Got suggestions, complaints, or feedback?

Tell us at [email protected] or reach out on Twitter:       

https://twitter.com/sweaney      

Cory Sabol Twitter

https://twitter.com/kneppjon

Aaron Moss Twitter

https://twitter.com/secureideas

Join our Professionally Evil Slack Team at www.professionallyevil.com

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

Episode Links:

https://www.zdnet.com/article/bored-ape-yacht-club-instagram-takeover-sees-around-3-million-in-nfts-sail-away/

https://www.zdnet.com/article/hack-dhs-homeland-securitys-first-bug-bounty-turns-up-122-vulnerabilities/

https://infotechlead.com/security/zoom-paid-1-8-mn-under-bug-bounty-program-on-hackerones-platform-72007

https://www.forbes.com/sites/bobzukis/2022/04/18/the-sec-is-about-to-force-cisos-into-americas-boardrooms/?sh=4a318b868a90

https://www.darkreading.com/careers-and-people/-isc-launches-entry-level-cybersecurity-course

https://www.vice.com/en/article/k7w9mv/tmobile-hacked-bought-data-mandiant

https://krebsonsecurity.com/2022/04/raidforums-get-raided-alleged-admin-arrested/

https://www.techspot.com/news/94346-magnetic-media-storage-sees-record-breaking-sales-ransomware.html

A group claims to be fighting Russia in the name of Ukraine using a botnet.  And wants you to join them.  Kevin and Nathan discuss what could possibly go wrong. 

Got suggestions, complaints, or feedback?

Tell us at [email protected] or reach out on Twitter:       

twitter.com/sweaney      

twitter.com/RonJonArod

twitter.com/hotdogggitty

twitter.com/secureideas

Episode Links:

FBI Warns Of Preliminary Russian Cyber Activity Against American Companies

White House Says Reports of an American Cyberwar With Russia Are Greatly Exaggerated

DIY Volunteers Are Repairing Ukraine’s Destroyed Internet Infrastructure

War Is Calling Crypto’s ‘Neutrality’ Into Question

Ransomware Payments, Demands Rose Dramatically in 2021

This is how much the average Conti hacking group member earns a month

Researcher uses Dirty Pipe exploit to fully root a Pixel 6 Pro and Samsung S22

Pandemic Leaves Firms Scrambling for Cybersecurity Specialists

Join our Professionally Evil Slack Team at www.professionallyevil.com

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

Got suggestions, complaints, or feedback?

Tell us at [email protected] or reach out on Twitter:       

twitter.com/sweaney      

twitter.com/darth_kevin     

twitter.com/secureideas

Join our Professionally Evil Slack Team at www.professionallyevil.com

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

Tell us at [email protected] or reach out on Twitter:       

twitter.com/sweaney      

twitter.com/darth_kevin     

twitter.com/secureideas

Join our Professionally Evil Slack Team at www.professionallyevil.com

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

Got suggestions, complaints, or feedback?

Tell us at [email protected] or reach out on Twitter:       

twitter.com/sweaney      

twitter.com/darth_kevin     

twitter.com/secureideas

Join our Professionally Evil Slack Team at www.professionallyevil.com

Where can I find Carrie Randolph?

twitter.com/karn3ia

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

Episode Links:

wordle-ad-trackers-privacy-new-york-times

ukrainian-government-and-banks-hit-by-new-wave-of-cyberattacks

/ukraine-defense-ministry-ddos-russia-conflict-de-escalation

the-fog-of-information-war-looms-large-over-the-ukraine

threat-intelligence/new-york-opens-joint-security-operations-center-in-nyc

dhs-creates-cyber-safety-review-board-log4j-fbi-nsa

google-account-hacks-dropped-half-two-step-authentication

Vishing Makes Phishing Campaigns Three-Times More Successful

pentagon-says-nintendo-generation-has-weak-skeletons

Carjackers are using Apple AirTags to track high-end vehicles to steal them later

BBC: Apple AirTags - 'A perfect tool for stalking'

Most asked questions about AirTags

Got suggestions, complaints, or feedback?

Tell us at [email protected] or reach out on Twitter:       

https://twitter.com/sweaney      

https://twitter.com/darth_kevin     

https://twitter.com/secureideas

Join our Professionally Evil Slack Team at www.professionallyevil.com

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

The IRS Drops Facial Recognition Verification After Uproar https://www.wired.com/story/irs-drops-facial-recognition-verification/

https://www.bloomberg.com/news/articles/2022-01-28/treasury-weighing-id-me-alternatives-over-privacy-concerns

ODIN - Homeless Management Information System https://www.vice.com/en/article/wxdp7x/tech-firm-facial-recognition-homeless-people-odin (This is vice, so take that into consideration...)

Amazon Recognition moratorium to law enforcement https://www.reuters.com/technology/exclusive-amazon-extends-moratorium-police-use-facial-recognition-software-2021-05-18/

Good outline of privacy concerns with facial recognition technology (FRT) https://www.asisonline.org/security-management-magazine/monthly-issues/security-technology/archive/2021/december/facial-recognition-in-the-us-privacy-concerns-and-legal-developments/

Atlanta - Operation Shield – Public and Private cameras accessible to police https://atlantapolicefoundation.org/programs/operation-shield/

Cities with the most cameras https://www.comparitech.com/studies/surveillance-studies/the-worlds-most-surveilled-cities/

Got suggestions, complaints, or feedback?

Tell us at [email protected] or reach out on Twitter:       

twitter.com/sweaney      

twitter.com/darth_kevin     

twitter.com/secureideas

Join our Professionally Evil Slack Team at www.professionallyevil.com

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

Links to today's topics:

Liquor stores stuck with limited stock since Christmas cyber attack against Sask. liquor authority | CBC News

microsoft-warns-disk-wiping-malware-targeting-ukraine

white-house-instructs-agencies-cybersecurity-strategy-memo-cisa

Moving the U.S. Government Toward Zero Trust Cybersecurity Principles

mexican-cartels-recruit-drug-mules-on-grand-theft-auto-online

senate-weighs-bill-to-protect-satellites-from-getting-hacked

florida-considers-deepfake-ban

sweden-launches-psychological-defense-agency-to-counter-disinformation

apple-scrubs-support-pages-all-mentions-controversial-csam image scanning feature

Bored Ape Yacht Club Artist Says Compensation 'Definitely Not Ideal'

Where can you find Tim Medin?

twitter.com/TimMedin

linkedin.com/in/timmedin/

[email protected]

redsiege.com/discord

Where can you find Jason Wood?

twitter.com/Jason_Wood

linkedin.com/in/tadaka/

[email protected]

Got suggestions, complaints, or feedback?

Tell us at [email protected] or reach out on Twitter:       

twitter.com/sweaney      

twitter.com/darth_kevin     

twitter.com/secureideas

Join our Professionally Evil Slack Team at www.professionallyevil.com

Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!

FTC Log4j Warning

https://www.ftc.gov/news-events/blogs/techftc/2022/01/ftc-warns-companies-remediate-log4j-security-vulnerability

Federal Trade Commission Act

https://www.ftc.gov/enforcement/statutes/federal-trade-commission-act

FTC Equifax Fines

https://www.ftc.gov/enforcement/cases-proceedings/refunds/equifax-data-breach-settlement

Principle of Subsidiarity

https://en.wikipedia.org/wiki/Subsidiarity

Got suggestions, complaints or feedback?

Tell us at [email protected] or reach out on Twitter:

https://twitter.com/sweaney

https://twitter.com/darth_kevin

https://twitter.com/secureideas

our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!