Episode 64 - Industrial Control Fails and a Package disguised in your own supply

"Beg Bounty" hunters, dependency confusion, iOS kernel vuln, and how not to respond to security research.

• [00:00:59] Florida Water Treatment Facility Hacked
  
• [00:09:19] Have a domain name? "Beg bounty" hunters may be on their way
  
• [00:20:14] FootFallCam and MetaTechnology Drama
  
• [00:28:33] Telegram privacy fails [CVE-2021-27204] [CVE-2021-27205]
  
• [00:36:43] Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
  
• [00:44:33] Exploiting a Second-Order SQL Injection in LibreNMS [CVE-2020-35700]
  
• [00:50:46] Swarm of Palo Alto PAN-OS vulnerabilities
  
• [00:56:25] Advantech iView Missing Authentication RCE [CVE-2021-22652]
  
• [01:02:30] Windows kernel zero-day exploit [CVE-2021-1732]
  
• [01:08:50] Analysis and exploitation of the iOS kernel vulnerability [CVE-2021-1782]
  
• [01:20:10] Misusing Service Workers for Privacy Leakage
  
• [01:27:53] security things in Linux v5.8
  
• [01:40:42] Linux Heap Exploitation - Part 2
  

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)