The 443 - Security Simplified

Twoops

This week on The 443 – Security Simplified we cover a massive security breach at Twitter that resulted in an attacker taking over dozens of high-profile accounts ranging from former presidents to Apple. We also discuss the latest Microsoft patch Tuesday which included a fix for a critical security vulnerability in Windows DNS Server.

Can We Trust Facial Recognition?

Welcome back to another episode of The 443 – Security Simplified. This week in the news, we cover an open source vulnerability scanner from Google and phishing campaign that combines Microsoft 365 and Zoom. After that, we dive in to the world of facial recognition and discuss recent research from WatchGuard Threat Lab and other concerns about the technology.

Don’t Trust the App

This week on The 443 – Security Simplified, we discuss the latest out-of-band security patch from Microsoft solving two potentially serious vulnerabilities, a cryptocurrency phishing campaign that made its way on to the Google Play app store, and a neat way that payment card skimming malware hide’s its malicious code.

Q1 2020 Internet Security Report

It’s that time of year again! This week on The 443 we cover the latest internet security report from the WatchGuard Threat Lab. In this episode, we’ll cover the stats and key findings from threat intelligence gathered from over 44,000 security appliances deployed across the world.

A New DDoS Record

This week on The 443 – Security Simplified, we discuss a new DDoS throughput record as reported by Amazon in their AWS Shield Therat Landscape Report for Q1 2020 as well as a history of reflective amplification DDoS attacks. Before that though, we cover an interesting macOS Gatekeeper bypass that involves a bit of social engineering and the latest Intel CPU technology that just might make ROP chains a thing of the past.
macOS Gatekeeper bypass - https://www.intego.com/mac-security-blog/new-mac-malware-reveals-google-searches-can-be-unsafe/
Intel Tiger Lake CET - https://newsroom.intel.com/editorials/intel-cet-answers-call-protect-common-malware-threats/
AWS DDoS Record - https://aws-shield-tlr.s3.amazonaws.com/2020-Q1_AWS_Shield_TLR.pdf

Section 230

This week on The 443 – Security Simplified we’re taking a break from the news to talk about a cornerstone of the modern internet, Title 47, Section 230 of the US code, also known as the safe harbor provisions. These laws, which are critical for a free and open internet, have been increasingly under attack in recent months by politicians in the United States from both major political parties. That is why we’re focusing an entire episode exactly what these laws protect and how they came to be.

Nuclear Ransomware

This week on The 443 – Security Simplified, we cover a story from Cloudflare on cyber-attacks targeting activists, APTs targeting political campaigns, and ransomware targeting nuclear missile contractors.

Sandworm Situation

This week on The 443 – Security Simplified we cover an NSA alert on the Russian government-backed hacking group known as Sandworm. After that, we discuss the latest findings from Google’s Threat Analysis Group and what OpenSSH’s deprecation of SHA-1 means to servers everywhere.

Unemployment Fraud

This week on The 443 – Security Simplified, we cover the latest Google Chrome update, another airline data breach, and a wave of unemployment affecting residents of Washington State and possibly elsewhere.

Centennial

This week is a very special week for The 443 – Security Simplified, our 100th episode! To celebrate, we’ve combed through our last 99 shows and picked out several stories and topics that we’ve discussed which have updates. In this episode, we’ll bring you up to speed with these topics and then highlight the latest developments.