CyberWire Daily cover image

CyberWire Daily

Old school, new threat.

Jul 10, 2024
Guest Jack Cable, Senior Technical Advisor at CISA, discusses Blast-RADIUS attack, Russian disinformation, and AI use in classrooms. Microsoft and Apple change OpenAI board seats. Australia reviews tech security. Patch Tuesday updates. CISA's Secure by Design Alert series highlighted. Plus, a cyber expert's geeky wedding.
35:29

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

  • Critical vulnerabilities in RADIUS authentication due to outdated MD5 hash function highlight the need for immediate security measures and protocol updates.
  • US agencies disrupt Russian disinformation campaigns utilizing AI-powered fake personas, emphasizing the importance of collaboration with social media platforms for effective mitigation strategies.

Deep dives

Urgent Update: RADIUS Security Vulnerabilities Discovered

Researchers have identified critical vulnerabilities in the RADIUS authentication protocol, primarily due to the outdated MD5 hash function. These vulnerabilities enable unauthorized access to RADIUS devices by intercepting and manipulating authentication packets. Immediate security measures include transporting RADIUS traffic over TLS or DTS and implementing short-term mitigation strategies like using HMAC-MD5 for packet authentication. Over 90 vendors have issued security bulletins and patches, emphasizing the importance of updating legacy protocols for enhanced network infrastructure security.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode