Recently, some interesting security news has occurred, and two specific developments are the main discussion in this episode. Trojan Source is a newly discovered tactic that can be used to hide malicious code and execute something completely unexpected, even when the source code appears to be syntactically correct. In addition, CISA recently mandated a large number of CVE’s to be patched in the very near future, which will likely have ramifications even outside of the United States. Also, Jay and Joao also discuss the recently released Fedora 35, which is a distribution that has a large presence on the workstations that administrators use.

Episode downloads

• OGG version
• MP3 version
• MP3 version (low)

Episode-specific Links

• Trojan Source
• CISA (BOD) 22-01 Directive (ZDNet Coverage)
• CISA (BOD) 22-01 Directive (cisa.gov)
• CISA (BOD) 22-01 Vulnerabilities Catalog