New SonicWall flaw, WorkOS accidental AI breach, Bogota bomb hoax email
MentionsSonicWall
Runs 8:10. Streams from traffic.libsyn.com only when you press play.
SonicWall warns of new exploited SSL-VPN MFA bypass flaw https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/ Escaped AI testing agent behind WorkOS breach https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/ Bogotá investigates potential health agency hack following airport bomb hoax email https://therecord.media/bogota-potential-city-health-agency-hack-european-hoax-emails Medical services company issues settlement over 2023 hack of patient records…
Show notes from Defense in Depth.
Explained
The technology and terms in this story. Learn more
- ProtocolSSL · Secure Sockets LayerThe retired predecessor of TLS; the name lives on in product names such as OpenSSL and "SSL VPN".
- TechnologyVPN · Virtual private networkAn encrypted tunnel that puts a remote device on a private network, as if it were plugged in at the office.
- DefenceMFA · Multi-factor authenticationRequiring a second proof besides a password, such as an app prompt, a code or a security key.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
