Hacking, AppSec, and Bug Bounty newsletter
2018-10-22 | How Amazon avoided the libssh problem, Facebook to buy cyber firm, and APT’s target managed service providers
Monday, October 22
How Amazon avoids last week's libssh problem thread by Colm MacCárthaigh.
TWEET OF THE DAY
There is an alternate universe out there where Sears moved their mail order catalog online in 1993 instead of ending it and where we are all running craftsman branded linux virtual machines in SWS. - @jspaleta
OTHER ARTICLES WE’RE READING
Healthcare.gov breach, 75,000 individuals affected
Politico breaks down Trump’s comments on the cybers from 2 separate events this past weekend.
Still no corroboration for the Bloomberg supply chain story. Director of National Intelligence Dan Coats told Cyberscoop he’s seen no evidence of tampering
No surprise: APT’s target managed service providers to gain access to their ultimate target: large companies’ data.
Facebook in the buying mood. This time, it’s not a social media upstart, but a “major cybersecurity company” first reported by The Information.
ABOUT ZERO DAILY
Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.
Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?
Have a news tip / story to highlight? We’d love to hear about it. Email: email@example.com
In a cyber governance survey of 145 corporate directors by financial advisory firm BDO, 69% said their organization isn’t impacted by GDPR.