20 - CWE Top 25, Hacking Anti-Viruses and Adversarial Machine Learning Attacks

03 December 2019

Show Notes

20 - CWE Top 25, Hacking Anti-Viruses and Adversarial Machine Learning Attacks

Protecting users from government-backed hacking and disinformation

ENISA threat landscape for 5G Networks

EU raises eyebrows at possible US encryption ban

You watch TV. Your TV watches back.

Additional Links: https://cwe.mitre.org/top25/archive/2011/2011_cwe_sans_top25.html

Weak Crypto in Forinet Products

LPE in K7 Security Anti-Virus (CVE-2019-16897)

CVE-2019-11932 (double free in libpl_droidsonroids_gif) many apps vulnerable

Additional Links: https://gist.github.com/wdormann/874198c1bd29c7dd2157d9fc1d858263

Max Secure Anti Virus Plus - 19.0.4.020 / CVE-2019-19382 Insecure Permissions

Synology DSM Remote Command Injection

SpoC: Spoofing Camera Fingerprints

Defending Against Adversarial Machine Learning

Can Attention Masks Improve Adversarial Robustness?

IDA 7 Demo Release

Windows Terminal (Preview) 0.7 Release