Description

Paul and Graham are joined by Joe Irvin who gives us the benefit of his experience fighting emotet. We also look at supply-chain attacks and cross-site scripting.

• UIS Service Desk: service-desk@uis.cam.ac.uk
• UIS Cyber Security pages: http://www.uis.cam.ac.uk/cybersecurity
• E-mail CERT: cert@cam.ac.uk
• Phish of the Day: https://help.uis.cam.ac.uk/service/security/stay-safe-online/phishing/phishy
• National Cyber Security Centre: https://www.ncsc.gov.uk/
• Exercise in a Box: https://www.ncsc.gov.uk/information/exercise-in-a-box
• Naked Security: https://nakedsecurity.sophos.com/
• Hot for Security: https://hotforsecurity.bitdefender.com/
• OWASP Top 10 (2017): https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdf
• OWASP Top 10 on LiL: https://www.linkedin.com/learning/learning-the-owasp-top-10
• ASUS: https://www.reuters.com/article/us-asus-cyber/asus-implements-fix-for-malware-attack-idUSKCN1R710X
• Bitlocker vulnerability: https://pulsesecurity.co.nz/articles/TPM-sniffing
• Second hand USB drives: https://www.comparitech.com/blog/information-security/secondhand-usb-drive-memory-stick-study/
• Japanese police charge 13-yr old: https://www.zdnet.com/article/japanese-police-charge-13-year-old-for-sharing-unclosable-popup-prank-online/
• Windows automatic updating changes: https://blogs.windows.com/windowsexperience/2019/04/04/improving-the-windows-10-update-experience-with-control-quality-and-transparency/#PLKYTL4ai2hMMybG.97