The Cybersecurity Defenders Podcast #159 - Intel Chat: Sequoia disruption, Github, Supershell, DPRK & Telegram arrest
Sep 30, 2024
38:54
In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.
- Apple’s release of macOS 15, or Sequoia, has caused significant disruptions for several security tools and software vendors, including CrowdStrike, SentinelOne, Microsoft, and others.
- Attackers are exploiting GitHub notifications for phishing by sending legitimate-looking alerts with malicious URLs.
- Truffle Security's research exposes a significant issue in GitHub’s handling of deleted and private repository data via Cross Fork Object Reference (CFOR).
- AhnLab’s report details Supershell, a malware targeting Linux SSH servers via brute-force attacks.
- Since 2022, Mandiant has tracked DPRK IT workers infiltrating global organizations by posing as non-North Koreans to fund the regime's weapons programs and evade sanctions.
- In August 2024, Telegram CEO Pavel Durov was arrested in France, facing charges for allowing criminal activities to proliferate on the platform, including the distribution of illegal content such as child sexual abuse material.