This week the guys do a post-conference wrap-up and discuss Drupal vulnerabilities, the new Canadian breach notifications, email hijacking attacks, webstresser, and spying on you with your Alexa.

Bsides Vancouver

RSA

Topic 2 – Canadian Federal Data Breach Reporting Regulations

https://www.tripwire.com/state-of-security/latest-security-news/canadian-government-unveils-new-data-breach-regulations/

Topic 3 – Drupal and its many recent vulnerabilities

https://thehackernews.com/2018/04/drupal-cryptocurrency-hacking.html

https://thehackernews.com/2018/04/drupal-site-vulnerability.html

https://thehackernews.com/2018/04/drupal-vulnerability-exploit.html

https://thehackernews.com/2018/04/drupalgeddon3-exploit-code.html

https://threatpost.com/ransomware-attack-hits-ukrainian-energy-ministry-exploiting-drupalgeddon2/131373/

Topic 4 – Email Hijacking Attacks

https://www.bleepingcomputer.com/news/security/hackers-hijack-ongoing-email-conversations-to-insert-malicious-documents/

https://www.zdnet.com/article/this-phishing-trick-steals-your-email-and-then-fools-your-friends-into-downloading-malware/

Topic 5 – Webstresser Takedown

https://thehackernews.com/2018/04/ddos-for-hire-hacker.html

Topic 6 – Alexa Spying

https://www.wired.com/story/amazon-echo-alexa-skill-spying/

https://threatpost.com/researchers-hacked-amazons-alexa-to-spy-on-users-again/131401/