Hillary Coover, Europe Probes Elon Musk's X Over Disinformation Handling; Ian Garrett, Cybersecurity, Artificial… 10:15

לפני 1 year10:15

10:15

From @Sourced Network Productions, @It's 5:05!, the Podcast , with your daily #cybersecurity and #opensource news headlines. 🎙️ Free access to 280+ episodes of “It’s 5:05!” on your favorite #podcast platforms: bit.ly/505-updates In this episode: Marcel Brown: This day in Tech History December 19th, 1974. Micro Instrumentation and Telemetry Systems, otherwise known as MITS, begins selling the Altair 8800 microcomputer kit. It is one of the most important computers in history, for it inspired the first generation of entrepreneurs that created the personal computer industry. Edwin Kwan: My Personal Experience with SMS Impersonation Scams I was recently targeted by an SMS impersonation scam. The scammer was impersonating someone I know who's from the US and a text message came from a US number. I don't have this person's mobile number saved, so replied thinking it might be him. It became obvious fairly quickly that it was a scam, Hillary Coover: Europe Probes Elon Musk's X Over Disinformation Handling Elon Musk's social media platform, X, formerly known as Twitter, is facing an official investigation in Europe regarding its handling of illegal content and disinformation. The European Commission has initiated a formal infringement proceeding against X under the Digital Services Act. Ian Garrett: Cybersecurity, Artificial Intelligence, and Nuclear weapons, Oh my! Cybersecurity, artificial intelligence, and nuclear weapons. Do we have an update for you? The 2024 National Defense Authorization Act, or NDAA, is a crucial piece of annual legislation for U. S. military funding. The NDAA was passed with a focus on various cybersecurity concerns. 🎙️ Free access to 290+ episodes of “It’s 5:05!” on your favorite podcast platforms: bit.ly/505-updates #newspodcast…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #296: Edwin Kwan: 38% of Apps Still Exposed to Log4J Vulnerability; Katy Craig: Is My Phone Spying on Me?; Hillary Coover: Foreign Geographic Software Poses National Security Threats; Marcel… 10:28

לפני 1 year10:28

10:28

Free, ungated access to all 295+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 17th, 1903. Orville and Wilbur Wright make their famous first controlled and sustained flights with a heavier than air, powered aircraft. Orville made the very first flight, which lasted about 12 seconds. Edwin Kwan: It's been almost three years since the critical Log4j vulnerability was disclosed. Despite patches being available shortly after vulnerability disclosure, many organizations persistently use vulnerable versions. There are still approximately 38% of applications using vulnerable versions of the Apache Log4j library. Hillary Coover: China raised concerns about the potential compromise of sensitive data, particularly in crucial sectors like the military, due to the use of foreign geographic information software. The Ministry of State Security has urged security departments to conduct thorough investigations to prevent further breaches. Katy Craig: A marketing company, CMG Local Solutions, recently claimed it could access people's private conversations through their device microphones for targeted advertising. This claim raises some serious red flags.…

It's 5:05! Daily cybersecurity and open source briefing

1
Special Report: POV Friday - Four Opinions on the EU AI Act. 12:09

לפני 1 year12:09

12:09

From Sourced Network Productions, It's 5:05!, the Podcast , with a special report on the EU AI Act. It’s Point of View Friday, featuring Trac Bannon, Katy Craig, Shannon Leitz, and Olimpiu Pop, with their perspectives on the release of the EU AI Act. We’ll start with Katy Craig. Katy Craig: Today, we’re diving into a significant milestone in AI regulation: the European Union’s recent passing of the AI Act. This legislation is set to shape how AI is used across industries, but it also raises questions about potential, unintended consequences. Trac Bannon: The EU is taking the global lead when it comes to AI governance. In the US, there are many discussions and hearings happening about AI policy at different levels of the government, but nothing cohesive and nothing comprehensive. Shannon Lietz: It’s an interesting time to be looking at AI, using AI, and trying to make sense of what it could mean for you. The question is, which use cases is it most well suited for? And are the producers of AI capabilities such as OpenAI and its competitors actually looking at which use cases should be allowed? Which ones are allowed to be adopted? Olimpiu Pop: The EU AI Act, with all its ups and downs, is the first one in the world, and it will be the baseline. Can the slow legislative apparatus keep pace with the lightning speed of AI tech space? 🎙️ Free access to 280+ episodes of “It’s 5:05!” on your favorite #podcast platforms: bit.ly/505-updates…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #295: Edwin Kwan: Apple Beta Testing Stolen Device Protection Feature; Marcel Brown: This Day in Tech History; Katy Craig: EU AI Act: Significant Milestone in AI Regulation; Trac Bannon: EU… 17:30

לפני 1 year17:30

17:30

Free, ungated access to all 295+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 16, 2003. The CAN SPAM Act of 2003 is signed into United States law. Passed in an attempt to control the growing deluge of junk email, the law's effectiveness is dubious at best. Especially considering political spam is exempt from the law. Edwin Kwan: Apple will soon be introducing a stolen device protection feature, which is aimed at enhancing security if an iPhone is stolen, particularly in scenarios where thieves obtain the device passcode. Katy Craig: Today, we're diving into a significant milestone in AI regulation: the European Union's recent passing of the AI Act. This legislation is set to shape how AI is used across industries, but it also raises questions about potential, unintended consequences. Trac Bannon: The EU is taking the global lead when it comes to AI governance. In the US, there are many discussions and hearings happening about AI policy at different levels of the government, but nothing cohesive and nothing comprehensive. Olimpiu Pop: The EU AI Act, with all its ups and downs, is the first one in the world, and it will be the baseline. Can the slow legislative apparatus keep pace with the lightning speed of AI tech space? Shannon Lietz: It's an interesting time to be looking at AI, using AI, and trying to make sense of what it could mean for you. The question is, which use cases is it most well suited for? And are the producers of AI capabilities such as OpenAI and its competitors actually looking at which use cases should be allowed? Which ones are allowed to be adopted?…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #294: Edwin Kwan: Over 50% Insider Attacks Involve Privilege Elevation Exploits; Katy Craig: Malware Deployment Strategy against Adobe ColdFusion; Ian Garrett: Where Will Cyber Leaders Focus… 9:20

לפני 1 year9:20

9:20

Free, ungated access to all 290+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 14th, 1902. The cable ship Silvertown begins laying the first Transpacific telegraph cable from San Francisco, destined for Honolulu, Hawaii. On January 1st, 1903, the connection between Hawaii and San Francisco was established. Edwin Kwan: A research study based on data from January 2021 to April 2023 shows a rise in insider threats, with 55% relying on privilege escalation exploits and the remaining 45% introducing risk by downloading or misusing offensive tools. Katy Craig: In June 2023, cybersecurity incidents shook the digital landscape as threat actors exploited a vulnerability in Adobe ColdFusion. The attackers executed a calculated malware deployment strategy. They exploited the Adobe ColdFusion vulnerability to introduce malware, including a remote access Trojan using HTTP POST commands. Ian Garrett: AI has emerged at the forefront of cybersecurity megatrends for 2024. An overwhelming 93% of respondents anticipate Generative AI, like ChatGPT, impacting their business strategies within the next 5 years, with 89% already incorporating AI into their R&D efforts.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #293: Edwin Kwan: Messenger and Facebook: Default End to End Encryption; Hillary Coover: Campaign Targets Taiwan Elections with Stolen Identities and Disinformation; Katy Craig: North… 8:26

לפני 1 year8:26

8:26

Free, ungated access to all 290+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 16, 2016. After a long delay, Apple finally releases their new wireless earbuds, the Apple AirPods. Within two years, they became Apple's most popular accessory, and today are some of the most popular and well recognized earbuds in the market. Hillary Coover: A covert campaign dating back to May 2022 is distorting conversations about Taiwan's upcoming elections. The Graphika report exposes hundreds of fake social media accounts on Facebook, TikTok, and YouTube. While the perpetrators remain unidentified, the operation favored a pro-China political party in Taiwan, while criticizing its main rival. Katy Craig: Two years after the infamous Log4j vulnerability came to light, North Korean hackers are still exploiting this flaw in widespread cyberattacks. These attacks fall under the wide-reaching activities of the Lazarus umbrella, a term for the various North Korean government hacking operations. Edwin Kwan: Meta has announced the rollout of default end-to-end encryption for personal messages and calls on Messenger and Facebook. The rollout will take several months to complete globally, prompting users to set up recovery methods when their chats are upgraded.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #292: Edwin Kwan: 5Ghoul Vulnerabilities Affecting Most 5G Smart Phones; Katy Craig: P2PInfect: Evolving to Target Routers and IoT Devices; Ian Garrett: That Job Candidate Might Be a Hacker;… 8:36

לפני 1 year8:36

8:36

Free, ungated access to all 290+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Mark Miller: December 12th, 1980. Apple computer holds their initial public offering selling 4.6 million shares at $22 per share, and turning more than 40 Apple employees and investors into instant millionaires. Edwin Kwan: A set of 14 security vulnerabilities named "5Ghoul" has been discovered in the firmware implementation of 5G mobile network modems from major chipset vendors like MediaTek and Qualcomm. The flaw impacts USB and IoT modems along with hundreds of smartphone models running Android and iOS. Katy Craig: Cybersecurity researchers from Cato Security Labs have uncovered a new variant of P2PInfect compiled for the MIPS architecture used widely in routers and IoT devices. This latest version indicates the botnet's expanding capability is in reach. Ian Garrett: Now hackers are applying to jobs? TA4557, a threat actor active since 2018, is evolving its strategy to directly target recruiters with malicious URLs. Once the recruiter responds, TA4557 replies with a URL linking to a website controlled by the threat actor, posing as the candidate's resume.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #291: Edwin Kwan: Critical Vulnerabilities Affect Multiple Atlassian Products; Hillary Coover: Russian Deepfake: Celebrities Used in Disinformation Against Ukraine; Mark Miller: Gemini: A… 8:06

