A Deceptive Dependabot, Insecure JWT, CISA Wants HBOMs, OpenSSF's Critical Projects - ASW #257
Attackers impersonate Dependabot commits, an alg of "none" plagues a JWT, CISA calls for hardware bills of materials, OpenSSF lists its critical projects, Exim (finally! maybe?) has some patches, bug bounties and open source projects, and more!
Show Notes: https://securityweekly.com/asw-257
You May Also Like
The Stack Overflow Podcast
The Stack Overflow Podcast
Monde Numérique (Actu Tech)
Jerome Colombain
TBPN
John Coogan & Jordi Hays
Artificial Intelligence Masterclass
AI Masterclass
The Times Tech Podcast
The Sunday Times
Mark Tilbury
Mark Tilbury Fan
Applelianos
Applelianos
Hack és Lángos
Hack és Lángos
Jack Hopkins
Jack Hopkins
Security Weekly Podcast Network (Audio)
Security Weekly Productions
The Stack Overflow Podcast
The Stack Overflow Podcast
Monde Numérique (Actu Tech)
Jerome Colombain
TBPN
John Coogan & Jordi Hays
Artificial Intelligence Masterclass
AI Masterclass
The Times Tech Podcast
The Sunday Times
Mark Tilbury
Mark Tilbury Fan
Applelianos
Applelianos
Hack és Lángos
Hack és Lángos
Jack Hopkins
Jack Hopkins
Security Weekly Podcast Network (Audio)
Security Weekly Productions
Community discussion