Episode 21: New Plugin Vulns Exploited in the Wild, an Extortion Scam and the CBP Data Breach
This week, we discuss active exploitation of a plugin vulnerability in the wild, an extortion scam hitting numerous website owners, exposure of Industrial Control Systems to attackers as well as a CBP breach affecting travelers in the United States. We also talk about an email server vulnerability and what to do in a SIM port attack. Here are approximate timestamps in case you want to jump around: 0:35 User Submitted Posts Plugin Vulnerability Seeing Attacks 4:20 An extortion scam is threatening website owners a how to protect your site 10:10 CBP breach of license plates and facial recognition data affecting US travelers 16:54 WordPress accessibility proposal 25:25 Google Cloud outage affects numerous services 26:59 State of Industrial Control Systems in Poland and Switzerland 36:00 Severe RCE in Exim mail transfer agent 37:09 What to do when SIM swapping happens to you