לפני 1 year8:06

8:06

It's 5:05! Daily cybersecurity and open source briefing

1
Special Report: Point of View Friday - Four Opinions on the OWASP BOM Maturity Model, with Trac Bannon, Katy Craig, Shannon Lietz, and Olimpiu Pop 10:17

לפני 1 year10:17

10:17

From @Sourced Network Productions, @It's 5:05!, the Podcast , with a special report on the release of the OWASP BOM Maturity Model. It’s Point of View Friday, featuring Trac Bannon, Katy Craig, Shannon Leitz, and Olimpiu Pop, with their perspectives on the release of the BOM Maturity Model by the OWASP Foundation. We’ll start with Trac Bannon. 🎙️ Free access to 280+ episodes of “It’s 5:05!” on your favorite #podcast platforms: bit.ly/505-updates…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #290: Edwin Kwan: Bluetooth Authentication Bypass Vulnerability in Apple and Linux; Marcel Brown: This Day in Tech History; Trac Bannon: OWASP BOM Maturity Model: Is It Valuable?; Katy… 17:55

לפני 1 year17:55

17:55

Free, ungated access to all 290+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 8th, 1975. Paul Terrell opens the Byte Shop in Mountain View, California, one of the first retail computer stores in the world. Paul Terrell and the Byte Shop are most famously known for ordering the first 50 computers from Steve Jobs and Steve Wozniak's fledgling Apple Computer Company in 1976. Edwin Kwan: A Bluetooth authentication bypass vulnerability has been discovered to be impacting Apple, Android, and some Linux devices. The bug allows attackers to connect to devices and inject keystrokes to execute arbitrary commands. Trac Bannon: OWASP has just introduced the Software Bill of Materials Maturity Model. In general, I'm not a fan of maturity models. They're often inflexible, arbitrary, and don't consider context. That said, there is merit in providing guidance given the slow rate of adoption and even the lack of understanding by the software industry. Katy Craig: Today we're diving into a game-changer for consumer software transparency: the launch of the BOM Maturity Model by the OWASP Foundation. Simply put, this model is a big win for consumers who want to know more about the software that we use daily. Olimpiu Pop: Software Bills of Materials, SBOMs, are those labels that we need to stick on our delivered software packages. How should it happen? For now, at least in the Java ecosystem, there is no way of delivering the label together with the package. Shannon Lietz: We're all talking about Bill of Materials these days. It's an important concept for all of us, for a lot of reasons, in particular software buyers. Anyone who's out there who's buying something from a supplier should be interested in what is in that actual product.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #289: Edwin Kwan: Malicious Wordpress Plugin Issues Fake Security Advisories; Katy Craig: Feds surveilling us via push notifications; Mark Miller: Special Report: ChatGPT Isn’t the Only AI… 13:55

לפני 1 year13:55

13:55

Free, ungated access to all 285+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 7, 1999. The Recording Industry Association of America sues the peer to peer file sharing service Napster, alleging copyright infringement for allowing users to download copyrighted music for free. The recording industry in general was caught with its pants down when it came to digital music and the internet. Edwin Kwan: WordPress administrators are being targeted by a fake security advisory email campaign to install a malicious plugin on their websites. According to security researchers, the attackers sent deceptive emails to website administrators pretending to be from WordPress. Katy Craig: A recent revelation has come to light about governments using smartphone apps' push notifications to surveil users. US Senator Ron Wyden warned that unidentified governments are demanding push notification data from Google and Apple. This news raises significant privacy concerns, highlighting the often overlooked implications of push notifications. Mark Miller: With the headline grabbing news of Sam Altman and the mess at OpenAI a couple of weeks ago, what's gotten lost in the media is that OpenAI's ChatGPT isn't the only game in town. There are dozens of other AI chat engines that can provide you with something more specific to your needs than a general AI model that tries to be the best of everything.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #288: Edwin Kwan: WhatsApp Updates Password Security; Katy Craig: AI Alliance to Compete with Closed Source LLMs; Hillary Coover: 23andMe: Guard Your DNA Data, Protect Your Family; Marcel… 10:33

לפני 1 year10:33

10:33

Free, ungated access to all 285+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 6, 1994. Apple sues the San Francisco Canyon Company, alleging they helped Intel and Microsoft steal code developed under contract for QuickTime for Windows. Apple was threatening Microsoft with a multi-billion dollar lawsuit that was famously settled by Steve Jobs and Bill Gates in 1997. This settlement is now believed to have helped Apple survive long enough to transform themselves in the 2000s, ushering in the mobile device revolution and the new world of technology. Edwin Kwan: WhatsApp has introduced a new secret code feature, allowing users to add an extra layer of security to their locked chats by setting a custom password. The process of locking chats has been streamlined, utilizing a long-press action for simplicity. WhatsApp aims to enhance privacy and protect sensitive conversations, making it harder for unauthorized access. Hillary Coover: In a world where password updates are about as popular as Monday mornings, the recent 23andMe security breach is here to remind us that a little humor won't save our data, but strong password hygiene will. Password 123 is just not going to cut it anymore. Katy Craig: Big news in AI: IBM and Meta, with over 50 others, including AMD, Intel, and Harvard, have launched the AI Alliance. It's a global coalition challenging the closed AI systems of leaders like OpenAI and Google. The Alliance promotes open innovation and open science in AI, offering an alternative to private AI models.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #287: Edwin Kwan: Mandatory Data Breach Notification Coming to Queensland; Ian Garrett: Deepfakes: A Growing Concern for 2024 Election Security; Katy Craig: A Prickly CACTUS: Ransomware to… 9:27

לפני 1 year9:27

9:27

Free, ungated access to all 285+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Mark Miller: December 5th, 1965. The first PhD dissertation in computer science is presented. Richard L Wexelblat was the first candidate in a computer science program to complete a dissertation. Wexelblat's diploma presented by the University of Pennsylvania, the home of ENIAC, was the first one to carry the designation, "Computer Science". Ian Garrett: Enhancements to AI platforms have been incredible for the content generation market, as it is easier than ever to create realistic content with a fraction of the time it would have before. But, for every good use of a tool, there always is a malicious use as well. Edwin Kwan: In a significant move, Queensland's parliament has approved a mandatory data breach notification scheme. The scheme is set to impact state agencies from mid 2025 and local governments from mid 2026. Katy Craig: A new ransomware group named CACTUS recently surfaced, ranking in the top 10 for most monthly victims. CACTUS represents a sophisticated and multi-faceted cybersecurity threat to large commercial organizations.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #286: Edwin Kwan: Discovered Zoom Vulnerability Allows Account Hijacking; Katy Craig: LogoFAIL: New UEFI Vulnerabilities Threaten Device Firmware Security; Hillary Coover: Secure Shopping… 9:32

לפני 1 year9:32

9:32

Free, ungated access to all 285+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 3rd, 2001. Inventor Dean Kamen unveils the Segway self-balancing battery-powered vehicle on the TV show Good Morning America. The Segway uses computers and motors in its base to keep itself upright while the user is riding it. While the original Segway was not considered a commercial success, it definitely became a familiar icon of personal transportation. Edwin Kwan: Security researchers revealed a vulnerability in Zoom that allowed the unauthorized access of service accounts. The vulnerability enabled hackers to claim a Zoom Room's service account, gaining invisible access to team chat, whiteboards, and other applications. Hillary Coover: As we approach peak shopping season, it's crucial to consider measures to protect yourself from online fraud. One effective tool is the use of virtual credit cards. Here are a few frequently asked questions to get you all set up. Katy Craig: Security researchers have unveiled "LogoFAIL," a set of vulnerabilities in the Unified Extensible Firmware Interface (UEFI), used by various firmware vendors. These flaws, found in firmware image-parsing libraries, pose a significant risk to a wide range of consumer and enterprise devices from major manufacturers.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #285: Edwin Kwan: Apple Releases Emergency Zero-Day Security Updates; Macrel Brown: This Day in Tech History; Katy Craig: AI Guidelines: US and EU Release Secure AI System Development… 17:13

לפני 2 years17:13

17:13

Free, ungated access to all 285+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: December 1st, 1996. America Online launches a new subscription plan offering their subscribers unlimited dial up internet access for $19.95 a month. Previously, AOL charged $9.95 a month for 5 hours of usage. The new plan brought in over 1 million new customers to AOL within weeks, and daily usage doubled among subscribers, to a whole 32 minutes per day. Edwin Kwan: Apple has urgently released security updates to address two zero day vulnerabilities that were actively being exploited. These vulnerabilities impact iPhones, iPads, and Mac devices. Katy Craig: CISA and the United Kingdom's National Cyber Security Centre jointly released guidelines for secure AI system development, developed in cooperation with 21 other agencies and ministries from across the world, including all members of the group of seven major industrial economies. Trac Bannon: The CISA AI Roadmap is a comprehensive, whole of agency plan. They've aligned it with the U. S. National AI Strategy. The roadmap has lines of effort to promote the beneficial uses of AI, enhance cybersecurity capabilities, and improve protection of AI systems from cyber based threats. One specific example that I find particularly valuable is the emphasis on secure by design principles in AI adoption. Olimpiu Pop: UK's Cyber Security Agency provided guidelines, and they invite you to act securely while developing your AI system. They mostly refer to general software development practices. Practices that the industry is trying to impose without much success for years now.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #284: Edwin Kwan: Are We Sharing Too Much on LinkedIn?; Katy Craig: MITRE ATLAS: Mapping Security Vulnerabilities in AI; Ian Garrett: The Two Faces of Cybersecurity Investing; Marcel Brown:… 9:00

