CyberWire Daily
Old school, new threat.
Jul 10, 2024
Guest Jack Cable, Senior Technical Advisor at CISA, discusses Blast-RADIUS attack, Russian disinformation, and AI use in classrooms. Microsoft and Apple change OpenAI board seats. Australia reviews tech security. Patch Tuesday updates. CISA's Secure by Design Alert series highlighted. Plus, a cyber expert's geeky wedding.
35:29
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Critical vulnerabilities in RADIUS authentication due to outdated MD5 hash function highlight the need for immediate security measures and protocol updates.
- US agencies disrupt Russian disinformation campaigns utilizing AI-powered fake personas, emphasizing the importance of collaboration with social media platforms for effective mitigation strategies.
Deep dives
Urgent Update: RADIUS Security Vulnerabilities Discovered
Researchers have identified critical vulnerabilities in the RADIUS authentication protocol, primarily due to the outdated MD5 hash function. These vulnerabilities enable unauthorized access to RADIUS devices by intercepting and manipulating authentication packets. Immediate security measures include transporting RADIUS traffic over TLS or DTS and implementing short-term mitigation strategies like using HMAC-MD5 for packet authentication. Over 90 vendors have issued security bulletins and patches, emphasizing the importance of updating legacy protocols for enhanced network infrastructure security.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
