Dutch military intelligence warns of the Chinese Coathanger RAT. Pure Storage joins the growing list of Snowflake victims. JetBrains patches a GitHub IDE vulnerability. A data broker hits the brakes on selling driver location data. Flaws in VLC Media player allow remote code execution. Patch Tuesday updates. On our Learning Layer segment, host Sam Meisenberg and Joe Carrigan continue their discussion of Joe's ISC2 CISSP certification journey, taking on Domain 8, Software Development Security. Farewell, computer engineering legend Lynn Conway.
Our 2024 N2K CyberWire Audience Survey is underway, make your voice heard and get in the running for a $100 Amazon gift card. Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
Learning Layer
On our Learning Layer segment, host Sam Meisenberg and Joe Carrigan continue their discussion of Joe's ISC2 CISSP certification journey using N2K’s comprehensive CISSP training course, CISSP practice test, and CISSP practice labs. Sam and Joe take on Domain 8, Software Development Security, and tackle the following question:
At which step of the SDLC should security considerations be first integrated?
- Functional requirements defining
- Project initiation and planning
- Testing and evaluation control
- System design specification
Selected Reading
Dutch intelligence says Chinese hacking campaign ‘more extensive’ than previously known (The Record)
Pure Storage confirms data breach after Snowflake account hack (Bleeping Computer)
Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) (Help Net Security)
GitHub phishing campaign wipes repos, extorts victims (SC Magazine)
Data broker shuts down product related to driver behavior patterns (The Record)
VLC Media Player Vulnerabilities Allow Remote Code Execution (Cyber Security News)
Microsoft June 2024 Patch Tuesday fixes 51 flaws, 18 RCEs (Bleeping Computer)
ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA (SecurityWeek)
Column: Lynn Conway, leading computer scientist and transgender pioneer, dies at 85 (LA Times)
Share your feedback.
We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.
Want to hear your company in the show?
You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
CyberWire Daily