לפני 2 years9:00

9:00

Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 30th, 2009. Book retailer Barnes Noble releases their first Nook eReader to compete with the highly successful Amazon Kindle, released two years earlier. Edwin Kwan: Are we sharing too much on LinkedIn? Daniel Barbosa from WeLiveSecurity recently published an article on the potential risks associated with the wealth of personal information shared on LinkedIn, which is the world's largest professional social network. Katy Craig: MITRE, a government-funded research organization, is leading an ambitious project to map the security vulnerabilities in artificial intelligence (AI) systems. Recognizing the critical nature of AI security, international cyber defense agencies have called for enhanced security practices throughout the AI system lifecycle. Ian Garrett: Is investing in cybersecurity hot or not? It turns out it depends who you're asking, because there's a huge divide between the private and public markets.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #283: Edwin Kwan: Australian Banks Begin Blocking Transfers to Suspect Accounts; Katy Craig: Google’s Cybersecurity Forecast: The Growing Influence of AI; Hillary Coover: Hacker's Haven:… 13:49

לפני 2 years13:49

13:49

Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 29th, 1972. Atari introduces their first product, Pong, which would become the world's first commercially successful video game. Nolan Bushnell installed the game at Andy Capp's Tavern in Sunnyvale, California on this day. There were 10,000 machines installed within four months. Edwin Kwan: In 2023, Australians suffered over $400 million in losses due to scams. The actual figure is believed to be much higher considering under reporting. Australian banks have yielded to pressure from consumer groups and pledged to enhance efforts against scams by implementing technology to block transfers to suspicious accounts. Hillary Coover: As more and more cocaine is sneaking into Europe, big ports like Rotterdam and Antwerp are facing cybercrime aiding smuggling operations. In a shocking expose, the intricate web of criminal infiltration into Europe's major ports is revealed. Katy Craig: Google's latest cybersecurity forecast presents a concise yet comprehensive look at the emerging cyber landscape for 2024. This report from Google underlines the urgent need for advanced AI-integrated cybersecurity measures to combat these evolving threats and safeguard digital ecosystems in 2024 and beyond.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #282: Ian Garrett: Deprecation of Defender Application Guard for MS Office; Edwin Kwan: Open Source 3D Design Suite Targeted by DDoS; Katy Craig: US and UK: Joint Guidelines for AI System… 10:10

לפני 2 years10:10

10:10

Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 28, 1948. Just in time for the Christmas shopping season, 57 units of the first commercial instant camera, the Polaroid Land Camera Model 95, go on sale at the Jordan Marsh Department Store in Boston. Polaroid believed that 57 units would be enough to last through Christmas. Edwin Kwan: Open Source Blender Project is being targeted by Distributed Denial of Service attacks resulting in site outages. The attacks have severely disrupted operations, making it difficult to process legitimate connection requests. Despite continuous efforts by the administrators, attempts to block attackers' IP ranges were unsuccessful. Katy Craig: In a landmark collaboration, the United States and the United Kingdom have jointly issued comprehensive guidelines to strengthen the security and integrity of artificial intelligence, or AI, systems. This crucial document is directed at AI system providers, including those using both in-house and external models and APIs. Ian Garrett: Microsoft has announced the deprecation of Defender Application Guard for Office and the Windows Security Isolation APIs. These tools were integral in securing Microsoft 365 apps by creating a secure sandbox for files from untrusted sources. Microsoft's decision to deprecate Defender Application Guard for Office has significant implications for organizations and IT professionals.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #281: Edwin Kwan: OwnCloud App Suffers Three Critical Vulnerabilities; Katy Craig: AI-Enabled Autonomous Vehicles and Lethal Weapons; Hillary Coover: Debunking the Incognito Shopping Myth;… 10:12

לפני 2 years10:12

10:12

Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 27, 1995. Nearly six months to the day after Bill Gates sent his Internet Tidal Wave memo recognizing the importance of the Internet, and only three months after releasing version 1.0, Microsoft releases Internet Explorer 2.0 for Windows 95 and Windows NT 3.5. Edwin Kwan: Three critical vulnerabilities have been reported to affect OwnCloud, exposing users to potential data breaches. One of these flaws, with a maximum severity score, exposes administrator passwords and mail server credentials. Hillary Coover: Despite the widespread belief that private browsing can secure better prices during online shopping, it turns out that Incognito mode doesn't deliver on this promise. All private browsing modes do is erase your search history from the device and prevent the browser from using cookies to track your activity across sites. Katy Craig: The Pentagon is racing against time and technology in its ambitious Replicator initiative, aiming to deploy thousands of AI-enabled autonomous vehicles by 2026. This strategic push is to keep pace with China's rapid advancements in military technology.…

It's 5:05! Daily cybersecurity and open source briefing

1
Special Report: POV Friday with Trac Bannon - OpenAI: Should Camelot Be Restored? 2:52

לפני 2 years2:52

2:52

Hello, this is Trac Bannon reporting from Camp Hill, Pennsylvania. The news of San Altman sacking by the OpenAI Board of Directors shook the world on Friday, November 17th. As events unfolded in the following hours and days, the world suffered collective whiplash. While many are asking why the board made that decision, more profound questions are being raised about the balance between innovative leadership and effective governance. The sacking of Altman, coupled with the ChatGPT outage on November 21st, underscores the delicate equilibrium required in leading cutting edge technology organizations. The impact of such high level upheaval on an organization’s workforce can’t be overstated. Morale, trust, and psychological safety matter. In the case of Sam Altman, the mix of political events and operational stability are sending additional shockwaves. Right or wrong, Sam Altman is viewed as a bold visionary pushing the boundaries of AI technology while maintaining a strong ethical compass. His departure from OpenAI could change the company’s direction and shows the difficulty of balancing visionary leadership and governance. It is no secret that Microsoft is the largest corporate investor in OpenAI, sinking over $10 billion and the use of their Azure cloud computing environment. As the OpenAI drama plays out, Satya Nadella has been the steady hand on the rudder. His simple words speak volumes. Surprises are bad. Consider that industry leaders have consistently warned us of the potential risk of AI on humanity. Elon Musk, Bill Gates, Ginni Rometty, Mark Zuckerberg, and the late Stephen Hawking. Nadella immediately stepped in to voice his support for the work of OpenAI, regardless of the configuration… a reference to Microsoft’s offer to hire Altman, Greg Brockman, and 743 of OpenAI’s 770 workers to keep the technology and innovation moving forward, yet contained. Should OpenAI’s Camelot be restored? No, the evidence is clear. The world’s most powerful technology needs a combination of innovation and governance. Sam Altman is currently in discussions to return to OpenAI. Satya has voiced continuing support for OpenAI. The world should collectively hope for a future where AI is both innovative and responsibly governed, benefiting humanity wisely and ethically. Something to noodle on. Full episode available: https://505updates.com/2023-11-24-cybersecurity-and-open-source-headlines/ 🎙️ Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates…

It's 5:05! Daily cybersecurity and open source briefing

1
Special Report: POV Friday with Olimpiu Pop - OpenAI: What will its future look like? 2:19

לפני 2 years2:19

2:19

The recent turmoil at OpenAI, stemming from the ousting of CEO Sam Altman, has thrown the AI community into a state of intense discussion and speculation. We have a whole saga that looks more like a new season of HBO's Game of Thrones than a sane tech company that is crafting the future of humanity. The coup backfired and Altman seems to be returning in a more powerful position, just in time for the Thanksgiving turkey. The saga has significant implications for the broader AI industry. ChatGPT's release and OpenAI's innovative strides have triggered a surge in AI investment, with heavyweights like Microsoft investing substantially. What do these events actually underline? Altman's departure underscores the schism in AI development philosophy. On one side are proponents of rapid development and public deployment of AI, represented by Altman, argue that such an approach is essential for stress testing and perfecting the technology. On the other side are advocates of a more cautious approach favoring extensive development and testing in control environments, to ensure AI safety for public use. Concerns over the uncontrollability of hyper intelligent AI software, have been a significant factor in this divide. This issue is particularly acute among tech workers following the effective altruism movement who prioritize benefits to humanity. The question of how to balance commercial success with ethical and safe AI development has become increasingly pertinent. Originally founded as a non profit to ensure ethical AI development, OpenAI's transformation into a for profit entity under Altman's tenure has been a contentious issue. This shift has raised concerns about profit motives potentially overshadowing the company's ethical charter, which aims to prevent harm to humanity or undue concentration of power. More opinions and resources can be found on 505updates.com. Olimpiu Pop, reported from Transylvania, Romania. Full episode available: https://505updates.com/2023-11-24-cybersecurity-and-open-source-headlines/ 🎙️ Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates…

It's 5:05! Daily cybersecurity and open source briefing

1
Special Report: POV Friday with Shannon Lietz - OpenAI and Microsoft: Win, Lose, or Draw? 3:05

לפני 2 years3:05

3:05

Hi, this is Shannon Leitz from San Diego, California. With all the brouhaha going on with Sam Altman and OpenAI, there's a lot to unpack and digest. A few things for all of us. When OpenAI, not yet a year ago, released its ChatGPT to the world, a fabulous capability if you ask me, it was pretty obvious at the time that they were chasing adoption and velocity as a brand new organization entering into the market. I say that because most folks know that there's sort of a chase for go to market. When doing so, I don't know that anybody, maybe Sam Altman could have known, but I don't know that anybody would have predicted 100 million folks adopting ChatGPT as quickly as they did. At the time, there was a clear understanding that resilience was sort of left behind, and the company knew about some of the errors associated with its technology and believed that it could fix it in time. Along the way, we've also seen Microsoft throw in billions of dollars in investment and the world is actually at an awe. From my perspective, analyzing the win, lose, or draw of this situation, it's pretty clear to me that we're at a current place in time where everyone's at a draw. What will happen to our beloved ChatGPT? How will that actually turn out in the end? And add a draw, who stands to win? Who stands to lose in this situation? It's pretty clear that when Microsoft brought on billions of dollars of investment, and OpenAI moved to Azure to be able to support its technology, that the clear winner that's going to come out of this is going to be Microsoft in the end. That means that who loses in this is going to be ultimately OpenAI, its workers, and it's customers. You know, yesterday, only yesterday, even just logging into ChatGPT, there was a huge outage, a spike, if you look at down detector. This tells me that resilience truly is the fuel of a durable company that underpins the technology that we all love and care about deeply. So if you're out there and you're trying to figure out how you're going to deal with this, if your company is born on ChatGPT or OpenAI technology, it's really important to start thinking about how you're going to find a resilient, adoptable, high velocity technology with lower errors. And that ultimately, the ones that are out there right now, that are being born to compete with OpenAI, they probably have a little bit more time, as they well know. This is Shannon Leitz, reporting on the Win, Lose, or Draw.…

