DiscoverSecurity SerengetiSS-NEWS-154 - Salt Typhoon and MS MFA Brute Forcing
SS-NEWS-154 - Salt Typhoon and MS MFA Brute Forcing

SS-NEWS-154 - Salt Typhoon and MS MFA Brute Forcing

Update: 2024-12-16
Share

Description

This week we discuss Salt Typhoon and the terrible idea of backdoors (and I mis-remember the backdoor discussion in 2008 - encryption vs. telcos!) and the Microsoft MFA brute forcing.  


Article 1 - Salt Typhoon forces FCC's hand on making telcos secure their networks
Supporting Articles:
China's Salt Typhoon recorded top American officials' calls, says White House
US alleges China hacked calls of 'very senior' political figures, official says
US lawmakers seek answers on alleged Salt Typhoon breach of telecom giants
Wyden legislation would mandate FCC cybersecurity rules for telecoms
Wiretap Telecom


Article 2 - Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts


If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Comments 
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

SS-NEWS-154 - Salt Typhoon and MS MFA Brute Forcing

SS-NEWS-154 - Salt Typhoon and MS MFA Brute Forcing

David Schwendinger and Matthew Keener