В&nbsp;этом&nbsp;эпизоде Алиса, Логин и Алексей поговорили про скандальный 6688, браузеры, уязвимости с лого и сайтами, и некоторые другие новости прошедших двух недель. 6688 http://w1.c1.rada.gov.ua/pls/zweb2/webproc4_1?pf3511=62236&nbsp;  Github Gentoo organization hacked - resolved&nbsp;https://gentoo.org/news/2018/06/28/Github-gentoo-org-hacked.html  Apple corrects the record on reported iPhone vulnerability&nbsp;https://www.cyberscoop.com/iphone-brute-force-passcode-matthew-hickey/  Cops May Unlock iPhones Without a Warrant to Beat Apple's New Security Feature&nbsp;https://motherboard.vice.com/en_us/article/bj34wa/cops-unlock-iphones-without-a-warrant-apple-usb-restricted-mode  Facebook shells out $8k bug bounty after quiz web app used by 120m people spews profiles&nbsp;https://www.theregister.co.uk/2018/06/28/facebook_data_abuse_bug_bounty/  Former NSA contractor Reality Winner accepts guilty plea for leaking classified report&nbsp;https://www.cyberscoop.com/former-nsa-contractor-reality-winner-accepts-guilty-plea-leaking-classified-report/  Firefox is adding 'Have I Been Pwned' alerts&nbsp;https://www.cyberscoop.com/firefox-is-adding-haveibeenpwned-alerts/  «Грязный секрет» Gmail: письма пользователей читают не только сотрудники Google&nbsp;https://thebell.io/gryaznyj-sekret-gmail-pisma-polzovatelej-chitayut-ne-tolko-sotrudniki-google/  "Stylish" browser extension steals all your internet history&nbsp;https://robertheaton.com/2018/07/02/stylish-browser-extension-steals-your-internet-history/  Brave browser adds private tabs with Tor for 'enhanced privacy protection'&nbsp;https://www.cyberscoop.com/brave-browser-adds-tor-tabs/  Fusion&nbsp;https://wiki.mozilla.org/Security/Fusion  Alter attack&nbsp;https://alter-attack.net/ ProtonMail DDoS Attacks Are a Case Study of What Happens When You Mock Attackers&nbsp;https://www.bleepingcomputer.com/news/security/protonmail-ddos-attacks-are-a-case-study-of-what-happens-when-you-mock-attackers/  A year after devastating NotPetya outbreak, what have we learnt? Er, not a lot, says BlackBerry bod&nbsp;https://www.theregister.co.uk/2018/06/27/notpetya_anniversary/  New RAMpage attack affects all Android phones released since 2012 [Update]&nbsp;https://www.androidcentral.com/rampage-attack-discovered  Thanatos Ransomware Decryptor Released by the Cisco Talos Group&nbsp;https://www.bleepingcomputer.com/news/security/thanatos-ransomware-decryptor-released-by-the-cisco-talos-group/&nbsp;  First Nationwide Undercover Operation Targeting Darknet Vendors Results in Arrests of More Than 35 Individuals Selling Illicit Goods and the Seizure of Weapons, Drugs and More Than $23.6 Million&nbsp;https://www.justice.gov/opa/pr/first-nationwide-undercover-operation-targeting-darknet-vendors-results-arrests-more-35  The Perfect Weapon: War, Sabotage, and Fear in the Cyber Age&nbsp;https://www.amazon.com/Perfect-Weapon-Sabotage-Fear-Cyber/dp/0451497899/  UISGCON14&nbsp;https://14.uisgcon.org/&nbsp; Securit13 Patreon https://www.patreon.com/securit13&nbsp; Keygen Music [2+ hour Mix] https://www.youtube.com/watch?v=cYkaG5CT53I&nbsp; &nbsp;

Эпизод 102 - Закон и беспорядок (3.7.2018)

