https://www.cyberscoop.com/dhs-bug-bounty-122-vulnerabilities-27-critical-hackers/ https://securityaffairs.co/wordpress/130564/hacking/atlassian-jira-authentication-bypass-issue.html

    https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html

https://www.coalfire.com/the-coalfire-blog/research-reveals-cyber-risk-is-the-best-language

https://www.securityweek.com/audio-codec-made-apple-introduced-serious-vulnerabilities-millions-android-phones

https://www.cnet.com/tech/mobile/verizon-wireless-customers-report-outages-across-us/

https://www.infosecurity-magazine.com/news/fbi-warns-us-farmers-of-ransomware/

https://www.bleepingcomputer.com/news/security/3-reasons-connected-devices-are-more-vulnerable-than-ever/

https://www.bleepingcomputer.com/news/security/third-npm-protestware-event-source-polyfill-calls-russia-out/

https://securityaffairs.co/wordpress/130497/security/cyber-insurance-global-riskenvironment.html

https://securityaffairs.co/wordpress/130443/hacking/cisco-umbrella-default-ssh-key.html

https://www.helpnetsecurity.com/2022/04/19/open-source-usage-trends/

https://gizmodo.com/cia-nsa-spies-tracked-anomaly-6-product-demo-1848830150

https://www.infosecurity-magazine.com/news/hackers-gain-admin-rights-with/

https://scottbarrykaufman.com/podcast/

Discord invite (must read and heed the Code of Conduct before admittance to the Discord.
https://discord.gg/38eEBYNJ7B (good for 100 invites)

Twitch stream: https://twitch.tv/brakesec

 

 

 

Josh and Kurt talk about the latest NPM backdoored package. It feels like this keeps happening. We talk about why this is and why it's probably OK. Kurt fixes Linus' Law, in open source the superpower isn't bugs are shallow (they're not), the superpower is security bugs in open source can't be ignored.

Show Notes

• node-ipc protestware