It's 5:05! Daily cybersecurity and open source briefing

1
Special Report: POV Friday with Katy Craig - OpenAI: Sam Altman’s Triumphant Return 3:18

לפני 2 years3:18

3:18

This is Katy Craig in San Diego, California. In an extraordinary twist fit for a Silicon Valley drama. OpenAI's boardroom coup against CEO Sam Altman not only failed, but spectacularly backfired, leading to a reshuffling of the board itself. The recent turmoil at OpenAI, a beacon in the AI industry, laid bare the complexities and power dynamics at play in the high stakes world of technological innovation. The attempt to oust Altman, ostensibly for a lack of transparency, was more than just a disagreement over leadership style. It symbolized a deeper conflict about the direction and speed of AI development. Altman, known for his ambitious, even aggressive, push for rapid AI advancement, found himself at odds with a cautious board. However, this move to sideline him inadvertently galvanized a workforce adamant about their leader's vision, leading to a near rebellion. This employee revolt, a clear indicator of Altman's influence and the high regard in which he is held, forced the board's hand. The result, a stunning reversal of fortune where the board not Altman faced the chopping block. OpenAI's announcement of Altman's return, flanked by a restructured board, is not just a reinstatement of a CEO, it's a resounding endorsement of his approach to AI development. What's particularly intriguing is the role of Microsoft in this saga. The tech giant, a significant financial backer of OpenAI, briefly flirted with the idea of integrating Altman and co-founder, Greg Brockman into its fold. However, as the crisis unfolded, it became clear that Microsoft's interests were best served with Altman at the helm of OpenAI, leading to its tacit support for the board's overhaul. The swift resolution culminating in Altman's return underscores a pivotal shift in corporate governance within tech companies. It's a clear message that visionary leadership, often personified by figures like Altman, cannot be easily sidelined, especially when it resonates so strongly with employees and aligns with key stakeholders interests. As OpenAI charts its course under Altman's renewed leadership, with a board more aligned with his vision, one thing is clear. In the high octane world of AI development, it's not just about the technology, but also about the people who drive it. Altman's return is a testament to his leadership and a cautionary tale for boards that underestimate the power of visionary CEOs and the teams they inspire. This is Katy Craig, stay safe out there. Full episode available: https://505updates.com/2023-11-24-cybersecurity-and-open-source-headlines/ 🎙️ Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #280: Edwin Kwan, Australia Shelves Plan To Ban Ransomware Payments; Trac Bannon, OpenAI:Should Camelot Be Restored?; Katy Craig, Sam Altman's Triumphant Return; Shannon Lietz, OpenAI and… 19:02

לפני 2 years19:02

19:02

🎙️ Free, ungated access to all 280+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates. Marcel Brown November 25, 2002. Digital media software company, Roxio, purchases the assets of the former Napster, including name, logo, domain name, technology portfolio, and other intellectual property. Roxio was the first company to attempt to use the Napster brand for a music service, renaming PressPlay as Napster 2.0. Edwin Kwan The Australian government has shelved plans to ban ransomware payments to cybercriminal groups for at least two years. The government had put the question to the industry in a consultation on whether it should prohibit the payments of ransoms, extortion demands by cybercriminals by victims of cybercrime and or insurers. And if so, under what circumstances? Trac Bannon The news of San Altman sacking by the OpenAI Board of Directors shook the world on Friday, November 17th. As events unfolded in the following hours and days, the world suffered collective whiplash. While many are asking why the board made that decision, more profound questions are being raised about the balance between innovative leadership and effective governance. Katy Craig The swift resolution culminating in Altman's return underscores a pivotal shift in corporate governance within tech companies. It's a clear message that visionary leadership, often personified by figures like Altman, cannot be easily sidelined, especially when it resonates so strongly with employees and aligns with key stakeholders interests. Shannon Lietz With all the brouhaha going on with Sam Altman and OpenAI, there's a lot to unpack and digest. When OpenAI, not yet a year ago, released its ChatGPT to the world it was pretty obvious at the time that they were chasing adoption and velocity as a brand new organization entering into the market. But I don't know that anybody would have predicted 100 million folks adopting ChatGPT as quickly as they did. Olimpiu Pop The recent turmoil at OpenAI, stemming from the ousting of CEO Sam Altman, has thrown the AI community into a state of intense discussion and speculation. We have a whole saga that looks more like a new season of HBO's Game of Thrones than a sane tech company that is crafting the future of humanity. Mark Miller From Sourced Network Productions in New York City, It's 5:05 on Friday, November 23rd, 2023. This is your host Mark Miller and its Point of View Friday, where today four of our contributing journalists, give us their take on the OpenAI and Sam Altman circus, which took over the headlines for four days.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #279: Edwin Kwan, Australian Government Releases New Cybersecurity Strategy; Ian Garret, Move Over Phishing, Quishing is the New Scam; Olimpiu Pop, Software Supply Chain Trends - Part 2 10:56

לפני 2 years10:56

10:56

🎙️ Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates. Marcel Brown, St. Louis, Missouri November 23rd, 2004. Blizzard Entertainment releases the massively multiplayer online role playing game, World of Warcraft. It quickly became the most popular MMORPG of all time. In the nearly 20 years since its release, World of Warcraft has had 9 major expansion packs, with 3 more expansion packs already planned for the future. Edwin Kwan, Sydney, Australia The Australian government has released its revised cybersecurity strategy for its plan to become a world leader in cyber security by 2030. It seeks to make Australia a hard target for cyber attacks by undermining cybercrime business models and putting Australian businesses and consumers in a stronger position to prepare and respond effectively. Olimpiu Pop, Transylvania, Romania The average Java application uses 148 dependencies, with around 10 releases occurring annually. That means that the developer is not only to make the initial selection of those libraries, but to track an average of 1,500 dependency changes throughout the year. Combine this with the fact that almost 20% of all track projects no further qualify as maintained. Ian Garret, Arlington, Virginia Quishing, or QR code phishing, has seen a dramatic increase in 2023. This method involves encoding malicious links into QR codes, a technique that is proving both effective for attackers and challenging for defense systems. Let's talk about why it's on the rise, and what CISOs and security teams are doing about it.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #278: Edwin Kwan: Canadian Government Impacted by Third Party Breach; Hillary Coover: COO Attacks Local Hospitals for Business Gain; Olimpiu Pop: Software Supply Chain Report: 245.000… 9:37

לפני 2 years9:37

9:37

Free, ungated access to all 275+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 22, 2005. Microsoft releases the Xbox 360, the second generation of their popular game console. And on November 22, 2013, exactly 8 years later, Microsoft released the Xbox One, which makes absolutely no sense. Edwin Kwan: Two third party service providers for the Canadian government have suffered breaches resulting in data in the last 24 years being potentially compromised. The servers that were impacted by the breach held data related to current and former Canadian government staff, members of the Canadian Armed Forces, and the Royal Canadian Mounted Police workers. Olimpiu Pop: The software supply chain report was released last month. I read it. I covered it for the InfoQ and then I read parts of it again. There are some key points that still need to be spoken out. It's a before and after the pandemic story. Hillary Coover; We're all familiar with ambulance chasing sales and marketing tactics, but this Cybersecurity Executive took things to a whole new level. In a shocking case, the Chief Operating Officer of an Atlanta based security company, Securalytics, took matters into his own hands by orchestrating cyberattacks on two local hospitals.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #277: Edwin Kwan: Malicious Android Banking Apps Targeting Users in India; Ian Garrett: M&A Deals that Look into the Future of the Cybersecurity Industry; Katy Craig: SEC Sues SolarWinds:… 10:34

לפני 2 years10:34

10:34

Free, ungated access to all 275+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 21st, 1877. Thomas Edison announces his invention of the phonograph, a way to record and play back sound. As often happens with many great inventors, Edison stumbled upon this particular invention while working on a way to record telephone communication at his lab in Menlo Park, New Jersey. Edwin Kwan: Security researchers have uncovered a malware campaign to steal sensitive information from Android smartphone users in India. Researchers say that the campaign is using social media platforms like WhatsApp and Telegram to lure users into installing a malicious app by impersonating legitimate organizations such as banks, government services, and utilities. Katy Craig: In light of the recent SEC charges against SolarWinds' Chief Information Security Officer, or CISO, Timothy G. Brown, there's a compelling argument for holding company officers accountable for neglecting cybersecurity and failing to report known risks. The charges against Brown for not disclosing significant cybersecurity vulnerabilities before and during the 2020 SUNBURST cyberattack, underline a crucial point: CISOs, like CFOs, must prioritize transparency and honesty in reporting risks. Ian Garrett: We can learn a lot about the state of the cybersecurity industry through the type of mergers and acquisitions, or M&A, that occur. 2023 has been a cautious yet significant year for mergers and acquisitions in the cybersecurity sector. Despite fears of a recession, rising interest rates, and conservative spending trends, the relentless pace of cyberattacks has maintained steady M&A activity.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #276: Edwin Kwan: Australia's First Cyber Security Coordinator Recalled; Katy Craig: SEC Sues SolarWinds for Misleading Investors; Hillary Coover: A New Breed of Cybercrime Targeting Teenage… 9:07

