Paul's Security WeeklySubscribe
Vulnerability Management, Cloud Security, Distributed Workforce

Chrome Sandbox Exploit, Cisco Jabber CVE, & Lea Snyder w/ BSides Boston – PSW #666

We welcome special guest Lea Snyder, BSides Boston Organizer, to talk all things BSides Boston 2020 for its 10 year anniversary! In the Security News, Cisco Patches Critical Vulnerability in Jabber for Windows, Expert found multiple critical issues in MoFi routers, TeamTNT Gains Full Remote Takeover of Cloud Instances, Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks, Former NSA chief General Keith Alexander is now on Amazon’s board, and the Legality of Security Research is to be Decided in a US Supreme Court Case!

Full episode and show notes

Announcements

  • BSides Boston is back in action for their 10 year anniversary! The conference will be held on Saturday, September 26th & tickets are only $10! Get yours at https://bsidesbos.org! Some of the Security Weekly team will be in our own channel on the BSides Boston Discord server answering questions and possibly doing some contests!

Guest

BSides Boston Organizer at BSides Boston

Lea Snyder is the lead organizer for BSides Boston. She helped organize the conference in 2014 & 2015 and was the lead organizer for 2016 & 2017. She started volunteering for BSides Seattle in 2016 and quickly joined the organizing team. She is the co-founder of Layer 8 Conference with Patrick Laverty. Lea is passionate about giving back to the security community, creating an atmosphere that is welcoming to all participants, and learning something new along the way.

Hosts

Principal Security Researcher at Eclypsium
Sr. InfoSec Consultant at Online Business Sytems
Security Analyst at Black Hills Information Security
Product Security Research and Analysis Director at Finite State
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

Related

Discovering a common Salesforce mistake launched this security professional’s career – Aaron Costello – ESW #379

Aaron was already a skilled bug hunter and working at HackerOne as a triage analyst at the time. What he discovered can't even be described as a software bug or a vulnerability. This type of finding has probably resulted in more security incidents and breaches than any other category: the unintentional misconfiguration. There's a lot of conversati...
The Saga Continues – PSW #846

Get ready for a wild ride in this week's podcast episode, where we dive into the latest security shenanigans! Default Credentials Gone Wild: We’ll kick things off with a look at how default credential scanners are like that friend who shows up to the party but never brings snacks. They're everywhere, but good luck finding one that actually works!...