Security Noise

SHOW NOTES

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bolinger, Alex Hamerstone, and David Boyd.

Announcements

Join the TrustedSec Discord Community

TrustedSec is on Discord! Join our server to interact with the security community and the TrustedSec team. Go to discord.gg/trustedsec to join.

Enrollment is open

Enrollment is open for the next online training course, PowerShell for Offense and Defense, taking place on September 30th. Class participants learn how to attack and defend against Powershell attacks within simulated corporate environments and find out the tactics, techniques, and procedures (TTPs) commonly used by penetration testers.

Stories

Title: The Math Prodigy Whose Hack Upended DeFi Won't Give Back His Millions

URL: https://www.bloomberg.com/news/features/2022-05-19/crypto-platform-hack-rocks-blockchain-community

Author: Christopher Beam

Title: Hackers can hack your online accounts before you even register them

URL: https://www.bleepingcomputer.com/news/security/hackers-can-hack-your-online-accounts-before-you-even-register-them/

Author: Bill Toulas

Title: Fake Windows exploits target infosec community with Cobalt Strike

URL: https://www.bleepingcomputer.com/news/security/fake-windows-exploits-target-infosec-community-with-cobalt-strike/

Author: Lawrence Abrams

Announcements

Join the TrustedSec Discord Community

TrustedSec is on Discord! Join our server to interact with the security community and the TrustedSec team. Go to discord.gg/trustedsec to join.

Stories

Title: Your Phone May Soon Replace Many of Your Passwords

URL: https://krebsonsecurity.com/2022/05/your-phone-may-soon-replace-many-of-your-passwords/

Author: Brian Krebs

Title: Heroku Status – 2413 Updated

URL: https://status.heroku.com/incidents/2413?updated

Author: Heroku Security

Interview

Special Event Commentary – With David Kennedy, Chris Boesch, Martin Bos, Justin Elze, and Eric Girard!

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bollinger, David Boyd, and Alex Hamerstone.

Stories

Title: Cybercriminals do their homework for latest banking scam

URL: https://www.theregister.com/2022/04/15/the_latest_scam_pay_yourself/

Author: Brandon Vigliarolo

Title: Breach of Internal Tools at Mailchimp Used To Deliver Phishing Attacks Targeted at Crypto Wallets

URL: https://www.cpomagazine.com/cyber-security/breach-of-internal-tools-at-mailchimp-used-to-deliver-phishing-attacks-targeted-at-crypto-wallets/

Author: Scott Ikeda

Title: GitHub: Attacker breached dozens of orgs using stolen OAuth tokens

URL: https://www.bleepingcomputer.com/news/security/github-attacker-breached-dozens-of-orgs-using-stolen-oauth-tokens/

Author: Sergui Gatlan

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rick Yocum, Rob Simon, and David Boyd.

Announcements

Join the TrustedSec Discord Community

TrustedSec is on Discord! Join our server to interact with the security community and the TrustedSec team. Go to discord.gg/trustedsec to join.

Stories

Title: Hackers Gaining Power of Subpoena Via Fake "Emergency Data Requests"

URL: https://krebsonsecurity.com/2022/03/hackers-gaining-power-of-subpoena-via-fake-emergency-data-requests/

Author: Brian Krebs

Title: Nestlé: Anonymous Didn't Hack Us, We Leaked Our Own Data

URL: https://gizmodo.com/nestle-denies-anonymous-hack-claims-says-it-leaked-dat-1848691484

Author: Lucas Ropek

Interview

Guest: Rob Simon

Subject: Hardware Hacking

Links: https://www.trustedsec.com/blog/hacking-the-my-arcade-contra-pocket-player-part-i/

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Alex Hamerstone, Justin Bollinger, and Drew Kirkpatrick. Announcements

Join the TrustedSec Discord Community

TrustedSec is on Discord! Join our server to interact with the security community and the TrustedSec team. Go to discord.gg/trustedsec to join.

