# Sandbox Escape

Episode podcast teratas
Diperbarui:

A Kernel Race, SuDump, and a Chrome Garbage Collector Bug [Exploit Dev/VR]

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/a-kernel-race-sudump-and-a-chrome-garbage-collector-bug.html We start off this week with a look at in-the-wild 0days from the past seven years, before diving into some pretty awesome bugs this week …

Episode 135

Overview Ubuntu 20.04 LTS targeted at Tianfu Cup 2021 plus we cover security updates for Linux kernel, nginx, Ardour and strongSwan. This week in Ubuntu Security Updates 24 unique CVEs addressed [USN-5091-3] Linux kernel (Azure) regression 6 CVEs addressed in Bionic (18.04 LTS), Focal (20.04…

Auth Bypass, XSS, RCE and more

Authentication bypasses, SQL injection, command injection, and more in this web-exploit heavy episode. [00:09:11] Facebook v. NSO Group [00:18:14] Netsweeper PreAuth RCE [00:25:49] SaltStack authorization bypass https://github.com/saltstack/salt/blob/0b2a5613b345f17339cb90e60b407199b3d2…

Fast Fuzzing, Malicious Pull Requests, and Rust in my kernel?!

Time to rewrite Linux in Rust? Probably not, but it has landed in linux-next which we talked about. We also look at a couple interesting GitHub vulns, and talk about fuzzing. [00:00:28] Rust in the Linux Kernel https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/rust?id…

Episode 86

Overview This week we discuss the recent announcement of a long-awaited native client for 1password, plus Google Chrome experiments with anti-phishing techniques, and we take a look at security updates for OpenJDK 8, Samba, NSS and more. This week in Ubuntu Security Updates 13 unique CVEs addres…

Episode 145

Overview The Ubuntu Security Podcast is back for 2022 and we’re starting off the year with a bang💥! This week we bring you a special interview with Kees Cook of Google and the Linux Kernel Self Protection Project discussing Linux kernel hardening upstream developments. Plus we look at security upd…

Episode 385 - EA's Saudi Buyout, Apple's OpenAI Leaks, and AI Fever Dreams

Apple vs OpenAI, EA's Acquisition, SpaceX & AMD's Diverging Paths, and the Dangers of AI סטארט-אפ הפינטק שמפתח פלטפורמת AI לביטוחי נסיעות שווה כבר 500 מיליון דולרעסקת הענק הושלמה: חברת הגיימינג EA עברה לידי קרן העושר הסעודיתהחטיבה הרווחית היחידה של ספייס־אקס — ולמה המשקיעים מענישים את AMD?Apple say…

The AI Update XXIV - Zero Day : HuggingFace Hack

[Excitement].Whoa! New AI Update with Jhave and Scott on Off Center! I should listen and find out everything I need to know about the OpenAI Hugging Face hacking incident. No PHASONE10841 or [big] required! In this return episode of The AI Update, our regular hosts break down the mid-2026 security…

What Deserves to Survive in Security featuring Ray Espinoza

Ray Espinoza cut false positives 80% at Workday and alert volume 70% at Atmosera, fighting alert fatigue years before the industry had a name for it. Now leading information security at Elite Technology, after building eBay's first global security event response team and Workday's first customer-f…