Hacker And The Fed

This week on Hacker And The Fed we sit down with Bill Gardner, professor and Chair Department of Cyber Forensics & Security at Marshall University. Bill offers insight into the professional and academic path into the industry and the future of cybersecurity.

Links from the episode:

Follow Bill Gardner:

Twitter: https://twitter.com/oncee

Linkedin: https://www.linkedin.com/in/304blogs/

Marshall University Prospective Students

Two papers written by Bill Gardner

“I Did What I Believe Is Right”: A Study of Neutralizations among Anonymous Operation Participants

Social Engineering in Non-Linear Warfare

Support this episode's sponsors:

Drata: Get 10% off and waived implementation fees at drata.com/partner/hacker-fed

DeleteMe: Visit JoinDeleteMe.com/FED and use promo code: FED20

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss fake Google advertisements, law firms under attack from cyber criminals, and the Whitehouse announcing a new national security strategy.

Support this episode's sponsors:

Drata: Get 10% off and waived implementation fees at drata.com/partner/hacker-fed

DeleteMe: Visit JoinDeleteMe.com/FED and use promo code: FED20

Links from the episode:

twitter.com/doctorow/status/1628948906657878016

thehackernews.com/2023/03/cybercriminals-targeting-law-firms-with.html?m=1

twitter.com/dcuthbert/status/1631302488996364288/photo/1

whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/

whitehouse.gov/wp-content/uploads/2023/03/National-Cybersecurity-Strategy-2023.pdf

nbcnews.com/politics/politics-news/major-us-marshals-service-hack-compromises-sensitive-info-rcna72581

twitter.com/nol_tech/status/1629910222746578945

abc7news.com/atm-scam-tap-card-chase-bank-function/12905397/

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss a leaked ransomware negotiation, how Twitter's new verification system may improve security, and the NSA releases its best practices for securing your home network.

Support this episode's sponsor, Drata. For 10% off and waived implementation fees visit drata.com/partner/hacker-fed.

Links from the episode:

pwndefend.com/2023/02/15/lockbit-3-0-and-royal-mail-chats-published/

dice.com/career-advice/cybercriminals-increase-recruiting-tech-and-it-pros-across-the-darknet

gizmodo.com/facebook-instagram-verified-elon-musk-was-right-twitter-1850139933

media.defense.gov/2023/Feb/22/2003165170/-1/-1/0/CSI_BEST_PRACTICES_FOR_SECURING_YOUR_HOME_NETWORK.PDF

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we update a story from a few episodes ago about a woman driving with a suspicious eavesdropping device near the embassies in Paris, Credit Suisse suffers a insider threat attack, an old attack methodology is updated to steal cryptocurrency, a hacker utilizes screen-capturing malware to cherry-pick their victims, regulators propose a rule to have cyber educated board members, Hector receives a phishing email that turns out to be a much larger issue, and finally Hector pays off his losing Super Bowl bet.

Links from the episode:

francetvinfo.fr/faits-divers/escroquerie-aux-sms-de-l-assurance-maladie-les-suspects-volaient-les-numeros-de-telephone-depuis-leur-voiture_5665943.html

efinancialcareers.com/news/2023/02/credit-suisse-employee-data-leak

blog.phylum.io/phylum-discovers-revived-crypto-wallet-address-replacement-attack

thehackernews.com/2023/02/hackers-targeting-us-and-german-firms.html

cfr.org/blog/walk-and-chew-gum-cisos-communicating-boards-have-speak-their-language

venturebeat.com/security/4-misconceptions-about-data-exfiltration/amp/

bleepingcomputer.com/news/security/namecheaps-email-hacked-to-send-metamask-dhl-phishing-emails/

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed Reddit suffers a phishing attack, the FBI offers "Ritz Carlton" level customer service, Texas bans TikTok on state owned devices, and a researcher documents the methodology of finding a major network flaw.

Links from the episode:

reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/

govconwire.com/2022/10/bryan-vorndran-outlines-tenets-of-fbi-role-in-cyber-ecosystem/

beckershospitalreview.com/legal-regulatory-issues/fbi-aiming-to-protect-give-ritz-carlton-level-customer-service-to-companies-that-report-cyberattacks.html

gov.texas.gov/news/post/governor-abbott-announces-statewide-plan-banning-use-of-tiktok

eaton-works.com/2023/02/06/toyota-gspims-hack/

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And The Fed we discuss how Search Engine Ads are being used to spread malware through "malvertising". We also cover the impact of a breach involving data for over 20,000 individuals stolen from a firm that aggregates public records and sells background checks online.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss the FBI's takedown of Hive, the Ransomware group with over 100 million in ransom payments. We also talk about the FBI's insider threat brochure, giving companies indicators on what to look for internally. And finally, Hector asks Chris some questions about the FBI.

Links from the episode:

justice.gov/opa/pr/us-department-justice-disrupts-hive-ransomware-variant

fbi.gov/file-repository/insider_threat_brochure.pdf

cisa.gov/insider-threat-cyber

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed Hector makes some predictions of the hacks we will see in 2023. We also discuss bug bounty hunters, how they're not getting paid what they deserve and why they may take their exploits to the dark web. We touch on another big API data leak and Hector tells a story of a hack he did on Super Bowl Sunday. And finally we help a listener with spoofed calls and text messages.

T-Mobile Filed Form 8-K with the US SEC

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker and the Fed we discuss a variety of recent news stories, including a report of a messaging service selling access to user data, bootleg network devices being sold through certified vendors, Gmail offering end-to-end encryption, lessons learned from a not so secure encrypted messaging application, cell phone software that was stolen and made public, and a password problem at a major US executive department.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur

This week on Hacker And Fed we discuss Twitter's data leak, explaining APIs and how to better protect ourselves. We also touch on the Russian hacking crew "Cold River" and answer some listener questions.

--

For more information on Chris and his current work visit naxo.com

Follow Hector @hxmonsegur