Stories

Title: Hacked US companies to face new reporting requirements

URL: https://apnews.com/article/russia-ukraine-technology-business-congress-gary-peters-c46e063220568b2beb56220ac60f6041

Author: Alan Suderman and Eric Tucker

Title: Russia creates its own TLS certificate authority to bypass sanctions

URL: https://www.bleepingcomputer.com/news/security/russia-creates-its-own-tls-certificate-authority-to-bypass-sanctions/

Author: Bill Toulas

Interview

Guest: Drew Kirkpatrick

Subject: Service Workers

Links:

https://www.trustedsec.com/blog/persistence-through-service-workers-part-1-introduction-and-target-application-setup/

https://www.trustedsec.com/blog/persistence-through-service-workers-part-2-c2-setup-and-use/ https://www.trustedsec.com/blog/persistence-through-service-workers-part-3-easy-javascript-payload-deployment/

This episode features the following members: Adam Compton, David Boyd, and Justin Bollinger.

Stories

Title: Vulnerable U.S. electric grid facing threats from Russia and domestic terrorists

URL: https://www.cbsnews.com/news/america-electric-grid-60-minutes-2022-02-27/

Author: Bill Whitaker

Title: BitConnect's Indicted Founder Kumbhani Vanished, SEC Says

URL: https://www.bloomberg.com/news/articles/2022-03-01/bitconnect-s-indicted-founder-kumbhani-has-disappeared-sec-says

Author: David Voreacos

Tool Time

Title: bkcrack

Link: https://github.com/kimci86/bkcrack

About

The TrustedSec Security Podcast is a production of TrustedSec. To learn more about how TrustedSec can help your organization's security program, visit TrustedSec.com.

The show is hosted and moderated by Geoff Walton

Our podcast music was composed by Steve Neme

Stories

Title: Website fined by German court for leaking visitor's IP address via Google Fonts

URL: https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr

Author: Thomas Claburn

Title: Helping users stay safe: Blocking internet macros by default in Office

URL: https://techcommunity.microsoft.com/t5/microsoft-365-blog/helping-users-stay-safe-blocking-internet-macros-by-default-in/ba-p/3071805

Author: Kellie Eickmeyer

Title: North Korea Hacked Him. So He Took Down Its Internet

URL: https://www.wired.com/story/north-korea-hacker-internet-outage/

Author: Andy Greenberg

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Justin Bollinger, Alex Hamerstone, and Melvin Langvik.

Stories

Title: Linux malware is on the rise. Here are three top threats right now

URL: https://www.zdnet.com/article/linux-malware-is-on-the-rise-here-are-three-top-threats-right-now/

Author: Liam Tung

Title: Intel CEO Urges Lawmakers to 'Not Waste This Crisis' in Chip Push

URL: https://www.bloomberg.com/news/articles/2022-01-19/intel-urges-lawmakers-to-not-waste-this-crisis-with-chip-push

Author: Ian King

Tool Time

Link: https://www.trustedsec.com/blog/seeyoucm-thief-exploiting-common-misconfigurations-in-cisco-phone-systems/

Link: https://github.com/trustedsec/SeeYouCM-Thief

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Rob Simon, David Boyd and Justin Bollinger.

Stories

Title: Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

URL: https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/

Author: Ax Sharma

Title: FTC warns legal action against companies who fail to mitigate Log4Shell

URL: https://therecord.media/ftc-warns-legal-action-against-companies-who-fail-to-mitigate-log4shell/

Author: Catalin Cimpanu

Title: Threat actors can simulate iPhone reboots and keep iOS malware on a device

URL: https://therecord.media/threat-actors-can-simulate-iphone-reboots-and-keep-ios-malware-on-a-device/

Author: Catalin Cimpanu

Welcome to the Trusted Security Podcast – a podcast dedicated to bringing the latest news on information security and the industry. This episode features the following members: Geoff Walton, Alex Hamerstone, David Boyd, and Dave Kennedy!

Announcements

Join the TrustedSec Discord Community

TrustedSec is on Discord! Join our server to interact with the security community and the TrustedSec team. Go to discord.gg/trustedsec to join.

Stories

Title: FBI document shows what data can be obtained from encrypted messaging apps

URL: https://therecord.media/fbi-document-shows-what-data-can-be-obtained-from-encrypted-messaging-apps/

Author: Catalin Cimpanu

Title: New Windows zero-day with public exploit lets you become an admin

URL: https://www.bleepingcomputer.com/news/microsoft/new-windows-zero-day-with-public-exploit-lets-you-become-an-admin/

Author: Lawrence Abrams