No CVE and No Accountability - PSW #851
About this episode
Alright, so we dove deep into some pretty wild stuff this week. We started off talking about zip files inside zip files. This is a variation of old-school zip file tricks, and the latest method described here is still causing headaches for antivirus software. Then we geeked out about infrared signals and the Flipper Zero, which brought back memories of the TV-B-Gone. But the real kicker was our discussion on end-of-life software and the whole CVE numbering authority mess. Avanti's refusal to issue a CVE for their end-of-life product sparked a heated debate about cybersecurity accountability and conflicts of interest.
Show Notes: https://securityweekly.com/psw-851
Get every episode summarized
Each time Paul's Security Weekly (Video) publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Paul's Security Weekly (Video)
The AI "Vulnpocolypse" Is Real? - PSW #922
Paul's Security Weekly (Video)
AI Makes All Bug Shallow? - PSW #921
Paul's Security Weekly (Video)
What Is A Router? (And all things AI) - PSW #920
Paul's Security Weekly (Video)
Scanning The Internet with Linux Tools - PSW #919
Paul's Security Weekly (Video)