Paul's Security WeeklySubscribe

Special Treats – PSW #620

Full Audio

View Show Index

Segments

1. Anything Red/Purple Teaming – Jason Lang – PSW #620

Jason Lang is the Sr. Security Consultant of TrustedSec. Modern day red teaming against some of the largest company's in the US. Current passion is Ansible for red teamers (i.e. fast infrastructure buildout).

To learn more about TrustedSec, visit: https://securityweekly.com/trustedsec Full Show Notes: https://wiki.securityweekly.com/Episode620

Guest

Jason Lang
Sr Security Consultant at TrustedSec

worked on TrustedSec’s Adversary Emulation and Threat Research team. His job is red teaming, purple teaming, pentesting. Jason has been in Infosec for 10+ years, with over 5 years in offensive security / pentesting. He has a background in enterprise. He enjoys coding in C#, Powershell, python – DerbyCon speaker/trainer – “Amish Hacker”. He lives in the middle of nowhere. Jason enjoys woodworking, fly fishing, and beekeeping.

Hosts

Principal Security Evangelist at Eclypsium
Security Analyst at Black Hills Information Security
Product Security Research and Analysis Director at Finite State
Senior Cyber Advisor at Lawrence Livermore National Laboratory

2. Audio Security – PSW #620

Wes Widner is the Cloud Engineering Manager at CrowdStrike. Wes will be talking about personal voice assistants are the wave of the future. So naturally we should wonder about the unique attack vectors they pose. I'd like to discuss my research into this field and share a few tips on how you can keep yourself safe around voice assistants.

Full Show Notes: https://wiki.securityweekly.com/Episode620

Guest

Wes Widner
Cloud Engineering Manager at CrowdStrike

engineers clouds with Crowdstrike. Large-scale distributed threat intelligence systems that span a range of threat vectors are his bread and butter. His work history includes data engineering with McAfee Labs’s Global Threat Intelligence department and malware pipelining with Norse Corporation. In his ample spare time, Wes also enjoys teaching children how to hack, ethically of course.

Hosts

Principal Security Evangelist at Eclypsium
Security Analyst at Black Hills Information Security
Product Security Research and Analysis Director at Finite State
Senior Cyber Advisor at Lawrence Livermore National Laboratory

3. iOS, Equifax Is Back, & phpMyAdmin CSRF Zero-Day – PSW #620

In the Security News, how an iOS 13 flaw could provide access to contacts with passcode, Equifax demands more information before making payouts, confidential data of 24.3 million patients were discovered online, and a SIM Flaw that lets hackers hijack any phone by sending SMS!

Full Show Notes: https://wiki.securityweekly.com/Episode620

Hosts

Principal Security Evangelist at Eclypsium
Security Analyst at Black Hills Information Security
Product Security Research and Analysis Director at Finite State
Senior Cyber Advisor at Lawrence Livermore National Laboratory

Related

Discovering a common Salesforce mistake launched this security professional’s career – Aaron Costello – ESW #379

Aaron was already a skilled bug hunter and working at HackerOne as a triage analyst at the time. What he discovered can't even be described as a software bug or a vulnerability. This type of finding has probably resulted in more security incidents and breaches than any other category: the unintentional misconfiguration. There's a lot of conversati...