Josh, AJ and Vaughan ask themselves why Oracle are denying the breach, despite Vaughan having first hand insights into organizations with compromised cloud credentials and other researchers and security companies coming forward with the same. After that, Josh provides some insights from the first day and a half of the SANS AI summit for the latest and greatest AI cyber security trends.

Support the show

Josh is joined by Vaughan and a refreshed AJ after his holiday. Using their experience on the frontlines of incident response, they talk about the security implications of using signal that people might not have considered, the Oracle breach (or not, as they still dispute it) and the impact on real Oracle users and an update from last weeks GitHub supply chain compromise see's Coinbase get compromised and rapidly contain the threat.

Support the show

Josh, Robbie and Vaughan look at developments in the threat landscape this week, including an SSRF campaign from 4000s unique IPs, an SSRF vulnerability in ChatGPT's infrastructure and the GitHub supply chain attack that leaked secrets.

Support the show

Josh, Robbie and AJ discuss the recent attack on the Polish space agency, a developer who tried to enact revenge when he was fired, a win for the good guys and the 2022 LastPass breach's involvement in crypto heists.

Support the show

Welcome back! For season 2 of the Cyber Space podcast. Four cyber security experts unpick some key developments in the threat landscape, including unpicking the Bybit hack where 1.5 trillion dollars of Ethereum was stole, how AI models leaked 12000 passwords and secrets as well as taking a look at recent shifts in the US cyber intelligence programs against Russia.

Support the show

On this episode of Cyber Space, Josh tells the others about a reckless penetration tester who decided he should hack local businesses in order to create business for himself. He's currently facing jail time for it, so where is the line between responsible disclosure of vulnerabilities and outright egotistical attacks?

Support the show

The Empirical Training gang dive into a sophisticated attack where a state sponsored actor managed to compromise a Wifi network from the other side of the world, before they take a closer look at some reports on the similarities and shared capabilities of Ransomware actors.

Support the show

Join Robbie, AJ and Josh as they take questions from the community on what it takes to be a SOC analyst, the moment they felt like they made it! And the moment's they are humbled...

We then dive into the T-Mobile breach, reported to be compromised by Chinese state-sponsored actors and wonder if this is a sign of things to come in a geo-political world with increased tensions? Or if this was just business as usual. 

Support the show

All four of the Empirical Trainers sit down to discuss the latest threats they've been facing in their SOCs. 

Securing S3 buckets has been an issue since they existed, and new developments have seen an increase in success for S3 bucket sniping and namesquatting, stealing data or uploading malicious files. 

A new zombie botnet is on the lose, thousands of TPlink devices being compromised by a new remote code execution attack.

Support the show

There's a lot to be scared about in cyber security, ransomware actors, payment of ransoms, 23 and me genome mapping company breach, and critical incidents coming in at 5:25pm.

Josh and Robbie, former SOC analyst together and present day builder of SOCs, and strategist of security products, to try and scare each other with real stories about cyber security in the news, and from the frontlines.

Support the show