Security Weekly News Episode #175 – December 21, 2021

Subscribe to all of our shows and mailing list by visiting: https://securityweekly.com/subscribe

1. Conti Group, log4j2, log4shell, Joker App, Zoho 0-Day, & haveibeenpwned Passwords – 02:00 PM-02:30 PM

Description

This week Dr. Doug talks: Conti, log4j2, log4shell redux, the return of the Joker, Your Car’s warranty is expired, HaveIbeenpwned, Zoho, Microsoft, and more! All this, the Expert Commentary of Jason Wood, and Doug’s farewell to 2021 on this edition of the Security Weekly News!

Hosts

Doug White @dougwhitephd Professor at Roger Williams University

Conti Ransomware Gang Has Full Log4Shell Attack Chain – Third Log4J Bug Can Trigger DoS; Apache Issues Patch – Malicious Joker App Scores Half-Million Downloads on Google Play – Robocalls More Than Doubled in 2021, Cost Victims $30B – UK govt shares 585 million passwords with Have I Been Pwned – FBI: State hackers exploiting new Zoho zero-day since October – Microsoft Urges Customers to Patch Recent Active Directory Vulnerabilities –

Jason Wood @Jason_Wood Founder; Primary Consultant at Paladin Security

Facebook Bans Spy-for-Hire Firms for Targeting 50K People –