PLAY PODCASTS
Episode #46 - It's 5:05, Monday, January 2, 2023
Season 1 · Episode 46

Episode #46 - It's 5:05, Monday, January 2, 2023

It's 5:05! Daily cybersecurity and open source briefing

January 2, 20238m 44s

Audio is streamed directly from the publisher (dts.podtrac.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.

Show Notes

It’s 5:05, Monday, January 2, 2023. From the Sourced Podcast Network in New York City, this is your host, Pokie Huang. Stories in today’s episode come from Edwin Kwan in Australia on PyTorch dependency confusion attack, Trac Bannon in Pennsylvania on office space inspired cyber theft, Olimpiu Pop in Romania on Linux Kernel vulnerability allows RCE on SMB3 servers.

Today’s episode begins with Katy Craig in California on smartphone sidechannel attack. 

Let’s get to it!

🇺🇸 Katy Craig, San Diego, California

Smartphone Sidechannel Attack

https://arxiv.org/pdf/2212.12151.pdf

🇷🇴 Olimpiu Pop, Transylvania, Romania

Linux Kernel Vulnerability Allows RC On SMB3 Servers

https://www.zerodayinitiative.com/advisories/ZDI-22-1690/

https://lore.kernel.org/lkml/[email protected]/

🇺🇸 Tracy (Trac) Bannon, Camp Hill, Pennsylvania

Office Space Inspired Cyber Theft

https://www.scribd.com/document/617139119/Ex-Zulily-engineer-charged-for-alleged-theft-scheme-inspired-by-Office-Space

https://www.cnn.com/2022/12/30/us/office-space-inspired-washington-software-engineer-thief/index.html

🇦🇺 Edwin Kwan, Sydney, Australia

PyTorch Dependency Confusion Attack 

https://pytorch.org/blog/compromised-nightly-dependency/

https://www.bleepingcomputer.com/news/security/pytorch-discloses-malicious-dependency-chain-compromise-over-holidays/