Security Noise

By TrustedSecNews Technology Tech News

Security Noise episodes

August 03, 2018 2.16 - Its all over people! – Your wallet is unahackable but I have your password and more!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, Justin Bollinger, and Scot Berner

Show Links:

https://twitter.com/Bitfi6

https://krebsonsecurity.com/2018/07/sextortion-scam-uses-recipients-hacked-passwords/

https://www.cybereason.com/blog/wmi-lateral-movement-win32

https://www.cybereason.com/blog/wmi-lateral-movement-win32

https://www.csis.org/analysis/low-hanging-fruit-evidence-based-solutions-digital-evidence-challenge

Tool Time Notes:

https://github.com/NetSPI/PowerShell/blob/master/Invoke-ExternalDomainBruteforce.ps1

https://bitbucket.org/grimhacker/office365userenum/src
53 min
July 16, 2018 2.15 – FTP is still a thing – DNS and Settings Content Files!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, Justin Bollinger, and Scott White.

Show links:

https://www.recordedfuture.com/reaper-drone-documents-leaked/

https://www.bleepingcomputer.com/news/security/malware-found-in-arch-linux-aur-package-repository/

https://blog.netspi.com/exploiting-adidns/

https://arstechnica.com/information-technology/2018/07/stolen-certificates-from-d-link-used-to-sign-password-stealing-malware/

https://posts.specterops.io/the-tale-of-settingcontent-ms-files-f1ea253e4d39

Tool Time Notes:

https://github.com/trustedsec/unicorn
58 min
June 07, 2018 2.14 – Zip Slip Slip and split it up to the hip hip hip!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, Justin Bollinger, Scott White.

Show links:

https://blog.talosintelligence.com/2018/05/VPNFilter.html

https://www.nytimes.com/2018/06/04/technology/microsoft-github-cloud-computing.html

https://www.reddit.com/r/jailbreak/comments/8owp2j/tutorial_ios_1131_kernel_exploit_explanation

https://www.techworld.com.au/article/641555/oracle-plans-dump-risky-java-serialization

http://www.theregister.co.uk/2018/06/05/zip_slip_bug_archives

Tool Time Notes:

https://github.com/sensepost/objection
55 min
April 13, 2018 2.13 (lucky 13) – Let’s talk about facebook! Plaintext Passwords and More!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, Justin Bollinger, Rocky Brockway.

Show links:

https://krebsonsecurity.com/2018/04/dont-give-away-historic-details-about-yourself

https://gizmodo.com/malware-attack-on-vendor-to-blame-for-delta-and-sears-d-1825015769

https://www.bleepingcomputer.com/news/software/firefox-follows-chrome-and-blocks-the-loading-of-most-ftp-resources

https://randywestergren.com/compromising-opendrives-cloud-storage-accounts-or-how-not-to-design-session-management/

https://motherboard.vice.com/en_us/article/7xdeby/t-mobile-stores-part-of-customers-passwords-in-plaintext-says-it-has-amazingly-good-security

Tool Time Notes:

http://www.sqlfiddle.com/
1 hr 1 min
March 16, 2018 2.12 - Is that CryptoMiner or a Utility? Wildcards for the Masses, Look-a-Likes, and More CPU Vulnerabilities
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, Scot Berner, and Adrian Crenshaw.

Show links:

Calendar 2 tried turning Macs into cryptocurrency mining rigs, swiftly rolled back Mac App Store update following reviews

https://letsencrypt.org/2017/07/06/wildcard-certificates-coming-jan-2018.html

https://krebsonsecurity.com/2018/03/look-alike-domains-and-visual-confusion

https://www.cnet.com/news/amd-has-a-spectre-meltdown-like-security-flaw-of-its-own

Tool Time Notes:

https://github.com/securitywithoutborders/hardentools/releases
42 min
December 07, 2017 2.10 - Is your keyboard listening? A different type of jailbreak, Grinch Bots Stealing Christmas? Chrome, and Red Team Architecture!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Ben Tenjamin, Geoff Walton, Scott White, Costa Petros, and Rob Simon

Show links:

http://www.zdnet.com/article/popular-virtual-keyboard-leaks-31-million-user-data/

https://www.bleepingcomputer.com/news/security/man-hacks-jail-computer-network-to-get-friend-released-early/

https://nypost.com/2017/12/03/schumer-says-grinch-bots-are-stealing-christmas/

https://posts.specterops.io/designing-effective-covert-red-team-attack-infrastructure-767d4289af43

https://arstechnica.com/gadgets/2017/12/chrome-will-block-third-party-software-from-meddling-with-its-processes/

