Security Vibe Check: Which Malware Are You?
summary
A quick quiz maps security habits to four real supply‑chain incidents: the xz‑utils backdoor hidden in release tarballs that achieves remote code execution (v5.6.0/5.6.1, CVSS 10.0, discovered Feb–Mar 2024); a Go typo‑squat that published a cached malicious module (first published Nov 2021, unnoticed for years) that gives attackers remote access; Heartbleed (introduced 2011, disclosed Apr 2014) leaking private keys and costing roughly $500M; and a compromised GitHub Action that prints secrets to build logs, exposing tens‑to‑hundreds of thousands of projects.
AI-written summary · about
chapters (8)
- 0:00Security Vibe Check
- 1:08Quiz and team intro
- 8:18Quiz results revealed
- 9:04You are XZ Utils attack
- 15:10You are BB typo squat
- 18:23You are Heartbleed exploit
- 25:29You are TJ Actions attack
- 30:29Closing and resources
related talks
46mThe Rise of Malware Within the Software Supply Chain
01h 02mPrompt-Jacking: The Rise of a New Supply Chain Risk
42mXZ Backdoor: Navigating The Complexities Of Supply Chain Attacks Detected By Accident
46mThe Supply Chain Conundrum: Why Traditional Application Security Is...
48mThe Five Most Dangerous New Attack Techniques
41mHow to protect your software project from supply chain security threats
34mStranger Danger: Finding Security Vulnerabilities Before They Find You!
18mIT Security – Don’t let Open Source Software become the next menace