Dennis Fisher and Mike Mimoso Discuss Patch Tuesday, Facebook's ThreatExchange and More

Dennis Fisher and Mike Mimoso discuss Patch Tuesday, the Facebook ThreatExchange platform, Mozilla’s extension signing plan, plus questions from readers! Music by Chris Gonsalves Download: digitalunderground185.mp3...

Dennis Fisher and Mike Mimoso Discuss the Apple and Adobe Zero Days, and More

Dennis Fisher and Mike Mimoso talk about all of the zero days that were dropped this week on Adobe and Apple, the Oracle backdoor drama and the upcoming Kaspersky Security Analyst Summit in Cancun. Then, Dennis calls Brian Donohue to talk about the wonders of the Blackhat movie and Brian’s dog...

Dennis Fisher and Mike Mimoso Discuss Encryption, the Microsoft-Google Feud and More

Dennis Fisher and Mike Mimoso discuss the security news of the past week, including the proposed changes to the CFAA, David Cameron’s encryption comments, the NSA’s quasi-apology regarding Dual EC and the Microsoft-Google disclosure feud. Music by Chris Gonsalves Download: digitalunderground180.m...

Dennis Fisher and Mike Mimoso Discuss the Windows Schannel Vulnerability and Wirelurker

Mike Mimoso and Dennis Fisher talk about the Windows Schannel vulnerability and whether it’s ripe for mass exploitation, as well as the WireLurker attack and why Apple hasn’t addressed it. Download: digitalunderground171.mp3 Music by Chris Gonsalves...

Joomla Component com_prayercenter SQL Injection (CVE-2008-6429)

An SQL injection vulnerability has been reported in Mike Leeper Com Prayercenter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-6814

The CVE-2014-6814 entry concerns the Android app Sentinels Randomizer (com.mikehipps.sentinelsrandomizer) version 1.1.0, which does not verify X.509 certificates when connecting to SSL servers. This misconfiguration allows man‑in‑the‑middle attackers to spoof servers and obtain sensitive informat...

Dennis Fisher and Mike Mimoso Discuss the Apple iCloud Mess, Potential Home Depot Breach

Dennis Fisher and Mike Mimoso discuss the Apple iCloud mess, why the company waited until now to extend its 2FA system to the cloud, and the fallout from the possible Home Depot data breach. Download: digitalunderground165.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso Wrap Up Black Hat and DEF CON 2014

Dennis Fisher and Mike Mimoso look back on the news from the last week in Las Vegas at Black Hat and DEF CON, including the Blackphone rooting, the Computrace research and the more upbeat mood at the conferences this year. Download: digitalunderground162.mp3 Music by Chris Gonsalves Image via Bla...

Dennis Fisher and Mike Mimoso Discuss This Week's Microsoft Takedown

Dennis Fisher and Mike Mimoso discuss the Microsoft malware takedown, its legal and security implications and the revelation of a massive financial fraud campaign in Brazil. Download: digitalunderground157.mp3 Music by Chris Gonsalves...

CGIScript.net csPassword.CGI 1.0 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4887/info CGIScript.net provides various webmaster related tools and is maintained by Mike Barone and Andy Angrick. A vulnerability has been reported in the csPassword.cgi script developed by CGIScript.net that discloses...

Dennis Fisher and Mike Mimoso Discuss Edward Snowden, NSA and the new OpenSSL Vuln

Dennis Fisher and Mike Mimoso discuss the changes in the year since the first stories broke regarding Edward Snowden and the NSA and the new OpenSSL vulnerability.​ Download: digitalunderground155.mp3 Music by Chris Gonsalves...

New vulnerabilities in Google Maps plugin for Joomla

Hello 3APA3A! Last year I wrote about multiple vulnerabilities in Google Maps plugin. After my informing the developer fixed them, but this year I found new vulnerabilities. These are Denial of Service and Insufficient Anti-automation vulnerabilities in Google Maps plugin for Joomla...

Dennis Fisher and Mike Mimoso Discuss Heartbleed, Apple's Patches and the DBIR Report

Dennis Fisher and Mike Mimoso discuss the Apple OSX and iOS patches, the continuing OpenSSL Heartbleed soap opera and the Verizon DBIR report. Download: digitalunderground152.mp3...

Dennis Fisher and Mike Mimoso Discuss Heartbleed and Source Boston

Dennis Fisher and Mike Mimoso discuss–what else–the OpenSSL heart bleed vulnerability and the doings at the Source Boston conference this week. Download: digitalunderground149.mp3...

Dennis Fisher and Mike Mimoso Discuss Day Two at the RSA Conference

Dennis Fisher and Mike Mimoso run down the news from day two of the RSA Conference, including the new FBI director’s speech and preview Trusty Con. Download: digitalunderground147.mp3...

Dennis Fisher and Mike Mimoso Discuss Day One at the RSA Conference 2014

Dennis Fisher and Mike Mimoso discuss the happenings on day one of the RSA Conference, including Art Coviello’s keynote and what makes the NSA mad. Download: digitalunderground146.mp3...

Dennis Fisher and Mike Mimoso Preview RSA 2014

Dennis Fisher and Mike Mimoso preview next week’s RSA conference, discuss the sessions they’re looking forward to covering and what the fallout from the NSA controversy will be during the week...

Dennis Fisher and Mike Mimoso Discuss the Target Breach, SCADA Security and the NSA

Dennis Fisher and Mike Mimoso talk about the big security stories of the last couple of weeks, including the developments in the Target data breach, the president’s speech on NSA surveillance reforms and SCADA security woes...

SA-CONTRIB-2013-097 - OG Features - Access bypass

This module enables you to enable and disable bundles of functionality for individual Organic groups. In order to provide this functionality, this module must override all menu callbacks available in the system, in order to delegate access based on the current Organic group you are contextually i...

Dennis Fisher and Mike Mimoso Discuss Bug Bounties, Bitcoin and the Apple Report

Dennis Fisher and Mike Mimoso talk about the major stories from the last couple of weeks, including the changes to the Microsoft bug bounty program, the new Internet bug bounty, the Apple transparency report and a new paper on a weakness in Bitcoin. Download: digitalunderground133.mp3...