C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 29/20

- Schalk Peach

  1. Zoom fixes zero-day RCE bug affecting Windows 7, more updates soon [Ax Sharma, Bleeping Computer]
  2. VMWare XPC Client validation privilege escalation vulnerability [VMWare]
  3. NIST Password Guidelines: What You Need to Know [Josh Horwitz, Infosecurity Magazine]
  4. DigiCert ICA Replacement [DigiCert]
  5. Mozilla Joins Apple, Google in Reducing TLS Certificate Lifespans [Ionut Arghire , Security Week]
  6. The Great Twitter Hack
    1. Twitter reveals that its own employee tools contributed to unprecedented hack [ Nick Statt, The Verge]
    2. Hackers Convinced Twitter Employee to Help Them Hijack Accounts [Joseph Cox, Vice]
  7. EU Court of Justice Deems Privacy Shield Unlawful [Dan Raywood, Infosecurity Magazine]
  8. Top documentary films about hacking and cybersecurity [Vera Iurcu, Avira]