two new #Intel & #ARM CPU vulnerabilities, GnuTLS MITM bug and many more news details! #Ad: security & more @Amazon: https://services.exactcode.de/amzn.cgi?index=books&keywords=security%20computer You can support my work at: https://patreon.com/renerebe https://exactcode.com/ https://t2sde.org/ https://rene.rebe.de/ 0:00 Intel Crosstalk SRBDS CVE-2020-0543 https://www.vusec.net/projects/crosstalk/ 3:00 SGAxe - How Intel SGX Fails in Practice https://sgaxe.com/ 6:00 ARM Straight-line Speculation https://developer.arm.com/-/media/Arm%20Developer%20Community/PDF/Security%20Update%2008%20June%202020/Straight-line_Speculation-v1.0.pdf 9:00 GnuTLS TLS 1.3 session resumption works without master key, allowing MITM https://gitlab.com/gnutls/gnutls/-/issues/1011 12:00 Exploit code for wormable flaw on unpatched Windows devices published online https://arstechnica.com/information-technology/2020/06/exploiting-wormable-flaw-on-unpatched-windows-devices-is-about-to-get-easier/ 14:00 Google says Iranian, Chinese hackers targeted Trump, Biden campaigns https://techcrunch.com/2020/06/04/google-china-iran-trump-biden/ 16:00 The A1 Telekom Austria Hack https://blog.haschek.at/2020/the-a1-telekom-hack.html 18:00 Honda global operations halted by ransomware attack https://techcrunch.com/2020/06/09/honda-ransomware-snake/?guccounter=1 20:00 Fake ransomware decryptor double-encrypts desperate victims' files https://www.bleepingcomputer.com/news/security/fake-ransomware-decryptor-double-encrypts-desperate-victims-files/ 22:00 Security downgrade with IMAP STARTTLS leads to information leakage https://www.mozilla.org/en-US/security/advisories/mfsa2020-22/#CVE-2020-12398 24:00 Legacy LVFS S3 bucket takeover and CVE-2020-10759 fwupd signature verification bypass https://github.com/justinsteven/advisories/blob/master/2020_fwupd_dangling_s3_bucket_and_CVE-2020-10759_signature_verification_bypass.md 26:00 online learning’s moment. For universities, it’s a total mess https://www.wired.co.uk/article/university-online-coronavirus 30:00 Two vulnerabilities in Zoom could lead to code execution https://blog.talosintelligence.com/2020/06/vuln-spotlight-zoom-code-execution-june-2020.html 32:00 DOD's third attempt to implement IPv6 isn't going well https://www.zdnet.com/article/dods-third-attempt-to-implement-ipv6-isnt-going-well/ 34:00 Datenbank-Code der Corona-Warn-App angeschaut https://twitter.com/alvar_f/status/1267705319280586753 36:30 Hulu will cut off older Roku players after June 24th https://www.engadget.com/hulu-will-cut-off-older-roku-players-after-june-24th-233911999.html 38:00 weakening of Earth’s magnetic field https://www.esa.int/Applications/Observing_the_Earth/Swarm/Swarm_probes_weakening_of_Earth_s_magnetic_field