AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Risky Business
Risky Business #755 -- SSH 0day! Polyfill drama! Entrust crushed!
Jul 3, 2024
Discussion on polyfill JavaScript supply chain attack, MacOS supply chain disaster, OpenSSH remote code execution, Google distrusts Entrust CA, South Korean telco malware attack, Microsoft disappoints, TeamViewer data breach, ransomware incidents, and more cybersecurity news.
59:19
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Polyfill javascript supply chain attacked threatens websites.
- OpenSSH server remote code execution vulnerability discovered.
Deep dives
Challenges with Dynamic IPs in Tracking Badness
Detecting bad behaviors behind carrier-grade NAT or IP address rotation requires looking beyond source IPs. Factors like user agents, HTTP headers, and network artifacts help distinguish unique devices despite changing IPs. Utilizing active honeypots allows testing fake user agents and identifying consistent patterns to attribute malicious activities accurately.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode