4.25 - Dependency Hell

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, David Boyd and Justin Bollinger. Stories  Title: Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps URL: https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/ Author: Ax Sharma   Title: FTC warns legal action against companies who fail to mitigate Log4Shell URL: https://therecord.media/ftc-warns-legal-action-against-companies-who-fail-to-mitigate-log4shell/ Author: Catalin Cimpanu   Title: Threat actors can simulate iPhone reboots and keep iOS malware on a device URL: https://therecord.media/threat-actors-can-simulate-iphone-reboots-and-keep-ios-malware-on-a-device/ Author: Catalin Cimpanu