OVER DEZE AFLEVERING
Join our AppSec experts—Merlyn, Malcolm, MegaZone, and host Chase Abbott—as they dig into some of the latest stories shaking up the cybersecurity world. This week's AppSec Now explores an active campaign targeting Amazon EC2 instance metadata via SSRF vulnerabilities, and why that's a wider-reaching problem than you might think. We discuss Oracle's controversial handling of their cloud breach and the impact of trust in the disclosure process.
Also in the mix: malicious NPM packages deployed by North Korean hackers, a sneaky Golang malware employing "click-fix" tactics for crypto theft, and a critical Apache Parquet remote code execution bug rated CVSS 10.0—but how worried should we really be?
🔗 Relevant Links Here:
https://community.f5.com/kb/security-insights/oracle-hack-north-korean-hackers-critical-flaw-in-apache/340708
00:00 Introduction
04:01 F5 Labs: AWS EC2 SSRF
10:44 Oracle Cloud Breach
16:44 Verizon iOS App Exposure
20:23 BeaverTail Malware via NPM
24:43 Golang Ghost Malware
28:34 Apache Parquet RCE - CVSS 10 !!!
34:12 Outro
Also in the mix: malicious NPM packages deployed by North Korean hackers, a sneaky Golang malware employing "click-fix" tactics for crypto theft, and a critical Apache Parquet remote code execution bug rated CVSS 10.0—but how worried should we really be?
🔗 Relevant Links Here:
https://community.f5.com/kb/security-insights/oracle-hack-north-korean-hackers-critical-flaw-in-apache/340708
00:00 Introduction
04:01 F5 Labs: AWS EC2 SSRF
10:44 Oracle Cloud Breach
16:44 Verizon iOS App Exposure
20:23 BeaverTail Malware via NPM
24:43 Golang Ghost Malware
28:34 Apache Parquet RCE - CVSS 10 !!!
34:12 Outro
Engels
Verenigde Staten
TRANSCRIPTIE 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
OUDE AFLEVERINGEN ZOEKEN
Zoek naar eerdere afleveringen van DevCentral.
ANDERE AFLEVERINGEN IN DEZE PODCAST
Gear up for another deep dive! In this episode of AI Friday, we've got the crew—Aubrey, Joel, Byron, and Pete—ready to unpack the latest in AI technology and hardware. Join us as we break down Google's groundbreaking Ironwood TPU, exploring its impressive potential and the math behind AI accelerati…
Dive into the latest episode of AppSecNow, where we break down the Ingress Nightmare vulnerability impacting NGINX and Kubernetes environments, plus the implications of a critical CVE in Next.js, one of the most widely-used JavaScript frameworks with 9 million weekly downloads.
Join Aubrey, Chase,…
Join the DevCentral crew as we dive into groundbreaking AI research, explore how OpenAI's GPT models mimic humans, and discuss critical advancements in AI security and ethics. From Turing tests to deepfake controversies, this episode of AI Friday is packed with thought-provoking insights and practi…
Join Joel Moses, Oscar Spencer, and Matt Yacobucci as they discuss the latest news and recent developments in WebAssembly, such as Zig 0.140 and projects like running Linux inside a PDF file. This episode features special guest Nick Fitzgerald, a notable contributor to WasmTime and CraneLift, who e…
At AppWorld 2025, Buu Lam sits down with Haiyan Song, Executive Vice President of CloudOps at NetApp as well as Shawn Wormke, Vice President and General Manager, F5 NGINX. Haiyan and Shawn just wrapped up a keynote on stage and swing by the podcast booth to expand on the insights that they shared o…
Disclaimer: De podcast en de illustraties die op deze pagina zijn ingesloten, zijn afkomstig van F5 DevCentral Community, eigendom van de eigenaar en niet gelieerd aan of goedgekeurd door Listen Notes, Inc.
BEWERKEN
Bedankt voor uw hulp bij het up-to-date te houden van de podcast-database .
