Security Serengeti

Welcome to our first episode of a new sub-series - The Coming Tech Dystopia.  We had so much fun ranting about the state a few episodes ago, we decided to sprinkle in the occasional episode where we see a technology with potential dystopian impact.

This time we saw an article on how Ukraine is partnering with a Facial Recognition company to use their tech in the war.  

Primary Article - Ukraine is using Clearview AI’s facial recognition during the conflictSupporting Articles:Exclusive: Ukraine has started using Clearview AI’s facial recognition during warRacial Discrimination in Face Recognition TechnologyWHAT IS FACIAL RECOGNITION TECHNOLOGY?How to get around facial recognitionHow to Thwart Facial Recognition and Other Surveillance​Anti-Facial Recognition Masks: Accessories Of The FutureReflectaclesMcLean neighborhood tackling crime by installing license plate scanners

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this episode, we review a number of articles discussing the war in Ukraine, and why we haven't seen the Cyberwar we imagined would happen.

Article 1 - Where are the (serious) Russian cyberattacks?Supporting Articles:Second data-wiping malware found in Ukraine, says ESETImplement Cybersecurity Measures Now to Protect Against Potential Critical ThreatsWhere’s the Russia-Ukraine Cyberwar? (Links to 4 other articles)Defense Primer: Information OperationsWikipedia - Operation MockingbirdPentagon warns of cyber and kinetic retaliation to significant cyber attack against the US“Vranyo”: a previously untranslatable Russian word …Vulnerable U.S. electric grid facing threats from Russia and domestic terrorists

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we discussed the Krebs on Security series on the Conti Ransomware chat logs.  For an hour.

Supporting Article Series - Conti Ransomware Group Diaries, Part I: Evasion

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode we review and discuss a book that was nominated to the Cybersecurity Canon, but not accepted - Daemon by Daniel Suarez.

We start off spoiler free, but quickly go deep into spoiler territory and discuss the plot of the book, the technology used in the book, the hacking seen, and the future that the Daemon plans for us all.

Links:Cybersecurity CanonDaemon by Daniel Suarez

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this episode we discuss securing Low- and No-Code development, hackers who plant evidence of crimes, US Justice Department announcing it will attack hackers first, and a short discussion around NVidia ransoming their ransomers!

Article 1 - 4 security concerns for low-code and no-code development

Article 2 - A Hacker Group Has Been Framing People for Crimes They Didn't CommitSupporting Articles:This malware gang plants incriminating evidence on PCs, gets victims arrestedChild Porn Investigations May Snare the Innocent

Article 3 - US to attack cyber criminals first, ask questions later – if it protects victimsSupporting Articles:Deputy Attorney General Lisa O. Monaco Delivers Remarks at Annual Munich Cyber Security Conference Russia arrests 14 alleged members of REvil ransomware gang

Article 4 - Ransomware Group Lapsus Claims NVIDIA Hacked Back After Its Attack On The GPU GiantSupporting Articles:GPU giant Nvidia is investigating a potential cyberattack

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we go deep down the paranoid rabbit hole to discuss what the government would do with facial recognition technology, and we also discuss how the government recovered $3.6 billion in stolen Bitcoin.

This one is a little different than our normal episodes.  Time to start prepping!

Article 1 - ID.me Says It Will Make Facial Recognition Optional for Government AgenciesSupporting Articles:The IRS directed 7 million Americans to sign up with ID.me face-scan service, according to congressional letterIRS debuts face biometrics and suddenly everyone is a privacy regulatorFederal research contractor wants a fence between identity and emotion biometricsNotice of Request for Information (RFI) on Public and Private Sector Uses of Biometric TechnologiesID.me says it uses more powerful facial recognition than previously claimed

Article 2 - Feds Arrest Couple Who Allegedly Laundered $1 Billion in Stolen BitcoinsSupporting Articles:Crypto Laundering: Bitcoin + Money LaunderingThe DOJ’s $3.6B Bitcoin Seizure Shows How Hard It Is to Launder CryptoMoney Laundering and Structuring Under Federal Law

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode we discuss two recent surveys, one on malicious bots that attack web sites, and one on cloud security and the struggles there.

Article 1 - Supporting Article:  Data Highlights Growing Threat From Intelligent Bots Operated at Scale by CybercriminalsOriginal Paper - 2022 STATE OF FRAUD & ACCOUNT SECURITY

Article 2 - Why Security Pros Are Frustrated With Cloud Security

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we discuss Active Defense!  What is it, how do you do it, and what should you pay for.

Supporting Links:What is Active Defense?SEC599: Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defensesparalax / awesome-honeypotsThinkst CanaryJavelin Networks - AD ProtectNaval PostGraduate School - An Improved Tarpit for Network Deception

If you found this interesting or useful, please like and subscribe, and follow us @serengetisec for more!  Without that social validation, we just sulk around the house all day.

In this episode we discuss the $1.4 billion dollar Merck Lawsuit against their cyber insurer, and a prediction for 2022 - Adversarial AI!  We also briefly review a really scammy sponsored article claiming a new options trading site for cryptocurrency is totally trustworthy.

Article 1 - Cyber Insights 2022: Adversarial AI

Article 2 - What enterprises should learn from Merck’s $1.4 billion insurance lawsuitSupporting Articles:Cyberinsurance companies don’t want to pay out for “acts of war”School District reports a 334% hike in cybersecurity insurance costsMerck’s $1.4 Billion Insurance Win Splits Cyber From ‘Act of War’NotPetya - Five Facts to Know About History’s Most Destructive CyberattackSuperior Court of New Jersey Law Division Civil Union County Docket for Case #: L-002682-18The Untold Story of NotPetya, the Most Devastating Cyberattack in History2022 SSCIP Cyber Insurance Contract Extension Recommendation

Article 3 - SPONSORED (my addition) - Is TurboXBT legit? Here’s what you need to know about the platform

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode we discuss everyone's most favorite of topics, Vulnerability Management!

Supporting Links:What is Vulnerability Management and Scanning?Why there are at least 6,000 vulnerabilities without CVE-IDs

If you found this interesting or useful, please like and subscribe, and follow us @serengetisec for more!  Without that social validation, we just sulk around the house all day.