Paying Peanuts for Insecure Web-Apps

Bill and Gavin discuss several stories which highlight the challenges around cyber hygiene. This episode also features a discussion on vulnerability prioritization with Tenable's Kevin Flynn.Developer Password Story - https://net.cs.uni-bonn.de/fileadmin/user_upload/naiakshi/Naiakshina_Password_Study.pdfRansomware stats dropping but it is as profitable as ever https://www.darkreading.com/endpoint/ransomwares-new-normal/d/d-id/1334172Decade old Vulnerability Found in WinRAR - https://arstechnica.com/information-technology/2019/03/nasty-winrar-bug-is-being-actively-exploited-to-install-hard-to-detect-malware/Firm is run out business after a breach- https://www.wired.com/story/exactis-data-leak-fallout/20 Million stolen - https://www.wired.com/story/mexico-bank-hack/Wordpress Vulnerability https://www.theregister.co.uk/2019/03/14/wordpress_rce_vuln_v_5_1_0_previous/Carnegie Mellon CVSS Paper https://insights.sei.cmu.edu/cert/2018/12/towards-improving-cvss.html