Typing, textGrain, NetScaler, Fortinet, Copilot, LibreOffice, Dots, Aaran Leyland - SWN #622
Summary
Host Doug White covers a suspected AI-assisted breach of South Korean banks and a new Citrix NetScaler zero-day, emphasizing the need to secure peripheral systems and manage rapid patching cycles. The episode also details a critical Fortinet FortiMail vulnerability, a prompt injection flaw in GitHub Copilot CLI, and a code execution risk in LibreOffice. Guest Aaron Leland analyzes a sophisticated Chinese espionage campaign targeting AI policy experts via MFA-relaying phishing, recommending phishing-resistant passkeys. The show concludes with a discussion on emerging mechanical keyboard swit…
Topics discussed
Intro, Halloween banter, and InfoSec World promo
AI-assisted attacks on South Korean banks and data mapping
ThreatLocker Zero Trust and FinSec Summit promos
OpenAI TextGrain watermarks for AI-generated text
Citrix NetScaler zero-day and edge device patching fatigue
Fortinet FortiMail path traversal vulnerability
GitHub Copilot CLI prompt injection and secret leakage
LibreOffice and Apache OpenOffice code execution flaw
AI personal assistants: Meta Muse and OpenAI Dots
Aaron Leland on Chinese spy phishing of AI policy experts
Modern keyboard switch technologies and trends
Outro and subscription call to action
Listen ad-free on Castria