Episode 191: Shifting Compliance Left with Galen Emery of Chef

A researcher presented the results of a year-long effort to reverse engineer John Deere hardware to run a version of the DOOM first person shooter. He also discovered a number of security flaws along the way. The post UPDATE DEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, Competition appeared first on The Security Ledger with…Read the whole entry… »Related StoriesFeel Good Ukraine Tractor Story Highlights Ag Cyber RiskDEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber RiskCyber Attack Halts Production at Ag Equipment Maker AGCO Fendt …

For full details on this research, see the X-Force Red whitepaper “Controlling the Source: Abusing Source Code Management Systems”. This material is also being presented at Black Hat USA 2022. Source Code Management (SCM) systems play a vital role within organizations and have been an afterthought in terms of defenses compared to other critical enterprise […]
The post Controlling the Source: Abusing Source Code Management Systems appeared first on Security Intelligence. …

Workplace productivity software giant Slack on Friday forced password resets for a tiny fraction of its users after the discovery of a security flaw that exposed Slack credentials.
Slack’s security response team alerted users to the issue via email and followed up with a blog post warning about the risk of passwords leaking to a skilled attacker.
read more …