Nov 21, 2021

https://twitter.com/Esquiring - Fred Jennings

Vulnerabilities Equity program (VEP), vuln disclosure program (VDP), and what is the best way for disclosure of 0day? (‘proper’ is different and dependent)

This show was inspired by this Tweet thread from @k8em0 and @_MG_

Nov 21, 2021

In this sponsored BDS episode, Bryan Brake and Amanda Berlin interview Emily Eubanks, a Security Operations Analyst for #Blumira. We discuss common business risks like IT staff turnover, a lack of Incident Response procedures, choosing not to follow PowerShell best practices, and MFA use for critical or...

Nov 16, 2021

https://www.bleepingcomputer.com/news/security/us-education-dept-urged-to-boost-k-12-schools-ransomware-defenses/

https://securityaffairs.co/wordpress/124570/cyber-crime/fbi-hacked-email-server.html

https://www.zdnet.com/article/security-company-faces-backlash-for-waiting-12-months-to-disclose-palo-alto-0-day/

Nov 8, 2021

News stories covered this week, as well as links of note:

https://www.wired.co.uk/article/sweden-stockholm-school-app-open-source

https://curtbraz.medium.com/a-konami-code-for-vuln-chaining-combos-1a29d0a27c2a 

https://docs.google.com/presentation/d/17gISafUZzEyjV7wkdHaTQZmtxstBqECa/edit#slide=id.p4

Nov 2, 2021

https://securityaffairs.co/wordpress/123948/security/2021-list-of-most-common-hardware-weaknesses.html?

https://www.whitehouse.gov/wp-content/uploads/2021/08/M-21-31-Improving-the-Federal-Governments-Investigative-and-Remediation-Capabilities-Related-to-Cybersecurity-Incidents.pdf