לפני 2 years9:07

9:07

Free, ungated access to all 275+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 19th, 2006. Nintendo releases the Wii game console to compete with the Sony PlayStation 3 and Microsoft Xbox 360. By foregoing raw computing power for increased player interaction, utilizing the innovative motion-sensitive "Wiimote" controller, the Wii defied expectations and became the best selling 7th generation game console. Edwin Kwan: Australia's first cybersecurity coordinator has been recalled to Defence after just four months into the role. The two-star general was working on delivering on the Home Affairs and Cybersecurity Minister's commitment to building a more coordinated approach to preparing for and managing the consequences of cybersecurity incidents. Hillary Coover: A new breed of cybercrime has emerged targeting teen boys. Law enforcement and child protection experts describe a growing wave of online predators targeting teens through a sophisticated nude-photo scam. These new scammers focus mostly on monetary gain. Katy Craig: The US Securities and Exchange Commission, SEC, has charged SolarWinds Corporation and its Chief Information Security Officer, Timothy G. Brown, with misleading investors about significant cybersecurity vulnerabilities. The SEC's complaint highlights instances where Brown and other employees were aware of, but failed to adequately address vulnerabilities in SolarWinds' systems.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #275: Edwin Kwan: Popular WordPress Plugin Exposes over 600K to Attacks; Marcel Brown: This Day in Tech History; Katy Craig: EU AI Act; Shannon Lietz: The AI Act; Olimpiu Pop: To Regulate Or… 14:48

לפני 2 years14:48

14:48

Free, ungated access to all 275+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 17th, 1970. Douglas Engelbart receives a U. S. patent for his XY Position Indicator for a display system, more commonly known as the computer mouse. Engelbart called his device a mouse because the cord looked like a tail. Edwin Kwan: A popular WordPress plugin has been discovered to be vulnerable to a high-severity vulnerability. There are currently more than 600,000 websites that are using the vulnerable version and are potentially exposed to the vulnerability. Katy Craig: As the European Union considers the way ahead for the AI Act, a critical question arises. Should the EU establish a dedicated office to oversee and manage it? The establishment of a dedicated office for AI regulation must find a balance between oversight and innovation, efficiency and flexibility, and harmonization and autonomy. Shannon Lietz: The win on the AI Act is the fact that the EU is going to put some capability behind it. It's such a powerful forward motion for us in terms of the future of what we need for humanity. We've really got to start to establish some of the playing rules for how this becomes beneficial to everyone. Olimpiu Pop: while a delay in the AI Act's implementation may allow for more thorough consideration and balancing of various interests, it also runs the risk of leaving the EU unprepared to address the rapid advancements and potential risks associated with powerful AI technology.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #274: Edwin Kwan: Cyberattack Threatens Australian Christmas; Ian Garrett: $500k Compensation for the Top 25% of Cybersecurity Professionals; Mark Miller: OpenAI Takes a Run at Startups… 10:07

לפני 2 years10:07

10:07

Free, ungated access to all 270+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 16, 1982. Steve Jobs writes a letter to Macintosh Labs asking for the rights to use Macintosh as the brand name of Apple's still-in- development computer. Gordon Gao, president of Macintosh Labs, visited Apple headquarters for a product demonstration. However, Macintosh lawyers advised Gao to reject the request. Edwin Kwan: DP World Australia suffered a cyber attack which disrupted its landside freight operations. The attack resulted in around 30,000 shipping containers not being moved and crowding of available storage spaces at the ports. Ian Garrett: It's no secret that there's a massive shortage in cybersecurity talent, and with any resource that's high in demand with low supply, there are people willing to pay top dollar. For top cybersecurity professionals, companies are now offering substantial packages. Mark Miller: Hold on to your ass, developer, because you aren't a developer on the OpenAI platform. You're an idea generator for OpenAI's next iteration. This is Mark Miller sitting here shaking my head over what transpired last week at OpenAI's first developer conference.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #273: Edwin Kwan: OpenAI Suffered DDOS Attack Resulting in Intermittent Outage; Katy Craig: Citrix Bleed; Hillary Coover: Holiday Shopper Alert: Protect Your Finances from Cyber Grinches!;… 10:59

לפני 2 years10:59

10:59

Free, ungated access to all 270+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 15, 1996. The first version of ICQ, the Internet's first popular instant messaging program, is released by four high school students from Israel. By the end of 1997, ICQ had more than 5 million users, and in mid-1998, AOL purchased the company for $407 million. Edwin Kwan: Users of OpenAI's API, ChatGPT, and Dall-E services were experiencing intermittent outages. They would see messages from their queries saying that " something seems to have gone wrong or we're experiencing exceptionally high demand. Please hang tight as we work on scaling our systems." Hillary Coover: As the festive season approaches, the thrill of holiday shopping is palpable, but so is the excitement for cybercriminals aiming to capitalize on the online shopping surge through scams and data theft. One rising concern demanding attention is the surge in credit card skimming, a threat likely to intensify in the coming weeks. Katy Craig: The Citrix Bleed vulnerability has become the focal point of threat actors' attention, with active exploitation campaigns targeting government, technical, and legal organizations across the Americas, Europe, Africa, and the Asia Pacific region. The attackers employed a clever technique involving specially crafted HTTP GET requests.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #272: Edwin Kwan: Signal Testing Use of Usernames to Keep Phone Number Private; Ian Garrett: Identity-based Security is the New Perimeter; Hillary Coover: Decoding Tomorrow's Defense: The… 10:51

לפני 2 years10:51

10:51

Free, ungated access to all 270+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 14, 1971. NASA's Mariner 9 reaches the planet Mars and becomes the first man-made object to orbit another planet. Edwin Kwan: Signal has started testing the use of account usernames to allow users to keep their phone numbers private. Users would be able to turn off phone number discovery in their privacy settings and only allow the username to be the primary way others can contact them. Hillary Coover: Could deception technology be the ultimate strategy for staying ahead of cyber threats? A CSO opinion piece is quickly circulating and predicts that a convergence of IT and cybersecurity trends will make deception technology more accessible by the end of 2025. Ian Garrett: The cybersecurity domain is experiencing a significant paradigm shift. Traditional perimeter defenses like firewalls are making way for a more identity-centric approach. As we move forward, identity will no longer be a siloed discipline, but an integrated, interconnected aspect of cybersecurity infrastructure.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #271: Edwin Kwan: Singapore Marina Bay Sands Suffers Data Breach Impacting 665K Customers; Katy Craig: PHaaS Provider BPL Taken Down; Hillary Coover: Boeing's recent cybersecurity breach;… 9:13

לפני 2 years9:13

9:13

Free, ungated access to all 270+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 12, 2000. Bill Gates demonstrates a functional prototype of a tablet PC. Microsoft claims the Tablet PC will represent the next major evolution in PC design and functionality. However, the Tablet PC initiative never really takes off, and it isn't until Apple introduced the iPad in 2010 that tablet computing is widely adopted. Edwin Kwan: Marina Bay Sands in Singapore has disclosed that they suffered a data breach impacting 665,000 customers. It became aware of the security incident on 20th October, 2023, which involved unauthorized third-party access on the 19th and 20th of October. Hillary Coover: Boeing's recent cybersecurity breach reveal vulnerabilities in the aerospace industry? Boeing revealed on Friday that data from its systems was compromised by a malicious ransomware attacker. Katy Craig: Malaysian police have taken down the notorious Phishing-as-a-Service provider, BulletProftLink, and apprehended eight suspects, including the platform's main administrator.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #270: Edwin Kwan: WhatsApp Introduces Location Privacy Feature; Hillary Coover: A Shift Towards Empowering Users for Image Authenticity; Olimpiu Pop: And the gold medal for the largest… 8:01

לפני 2 years8:01

8:01

Free, ungated access to all 270+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Val Cole: November 10th, 1983. In 1983, which was 25 years before I was born, Microsoft announced version 1. 0 of Windows. It was the first graphical user interface for IBM compatible PCs. Edwin Kwan: WhatsApp is rolling out a privacy feature that allows users to keep their location private. However, there is a potential trade off. The phone quality might be reduced due to the connection relay via the WhatsApp servers. Hillary Coover: We know many innovators are working to find ways to determine an image's authenticity with detection technology. What if there's another way? What if users held the power to determine image authenticity through content credentials? Olimpiu Pop: Based on estimates from the State of the Software Supply Chain, 96 percent of the running software is open source, and where there are high percentages, there is also government. And government regulates. Given the legislative changes around the globe, does that mean that open source is preparing to enter a new era?…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #269: Edwin Kwan: WhatsApp Mods for Android May Contain Spyware; Ian Garrett: Cyber Attackers and Defenders Enter an AI Arms Race; Katy Craig: Russia, Iran, and China: US 2024 Election… 11:24

לפני 2 years11:24

11:24

Free, ungated access to all 265+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 9, 1922. Albert Einstein is named the winner of the 1922 nobel Prize for Physics for his explanation of the photoelectric effect. The Nobel Committee passed on several nominations for his many other seminal contributions, although these led to prizes for others who later applied more advanced technology to experimentally verify Einstein's work. Edwin Kwan: Security researchers have discovered modified versions of the Instant Messaging app being promoted and on website advertising on Telegram. Those versions contains suspicious components, such as a service and broadcast receiver, which cannot be found on the original WhatsApp client. Katy Craig: In the run up to the 2024 U. S. presidential election and key global elections, Russia, Iran, and China are expected to intensify their interference efforts, according to a Microsoft Threat Analysis report. Russia, in particular, is viewed as the most committed and capable threat to the upcoming U. S. election. Ian Garrett: Artificial intelligence is reshaping the dynamics of cybersecurity, offering both opportunities and challenges. The survey by Axonius, conducted among IT and security decision makers, reveals that 76 percent of organizations are increasing their spending on AI and machine learning compared to the previous year.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #268: Edwin Kwan: Security Assessed Apps Now Receives Badge on Google Play Store; Olimpiu Pop: StarCoder - An Open Source State Of The Art Code LLM; Katy Craig: China’s Global Cyber Power;… 9:22

