On this week's episode of Pwned, Justin and Zack are joined by Eric and Randy, two operators from our penetration testing team. This is another long episode and we are spending that time to learn everything about how our team uses white hat techniques to poke, prod, and punch into various systems. They will be discussing the tactics, techniques, and procedures used by adversaries how they simulate attacks, from creating code that will give them credentials to walking in a building and plugging in a device. You will also learn the difference is between penetration testing and vulnerability scans and how Eric and Randy do their best to find vulnerability scan reports to prove the value of a true penetration test.  Sidenote, yes, I said Petaflop and I meant Petabyte and I'll forever live with this mistake - Zack

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: https://nuharborsecurity.com

Facebook: https://www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: https://www.linkedin.com/company/nuharbor/

Instagram: https://www.instagram.com/nuharborsecurity/

On this week’s episode of Pwned Breach of the Week, we are checking out dating data that found itself on the market, unfortunately it was not interested in starting a new relationship. The data breach resulted in numerous online dating services finding their client information on the dark web for sale to the highest bidder. In an age of increasing online dating, this type of breach can be expensive, revealing, and in some cases, quite embarrassing.  Justin provides some helpful tips in how services can test systems prior to a breach to protect them and Zack professes his love for coffee and bagels.  As always, we'd love to hear your feedback and hear your breach stories.

You can find more breaches at the privacy rights clearing house: https://privacyrights.org/data-breaches

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: https://nuharborsecurity.com

Facebook: https://www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: https://www.linkedin.com/company/nuharbor/

Instagram: https://www.instagram.com/nuharborsecurity/

You would be hard pressed to find a cyber security company that isn't marketing its artificial intelligence capabilities. If you believe the hype, you probably think that AI can block zero day attacks, find the bad guys, and bring them to justice. The reality of what AI can and can't do, is quite different from what you may be seeing in advertisements.  While it's not a silver bullet, AI does have a role in cyber security. Can it catch things that the good ol' fashioned human being would otherwise miss? Can it actually stop attacks before they happen? On this weeks episodes Justin is laying out what artificial intelligence is, what it can do, and why you should be cautious when you are looking to employ AI systems to protect your organization.

We're also including an in depth blog post to allow you to dig deeper into episode and learn more about artificial intelligence: https://nuharborsecurity.com/vulnerability-ai

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: https://nuharborsecurity.com

Facebook: https://www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: https://www.linkedin.com/company/nuharbor/

Instagram: https://www.instagram.com/nuharborsecurity/

On this week’s Breach of the Week, we learn the importance of measure twice, cut once. Why are we sharing this timeless carpentry advice? Well, for one, it is great advice to ensure you don't waste construction materials but for our purposes, the breach this week is about an email sent out with the best of intentions and instead releasing significant PII data.  As if you need another reason to check your email, we also talk about an email involving Nicholas Cage and yet another email that revealed who was pulling their weight at a big corporation.  We highlight these mistakes because it is so easy that anyone could mistakenly do this, proving yet again human error is a significant vulnerability. So, check that email twice before sending, measure that board twice before cutting, and stay off our Breach of the Week!

You can find more breaches at the privacy rights clearing house: https://privacyrights.org/data-breaches

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: https://nuharborsecurity.com

Facebook: https://www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: https://www.linkedin.com/company/nuharbor/

Instagram: https://www.instagram.com/nuharborsecurity/

Welcome to our first GigaByte episode!  In this long episode, we are taking a big dive into information and cyber security industry trends with two of our Trusted Security Advisors, Chad, and Travis. They share what they have seen over the last few months, what changed with COVID-19 and what the future holds for the information security industry. As the industry has adapted, so has NuHarbor (in fact, this entire podcast was recorded remotely) and Chad and Travis explain how they have had to use their expertise to help information security professionals protect their organizations in a landscape that changes by the day.  Chad and Travis also provide their thoughts on what changes are going to stick around, including significant increases in people working remotely and the challenges of using company devices, on personal networks, to log into company networks. How can companies prepare for this security challenge? Does the future of work involve more opportunities to stay in your pajamas? And will we ever have to go into a grocery store again? Tune in and find out!

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: www.nuharborsecurity.com

Facebook: www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: www.linkedin.com/company/nuharbor/

Instagram: www.instagram.com/nuharborsecurity/

This week we're mixing it up with our Breach of the Week: The Case of the Missing CD-ROM. Yes, CD-ROM. Zack and Justin discuss the theft of a CDROM with PII and ponder why anyone would want to steal a CD-ROM and if they would even have a drive to get the data off in the first place. A real whodunit.  Was it the Smithsonian, a confused child, or a Pintrest fail?  Tune in to find out. Also, we've already hit 1000 listens for the new season!  Thank you to everyone that listens to and enjoys our podcast!  Unfortunately, we're not satisfied with a mere 1000 listens and are challenging you to subscribe, like, share, rate, and review and get your fellow infosec and cyber security friends to listen. Next week we've got our first long episode where we talk to two of our Trusted Security Advisors about trends in the cyber security industry and how COVID-19 has flipped everything on its head.

You can find more breaches at the privacy rights clearing house: https://privacyrights.org/data-breaches

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: www.nuharborsecurity.com

Facebook: www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: www.linkedin.com/company/nuharbor/

Instagram: www.instagram.com/nuharborsecurity/

This week we're exploring Tactics, Techniques and Procedures (TTP) related to COVID-19 threats. As with many disasters, cyber criminals are hoping to exploit people who are trying to find helpful information online and may be more likely to open sketchy links or email attachments. Therefore, the best ways to protect your organization is to understand what these threats look like, how they work, and who may be behind them, all of which requires that you understand the TTPs being used. So, check out this episode to learn about TTPs for COVID-19 threats.  If you are enjoying these episodes, have ideas around topics, or would like to be on a future episode, contact us at pwned @ nuharborsecurity.com

Episode Transcript: PWNED Transcripts - S2E4 - TTPs for COVID-19 Threats

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: www.nuharborsecurity.com

Facebook: www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: www.linkedin.com/company/nuharbor/

Instagram: www.instagram.com/nuharborsecurity/

Covid-19 related TTPs:

Malware / Attack

Phishing

Geography / Industry

Japan

Lure

Coronavirus

Info

Microsoft Word with malicaious VBA macro.  Installs Emotet via Powershell.

Malware / Attack

Phishing

Geography / Industry

United States

Lure

"COVID-19 — Now Airborne, Increased Community Transmission", appears to be from the CDC.gov (headers manipulated)

Info

Originally identified by Cofense, When victims click on the embedded link, they are redirected to a Microsoft Outlook login page, and upon entering their legitimate credentials, are further redirected to a legitimate website of the CDC.

Malware / Attack

Phishing

Geography / Industry

Italy

Lure

"Coronavirus: informazioni importanti su precauzioni", appears to be from “Dr. Penelope Marchetti,” an employee of the WHO in Italy.

Info

Emails contain Microsoft Office Documents with VBA macros that installs Trickbot Malware that steals personal information or installs additional malware.

Malware / Attack

Phishing

Geography / Industry

South Korea

Lure

Varying subject lines that claim to information about South Korea's response to COVID-19.

Info

Emails contain Microsoft Word documentation that installs the North Korea's BabyShark Malware.

Malware / Attack

Phishing

Geography / Industry

United States

Lure

Email claiming to provide victims with information on global FedEx operations while the COVID-19 outbreak continues.

Info

Emails contained an attachment titled “Customer Advisory.PDF. exe” that, when opened, infected the victim with the Lokibot malware

On today's episode we're talking COOP, or Continuity of Operations Planning. It's estimated that as many as 50 percent of businesses impacted by a disaster will fail and that number is even higher for small businesses. You're likely operating some form of a COOP plan due to COVID-19 and you may not have even realized it and hopefully you had a plan before everything hit the fan.  Unfortunately, we're seeing business close up shop because they were not prepared.

