Security Noise

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Alex Hamerstone, Justin Bollinger, and Rob Simon.

[Stories]

Title: Apple search bot leaked internal IPs via proxy configuration

URL: https://www.bleepingcomputer.com/news/security/apple-search-bot-leaked-internal-ips-via-proxy-configuration/

Author: Ax Sharma

Title: Woman accused of impersonating prosecutor, dropping criminal charges against herself

URL: https://www.unionleader.com/news/courts/woman-accused-of-impersonating-prosecutor-dropping-criminal-charges-against-herself/article_1fdb1551-147d-53dd-ad45-6680bfc556fa.html?fbclid=IwAR2ovZ_mr_uVcIXJIcW3j_bEji7eLjE1yw_s90IPUKzsSxZ94-cDE-7YDys

Author: Mark Hayward

Title: Why Paying to Delete Stolen Data is Bonkers

URL: https://krebsonsecurity.com/2020/11/why-paying-to-delete-stolen-data-is-bonkers/

Author: Brian Krebs

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rick Yocum, and David Boyd.

Stories

Title: Link Previews: How a Simple Feature Can Have Privacy and Security Risks

URL: https://www.mysk.blog/2020/10/25/link-previews/

Author: Talal Haj Bakry and Tommy Mysk

Title: Hackers behind life-threatening attack on chemical-maker are sanctioned

URL: https://arstechnica.com/information-technology/2020/10/us-sanctions-russian-hackers-who-hit-chemical-maker-with-dangerous-malware/

Author: Dan Goodin

Title: Three npm packages found opening shells on Linux, Windows systems

URL: https://www.zdnet.com/article/three-npm-packages-found-opening-shells-on-linux-windows-systems/ Author: Catalin Cimpanu

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Costa Petros, and David Boyd.

Stories

Title: POLICE departments across the country Monday night reported their 911 systems nonoperational

URL: https://www.the-sun.com/news/1548945/911-lines-go-down-across-us/

Author: Catherina Gioino

Title: Looks Like the Windows XP Source Code Just Leaked on 4chan

URL: https://www.gizmodo.com.au/2020/09/looks-like-the-windows-xp-source-code-just-leaked-on-4chan/

Author: Cam Wilson

Title: Microsoft: Some ransomware attacks take less than 45 minutes

URL: https://www.zdnet.com/article/microsoft-some-ransomware-attacks-take-less-than-45-minutes/ Author: Catalin Cimpanu

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Aaron James, Alex Hamerstone, and David Boyd.

Stories

Title: Windows 10 themes can be abused to steal Windows passwords

URL: https://www.bleepingcomputer.com/news/microsoft/windows-10-themes-can-be-abused-to-steal-windows-passwords/

Author: Lawrence Abrams

Title: The Big Tesla Hack: A hacker gained control over the entire fleet, but fortunately he's a good guy

URL: https://electrek.co/2020/08/27/tesla-hack-control-over-entire-fleet/

Author: Fred Lambert

Tool Time

SPAnalyzer -

https://www.trustedsec.com/blog/fuzzing-the-front-end/

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rick Yocum, Logan Sampson, and Justin Bollinger.

Stories

Title: Former Uber Executive Charged With Paying 'Hush Money' To Conceal Massive Breach

URL: https://www.npr.org/2020/08/20/904113981/former-uber-executive-charged-with-paying-hush-money-to-conceal-massive-breach

Author: Shannon Bond

Title: Report: AI Company Leaks Over 2.5M Medical Records

URL: https://www.pcmag.com/news/report-ai-company-leaks-over-25m-medical-records

Author: Matthew Humphries

Title: Picking Locks with Audio Technology

URL: https://cacm.acm.org/news/246744-picking-locks-with-audio-technology/fulltext

Author: Paul Marks

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rick Yocum, David Boyd, and Aaron James.

Stories:

Title: Hacker leaks passwords for 900+ enterprise VPN servers

URL: https://www.zdnet.com/article/hacker-leaks-passwords-for-900-enterprise-vpn-servers/

Author Catalin Cimpanu

Title: Three Charged in July 15 Twitter Compromise

URL: https://krebsonsecurity.com/2020/07/three-charged-in-july-15-twitter-compromise/

Author: Brian Krebs

Title: Web Cache Entanglement: Novel Pathways to Poisoning

URL: https://portswigger.net/research/web-cache-entanglement

Author: James Kettle

SHOW NOTES

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Scott White, Rob Simon, and Alex Hamerstone.

Title: The more cybersecurity tools an enterprise deploys, the less effective their defense is URL: https://www.zdnet.com/article/the-more-cybersecurity-tools-an-enterprise-deploys-the-

less-effective-their-defense-is/

Author: Charlie Osborne

Title: Home Router Security Report 2020

URL:https://www.fkie.fraunhofer.de/content/dam/fkie/de/documents/HomeRouter/HomeRouter

Security_2020_Bericht.pdf

Author: Peter Weidenbach Johannes vom Dorp

Title: SIGRed – Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in

Windows DNS Servers

URL: https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin:-exploiting-

a-17-year-old-bug-in-windows-dns-servers/

Author: Sagi Tzadik

And…Talking Twitter

SHOW NOTES

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rick Yocum, David Boyd, and Scott Nusbaum

Stories

Title: A hacker gang is wiping Lenovo NAS devices and asking for ransoms

URL: https://www.zdnet.com/article/a-hacker-gang-is-wiping-lenovo-nas-devices-and-asking-for-ransoms/

Author: Catalin Cimpanu

Title: FCC formally declare Huawei, ZTE ‘national security threats’

URL: https://techcrunch.com/2020/06/30/fcc-huawei-zte-national-security/

Author: Zack Whittaker, Devin Coldewey

Tool Time

Link: https://www.trustedsec.com/blog/access-locked-files-with-tscopy/

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, Drew Kirkpatrick, and David Boyd.

Title: Career Choice Tip: Cybercrime is Mostly Boring URL: https://krebsonsecurity.com/2020/05/career-choice-tip-cybercrime-is-mostly-boring/ Author: Brian Krebs

Title: Ripple 20 URL: https://www.jsof-tech.com/ripple20/\ Authors: Moshe Kol, Ariel Schon, Shlomi Oberman, Andrey Zagrebin, Yuli Shapiro 

Title: Dating Apps Exposed 845 GB of Explicit Photos, Chats, and More URL: https://www.wired.com/story/dating-apps-leak-explicit-photos-screenshots/ Authors: Lily Hay Newman

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bollinger, Paul Sems, and David Boyd

[Stories]

Title: PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth (CVE-2020-1048 & more)

URL: https://windows-internals.com/printdemon-cve-2020-1048/

Author: Yarden Shafir & Alex Ionescu

Title: Supercomputers hacked across Europe to mine cryptocurrency

URL: https://www.zdnet.com/article/supercomputers-hacked-across-europe-to-mine-cryptocurrency/

Author: Catalin Cimpanu

 [Tool Time]

Pop open your Windows 10 Terminal and run:

pktmon help