Risky Business #831 -- The AI bugpocalypse begins
MentionsCiscoCitrixKasperskyNetScaler
Runs 59:40. Streams from dts.podtrac.com only when you press play.
On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Those pesky North Koreans shim a backdoor into a 100M-downloads-a-week npm package TeamPCP appear to have ransacked Cisco’s source and cloud environments AI is getting legitimately good at being told to “just go find some 0day in this” Kaspersky says Coruna and Triangulation do share code lineage Iranian hackers dump Kash Patel’s gmail spool Oh, and of course there’s a Citrix Netscaler memory leak being exploited in the wild This week’s episode is sponsored by Dropzone AI, who…
Show notes from Risky Business.
Explained
The technology and terms in this story. Learn more
- AttackBackdoorA hidden way back into a system that bypasses normal logins.
- TechnologynpmThe package registry for JavaScript: millions of open-source libraries that projects install automatically.
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.