HackableYou Podcast

Hello and welcome back, it's great to have you here. 

In this episode's Cyber News we cover Imperial Kitten/Tortoiseshell using fake Facebook profiles to masquerade as Aerobics instructors in order to exploit defence aerospace contractors, some positive news on the money saved via the No More Ransom movement and we also discuss how an infamous ransomware gang have been hit by ransomware themselves...

In the topic of the week, we delve into the world of USB attacks and go over the 4 types of USB attacks with examples and discuss USB attack defences. 

Lastly in Secrets from the SOC we go over what an Old School SOC would do and compare that to how a New School SOC operates. Which one are you working in?

As always we would love to hear from you, please get in touch: [email protected]

== TIMESTAMPS ==

Cyber News: 02:24

Topic of the Week: 14:34

SFTS: 22:48

In this episode we look into cyber news including; Kaseya supply chain ransomware attacks, Chinese hackers exploiting another 0day in a Solarwinds solution, and the critical Microsoft patch dubbed "PrintNightmare".

In our topic of the week, we dive into the realm of Password Attacks looking at both active and passive attacks as well as the defences.

As always in our exclusive segment Secrets from the SOC, we provide you with some practical insight into some great APIs you can hook into to help your SOC investigations. 

We would love to hear your feedback, please get in contact at [email protected]

Enjoy this episode!!

NOBELIUM Microsoft Compromise, Code Signing Attacks, File Hashing

You’re listening to the HackableYou Podcast.

In this episode we report on Microsoft’s ongoing research into the Nobelium hacking group's activities, a data beach impacting Mercedes-Benz and more Web scraped LinkedIn data up for sale.

The topic of the week touches on the subject of Code Signing, attacks, and countermeasures.

Lastly, in Secrets from the SOC we discuss the use of file hashing and how you can use it in your role as a security analyst.

Thanks for tuning in and we hope you enjoy!

Timestamps:

Cyber News: 2:50

Topic: 17:21

SFTS: 26:35

Alert Logic Cloud Migration Webinar - https://tinyurl.com/WebinarCloudMigration

In this episode of the HackableYou Podcast, we highlight top cyber news including JBS Foods' ransom payment, TrickBot coder's 10-year jail sentence, and the FBI purpose-built encrypted device network deliberately created to catch criminals leading to tonnes of seized drugs and arrests.

In Topic of The Week, we provide our top tips for a Capture The Flag exercise and how you can sharpen your approach to the mystery vulnerable boxes. 

Lastly, in Secrets from The SOC, we give you sound advice on what to expect and how to work with Law Enforcement. 

As always, we LOVE hearing from you, please get in touch and ask us questions or tell us stories at [email protected]

Washington Police Ransom, Living off the Land, Hacking Labs

Welcome back to another episode of the HackableYou Podcast. In this episode we mention the Washington Police Dept Babuk Ransomware attack, Passwordstate password manager breached and stolen passwords and the Emotet stolen emails that have been uploaded to HIBP.

Our topic of the week is one of Ed's favorites as we discuss "Living off the Land" and provide a great Red .vs Blue insight.

In our exclusive segment, Secrets from The SOC we show and tell our 1st and current hacking labs all stuff that you can do at home for FREE!

We hope you enjoy it!

=== TIMESTAMPS ===

Cyber News: 01:22

Topic of the Week: 14:33

SFTS: 27:06

Our 1st Birthday giveaway is now live! 

http://bit.ly/HBYgiveaway

In this episode, we tuck into cyber news relating to a DNS vulnerability hosted on a vast amount of IoT devices around the world, the results of a recent study on cybersecurity awareness, and the infamous Facebook breach exposing 533million users' data via web scraping. 

The Topic of the Week takes the Facebook Breach into more detail looking into Web Data Scraping at a deeper level. 

Lastly, in our exclusive segment #SFTS we tackle how to solve complex problems that come your way during a SOC investigation and we discuss a couple of models you could use! 

As always, thank you for listening! 

HackableYou Team

=== Timestamps ===

Cyber News: 01:30

Topic of the Week: 14:14

STFS: 25:31

HAPPY 1ST BIRTHDAY HACKABLEYOU! 

Join us as we celebrate our 1st Podcast since starting the podcast. In the cyber news, we discuss the Ubiquiti Whistle-blower, malicious crypto-mining docker containers, and another Apple iOS 0day vulnerability that is actively being exploited in the wild.

In Topic of the Week Alex leads us through the complex technology behind Deep Fake with a cyber threat focus.

Last, but not least in Secrets from the SOC we discuss the difference between detection and prevention systems and why there is a use-case for both. 

GIVEAWAY! Make sure you follow our socials and our website for details on the BIRTHDAY GIVEAWAY for your chance to win some amazing prizes including HackableYou swag. 

Time Stamps:

Cyber News: 06:44

Topic of the Week: 15:33

SFTS: 22:44

We would love to hear from you. Get in touch at [email protected]

Guess whos back? Back again...

HackableYou is back with another awesome episode full of cybersecurity news, a topic of the week, and our Secrets from the SOC.

We report on the Teen responsible for the Twitter hacks prison sentence, the MoD incident report leaks, and the new variant of Mirai Botnet targeting unpatched routers and IoT. 

Topic of the week dives into a more human element of all of us and talks about what COVID remote working means for your work routine and what you have learnt over the last year.

Last but not least, in #SFTS we give you our view on a Springtime SOC cleanup of your processes, feeds and strategy.

Please enjoy! 

---- TIMESTAMPS ----

Cyber News: 01:33

Topic of the Week: 17:08

SFTS: 28:04

We'd love to hear from you! Get in touch at [email protected]

In this episode of the HackableYou Podcast:

We look at the ex-CEO of SolarWinds blame for the hack on an intern with a weak password, the Malaysia Airlines 9 year-long data breach, and the new critical Microsoft Exchange vulnerability actively being exploited by Chinese hackers.

In Topicpic of The Week, we debate the idea that passwords are not here to stay and what the concept of Passwordless authentication means for the future.

Lastly in our exclusive segment, Secrets from the SOC we discuss the importance of daily and routine standups or huddles when working in high-performing security teams and operations centers. 

Timestamps:

Cyber News: 02:34

Topic of The Week: 13:52

SFTS: 22:54

CVE Details:

CVE-2021-26855 is a server-side request forgery (SSRF) vulnerability in Exchange that allowed the attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

CVE-2021-26857 is an insecure deserialization vulnerability in the Unified Messaging service. Insecure deserialization is where untrusted user-controllable data is deserialized by a program. Exploiting this vulnerability gave HAFNIUM the ability to run code as SYSTEM on the Exchange server. This requires administrator permission or another vulnerability to exploit.

CVE-2021-26858 is a post-authentication arbitrary file write vulnerability in Exchange. If HAFNIUM could authenticate with the Exchange server then they could use this vulnerability to write a file to any path on the server. They could authenticate by exploiting the CVE-2021-26855 SSRF vulnerability or by compromising a legitimate admin’s credentials.

CVE-2021-27065 is a post-authentication arbitrary file write vulnerability in Exchange. If HAFNIUM could authenticate with the Exchange server then they could use this vulnerability to write a file to any path on the server. They could authenticate by exploiting the CVE-2021-26855 SSRF vulnerability or by compromising a legitimate admin’s credentials.