

SANS Stormcast Wednesday, April 30th: SMS Attacks; Apple Airplay Vulnerabilities
Apr 30, 2025
AI Snips
Chapters
Transcript
Episode notes
Attack Techniques on SMS Gateways
- Attackers scan for WordPress sites with SMS plugins to exploit them.
- They also scan for SMS API configuration files like ENV files to steal credentials.
Protect SMS API Credentials
- Protect your SMS API credentials to avoid unauthorized use and costly bills.
- Losing credentials can harm your sender number's reputation, forcing you to get a new one.
AirPlay Assumes Trusted Network
- AirPlay protocol assumes local network security, which exposes pre-authentication attack surface.
- Vulnerabilities include zero-click remote code execution and denial-of-service attacks on affected devices.