UISGCON14 https://14.uisgcon.org/&nbsp; На Дніпропетровщині СБУ попередила кібератаку російських спецслужб на об’єкт критичної інфраструктури https://ssu.gov.ua/ua/news/1/category/2/view/5037#.MkS7rpun.dpbs&nbsp;  Ukraine claims it blocked VPNFilter attack at chemical plant  https://www.theregister.co.uk/2018/07/13/ukraine_vpnfilter_attack/&nbsp;  Speculative Buffer Overflows: Attacks and Defenses (pdf) https://people.csail.mit.edu/vlk/spectre11.pdf&nbsp;  New Spectre 1.1 and Spectre 1.2 CPU Flaws Disclosed  https://www.bleepingcomputer.com/news/security/new-spectre-11-and-spectre-12-cpu-flaws-disclosed/&nbsp;  Google Enables 'Site Isolation' Feature By Default For Chrome Desktop Users  https://thehackernews.com/2018/07/google-chrome-site-isolation.html&nbsp;  Вийшов річний звіт CISCO з кібербезпеки і піврічний звіт чекпоінт, але ми поговоримо про них наступного разу  https://www.cisco.com/c/dam/global/uk_ua/assets/pdfs/Final_Files_Cisco_2018_ACR_Web.pdf?dtid=oemzzz000186&amp;ccid=cc000160&amp;ecid=10432&amp;oid=anrsc005679&nbsp;  Scam alert: No, hackers don't have webcam vids of you enjoying p0rno. Don't give them any $$s https://www.theregister.co.uk/2018/07/13/hacker_extortion_scam/&nbsp;  GitHub to Pythonistas: Let us save you from vulnerable code  https://www.theregister.co.uk/2018/07/16/github_to_pythonistas_let_us_save_you_from_vulnerable_code/&nbsp;  Microsoft seeks regulation of facial recognition technology  https://www.reuters.com/article/us-microsoft-facial-recognition/microsoft-seeks-regulation-of-facial-recognition-technology-idUSKBN1K32F0&nbsp;  Two-factor auth totally locks down Office 365? You may want to check all your services...  https://www.theregister.co.uk/2018/07/13/2fa_o365_bypass_attacks/&nbsp;  The Tale of SettingContent-ms Files  https://posts.specterops.io/the-tale-of-settingcontent-ms-files-f1ea253e4d39&nbsp;  Facebook fined for data breaches in Cambridge Analytica scandal  https://amp.theguardian.com/technology/2018/jul/11/facebook-fined-for-data-breaches-in-cambridge-analytica-scandal&nbsp;  Cops suspect Detroit fuel station was hacked before 10 drivers made off with 2.3k 'free' litres https://www.theregister.co.uk/2018/07/09/gas_station_hack/&nbsp;  2018-07 Security Bulletin: Junos OS: Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2), PTX3K-FPC3 and PTX1K: Line card may crash upon receipt of specific MPLS packet (CVE-2018-0030)  https://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10864&amp;cat=SIRT_1&amp;actp=LIST&nbsp;  Revoked Certificate when viewing mydlink IP Cameras with-in web-browsers  https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10089&nbsp;  Certificates stolen from Taiwanese tech-companies misused in Plead malware campaign  https://www.welivesecurity.com/2018/07/09/certificates-stolen-taiwanese-tech-companies-plead-malware-campaign/&nbsp;  Ammyy Admin compromised with malware again; World Cup used as cover  https://www.welivesecurity.com/2018/07/11/ammyy-admin-compromised-malware-world-cup-cover/&nbsp;  https://regmedia.co.uk/2018/07/13/burkdoll_affidavit.pdf&nbsp;  US: Government Has Planted Spy Phones With Suspects  https://www.hrw.org/news/2018/07/13/us-government-has-planted-spy-phones-suspects&nbsp;  The 111 Million Record Pemiblanc Credential Stuffing List  https://www.troyhunt.com/the-111-million-pemiblanc-credential-stuffing-list/&nbsp;  June’s Most Wanted Malware: Banking Trojans Up 50% Among Threat Actors  https://blog.checkpoint.com/2018/07/05/junes-most-wanted-malware-banking-trojans-crypto-mining/&nbsp;  Did CrowdStrike really miss the mark?  https://medium.com/@rsatter/did-crowdstrike-really-miss-the-mark-ecedf0e09dd7&nbsp;   Securit13 Patreon&nbsp;https://www.patreon.com/securit13&nbsp;

Эпизод 103 - ...and has all patches

Спеціальний епізод про відвідини 26ї конференції #DEFCON нашими співведучими

Securit13 podcast