March 24, 2023, 2:30 a.m. | Brian Boettcher, Bryan Brake, and Amanda Berlin

Brakeing Down Security Podcast www.brakeingsecurity.com

Show Topic Summary (less than 300 words)

Dish Network is still busted due to ransomware, your Pixel phone baseband RCE, Nothing runs like a Deere (away from OSS requests, anyway), and “Are we past DAST?”

 

Questions and potential sub-topics (5 minimum):

  1. https://techcrunch.com/2023/03/15/dish-customers-kept-in-the-dark-as-ransomware-fallout-continues/ 

  1. https://medium.com/@cmanojshrestha/hack-any-social-media-account-using-cookie-stealing-attack-a6cdc4caafc1 

  1. https://boringappsec.substack.com/p/edition-18-the-diminishing-returns 

  1. https://www.theregister.com/2023/03/17/john_deere_sfc_gpl/ 

  1. https://www.bleepingcomputer.com/news/security/alleged-breachforums-owner-pompompurin-arrested-on-cybercrime-charges/ (thanks D Mathews!)

  1. https://www.bleepingcomputer.com/news/security/microsoft-support-cracks-windows-for-customer-after-activation-fails/ 

  1. https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html 

 

Additional information / pertinent Links (would you like to know more?):

https://www.shopbiscoff.com/lotus-biscoff-xl-two-pack-case-bulk-size

https://twitter.com/InfoSystir/status/1636847843683041280?s=20 

       

 

Show Points of Contact:

Amanda Berlin: @infosystir @hackershealth 

Brian Boettcher: @boettcherpwned

Bryan Brake: @bryanbrake @bryanbrake@mastodon.social

Website: …

dast dead dish dish network information security john john deere network open source oss ransomware rce requests vulnerabilities

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC