Out of the Woods: The Threat Hunting Podcast

By Out of the Woods: The Threat Hunting PodcastBusiness Technology

Out of the Woods: The Threat Hunting Podcast episodes

November 22, 2022 S1 Ep11: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 21 November 2022
144 Cybersecurity Statistics for 2022
https://www.humanize.security/blog/news/144-cybersecurity-statistics-for-2022

US Charges BEC Suspects with Targeting Federal Health Care Programs
https://bleepingcomputer.com/news/security/us-charges-bec-suspects-with-targeting-federal-health-care-programs/

Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
https://www.cisa.gov/uscert/ncas/alerts/aa22-320a

FTX Hacker Dumps Prices of ETH Using Stolen Coins, Revealing Another Vulnerability of Crypto
https://vulcanpost.com/809402/ftx-hacker-dumps-prices-of-eth-using-stolen-coins/

Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware
https://thehackernews.com/2022/11/microsoft-warns-of-hackers-using-google.html

Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-21-2022.pdf

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
37 min
November 15, 2022 S1 Ep10: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 14 November 2022

Australia Sets Up 100-Strong Permanent 'Operation' to Target Hackers
https://www.itnews.com.au/news/australia-sets-up-100-strong-permanent-operation-to-target-hackers-587691

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign
https://thehackernews.com/2022/11/over-15000-wordpress-sites-compromised.html

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images
https://thehackernews.com/2022/11/worok-hackers-abuse-dropbox-api-to.html

Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland
https://thehackernews.com/2022/11/microsoft-blames-russian-hackers-for.html

US Health Dept warns of Venus ransomware targeting healthcare orgs
https://www.bleepingcomputer.com/news/security/us-health-dept-warns-of-venus-ransomware-targeting-healthcare-orgs/

Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-14-2022.pdf

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
35 min
November 08, 2022 S1 Ep9: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 7 November 2022

Insurance Giant Settles NotPetya Lawsuit, Signaling Cyber Insurance Shakeup
https://www.cyberscoop.com/insurance-giant-settles-notpetya-lawsuit/

Robin Banks Phishing Service for Cybercriminals Returns with Russian Server
https://thehackernews.com/2022/11/robin-banks-phishing-service-for.html

Researchers Uncover 29 Malicious PyPI Packages Targeted Developers with W4SP Stealer
https://thehackernews.com/2022/11/researchers-uncover-29-malicious-pypi.html

Microsoft Accuses China of Abusing Vulnerability Disclosure Requirements
https://therecord.media/microsoft-accuses-china-of-abusing-vulnerability-disclosure-requirements/?web_view=true

Everything you need to know about the OpenSSL 3.0.7 Patch (CVE-2022-3602 & CVE-2022-3786)
https://www.malwaretech.com/2022/11/everything-you-need-to-know-about-the-openssl-3-0-7-patch.html

Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2011-7-2022.pdf

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
40 min
November 01, 2022 S1 Ep8: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 31 October 2022

Twilio Reveals Another Breach from the Same Hackers Behind the August Hack
https://thehackernews.com/2022/10/twilio-reveals-another-breach-from-same.html

New Azov Data Wiper Tries to Frame Researchers and BleepingComputer
https://www.bleepingcomputer.com/news/security/new-azov-data-wiper-tries-to-frame-researchers-and-bleepingcomputer/

Researchers Uncover Stealthy Techniques Used by Cranefly Espionage Hackershttps://thehackernews.com/2022/10/researchers-uncover-stealthy-techniques.html
New Open-Source Tool Scans Public AWS S3 Buckets for Secrets
https://www.bleepingcomputer.com/news/security/new-open-source-tool-scans-public-aws-s3-buckets-for-secrets/

Ransomware is Being Used As a Precursor to Physical War: Ivanti
https://www.infosecurity-magazine.com/news/ransomware-precursor-to-physical/

Show Notes
https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2010-31-2022.pdf

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
36 min
October 31, 2022 S1 Ep7: [LIVE] Out of the Woods: Episode 3
To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh

Episode 3 | 3 Interesting Artifacts:

*Cybersecurity Teams are Reaching Their Breaking point. We Should All be Worried
https://www.zdnet.com/article/cybersecurity-teams-are-reaching-their-breaking-point-we-should-all-be-worried/

*blackhillsinfosec / DEFCON4
https://github.com/blackhillsinfosec/EventLogging/tree/master/DEFCON4

*TactiKoolSec / OTHF
https://github.com/TactiKoolSec/OTHF

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
1 hr 28 min
October 18, 2022 S1 Ep6: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 18 October 2022

Fortinet Urges Admins to Patch Bug with Public Exploit Immediately
https://www.bleepingcomputer.com/news/security/fortinet-urges-admins-to-patch-bug-with-public-exploit-immediately/

Microsoft Warns Over Unusual Ransomware Attacks
https://www.zdnet.com/article/microsoft-warns-over-unusual-ransomware-attacks/

Killnet: Don’t Underestimate the “Script Kiddies,” Experts Say
https://cybernews.com/cyber-war/killnet-dont-underestimate-script-kiddies/

Fake News, New Malware Drive Recent Attacks
https://securityboulevard.com/2022/10/fake-news-new-malware-drive-recent-attacks/

Police Tricks Deadbolt Ransomware Out of 155 Decryption Keys
https://www.bleepingcomputer.com/news/security/police-tricks-deadbolt-ransomware-out-of-155-decryption-keys/

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
35 min
October 12, 2022 S1 Ep5: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 12 October 2022

Caffeine Service Lets Anyone Launch Microsoft 365 Phishing Attacks
https://www.bleepingcomputer.com/news/security/caffeine-service-lets-anyone-launch-microsoft-365-phishing-attacks/

Hundreds of Microsoft SQL Servers Backdoored with New Malware
https://www.bleepingcomputer.com/news/security/hundreds-of-microsoft-sql-servers-backdoored-with-new-malware/

Fortinet Warns of Active Explotation of Newly Discovered Critical Auth Bypass Bug
https://thehackernews.com/2022/10/fortinet-warns-of-active-exploitation.html

New Report Uncovers Emotet's Delivery and Evasion Techniques Used in Recent Attacks
https://thehackernews.com/2022/10/new-report-uncovers-emotets-delivery.html

Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities
https://thehackernews.com/2022/10/microsoft-issues-improved-mitigations.html

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
32 min
October 05, 2022 S1 Ep4: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 04 October 2022

Office Exploits Continue to Spread More Than Any Other Category of Malware
https://www.helpnetsecurity.com/2022/09/29/office-exploits-continue-to-spread/

Top Issues Driving Cybersecurity: Growing Number of Cybercriminals, Variety of Attacks
https://www.helpnetsecurity.com/2022/09/30/top-issues-driving-cybersecurity/

New Malware Backdoors VMware ESXi Servers to Hijack Virtual Machines
https://www.bleepingcomputer.com/news/security/new-malware-backdoors-vmware-esxi-servers-to-hijack-virtual-machines/

Detecting Fileless Malware Infections is Becoming Easier
https://www.helpnetsecurity.com/2022/10/03/detecting-fileless-malware-infections/

Microsoft Confirms New Exchange Zero-Days are Used in Attacks
https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-new-exchange-zero-days-are-used-in-attacks/

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

34 min
September 27, 2022 S1 Ep3: Out of the Woods: Top 5 Threat Hunting Headlines
Top 5 Threat Hunting Headlines - 27 September 2022

NSA Reveals “Hackers’ Playbook” for OT Attacks
https://www.infosecurity-magazine.com/news/nsa-reveals-hackers-playbook-for/

Firing Your Entire Cybersecurity Team? Are You Sure?
https://thehackernews.com/2022/09/firing-your-entire-cybersecurity-team.html

Russian Sandworm Hackers Pose as Ukrainian Telcos to Drop Malware
https://www.bleepingcomputer.com/news/security/russian-sandworm-hackers-pose-as-ukrainian-telcos-to-drop-malware/

Microsoft Teams Stores Auth Tokens as Cleartext in Windows, Linux, Macs
https://www.bleepingcomputer.com/news/security/microsoft-teams-stores-auth-tokens-as-cleartext-in-windows-linux-macs/

Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall – Patch Released
https://thehackernews.com/2022/09/hackers-actively-exploiting-new-sophos.html

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
36 min
September 19, 2022 S1 Ep2: [LIVE] Out of the Woods: Episode 2
To be fully interactive by asking questions and giving feedback and opinions in real-time via our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh

Episode 2 Headlines:
*GIFShell Attack Creates Reverse Shell Using Microsoft Teams GIFs
https://www.bleepingcomputer.com/news/security/gifshell-attack-creates-reverse-shell-using-microsoft-teams-gifs/

*SharkBot Malware Reappears in the Google Play Store
https://www.extremetech.com/mobile/339364-sharkbot-malware-reappears-in-the-google-play-store

*Ransomware Gangs Switching to New Intermittent Encryption Tactic
https://www.bleepingcomputer.com/news/security/ransomware-gangs-switching-to-new-intermittent-encryption-tactic/

*Lazarus APT Uses Log4j Flaw To Hack US, Canadian Energy Co’s – Cyber Experts Comment
https://informationsecuritybuzz.com/expert-comments/lazarus-apt-uses-log4j-flaw-to-hack-us-canadian-energy-cos-cyber-experts-comment/

*Bumblebee Malware Adds Post-Exploitation Tool for Stealthy Infections
https://www.bleepingcomputer.com/news/security/bumblebee-malware-adds-post-exploitation-tool-for-stealthy-infections/

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc
1 hr 28 min

About Out of the Woods: The Threat Hunting Podcast

From the publisher's feed

Intel 471's podcast with a twist! Join us for the first fully interactive threat hunting podcast where you can hang out with threat hunters from all over the world!