BIND, Intel, and Brickerbot – Paul’s Security Weekly #545

January 30, 2018

In the news, Intel warns "Don’t install our patch!", what you need to know about hash length extension attacks, Meltdown and Spectre patching has been a total train wreck,and more on this episode of Paul's Security Weekly!

Larry's Stories

More DJI folly

Joff's Stories

Keith's Stories

-1.) Dell Advising All Customers To Not Install Spectre BIOS Updates 0.) Meltdown and Spectre Patching Has Been a Total Train Wreck 1.) No Passport or Ticket: How a Woman Evaded Airport Security and Flew to London 2.) British 15-year-old gained access to intelligence operations in Afghanistan and Iran by pretending to be head of CIA, court hears 3.) SamSam – The Evolution Continues Netting Over $325,000 in 4 Weeks 4.) Hacker Infects Gas Pumps With Code to Cheat Customers 5.) OnePlus confirms hack exposed credit cards of phone buyers 6.) Visa CEO: We won't process transactions in bitcoin, because it's not a payment system Full Show Notes Subscribe to YouTube Channel [audio src="http://traffic.libsyn.com/pauldotcom/BIND_Intel_and_Brickerbot_-_Pauls_Security_Weekly_545_converted.mp3" ]

Vulnerability Management

Significant compromise possible with critical Versa Concerto flaws

SC StaffMay 23, 2025

Versa Networks' centralized management and orchestration platform Versa Concerto has been impacted by a trio of serious vulnerabilities, which could be leveraged for authentication evasion and arbitrary code execution, according to BleepingComputer.

Plain code with the word "cyberattack" in red.

Vulnerability Management

Ivanti EPMM flaws leveraged in global Chinese cyberespionage attacks

SC StaffMay 23, 2025

Chinese state-backed threat operation UNC5221 has launched attacks exploiting the recently addressed Ivanti Endpoint Manager Mobile flaws, tracked as CVE-2025-4427 and CVE-2025-4428, against telecommunications, healthcare, government, defense, finance, and aviation organizations in North America, Europe, and the Asia-Pacific since May 15, The Hacker News reports.

Critical Infrastructure Security

Trimble Cityworks zero-day attacks on US local governments detailed

Laura FrenchMay 22, 2025

Analysis revealed the deployment of various backdoors by suspected Chinese-speaking threat actors.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Related Terms

Bug Buffer Overflow Disassembly