Meris Breakdown.pdf

Security Now! #836 discusses several security topics, including the return of REvil, a 0-day exploitation of an old Windows IE MHTML component, and a JavaScript-based Spectre attack on Chrome. A new 0-day attack against Office documents is being exploited in targeted attacks, using a vulnerability in Microsoft's MHTML component. Microsoft has warned of the attack and is working on a patch.

A recent survey by HP's Wolf Security group found that 91% of IT professionals feel pressured to compromise on security due to the need for business continuity during the COVID-19 pandemic, and 83% believe that working from home has created a "ticking time bomb" for corporate security incidents. The survey also found that younger office workers are more likely to circumvent existing security controls and safeguards.

Academic researchers have designed a Spectre-based side-channel attack, called "Spook.js", which can be used to leak sensitive data in Spectre-style speculative execution attacks on Chrome and Chromium browsers. The attack uses JavaScript to overcome the Site Isolation protections added to these browsers.

The podcast also touches on the evolution of Internet DoS attacks, which have recently culminated in the largest ever seen RPS DDoS attack.