Beers with Talos Ep. #55: Live from San Diego!

Beers with Talos BWT Podcast Ep. 55 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded June 12, 2019 — God knows why, but we bring you another live episode from the Talos Threat Research Summit at Cisco Live...

Consumers Urged to Junk Insecure IoT Devices

More than 2 million connected security cameras, baby monitors and other IoT devices have serious vulnerabilities that have been publicly disclosed for more than two months – yet they are still without a patch or even any vendor response. Security researcher Paul Marrapese, who disclosed the flaws...

Beers with Talos Ep. #52: I don't trust you because I care

Beers with Talos BWT Podcast Ep. 52 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded April 26, 2019 - Since Craig decided to skip the podcast today, we decided to invite one of Austin’s top actual security...

News Wrap: Amazon Echo Privacy, Facebook FTC Fines and Biometrics Regulation

Data privacy has been an outstanding theme this past week, and the Threatpost team discussed the biggest privacy related news. In the news wrap podcast for April 26, the team discussed the backstories behind several reports from the week, including: Facebook potentially facing Federal Trade...

Maintaining Privacy in the Cloud [Podcast Discussion]

Not long ago I joined Brian Contos, CISO and VP of Product Innovation at Verodin, for one of his Verodin Cybersecurity Effectiveness Podcasts. It’s been about 10 years since I worked with Brian at Imperva when he was the Chief Security Strategist. Back then, he was the one traveling the world,...

Beers with Talos Ep. #51: Sea Turtles yeeting packets

Beers with Talos BWT Podcast Ep. No. 51 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded April 12, 2019 — Today, we rip through a few other things to spend most of our time discussing Sea Turtle, the lates...

Cyber Security Week in Review (March 22)

Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign up for our Threat Source newsletter here. Top headlines this week Norwegian aluminum company...

CVE-2018-20121

Podcast Generator 2.7 has stored cross-site scripting XSS via the URL addcategory parameter...

Cross site scripting

Podcast Generator 2.7 has stored cross-site scripting XSS via the URL addcategory parameter...

CVE-2018-20121

CVE-2018-20121 – Podcast Generator 2.7 suffers a stored cross-site scripting (XSS) flaw exploitable via the addcategory parameter in the /?p=admin&do=categories&action=add endpoint. The vulnerability arises from unsafely handling user-supplied input, enabling injection of arbitrary web script/HTM...

CVE-2018-20121

Podcast Generator 2.7 has stored cross-site scripting XSS via the URL addcategory parameter...

Beers with Talos Ep. #48: Loaders or trojans, plus an RSA preview

Beers with Talos BWT Podcast Ep. 48 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. March 1, 2019 - This is a super short episode. We are trying to get it out in time for RSA and Matt is MIA today. We are covering...

Cyber Security Week in Review (March 1)

Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign up for our Threat Source newsletter here. Top headlines this week Drupal patched a “highly...

Beers with Talos Ep. #47: Privacy, Underwear, and Arias

Beers with Talos BWT Podcast Ep. 47 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Ep. 47 show notes: Recorded Feb. 15, 2019 We are joined by special guest Michelle Dennedy, a vice president and the chief privacy...

CB Customer Spotlight: Q&A with MSD of Mt. Vernon’s William Stein

For the past 28 years, William Stein, Certified Education Technology Leader, has served as the Director of Information Systems for the Metropolitan School District MSD of Mt. Vernon in Indiana. Stein uses Carbon Black solutions to protect the K-12 school district’s data by responding to emerging...

Threatpost News Wrap Podcast For Feb. 22

Threatpost editors Lindsey O’Donnell and Tom Spring discuss the biggest news of the week ended Feb. 22, including a report about flaws in password managers, and a 19-year-old flaw found in WinRAR. The Threatpost team also discussed an upcoming webinar on Feb. 27 at 2 p.m. ET. Patrick Hevesi of...

Podcast Generator Cross-Site Scripting Vulnerability

Podcast Generator is a set of free podcast publishing scripts written in PHP. A cross-site scripting vulnerability exists in Podcast Generator version 2.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Podcast Generator 2.7 Cross Site Scripting

Stored Cross-site Scripting Vulnerability in Podcast Generator 2.7 Information -------------------- Advisory by Netsparker Name: Stored Cross-site scripting in Podcast Generator 2.7 Affected Software: Podcast Generator Affected Versions: 2.7 Homepage: http://www.podcastgenerator.net/ Vulnerabilit...

Beers with Talos Ep. #45: SoHo attacks, IoT devices, and the cesspool setting

Beers with Talos BWT Podcast Ep. 45 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Ep. 45 show notes: Recorded Jan. 18, 2019 We have an extended roundtable today even more than usual because we accidentally...

Wallarm to Sponsor AppSec Cali

If you are a SecOps or DevOps professional on the west coast you can not miss the premier California application security event: AppSec California, January 22–25th in Santa Monica. Here are testimonials from the previous AppSec Cali events: “I'm looking forward to AppSecCali next week. Last year...