Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: New Drupal RCE Vuln; Bash IRC Bot; Insecure Hotel Locks; Alexa Allowed Malicous Apps to Evesdrop - Internet Security | DShield New Drupal RCE Vuln; Bash IRC Bot; Insecure Hotel Locks; Alexa Allowed Malicous Apps to Evesdrop


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
podcast logo

ISC StormCast for Thursday, April 26th 2018

A daily summary of cyber security news from the SANS Internet Storm Center
Author:Johannes B. Ullrich, Ph.D.
See below for a schedule of classes I teach.
Created: Thursday, April 26th 2018
Length: 5:21 minutes
Today's Headline: New Drupal RCE Vuln; Bash IRC Bot; Insecure Hotel Locks; Alexa Allowed Malicous Apps to Evesdrop

If you like this podcast, then please consider telling others about it. Use this button to Tweet about this episode: click here. Errors? Corrections? Complaints? Player Problems? Please let us know here: https://isc.sans.edu/contact.html

Plain HTML5 Player
Fancy Player (with skip back/forward)

Show Notes

New Drupal Remote Code Execution Vulnerability
https://www.drupal.org/sa-core-2018-004

Malicious Network Traffic From /bin/bash
https://isc.sans.edu/forums/diary/Malicious+Network+Traffic+From+binbash/23591/

Insecure Hotel Locks
https://safeandsavvy.f-secure.com/2018/04/25/researchers-find-way-to-generate-master-keys-to-hotels/

Amazon Echo As Evesdropping Device (signin required)
https://info.checkmarx.com/wp-alexa

Discussion

Login here to join the discussion.

Interested in attending one of my classes? See below for my current schedule.

Defending Web Applications Security EssentialsRestonMay 20th - May 25th 2018
Intrusion Detection In-DepthSan AntonioAug 6th - Aug 11th 2018
Defending Web Applications Security EssentialsAmsterdamSep 3rd - Sep 8th 2018
Defending Web Applications Security EssentialsLas VegasSep 23rd - Sep 28th 2018