Скачать с ютуб 028 - Hack Twitter, WhatsApp and all your Cisco phones (CDPwn) ft. GhostKnight в хорошем качестве

028 - Hack Twitter, WhatsApp and all your Cisco phones (CDPwn) ft. GhostKnight

Android, Bluetooth, Microsoft, NordVPN, Twitter, WhatsApp, Cisco, vulns for days impacting several big names and a couple new attack ideas, blind regex injection and GhostKnight a technique to breach data integrity using speculative execution. Watch the DAY[0] podcast live on Twitch every Monday afternoon at 12:00pm PST (3:00pm EST) --   / dayzerosec   Or subscribe to the audio podcast: -- Spotify: https://open.spotify.com/show/4NKCxk8... -- RadioPublic: https://radiopublic.com/day0-zero-day... -- Pocket Casts: https://pca.st/ci0taosq -- Breaker: https://www.breaker.audio/day-0-zero-... -- Anchor: https://anchor.fm/day0 -- RSS: https://anchor.fm/s/a121a24/podcast/rss [00:00:00] Introduction [00:01:07] Updated re. Sudo Exploit https://github.com/sudo-project/sudo/... [00:03:32] Charges Filed against Four Chinese PLA Hackers for part in 2017 Equifax Breach https://www.justice.gov/opa/press-rel... [00:06:06] Announcing a Targeted Incentive Program for Selected Trend Micro Products https://www.thezdi.com/blog/2020/2/9/... [00:11:01] Android Security Bulletin - February 2020 https://source.android.com/security/b... https://android.googlesource.com/kern... https://android.googlesource.com/kern... [00:17:06] Critical Bluetooth Vulnerability in Android (CVE-2020-0022) https://android.googlesource.com/plat... [00:22:48] Dangerous Domain Corp.com Goes Up for Sale https://krebsonsecurity.com/2020/02/d... [00:37:43] NordVPN - IDOR allow access to payments data of any user https://hackerone.com/reports/751577 https://hackerone.com/nordvpn [00:43:35] Twitter - Bypass Password Authentication for updating email and phone number https://hackerone.com/reports/770504 [00:48:27] WhatsApp Desktop XSS to Local File read (CVE-2019-18426) https://www.perimeterx.com/tech-blog/... [01:03:03] CDPwn: 5 Zero-Days in Cisco Discovery Protocol https://www.armis.com/cdpwn/ [01:15:07] A Rough Idea of Blind Regular Expression Injection Attack https://diary.shift-js.info/blind-reg... https://speakerdeck.com/lmt_swallow/r... [01:20:45] GhostKnight: Breaching Data Integrity via Speculative Execution https://arxiv.org/abs/2002.00524v1 [01:26:00] BRIGHTNESS: Leaking Sensitive Data from Air-Gapped Workstations via Screen Brightness https://arxiv.org/abs/2002.01078v1 [01:30:27] Forging SWIFT MT Payment Messages for fun and pr... research! https://labs.f-secure.com/blog/forgin... [01:35:22] Grooming the iOS Kernel Heap https://azeria-labs.com/grooming-the-...