When your errors have errors...

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)

Or the video archive on Youtube

 

• [00:03:00] Critical Security Issue identified in iTerm2 as part of Mozilla Open Source Audit
•  iTerm2 Patch
• [00:11:24] Windows Error Reporting Manager arbitrary file move Elevation of Privilege (CVE-2019-1315)
•  James Forshaw  A Link To The Past.pdf
• [00:16:12] CVE-2019-8697: MacOS System Escalation via Disk Management  https://www.zerodayinitiative.com/blog/2019/10/3/cve-2019-8697-macos-system-escalation-via-disk-management
• [00:20:20] Apple Zero Day Exploited in Bitpaymer Campaign
• [00:25:50] BrokenStrokes: On the (in)Security of Wireless Keyboards
• [00:31:53] PS2 Yabasic Exploit
•  Exploit Writeup
• [00:40:12] Imperva Breach Report
[00:49:23] EU-coordinated risk assessment of 5G network security  https://eeas.europa.eu/delegations/united-states-america/68637/eu-coordinated-risk-assessment-5g-network-security_me [00:55:11] Measuring Attack Surface Reduction in the Presence of Code (Re-)Randomization  https://arxiv.org/abs/1910.03034
• [01:04:46] Finding Security Threats That Matter: An Industrial Case Study
• [01:16:47] An Extended Survey on Vehicle Security
[01:21:56] Zydis 3.0 Released (x86-64 disassembler library)  https://github.com/zyantific/zydis
• [01:25:54] IDA 7.4
• [01:28:38] Government interference in Australia's premier cybersecurity conference is a worry
• [01:33:16] uBlock dev build rejected
• [01:39:19] Ken Thompson's Unix Password
• [01:44:04] Humble Bundle