Security Weekly
Paul's Security WeeklySubscribe
Leadership, Malware, Security Staff Acquisition & Development, Vulnerability Management, Network Security, Threat Management

PSW #767 – Holiday Extravaganza

Full Audio

View Show Index

Segments

1. Is Penetration Testing Dead? – PSW #767

While we most likely do not believe that penetration testing is dead it continues to evolve over time. What do penetration tests look like today? Have they become more or less specialized? What is the continuing value of penetration testing? With development and IT moving so fast, how have penetration tests adapted? This discussion will dive into the details of penetration testing today and provide you with a guide to make the most of this activity.

Hosts

Principal Security Evangelist at Eclypsium
Principal Researcher at The Defenders Initiative
Senior Vice President, Audience Content Strategy at CyberRisk Alliance
Professor at Roger Williams University
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
Chief Product Officer at CyberSaint
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

2. How To Get Started in Information Security – PSW #767

Without question, we need more people working in cybersecurity today. Our culture has come a long way to be more open and inviting to new folks, but we still have a lot of work to do. What can you do if you want to break into the field of cybersecurity today? While there is no shortage of resources our experienced hosts will offer their thoughts, opinions, and advice on how you can become the next cybersecurity pro!

Hosts

Principal Security Evangelist at Eclypsium
Principal Researcher at The Defenders Initiative
Senior Vice President, Audience Content Strategy at CyberRisk Alliance
Professor at Roger Williams University
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
Chief Product Officer at CyberSaint
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

3. Hacker Trivia – PSW #767

How well do you know your hacker history and trivia? See how you compare to our hosts as we tackle hacker trivia live on the air! Categories will include hacker movies, hacker history, and hacker tools.

Hosts

Principal Security Evangelist at Eclypsium
Principal Researcher at The Defenders Initiative
Senior Vice President, Audience Content Strategy at CyberRisk Alliance
Professor at Roger Williams University
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
Chief Product Officer at CyberSaint
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

4. Holiday Security News & The Holiday Hack Challenge 2022! – PSW #767

This week, we round out the Holiday Special 2022 with a special guest appearance by Ed Skoudis, where he joins to fill us in on the Holiday Hack Challenge! Then, an utterly chaotic session of security news to close out 2022!

Guest

Ed Skoudis
Faculty at IANS Research, President at SANS Technology Institute, and Founder of Counter Hack

Ed Skoudis is a Faculty member at IANS Research and the founder of Counter Hack, a company focused on conducting ultra high-quality penetration tests and red team engagements to help organizations better manage their cyber risks. Ed is a SANS Fellow, author, and instructor who has trained over 20,000 cyber security professionals in the art of penetration testing and incident response. Ed is an expert witness who is often called in to analyze large-scale breaches.

Hosts

Principal Security Evangelist at Eclypsium
  1. 1. Antivirus and EDR solutions tricked into acting as data wipers

    Hence, by implementing the following five-step process, Yair could delete files in a directory he didn't have modification privileges.

    Create a special path with the malicious file at C:tempWindowsSystem32driversndis.sys Hold its handle and force the EDR or AV to postpone the deletion until after the next reboot Delete the C:temp directory Create a junction C:temp → C: Reboot when prompted.

  2. 2. Are home video surveillance systems safe?

    Having installed a Eufy video doorbell, Paul logged in to the device’s web interface, where he analyzed the source code in the browser and showed that the camera sends a picture to the vendor’s server every time someone appears in the frame. This means that at least one of Eufy’s guarantees (“no clouds”) isn’t true.

    Moore then tweeted several more times about some far more serious data protection issues. Apparently, Eufy’s “reliable” encryption uses a fixed key identical for all users. Worse, this key actually appeared in Eufy code posted by the company itself on GitHub. Later, the tech website The Verge, with reference to Moore and another security expert, confirmed the worst-case scenario: anyone online, it seems, can view the video stream simply by connecting to a unique address of the device.

  3. 3. New Python malware backdoors VMware ESXi servers for remote access

    A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system.

  4. 4. EMBA

  5. 5. NETGEAR Router Network Misconfiguration

  6. 6. Desktop OpenSolaris fork OpenIndiana releases Hipster

  7. 7. A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution

  8. 8. FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked – Krebs on Security

  9. 9. Vulnerability Prioritisation – PwnDefend

Principal Researcher at The Defenders Initiative
Senior Vice President, Audience Content Strategy at CyberRisk Alliance
Chief Operating Officer at Envision Technologies
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
Chief Product Officer at CyberSaint
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

Related

The Changing Risk Landscape: CISO Liability – Darren Shou – BSW #362

How are personal liability and indemnification impacting the CISO role? Darren Shou, Chief Strategy Officer from RSA Conference, describes the current landscape of CISO liability and the challenges facing CISOs today. He discusses the implications of the SEC's recent actions, including the charges against SolarWinds' CISO, and the growing trend of...
CEOs need to be bold, but can CISOs keep up? – BSW #362

This week we talk a lot about the CISO's relationship with the business and the challenges of being aligned and keeping up. We also talk about budget priorities, the challenge of doing security in small businesses, and the ever-present challenge of burnout. Finally, we discuss what servant leadership actually means. On this last topic, Ben makes a...