COOP at it's most basic level is planning for how you'll maintain your businesses critical functions before, during, and after a major disruption.  What exactly does it cover?  Some basic things to plan for include how you'll communicate and access data, how staff will work, what systems must remain operational, how long you can function in a contingency mode, organizing your teams, delegating authority, and how you'll get back to normal operations.

What can you do to prepare? FEMA has developed two online courses specific to COOP planning during a pandemic.

IS 520: Introduction to Continuity of Operations Planning for Pandemic Influenzas and IS 522: Exercising Continuity Plans for Pandemic Course. 

These courses provide a great intro to the COOP process and can help build a solid foundation of training and experience.

There are a number of different standards to help assess and guide your COOP planning efforts and many organizations that can assist you from federal agencies to private sector consultants.  Continuity of Operations Planning is a critical process that will help to ensure that your organization can survive any disaster.  If you need assistance with your cyber COOP planning, contact us at NuHarbor Security today.

As always, thank you to our sponsor, Nuharbor security your end to end provider of security services and solutions If your looking for smart security solutions for your business and a security partner that actually gives a *BEEP*, visit us at www.nuharborsecurity.com

This week we explore security orchestration, automation and response (SOAR) and how managed security service providers (MSSP) can leverage SOAR to better secure your organization.  We'll discuss the challenges of traditional security monitoring and the benefits of working with an MSSP that integrates SOAR in its practice to be better prepared to respond to real events and understand how traditional methods of monitoring cyber security events can create complacency and miss real world incidents. We'll also talk about the different providers of security services and why it's important that you pick a provider that specializes in protecting organizations from cyber attacks.

In this episode, we'll cover:

* Understanding SOAR technology and how it can boost your security presence

* The challenges of alert fatigue and complacency

* Understanding the limitation of SOAR and how MSSP providers can optimize its use

* Ensuring that your organization understand the difference in security resources available and how some may conflict

* Picking the tools that will best protect you

Episode Transcript: Pwned Transcripts - S2 E3 -SOAR FOR MSSP Transcript

Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust.

Website: www.nuharborsecurity.com

Facebook: www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: www.linkedin.com/company/nuharbor/

Instagram: www.instagram.com/nuharborsecurity/

Without question, we've entered a new era of web-based meetings. This has become how most companies are conducting business with the current pandemic. And I suspect this is going to remain even active after we're all back at our offices. One thing that's come up with the proliferation of web meetings is the failure to secure those meetings. It's gotten bad enough that the FBI field office in Boston actually sent out an advisory today talking about the risks of meetings being infiltrated. So, what are those risks? First, as many of us have experienced over the last two weeks, people jumping into meetings that don't belong in there, and in worst case, scenarios yelling obscene and noxious things that's obnoxious for everyone listening in, and it also makes you, the host, look like you don't know what you're doing. Another important risk to consider is that if you have people inside those meetings that don't belong there, they're listening in on your business and other activities. You wouldn't allow strangers to hang out in your conference room in real life, don't let it happen online. So, what can you do? First, try to avoid open URL meetings. Don't send them out to mass emails, don't post them on social media. If you're gonna have a meeting, make sure you invite who's supposed to be there and provide them specific tokens or other information to login you can password protect your meetings which add an additional layer of protection. If you are having an open meeting for the love of God, mute everyone.  No one wants to hear people eating food or commenting on the discussion, unless of course it is entertaining. Finally, pay attention to who's logged in. Most meeting systems have a waiting room before you enter and that's an opportunity to take a look around and see who doesn't belong. You can also take actual attendance and boot people who don't answer you. That's today's Pwned Byte Sized episode. Remember, keep your meetings safe and secure.

Website: www.nuharborsecurity.com

Facebook: www.facebook.com/nuharbor/

Twitter: @nuharbor

LinkedIn: www.linkedin.com/company/nuharbor/

Instagram: www.instagram.com/nuharborsecurity/