Risky Business #774 -- Cleo file transfer appliances under widespread attack
On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
Cleo file transfer products have a remote code exec, here we go again!
Snowflake phases out password-based auth
Chinese Sophos-exploit-dev company gets sanctioned
Romania’s election gets rolled back after Tiktok changed the outcome
AMD’s encrypted VM tech bamboozled by RAM with one extra address bit
Some cool OpenWRT research
And much, much more.
This week’s episode is sponsored by Thinkst, who love sneaky canary token traps. Jacob Torrey previews an upcoming Blackhat talk filled with interesting operating system tricks you can use to trigger canaries in your environment. You wont believe the third trick! Attackers hate him!
This episode is also available on Youtube.
More description
On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
Cleo file transfer products have a remote code exec, here we go again!
Snowflake phases out password-based auth
Chinese Sophos-exploit-dev company gets sanctioned
Romania’s election gets rolled back after Tiktok changed the outcome
AMD’s encrypted VM tech bamboozled by RAM with one extra address bit
Some cool OpenWRT research
And much, much more.
This week’s episode is sponsored by Thinkst, who love sneaky canary token traps. Jacob Torrey previews an upcoming Blackhat talk filled with interesting operating system tricks you can use to trigger canaries in your environment. You wont believe the third trick! Attackers hate him!
This episode is also available on Youtube.
2024-12-11
62 min
Listen elsewhere
Available Results
Generated results are saved to your library for reuse and search.
No generated results are available for this episode yet.
Transcript
No transcript is available for this episode yet.
Sign in to generate a transcript for review.
Sign in
Chapters
No chapters available.