לפני 2 years9:22

9:22

Free, ungated access to all 265+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 8, 1895. German physics professor Wilhelm Röntgen stumbles upon what he would later describe as "X-rays" while experimenting with electrical discharge tubes. Curious as to what was causing a faint green glow on a nearby fluorescent screen, Röntgen began systematically studying the unknown rays and published the first paper on the phenomenon less than two months later. Edwin Kwan: Google Play Store has rolled out a new badge to highlight apps that have been independently security reviewed. Google has emphasized that the security validation process only checks if a developer has prioritized security and privacy practices, it does not imply that the validated app is free of vulnerabilities Katy Craig: In recent years, Chinese state-sponsored cyber operations have transformed into a more mature and coordinated threat. They now focus on exploiting vulnerabilities in public-facing security and network appliances, both known and zero-day. Chinese cyber-enabled economic espionage has evolved towards a more targeted approach, supporting specific strategic and geopolitical goals, such as the Belt and Road Initiative. Olimpiu Pop: BigCode is an initiative from HuggingFace to provide open-source, state-of-the-art models for code generation. StarCoder is one of the stars, maybe the brightest. It was the outcome of refined training with Python tokens of StarCoderBase.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #267: Edwin Kwan: Okta Suffered Data Breach Impacting Their Employees; Ian Garrett: Rising ransomware attacks drive zero trust adoption; Olimpiu Pop: BigCode A Project With a Mission: Build… 6:44

לפני 2 years6:44

6:44

Free, ungated access to all 265+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Edwin Kwan: Okta has suffered yet another data breach, this one affecting their employees' personal information. Ian Garrett: How has ransomware impacted zero-trust adoption? With the rising threat of ransomware attacks, organizations have turned to the adoption of zero-trust and network segmentation strategies to counter these threats Olimpiu Pop: Even though there was always the choice, open-source versus closed-source, now, again, the world is at a turning point. Will you embrace open or closed?…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #266: Edwin Kwan: WeChat and Kaspersky Apps Banned on Canadian Government Devices; Hillary Coover: Meta's Privacy Pivot: Upholding Principles or Extortion?; Mark Miller: Just in Time for Día… 10:45

לפני 2 years10:45

10:45

Free, ungated access to all 265+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 5th, 2007. Google introduces the Android platform, it's mobile operating system for cell phones based on a modified version of the Linux operating system. The first Android-based phone would ship in September of 2008. Edwin Kwan: The Canadian government has announced a ban on the use of WeChat and Kaspersky's apps on government-issued mobile devices. The Canadian government banned TikTok in February 2023 and is now adding Tencent's WeChat and Kaspersky to the list. Mark Miller: Leave it to the North Korean nation state to release KandyKorn malware in time for the holiday season, starting with the Day of the Dead. On October 31st, Elastic Security Lab documented a malware infection that exposed an attempt by the DPRK to infect crypto exchange platforms through their blockchain engineers. Hillary Coover: The debate over the cost of privacy in the face of corporate surveillance is intensifying, as Meta introduces a subscription model allowing users to opt out of behavioral advertising. While Meta argues it aligns with regulatory requirements, critics see it as extortion and an attempt to maintain the status quo, potentially leading to further legal battles. What would you pay for privacy?…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #265: Edwin Kwan: Who Should Bear the Cost of Invoice Scam?; Marcel Brown: This Day in Tech History; Olimpiu Pop: DORA Metrics - an agile, emotionally safe culture is the way; Shannon Lietz:… 17:27

לפני 2 years17:27

17:27

Free, ungated access to all 265+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 3rd, 1957. The Soviet Union launches Sputnik the second spacecraft launched into Earth orbit and the first spacecraft to carry a living creature into orbit. Laika, the Siberian Husky dog, unfortunately only survived a few hours into the flight and died from stress and overheating. Edwin Kwan: Who should bear the cost of invoice scam? The victim, the company the money was meant to be sent to, or the bank? A couple tried to purchase a Mercedes-Benz from a dealership, but transferred the money to hackers due to an invoice scam. Mercedes-Benz is claiming that the invoice scam was due to the customer's email being compromised. Olimpiu Pop :DORA Metrics became part of the silver bullets arsenal of the software industry. Follow the key metrics and all is well, right? Follow deployment frequency, time to restore the service, lead time for a change, and change failure rate and you're all set. Not really. It's much more than that. Shannon Lietz: This year, what I saw that was most remarkable in the report was the AI section. There's some interesting insights to glean from that section of the report. In particular, what folks are thinking about in terms of AI contributions. Top three was quite insightful if you ask me. Analyzing data, writing code clocks or data functions, and analyzing security. Nathen Harvey: Back in January of 2023, AI was certainly hot, but how do we assess its impact on things like software delivery performance and organizational performance. This was a thing that we as researchers really struggled with. So we asked this question... " for the primary application or service that you work on, how important is the role of AI in contributing to each of the following tasks?"…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #264: Edwin Kwan: SEC Charges SolarWinds and CISO for Misleading Investors Before Cyber Attack; Ian Garrett: The World Needs 4 Million More Cybersecurity Professionals; Hillary Coover:… 9:15

לפני 2 years9:15

9:15

Free, ungated access to all 260+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 2nd, 1988. Robert Morris of Cornell University launches a self-replicating worm as part of a research project designed to determine the size of the early internet. Due to a programming error, the "Morris Worm" began repeatedly infecting machines, clogging network traffic, and causing machines to crash. Edwin Kwan: The US Securities and Exchange Commission has announced charges against SolarWinds Corporation and its CISO, its Chief Information Security Officer, for fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities. Hillary Coover: A coalition of 40 countries, led by the United States, is committing to never pay ransoms to cybercriminals again. This initiative, known as the International Counter Ransomware Initiative, ICRI, is a response to the increase of ransomware attacks on a global scale with the United States accounting for 46% of such incidents. Ian Garrett: A recent study from the International Information Systems Security Certification Consortium, the nonprofit member organization for cybersecurity professionals, highlights that the workforce shortage in the cybersecurity industry has reached an all-time high of nearly 4 million people.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode 263: Edwin Kwan: APT Malware Disguised as Crypto miner Infects One Million Systems; Mark Miller: Surprise, Surprise! SolarWinds Lied. Imagine that.; Hillary Coover: The Paradox of… 10:11

לפני 2 years10:11

10:11

Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: November 1st, 1963. The largest radio telescope ever constructed, the Arecibo Observatory opened in Puerto Rico. It would be used for many major discoveries including the first direct imaging of an asteroid. Hillary Coover: The cybersecurity landscape is experiencing a paradoxical challenge as cyberattacks continue to rise while budgets decrease and companies implement layoffs. A recent survey reveals that nearly half of cybersecurity professionals have seen their teams face spending cuts and personnel reductions in the past year, intensifying the pressure on these teams. Edwin Kwan: A malware that was initially thought to be a crypto miner has been discovered to be a sophisticated spy platform. The malware has infected over a million Windows and Linux systems. Mark Miller: On Monday, the Security and Exchange Commission filed suit against SolarWinds and their CISO, Tim Brown, for fraud and internal controls failure. You remember the old Gomer Pyle episodes, right? "Surprise, surprise!" That's kind of what I feel like right now. SolarWinds lied. Imagine that.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episdoe #262: Edwin Kwan: Casio Data Breach affects over 120,000 customers in 149 countries; Ian Garrett: 6 Types of Supply Chain Attacks (Part 2); Hillary Coover: Keeping Perspective: Why the… 9:06

לפני 2 years9:06

9:06

Free, ungated access to all 260+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 31st, 2000. Russia launches Soyuz TM-31 carrying the first crew to the International Space Station. Between the 2011 retirement of the space shuttle and the 2020 demo flight of SpaceX Crew Dragon, the Soyuz served as the only means to ferry crew to or from the International Space Station. Edwin Kwan: Casio has suffered a data breach that has affected over 120,000 customers in 149 countries. Casio said that the cause of the breach was due to some of the network settings in the development environment being disabled due to system operational error. Hillary Coover: US and Customs Enforcement Agency, ICE, is employing an AI powered tool known as Giant Oak Search Technology to scan social media posts for content that it deems derogatory to the United States. This revelation, first brought to light by 404 Media, has really ruffled some feathers. Ian Garrett: This is the second part of our exploration into software supply chain attacks. We'll explore dependency confusion, stolen SSL and code-signing certificates, the targeting of developers CI/CD infrastructure, and the use of social engineering to drop malicious code.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #261: Edwin Kwan: Israel-Hamas War Crypto Donation Scams; Hillary coover: Linkedin Chatbot; Mark Miller: Stanford University Breached by Akira Ransomware Group; Mark Miller: This Day in Tech… 7:53

לפני 2 years7:53

7:53

Free, ungated access to all 260+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Mark Miller: October 29, 1969. UCLA student Charley Kline attempts to transmit the text, "login", to a computer at the Stanford Research Institute. After the letters L and O are sent, the system crashes, making the first message ever sent on the internet "lo". Edwin Kwan: Since the Israel-Hamas war, there's been numerous crypto donation scam sites appearing online. Scammers have been capitalizing on the horrific events of the Israel-Hamas conflict by pretending to be legitimate charities and collecting donations. Hillary Coover: LinkedIn is currently testing the use of generative AI to address cybersecurity queries from its employees and external suppliers. Response times with the chatbot averaged just five seconds compared to the approximately 15 minutes that it took when handled by a human. Mark Miller: News continues to trickle out about the Akira Ransomware Group breach of the Stanford University Department of Public Safety. This morning, Bitdefender reported that the University is being pressured to pay a ransom of an undisclosed amount in order to stop the leak of 430 gigabytes of private information and confidential documents.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #260: Edwin Kwan: OAuth Implementation Flaw Allowing Account Takeover; Marcel Brown: This Day in Tech History; Katy Craig: HTTP/2 RapidReset Attack; Olimpiu Pop: HTTP/2 RapidReset: Zero-day… 16:25

