Zoom Flaws, 'Zombie' win32k Bug, & Inputscope - ASW #102

Apr 7, 2020 · 35 min · 169.2 MB

0:00-35:09

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

This week in the Application Security News, Zoom is gaining lots of attention for flaws and serves as a good exercise in threat modeling and communicating security trade-offs, Popular Digital Wallet Exposes Millions to Risk in Huge Data Leak from the usual suspect of an S3 bucket for an unusual amount of sensitive data, 12k+ Android apps contain master passwords, secret access keys, secret commands in not-so-secret client-side code identified by a research tool Inputscope, and more!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://wiki.securityweekly.com/ASWEpisode102