12: Gimme F5

<p>In this week’s episode, we take a look at the recent critical vulnerabilities in F5, which scored a perfect 10 CVSS score, and Kev sheds some light on what made it such a perfect storm.&nbsp;</p><p>We also have a little think about why companies with the most security tools and platforms in place feel the least secure. Does more always mean better?</p><p>Next, we debate the fact that there’s surely no debate around changing names like ‘blacklist’ and ‘whitelist’ for far more logical and inclusive terminology. Approve and deny lists, anyone?&nbsp;</p><p>And what do £54m in cash, a <em>lot </em>of drugs, a torture chamber, and an encrypted phone system have in common? Let us –&nbsp;or the NCA –&nbsp;tell you. And no, it’s not a really great party.&nbsp;</p><p><strong>F5 vulnerability:</strong></p><p><a href="https://www.helpnetsecurity.com/2020/07/06/exploit-cve-2020-5902/" rel="noopener noreferrer" target="_blank">https://www.helpnetsecurity.com/2020/07/06/exploit-cve-2020-5902/</a></p><p><strong>IBM security technology report:</strong></p><p><a href="https://www.zdnet.com/article/the-more-cybersecurity-tools-an-enterprise-deploys-the-less-effective-their-defense-is/" rel="noopener noreferrer" target="_blank">https://www.zdnet.com/article/the-more-cybersecurity-tools-an-enterprise-deploys-the-less-effective-their-defense-is/</a></p><p><strong>NCA cracks EncroChat:</strong></p><p><a href="https://www.independent.co.uk/news/uk/crime/encrochat-phone-network-encryption-organised-crime-uk-arrests-police-a9597501.html" rel="noopener noreferrer" target="_blank">https://www.independent.co.uk/news/uk/crime/encrochat-phone-network-encryption-organised-crime-uk-arrests-police-a9597501.html</a></p>