Tool Time Notes:

https://github.com/bbb31/slurp
1 hr 4 min
December 04, 2017 2.9 - OWASP Top 10 2017, OSX Root login bypass, Uber Hacked, who are the shadow brokers, ROCA!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Ben Tenjamin, Geoff Walton, Scott White, Ryan Leese, Scot Berner, and Rob Simon

Show links:

http://www.securityweek.com/final-version-2017-owasp-top-10-released

https://objective-see.com/blog/blog_0x24.html

http://money.cnn.com/2017/11/22/technology/uber-hack-consequences-cover-up

https://krebsonsecurity.com/2017/12/former-nsa-employee-pleads-guilty-to-taking-classified-data

https://blogs.akamai.com/2017/10/what-you-need-to-know-about-the-roca-vulnerability.html

Tool Time Notes:

https://github.com/al14s/rawr

https://github.com/ChrisTruncer/EyeWitness

https://github.com/michenriksen/aquatone
1 hr 15 min
July 03, 2017 2.8 – NSA and Exploit Tools, Petya, Russia, and Ransomware, systemd, Deathstar, and Office persistence methods
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Dave Kennedy, Ben Tenjamin, Geoff Walton, Chris Prewitt, Justin Bollinger

Show links:

http://www.nbcnews.com/news/us-news/can-cia-nsa-be-trusted-cyber-hacking-tools-n778731

https://www.theverge.com/2017/7/2/15910826/nato-response-petya-attack-state-actor-russia-ukraine

https://www.reuters.com/article/us-usa-cyber-energy-idUSKBN19L2Z9

https://www.bleepingcomputer.com/news/security/systemd-bug-lets-attackers-hack-linux-boxes-via-malicious-dns-packets/

http://hosted.ap.org/dynamic/stories/E/EU_RUSSIA_KASPERSKY?SITE=KVUE&SECTION=HOME&TEMPLATE=DEFAULT

https://www.binarydefense.com/petya-ransomware-without-fluff/

Tool Time Notes:

https://github.com/byt3bl33d3r/DeathStar

https://labs.mwrinfosecurity.com/blog/add-in-opportunities-for-office-persistence/
1 hr 15 min
May 11, 2017 2.7 - Tavis breaks the Internet, Executive Orders, Diskless Persistence Methods, and more!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Dave Kennedy, Scott White, Geoff Walton, Costa Petros, and Alex Hamerstone.

Show links:

https://www.wired.com/2017/05/vicious-microsoft-bug-left-billion-pcs-exposed/

http://www.reuters.com/article/us-usa-trump-cyber-idUSKBN1872L9

http://www.binarydefense.com/powershell-injection-diskless-persistence-bypass-techniques/

https://www.nytimes.com/2017/05/09/world/europe/hackers-came-but-the-french-were-prepared.html?_r=0

http://observer.com/2017/05/national-geographic-breakthrough-hacking-trust/

Tool Time Notes:

https://portswigger.net/burp/
53 min
May 05, 2017 2.6 – Special Guest Jayson E. Street, Shadow Brokers, Google OAuth, and more!
Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Dave Kennedy, Scott White, Justin Bollinger, Costa Petros, Ben Ten, Chris Prewitt, Jayson E. Street

Show links:

https://www.bloomberg.com/news/articles/2017-05-04/seriously-beware-the-shadow-brokers

https://www.cnet.com/how-to/why-the-google-docs-scam-was-a-different-kind-of-phishing/

http://www.theregister.co.uk/2017/01/13/giuliani_joomla_outdated_site/

http://www.darkreading.com/attacks-breaches/verizon-dbir-shows-attack-patterns-vary-widely-by-industry/d/d-id/1328757

Tool Time Notes:

https://github.com/trustedsec/unicorn
1 hr 19 min

About Security Noise

From the publisher's feed

In the security industry, it's easy to get overwhelmed by the constant barrage of information and buzzy trends. On Security Noise, we help you sort through the noise and identify the information that truly matters. Listen to hear from practitioners in the field who are using the latest tools and methodologies to stay ahead. Whether you're a seasoned security pro or an industry newcomer, our podcast has something for anyone in the business of making the world secure.