AI hates us all, Binance, OpenSSH, Apple, WordPress, DNS, Scams, Josh Marpet and more - SWN #631
Summary
Hosts Doug White and Josh Parmiter discuss the $6.3 billion Binance heist, highlighting social engineering and malware vectors. They cover a critical OpenSSH vulnerability affecting Alpine Linux, CISA’s addition of Apple and WordPress flaws to its KEV catalog, and the importance of DNS hygiene. The episode also addresses Google’s controversial AI policy for K-12 schools, the persistence of legacy technology in critical infrastructure, and the challenges of enforcing security policies in the workplace.
Topics discussed
Introduction and episode overview
Host banter and Government Security Summit promo
Binance $6.3B heist via social engineering
OpenSSH 'arsehole' vulnerability in Alpine Linux
Apple improper auth flaw and CVSS scoring critique
WordPress core TOCTOU flaw and patching advice
Policy enforcement challenges: The 'Dr. Gonzo' story
DNS hygiene and stale record risks
Scams, digital self-defense, and education
ThreatLocker zero trust advertisement
Josh Marpet: Legacy tech in FAA and critical infrastructure
Discussion on ancient industrial technology layers
Google AI policy for K-12 schools and corporate ethics
Outro and subscription call to action
Listen ad-free on Castria