Show Notes

15 - NordVPN Again, Snowden, CPDoS, a PHP-RCE, and some console hacking

00:00:04
NordVPN's Response to Private Certificate Breach Discussed Last Week
Additional Links: https://nordvpn.com/blog/security-plan/
00:12:03
AWS Hit By major DDOS Attack
Additional Links: https://status.digitalocean.com/incidents/1z3kmlvz69v6
00:14:04
Seven Million Adobe Creative Cloud Accounts Exposed to the Public
00:25:02
Travel Reservations Platform Leaks US Government Personnel Data
00:30:00
Joe Rogan Experience #1368 - Edward Snowden
00:48:03
Technical Analysis of Checkm8
Additional Links: https://googleprojectzero.blogspot.com/2019/10/ktrw-journey-to-build-debuggable-iphone.html
00:55:05
Cache Poisoned Denial of Service (CPDoS)
01:08:02
CVE-2019-11043 - PHP-FPM (potential) RCE
Additional Links: https://github.com/neex/phuip-fpizdam/blob/master/attack.go
01:20:04
Light Ears: Information Leakage via Smart Lights
01:27:05
Don’t open that XML: XXE to RCE in XML plugins for VS Code, Eclipse, Theia, …
01:33:02
Bringing ICS into the Pwn2Own World
01:37:03
Analysis of Qualcomm Secure Boot Chains
01:39:05
Microsoft Secured-Core PC
01:47:04
Guarding Against Physical Attacks: The Xbox One Story