CWE Top 25, Hacking Anti-Viruses and Adversarial Machine Learning Attacks

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)

Or the video archive on Youtube (@DAY[0])

 

• [00:02:08] Protecting users from government-backed hacking and disinformation


• [00:10:23] ENISA threat landscape for 5G Networks


• [00:16:13] EU raises eyebrows at possible US encryption ban


• [00:24:16] You watch TV. Your TV watches back.


• [00:34:44] CWE - Top 25


• https://cwe.mitre.org/top25/archive/2011/2011_cwe_sans_top25.html


• [00:46:58] LPE in K7 Security Anti-Virus (CVE-2019-16897)


• [00:47:09] Weak Crypto in Forinet Products


• [01:01:37] CVE-2019-11932 (double free in libpl_droidsonroids_gif) many apps vulnerable


• https://gist.github.com/wdormann/874198c1bd29c7dd2157d9fc1d858263


• [01:04:32] Max Secure Anti Virus Plus - 19.0.4.020 / CVE-2019-19382 Insecure Permissions


• [01:10:41] Synology DSM Remote Command Injection


• [01:16:45] SpoC: Spoofing Camera Fingerprints


• [01:24:44] Defending Against Adversarial Machine Learning


• [01:34:21] Can Attention Masks Improve Adversarial Robustness?


• [01:38:58] Hidviz


• [01:41:05] IDA 7 Demo Release


• [01:47:54] Windows Terminal (Preview) 0.7 Release