2020-025-Cognizant breach, maze ransomware, PAN-OS CVE 2020-2021, SAML authentication walkthrough
BrakeSec Education Podcast · Bryan Brake, Brian Boettcher, Amanda Berlin
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Thank you to Marcus Carey for his excellent guidance and leadership this week.
Cognizant breach: https://www.ehackingnews.com/2020/06/cognizant-reveals-employees-data.html
Maze ransomware write-up: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/ransomware-maze/
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/authentication/authentication-types/saml
PAN-OS CVE 2020-2021 -
We have been made aware of a serious issue with SAML on Palo Alto Networks PAN-OS
We strongly encourage our customers to upgrade to one of the following versions :
PAN-OS 8.1.15
PAN-OS 9.0.9
PAN-OS 9.1.3 and greater
This is a critical vulnerability with the only mitigation being to either turn OFF SAML or to upgrade the PAN-OS.
A CVE will be released on Monday :: CVE-2020-2021
https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language