⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️ Support ThreatWire → https://patreon.com/threatwire @endingwithali → Twitch: https://twitch.tv/endingwithali Twitter: https://twitter.com/endingwithali Everywhere else: https://links.ali.dev/ [❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire 0:00 - Intro 0:13 - US Cyber Trust Mark is Now Official 2:24 - Apple’s Unfixable Vulnerability 4:23 - Another Python Supply Chain Attack 5:50 - Outro LINKS 🔗 Story 1: US Cyber Trust Mark is Now Official https://www.whitehouse.gov/briefing-room/statements-releases/2022/10/11/fact-sheet-biden-harris-administration-delivers-on-strengthening-americas-cybersecurity/ https://docs.fcc.gov/public/attachments/FCC-24-26A1.pdf https://www.jdsupra.com/legalnews/fcc-launches-u-s-cyber-trust-mark-4990595/ https://cyberscoop.com/fcc-cyber-trust-mark/ 🔗 Story 2: Apple’s Unfixable Vulnerability Apple Mitigation: https://developer.apple.com/documentation/xcode/writing-arm64-code-for-apple-platforms#Enable-DIT-for-constant-time-cryptographic-operations https://www.bleepingcomputer.com/news/security/new-gofetch-attack-on-apple-silicon-cpus-can-steal-crypto-keys/ https://arstechnica.com/security/2024/03/hackers-can-extract-secret-encryption-keys-from-apples-mac-chips/ https://gofetch.fail/ https://www.cyberkendra.com/2024/03/gofetch-flaw-exposes-cryptographic-key.html 🔗 Story 3: Another Python Supply Chain Attack https://checkmarx.com/blog/over-170k-users-affected-by-attack-using-fake-python-infrastructure/ ____________________________________________ Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.