The 443 - Security Simplified

Q1 2020 Internet Security Report

It’s that time of year again! This week on The 443 we cover the latest internet security report from the WatchGuard Threat Lab. In this episode, we’ll cover the stats and key findings from threat intelligence gathered from over 44,000 security appliances deployed across the world.

A New DDoS Record

This week on The 443 – Security Simplified, we discuss a new DDoS throughput record as reported by Amazon in their AWS Shield Therat Landscape Report for Q1 2020 as well as a history of reflective amplification DDoS attacks. Before that though, we cover an interesting macOS Gatekeeper bypass that involves a bit of social engineering and the latest Intel CPU technology that just might make ROP chains a thing of the past.
macOS Gatekeeper bypass - https://www.intego.com/mac-security-blog/new-mac-malware-reveals-google-searches-can-be-unsafe/
Intel Tiger Lake CET - https://newsroom.intel.com/editorials/intel-cet-answers-call-protect-common-malware-threats/
AWS DDoS Record - https://aws-shield-tlr.s3.amazonaws.com/2020-Q1_AWS_Shield_TLR.pdf

Section 230

This week on The 443 – Security Simplified we’re taking a break from the news to talk about a cornerstone of the modern internet, Title 47, Section 230 of the US code, also known as the safe harbor provisions. These laws, which are critical for a free and open internet, have been increasingly under attack in recent months by politicians in the United States from both major political parties. That is why we’re focusing an entire episode exactly what these laws protect and how they came to be.

Nuclear Ransomware

This week on The 443 – Security Simplified, we cover a story from Cloudflare on cyber-attacks targeting activists, APTs targeting political campaigns, and ransomware targeting nuclear missile contractors.

Sandworm Situation

This week on The 443 – Security Simplified we cover an NSA alert on the Russian government-backed hacking group known as Sandworm. After that, we discuss the latest findings from Google’s Threat Analysis Group and what OpenSSH’s deprecation of SHA-1 means to servers everywhere.

Unemployment Fraud

This week on The 443 – Security Simplified, we cover the latest Google Chrome update, another airline data breach, and a wave of unemployment affecting residents of Washington State and possibly elsewhere.

Centennial

This week is a very special week for The 443 – Security Simplified, our 100th episode! To celebrate, we’ve combed through our last 99 shows and picked out several stories and topics that we’ve discussed which have updates. In this episode, we’ll bring you up to speed with these topics and then highlight the latest developments.

Toasters and Proxies

This week on The 443 – Security Simplified we cover the latest in cyber security news including a sneaky payment card skimming malware delivery method, a multinational alert on APTs targeting healthcare, and the latest research on remote access vulnerabilities.

Random Name Generator

This week on The 443 – Security Simplified, we cover the latest in questionably-named nation state hacking, a crackdown on Chrome extensions, and an actively in-development android Trojan.

You’ve Got Mail [App Vulns]

Welcome back to another episode of The 443 – Security Simplified. This week, we cover the latest security news including over 160,000 compromised Nintendo accounts, nation state hacking, and a battle over a critical Apple iOS vulnerability.