BadAlloc Vulns, Gatekeeper Bypass, & More Spectre in Micro-Op Caches - ASW
This week in the AppSec News: Microsoft discloses "BadAlloc" bugs, macOS Gatekeeper logic falters, authentication issues in KDCs and ADs, Spectre gains another vector, followup on the UMN Linux kernel vulns study!
Time Stamps:
3:27 - University of Minnesota responds to Linux security patch requests
9:20 - Microsoft discloses ‘BadAlloc’ bugs affecting smart devices, industrial gear
16:30 - Apple patches macOS Gatekeeper bypass vulnerability exploited in the wild
18:00 - Authentication Related Issues
22:31 - Experian API Exposed Credit Scores of Most Americans
26:15 - Changing Security Tool Requirements in the New DevSecOps World
30 :02 - UVA Engineering Computer Scientists Discover New Vulnerability Affecting Computers Globally
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw149