Authentication Attacks, US Government Domains, and New Cyber Incident Disclosure Guidelines
Description
This week on Hacker And The Fed what authentication attacks might look like in a phishing resistant future, the SEC now requires companies to disclose cyber attacks, there are many more US government domains in the .com world than you might think, and other news stories from this week in cyber security.
Links from the episode:
What might authentication attacks look like in a phishing-resistant future?
The Messaging Layer Security (MLS) Protocol
https://datatracker.ietf.org/doc/html/rfc9420
List of public government managed domains that exist outside of the top-level .gov and .mil domains
https://github.com/GSA/govt-urls/blob/main/1_govt_urls_full.csv
Top level domain operator wants out of the business
https://domainnamewire.com/2023/07/26/top-level-domain-operator-wants-out-of-the-business/
Network giants unite to fight security risks
https://www.networkworld.com/article/3703233/network-giants-unite-to-fight-security-risks.html
Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches
https://thehackernews.com/2023/07/cybersecurity-agencies-warn-against.html
Norwegian government IT systems hacked using zero-day flaw
https://www.dss.dep.no/aktuelle-saker/departementer-utsatt-for-dataangrep/
Satellites Are Rife With Basic Security Flaws
https://www.wired.com/story/satellites-basic-security-flaws/
Support our sponsors:
Go to hellofresh.com/50hatf code 50hatf for 50% off plus free shipping
Get your Hacker and the Fed merchandise at hackerandthefed.com
Get your Hacker and the Fed merchandise at hackerandthefed.com