A Kernel Race, SuDump, and a Chrome Garbage Collector Bug [Exploit Dev/VR]
![A Kernel Race, SuDump, and a Chrome Garbage Collector Bug [Exploit Dev/VR]](https://cdn-images-3.listennotes.com/podcasts/day0-zero-days-for-day-zero-rOtwNqRIPzk-BgekyA5N_ji.300x300.jpg)
Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/a-kernel-race-sudump-and-a-chrome-garbage-collector-bug.html
We start off this week with a look at in-the-wild 0days from the past seven years, before diving into some pretty awesome bugs this week …
Episode 135
Overview
Ubuntu 20.04 LTS targeted at Tianfu Cup 2021 plus we cover security
updates for Linux kernel, nginx, Ardour and strongSwan.
This week in Ubuntu Security Updates
24 unique CVEs addressed
[USN-5091-3] Linux kernel (Azure) regression
6 CVEs addressed in Bionic (18.04 LTS), Focal (20.04…
Auth Bypass, XSS, RCE and more
Authentication bypasses, SQL injection, command injection, and more in this web-exploit heavy episode.
[00:09:11] Facebook v. NSO Group
[00:18:14] Netsweeper PreAuth RCE
[00:25:49] SaltStack authorization bypass
https://github.com/saltstack/salt/blob/0b2a5613b345f17339cb90e60b407199b3d2…
Fast Fuzzing, Malicious Pull Requests, and Rust in my kernel?!
Time to rewrite Linux in Rust? Probably not, but it has landed in linux-next which we talked about. We also look at a couple interesting GitHub vulns, and talk about fuzzing.
[00:00:28] Rust in the Linux Kernel
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/rust?id…
Episode 86
Overview
This week we discuss the recent announcement of a long-awaited native
client for 1password, plus Google Chrome experiments with anti-phishing
techniques, and we take a look at security updates for OpenJDK 8, Samba,
NSS and more.
This week in Ubuntu Security Updates
13 unique CVEs addres…
Episode 145
Overview
The Ubuntu Security Podcast is back for 2022 and we’re starting off the
year with a bang💥! This week we bring you a special interview with Kees
Cook of Google and the Linux Kernel Self Protection Project discussing
Linux kernel hardening upstream developments. Plus we look at security
upd…
Episode 385 - EA's Saudi Buyout, Apple's OpenAI Leaks, and AI Fever Dreams
Apple vs OpenAI, EA's Acquisition, SpaceX & AMD's Diverging Paths, and the Dangers of AI
סטארט-אפ הפינטק שמפתח פלטפורמת AI לביטוחי נסיעות שווה כבר 500 מיליון דולרעסקת הענק הושלמה: חברת הגיימינג EA עברה לידי קרן העושר הסעודיתהחטיבה הרווחית היחידה של ספייס־אקס — ולמה המשקיעים מענישים את AMD?Apple say…
The AI Update XXIV - Zero Day : HuggingFace Hack
[Excitement].Whoa! New AI Update with Jhave and Scott on Off Center! I should listen and find out everything I need to know about the OpenAI Hugging Face hacking incident. No PHASONE10841 or [big] required!
In this return episode of The AI Update, our regular hosts break down the mid-2026 security…
What Deserves to Survive in Security featuring Ray Espinoza
Ray Espinoza cut false positives 80% at Workday and alert volume 70% at Atmosera, fighting alert fatigue years before the industry had a name for it.
Now leading information security at Elite Technology, after building eBay's first global security event response team and Workday's first customer-f…
محرك بحث البودكاست
يمكنك استخدام موقعنا الإلكتروني للبحث في ملفات podcast3,826,114وحلقات196,009,690حسب الأشخاص أو الأماكن أو المواضيع.
الاستثمار في المعرفة يحقق أفضل عائد، ولذلك أستمع إلى البودكاست.
‐ Benjamin "Llamacorn" Franklin
تعديل
شكراً على مساعدتنا في الحفاظ على قاعدة بيانات البودكاست مُحدَّثة.