לפני 2 years16:25

16:25

Free, ungated access to all 260+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 28th, 1998. US president Bill Clinton signs into law the Digital Millennium Copyright Act, or DMCA. The law is intended to criminalize production and dissemination of technology designed to circumvent digital copyright protection, known as Digital Rights Management, or DRM. Edwin Kwan: Security researchers discovered critical misconfiguration flaws in the implementation of the Open Authorization or OAuth standard by three popular websites. The flaw would have allowed attackers to take over user accounts and could lead to identity theft, financial fraud, access to credit cards, and other cybercriminal activity. Katy Craig: Recently, Google services and Cloud customers found themselves in the crosshairs of a novel and formidable distributed denial of service, or DDoS, attack, peaking in August, with one assault clocking a staggering 398 million requests per second. Olimpiu Pop: HTTP/2 was the first major revamp of the HTTP protocol in ages. It brought significant performance improvements enabled by stream multiplexing. This enables the simultaneous transmission of multiple request and response messages over a single connection without interference between streams. Shannon Lietz: I would like to see the industry be a little bit more actionable about what's happening, because you had to parse this one out to really understand it. I came to the realization of is, if you do have companies that you work with, or vendors that you work with, and they're getting told right away, all of a sudden they have a CVE they have to go deal with, it is going to set a whole bunch of things behind.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #259: Edwin Kwan: 1Password Impacted by Okta Breach; Ian Garrett: 6 Types of Supply Chain Attacks (Part 1); Katy Craig: New Mirai Malware Variant; Marcel Brown: This Day in Tech History 9:16

לפני 2 years9:16

9:16

Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel brown: October 26th, 1861. Only two days after the Transcontinental Telegraph line opened, the Pony Express ceases operation. Prior to the opening of the cross-country telegraph line, the Pony Express was the fastest way to send communication between St. Joseph, Missouri and San Francisco, California. Edwin Kwan: 1Password has confirmed that it was attacked by cybercriminals using session information that was stolen in the recent Okta breach. 1Password is a popular password management platform used by over 100,000 businesses. Katy Craig: A new variant of the notorious Mirai malware is making headlines. This time, it's going after millions of Android TV set-top boxes used by people for media streaming. Ian Garrett: You've likely heard of supply chain attacks, but did you know there are different types of supply chain attacks? This is a two-part series where I cover the different type of attacks.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #258: Edwin Kwan: South Australian Superannuation Suffers Breach; Hillary Coover: Meta Lawsuits: Your Child's Online Safety is at Risk; Mark Miller: Massive DDoS Attack: 201 Million Requests… 8:51

לפני 2 years8:51

8:51

Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 25th, 2001. Microsoft releases the operating system Windows XP, the successor to both Windows 2000 and Windows ME. Edwin Kwan: Super SA, a dedicated superannuation fund for state government employees in South Australia, suffered a data breach. The data loss was through a third-party call center, which Super SA had previously contracted. Hillary Coover: Is your child's online safety at risk? I've asked this before in the context of privacy, but today we're talking about the health risks and implications of Instagram on young minds. Mark Miller: On October 10, 2023, Grant Bourzikas disclosed the finding of a massive DDoS attack of over 201 million requests per second. According to the CVE report, the HTTP/2 protocol "allows a denial of service because request cancellation can reset many streams quickly as exploited in the wild in August through October, 2023."…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #257: Edwin Kwan: Okta Breach Exposed Sensitive Customer Data; Katy Craig: Cisco Zero Day is Bad News; Ian Garrett: Will Hackers Who Write Phishing Emails Lose Their Jobs? Marcel Brown: This… 8:12

לפני 2 years8:12

8:12

Free, ungated access to all 255+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 24th, 1861. Western Union completes the first transcontinental telegraph line across the United States. Not coincidentally, two days later, the Pony Express shut down operations. Edwin Kwan: Okta recently announced that their support case management system suffered a breach and sensitive customer data was stolen. Okta said that all affected customers have been notified, and that if you had not been contacted, then there is no impact to your Okta environment or support tickets. Katy Craig: Cisco's recent disclosure of a critical zero-day vulnerability in its Web UI reveals a concerning situation. Cybersecurity firm, Censys, has confirmed that over 40,000 hosts have been infected, with more than a quarter of them located in the United States. Ian Garrett: Generative AI is reshaping the phishing landscape, making attacks more sophisticated. Most security leaders are ill-prepared to protect against AI-generated email attacks. The majority still rely on cloud email providers or legacy tools for email security, with 53% using secure email gateways.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode 256: Edwin Kwan: Fake Browser Updates Delivering Malware; Katy Craig: Countdown to Q Day; Hillary Coover: Cookie Tracking Lawsuit in Netherlands; Marcel Brown: This Day in Tech History 10:32

לפני 2 years10:32

10:32

Free, ungated access to all 255+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 23, 2001. Using the slogan, 1, 000 songs in your pocket, Steve Jobs introduces the original iPod, featuring a 5GB hard drive, FireWire connectivity, and synchronization to iTunes. Edwin Kwan: Attackers are using cybersecurity best practices against users, prompting them to download malicious browser updates. The attackers start by compromising a legitimate but vulnerable website. Hillary Coover: A Dutch consumer-rights group, SDBN, has initiated a class-action lawsuit against Amazon for allegedly violating the European Union's privacy law by tracking website visitors without their consent using tracking cookies. Katy Craig: Quantum computing holds immense promise in fields like chemistry, materials science, and AI. Yet there's a flip side to this advancement. Deep-pocketed nations like China and Russia, equipped with the scientific expertise and resources, could be making secret strides in quantum computing.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #255: Edwin Kwan: Top Password Used By IT Admins is ‘admin’; Hillary Coover: Is X's Anti-Disinformation Tool Backfiring; Shannon Lietz: Is Hashicorp’s Move a Win, Lose, or Draw; Olimpiu Pop:… 13:34

לפני 2 years13:34

13:34

Free, ungated access to all 255+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 21st, 1879. Thomas Edison perfects the first commercially practical incandescent light bulb using a filament of carbonized cotton thread. Edison's successful design came only after he had tested over 6, 000 different vegetable fibers. Edwin Kwan: Security researchers have discovered that IT administrators are using weak passwords to protect access to portals, providing easy access to attackers to enterprise networks. An analysis of over 1.8 million administrator accounts found that over 40, 000 were using the password "admin". Hillary Coover: X's Community Notes, originally designed to crowdsource fact-checking and combat disinformation, is facing scrutiny because of the vulnerabilities and ineffectiveness uncovered in a WIRED investigation. This investigation revealed that the tool may be manipulated by external groups and lacks transparency Olimpiu Pop: There is a lot of noise around open source. Legislation, growing cyber threats, weaponizing open source, and others. Should we put a lid on it? That's something the HashiCorp CEO thinks. In August, the company changed the license to a closed sourced one, and last week, during the HashiConf, he underlined that the direction he took is a direction to success. Shannon Lietz: The challenge that really came out of this is HashiCorp has had a pretty rocket fueled life, if you will. They've looked out and realized that they've put Terraform out there for a very long time. Any company who creates something has the right to fork and end their investment. All they're saying is we're no longer going to invest in the constant creation of this open source software.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #254: Edwin Kwan: Malicious “Red Alert” App Spying on Israelis; Ian Garrett: 10 Hidden Costs Draining CISO Security Budgets (Part 2); Hillary Coover: Threat Posed by Chinese Espionage and… 9:25

לפני 2 years9:25

9:25

Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 19th, 1979. According to Dan Bricklin, one of the co-creators of VisiCalc, the first "real" release of VisiCalc was completed and packaged for shipment. VisiCalc was the first commercially available spreadsheet software and quickly became the first killer app of the personal computer market. Edwin Kwan: Malicious version of the Israeli incoming airstrike warning app has been found distributed over the internet. The fake site serving the malicious software was created on October 12th, 2023 and provided download options for both iOS and Android versions. Hillary Coover: In light of recent warnings from intelligence agencies, we have to consider our own readiness to face insider threats. The MI5 head's statements regarding over 20,000 covert online approaches by Chinese spies in the UK should serve as a sobering reminder of the evolving landscape. Ian Garrett: Security budgets can be tricky to manage, and often hidden costs can erode these budgets. Understanding these hidden expenses, negotiating for fair pricing, and aligning security strategies with business priorities can help optimize budgets.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode 253: Edwin Kwan: Over 10,000 Cisco Devices Hacked; Julie Chatman: NSA and CISA: Top ten cybersecurity configuration blunders; Hillary Coover: Safeguarding Nations: The Crucial Role of… 11:07

לפני 2 years11:07

11:07

Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 18th, 1985. Nintendo releases the Nintendo Entertainment System in New York and limited other North American markets. An immediate hit, Nintendo released the system nationwide in February of 1986. Julie Chatman: I'm Julie Chatman in Washington DC with a special message for cyber warriors, especially network defenders. The U. S. National Security Agency and the Cybersecurity and Infrastructure Security Agency have unveiled the Top 10 Cybersecurity Misconfigurations that attackers are hoping to find in your organization's network and what you can do about them. Hillary Coover: Ever wonder how satellite imagery data contribute to safeguarding both geopolitics and cybersecurity? This resource really amplifies their capacity to anticipate and address physical security challenges that directly influence cybersecurity. Edwin Kwan: Attackers are actively exploiting a zero-day vulnerability in Cisco devices to gain full administrative privileges and take complete control of the device remotely. Attackers have been exploiting this vulnerability since 18th September and over 10,000 devices have been hacked.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode 252: Edwin Kwan: Equifax Ltd fined £11 million for Preventable Cybersecurity Breach; Ian Garrett: 10 Hidden Costs Draining CISO Security Budgets (Part 1); Mark Miller: Follow Up to Atlassian… 8:51

