Cyber revolt or just digital ruckus?

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 27 August 2024

⏱️ 26 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Hacktivists respond to the arrest of Telegram’s CEO in France. Stealthy Linux malware stayed undetected for two years. Versa Networks patches a zero-day vulnerability. Google has patched its tenth zero-day vulnerability of 2024. Researchers at Arkose labs document Greasy Opal. A flaw in Microsoft 365 Copilot allowed attackers to exfiltrate sensitive user data. Gafgyt targets crypto mining in cloud native environments. Microsoft investigates an Exchange Online message quarantine issue. Our guest is Bar Kaduri, research team leader at Orca Security talking about AI Goat, the first open source AI security learning environment based on the OWASP top 10 ML risks. Kentucky Prisoners Trick Tablets to Generate Fake Money. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Our guest is Bar Kaduri, research team leader at Orca Security talking about AI Goat, the first open source AI security learning environment based on the OWASP top 10 ML risks. Available on GitHub, AI Goat is an intentionally vulnerable AI environment built in Terraform that includes numerous threats and vulnerabilities for testing and learning purposes. Learn more. Selected Reading Arrest of Telegram CEO sparks cyberattacks against French websites (SC Media) Unveiling sedexp: A Stealthy Linux Malware Exploiting udev Rules (AON) Stealthy 'sedexp' Linux malware evaded detection for two years (Bleeping Computer) Google tags a tenth Chrome zero-day as exploited this year (Bleeping Computer) Versa fixes Director zero-day vulnerability exploited in attacks (Bleeping Computer) Greasy Opal: Greasing the Skids for Cybercrime (Arkose Labs) Microsoft Copilot Prompt Injection Vulnerability Let Hackers Exfiltrate Personal Data (Cyber Security News) Gafgyt Botnet: Weak SSH Passwords Targeted For GPU Mining (Security Boulevard) Microsoft: Exchange Online mistakenly tags emails as malware (Bleeping Computer) Kentucky prisoners hack state-issued computer tablets to digitally create $1M. How’d they do it? (Union Bulletin) Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at [email protected] to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the CyberWire Network, powered by N2K.
0:07.0	When it comes to ensuring your company has top-notch security practices, things can get complicated fast.
0:21.0	Vanta automates compliance for SOC2, ISO 2701, HIPAA and more, saving you time and money.
0:29.7	With Vanta you can streamline security reviews by automating questionnaires and
0:34.2	demonstrating your security posture with a customer-facing trust center.
0:38.4	Over 7,000 global companies like Atlassian, Flow Health, and Quora use Vanta to manage risk and prove security
0:46.5	in real time.
0:48.4	Our listeners can claim a special offer of $1,000 off Vanta at vanta.com slash cyber.
0:55.8	That's VANTA.com slash cyber for $1,000 off Banta. Activists respond to the arrest of telegram CEO in France.
1:19.0	Stealthy Linux malware stayed undetected for two years.
1:22.4	Versa Networks patched a zero-day vulnerability. Nowhere stayed undetected for two years.
1:22.6	Versa Networks patched a zero-day vulnerability,
1:25.4	while Google has patched its 10th zero-day vulnerability of 2024.
1:30.0	Researchers at Arcoast Labs document Greasy Opel, a flaw in Microsoft 365 co-pilot
1:36.4	allowed attackers to exfiltrate sensitive user data.
1:39.8	GAFGIT targets crypto mining in cloud native environments.
1:43.8	Microsoft investigates an exchange online messaging quarantine issue.
1:48.2	Our guest is Barr Kaduri, research team leader at Orca Security talking about AI Goat,
1:54.1	the first open source AI security learning environment based on the
1:58.0	O-Wasp top 10 ML risks.
2:00.3	And Kentucky prisoners trick tablets to generate fake money. It's Tuesday August 27th, 2024. I'm Dave Bitner and this is your cyberwire Intel briefing. Thanks for joining us. It is great to have you here with us today.
2:41.0	The arrest of telegram CEO Pavel Durov in France sparked a wave of cyber
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.