לפני 2 years8:51

8:51

Free, ungated access to all 250+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 17, 1990. Colin Needham, an English movie fan, launches the "rec.arts.movies movie database," which would later be known as the Internet Movie Database, or IMDb. An engineer working for HP at the time, by 1996, Needham quit his job to work on IMDb full-time. Edwin Kwan: Equifax has been fined £11 million by Britain's financial watchdog for the 2017 cybersecurity breach. The British Financial Conduct Authority, or FCA, said that the cyber attack and unauthorized access to UK consumer data was entirely preventable. Mark Miller: The Broken Access Control Vulnerability in the Confluence Data Center and Server has been getting a lot of attention. This is a Level 10 vulnerability, the highest warning available. There is evidence that this is a nation-state attack, actively exploiting the vulnerability. Ian Garrett: Everyone hates hidden costs, and it's only worse when you're already on a shoestring budget. As CISOs navigate a landscape of complex pricing structures, overlapping services, and other traps, there are more than enough hidden costs that constrain precious cybersecurity budgets.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #251: Edwin Kwan: Queensland Introduces Mandatory Data Breach Notification; Mark Miller: Overwhelmed with Cybersecurity Alerts? Yeah, so am I.; Hillary Coover: Government vs Corporate… 10:33

לפני 2 years10:33

10:33

Free, ungated access to all 250+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 16th, 1959. Control Data Corporation releases their CDC 1604 computer, the world's fastest computer at the time, and the first commercially successful fully-transistorized computer. The 1604 was CDC's first computer, primarily designed by engineer Seymour Cray. Mark Miller: All the "recommendations" are saying use strong passwords, train your people, update your software, yadda, yadda, yadda, same ol', same ol'. That's not working- it never has. I'm not arguing against good practices like this, but when the shit hits the fan, what you REALLY want is a good backup. Hillary Coover: The technology ingrained in our smartphones and computers designed for displaying advertisements, inadvertently serves as a conduit for surveillance. A recent report from the US intelligence community emphasized that consumer technologies expose sensitive information about everyone, often without their awareness or ability to prevent it. Edwin Kwan: The Attorney General said that recent high-profile data breaches have demonstrated that disclosure of personal information has the potential to result in serious harm to individuals, which is why they are establishing the scheme so that there are clear, consistent requirements to notify individuals of data breaches of Queensland government agencies.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #250: ChatGPT’s maker OpenAI is thinking about making AI chips; Curl Patches Worst Security Flaw in Ages; Is OpenAI the Next Google 12:36

לפני 2 years12:36

12:36

🎙️ Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates. ♻️ You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we're covering today. Marcel Brown: October 13th, 1983. Ameritech Mobile Communications executive, Bob Barnett, makes a phone call from a car parked near Soldier Field in Chicago, officially launching the first cellular network in the United States. Edwin Kwan: Patches have been released for two security vulnerabilities affecting the Curl data transfer library, one of which could potentially result in code execution. Katy Craig: OpenAI, a leading AI startup, is considering venturing into the development of its own AI chips. The reverse integration move aims to reduce dependency on GPU-based hardware, which has been strained by the generative AI boom. Shannon Lietz: This essentially means that we're going to see AI be the beginning of the reunification of hardware and software. And ultimately, where I see cybersecurity getting built in is going to be in these mega players. Olimpiu Pop: An analysis considers that they would need $ 48 billion worth in GPU chips and another $16 billion per year in maintenance costs. That's quite a pile of money, even for a company with a sack of gold. For this reason, also for the shortage of the GPU chips, OpenAI considers building their own.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode 249: Edwin Kwan: Vulnerable WordPress Plugin Results in Thousands of Sites Hacked; Ian Garrett: 5 Tips to Take Zero Trust from Buzzword to Implementation; Mark Miller: CISA and FBI:… 9:38

לפני 2 years9:38

9:38

Free, ungated access to all 245+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 12th, 1988. Hailed by Steve Jobs as a computer five years ahead of its time, NeXT Incorporated introduces their NeXT computer. While not a significant commercial success, the NeXT computer and the technology developed for it have a long and storied history. Edwin Kwan: Thousands of WordPress websites have been compromised by attackers exploiting a vulnerability in a popular plugin. A fixed version of the plugin has been released and users are urged to update to version 4.2 or later, immediately. Ian Garrett: Does hearing the term "zero-trust" make you roll your eyes? More organizations are taking zero-trust from a buzzword to reality as the traditional castle-in-moat approach to security is becoming obsolete. Let's cover some practical recommendations for implementing a zero-trust cybersecurity framework. Mark Miller: AvosLocker, the Ransomware as a Service (RaaS) group, continues to get the attention of CISA and the FBI. Yesterday, October 11, the March 2023 joint advisory on AvosLocker was updated with the latest warnings.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode 248: Edwin Kwan: D-Link Wi-Fi Device Vulnerable to Command Injection Attack; Katy Craig: Google Goes Passwordless; Hillary Coover: FDA Adapting to AI: Balancing Innovation and Safety; Marcel… 8:28

לפני 2 years8:28

8:28

Free, ungated access to all 245+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 11, 1887. Dorr Eugene Felt is granted the second of two patents on his comptometer, the first practical and commercially successful key-driven, mechanical calculator. Various comptometers were in continuous production from 1887 to the mid 1970s. Edwin Kwan: A popular D-Link WiFi range extender device is susceptible to remote command injection, and there is currently no fix available. The researchers reached out to D-Link to report the flaw in May 2023, but despite multiple follow ups, did not receive any replies. Katy Craig: Google is taking a significant step towards enhancing online security by making 'passkeys' the default login method on its platforms. Passkeys are digital credentials stored on a user's device, eliminating the need to remember passwords and offering a more secure alternative. Hillary Coover: Can the FDA keep pace with the rapidly evolving world of AI in healthcare? As developers incorporate more advanced AI systems with human-like outputs, debates around FDA regulation are going to intensify.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #247: Edwin Kwan: Linux Distributions Vulnerable to Looney Tunables; Katy Craig: Hactivists Enter the Middle-East Fray; Ian Garret: Google Helps Drive the End of Passwords; Marcel Brown: … 8:37

לפני 2 years8:37

8:37

Free, ungated access to all 245+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today: Marcel Brown: October 10th, 1980. Namco officially transfers rights to Midway for distribution of the games Pac-Man and Rally-X in North America. While the exact date that Pac-Man started shipping to arcades in North America is currently unknown, most sources cite October of 1980. Edwin Kwan: A new Linux vulnerability, known as the Looney Tunables, impacts most Linux distributions and allows attackers to gain administrative root privileges. Katy Craig: In the midst of ongoing clashes between Hamas and the Israel Defense Forces, hacktivist groups have entered the digital battleground. Cybersecurity experts warn of the growing involvement of threat actor groups in digital attacks on government websites and IT systems. Ian Garrett: Is this the beginning of the end of passwords as we know them? Google has made the move to make passkeys the default sign-in option for personal Google accounts, simplifying the login process and enhancing security.…

It's 5:05! Daily cybersecurity and open source briefing

1
Episode #246: ShellTorch Flaw Affecting Open Source AI Servers; Human Powered Ransomware; Bipartisan Commission Seeks TikTok's Response 8:16

לפני 2 years8:16

8:16

Free, ungated access to all 235+ episodes of “It’s 5:05!” on your favorite podcast platforms: https://bit.ly/505-updates . You’re welcome to 𝗿𝗲𝗽𝗼𝘀𝘁 if your followers will find this of value. The stories we’re covering today. Marcel Brown: October 8th, 1992. The video game Mortal Kombat is released into arcades. Now one of the most popular fighting game series in history, the original Mortal Kombat became well known for its graphic display of blood and deadly finishing moves known as Fatalities. Edwin Kwan: Security researchers have disclosed multiple critical vulnerabilities in the TorchServe tool that could be chained together to achieve remote code execution on affected systems. Hillary Coover: Could TikTok's recent personnel shifts from Beijing to the United States be a threat to security of US data? And is the popular app truly independent from its Chinese parent company, ByteDance? Katy Craig: In a concerning shift, ransomware attacks have taken a sinister turn, with a significant rise in human-operated ransomware incidents, according to Microsoft's annual digital defense report.…

ברוכים הבאים אל Player FM!

Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.

תקשיבו ל-500+ נושאים

2025 Topps Series 1 Baseball - Factory Sealed - Value Box

2025 - American Silver Eagle .999 Fine Silver with our Smyrnacoin Certificate of Authenticity Dollar Uncirculated US Mint

Amazon Basics Dog and Puppy Pee Pads with Leak-Proof Quick-Dry Design for Potty Training, Standard Absorbency, Regular Size, 22 x 22 Inches, Pack of 100, Blue & White

פודקאסטים ששווה להאזין

It's 5:05! Daily cybersecurity and open source briefing « » Episode #151 - PyPI 2FA, CSO's Blues, Volt Typhoon

Mandatory 2FA Coming to PyPI

CSO’s Blues

Volt Typhoon in US Critical Infrastructure

This Day in Tech History

Episode #151 - PyPI 2FA, CSO's Blues, Volt Typhoon

Mandatory 2FA Coming to PyPI

CSO’s Blues

Volt Typhoon in US Critical Infrastructure

This Day in Tech History

פודקאסטים ששווה להאזין

ברוכים הבאים אל Player FM!

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Zevo Flying Insect Trap & Cartridge - Plug in Fly Trap & Indoor Bug Catcher for Gnats, House & Fruit Flies - Mess-Free - Use in Any Room - Uses Blue & UV Light (1 Plug in Device & 1 Cartridge)

2025 Topps Series 1 Baseball Trading Card MLB Jumbo Fat Pack

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

מדריך עזר מהיר

It's 5:05! Daily cybersecurity and open source briefing « »
Episode #151 - PyPI 2FA, CSO's Blues, Volt Typhoon