Security Serengeti

In this week's episode, we discuss T-Mobile and how they've been compromised 6 times in the past 4 years, and maybe some root causes on why this keeps happening to them.  We have no inside knowledge, this is pure speculation.  We perform some additional speculation on why China wants the PII of the complete American population, and then, just so we have some real news... we discuss a new method of monitizing malware at the end!

Article - T-Mobile CEO: Hacker brute-forced his way through our networkSupporting Articles:American hacker, 21, claims he used unprotected router to break into T-Mobile’s systemsHow I Learned to Stop Worrying and Embrace the Security FreezeThink You’ve Got Your Credit Freezes Covered? Think Again.

Article - China's Microsoft Hack May Have Had A Bigger Purpose Than Just Spying

Article - Cyberattackers are now quietly selling off their victim's internet bandwidthSupporting Articles:The Scrap Value of a Hacked PC, Revisited

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this week's episode, we discuss Amazon tracking keystrokes, attacker's using CAPTCHA's to hide credential stealing sites, and a bonus article that we decided to do a la minute and were completely unprepared for!   Please be warned, Matthew spends WAY too much time focused on Amazon being wary of USB Rubber Ducky's.

Article - Amazon’s Plan to Track Worker Keystrokes: A Sign of Controls to Come?

Article - Cyberattackers Embrace CAPTCHAs to Hide Phishing, Malware

Article - Wanted: Disgruntled Employees to Deploy Ransomware

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this week's episode, we end up spending wayyyyy too long talking about a Lawfare article on banning ransomware payments.  We had some other articles, but I guess they can wait until next week.

Article - Ransomware Payments and the LawSupporting Links:The Lawfare Podcast: How Can Congress Take on the Ransomware Problem?RTF Report: Combatting RansomwareYoung people under pressure and fearful for the futureScience Says Happier People Are Raised by Parents Who Do This 1 Thing

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this episode, we continue our conversation with Tyler who works with AI and ML.  We talk a bit about how attackers may use AI in the future, and engage in some moderate speculation.  I had hoped for wild, but it ended up being grounded in reality.

Several articles were mentioned in the episode:Chihuahua or Muffin?Hackers trick a Tesla into veering into the wrong laneMalware-GAN - Generating Adversarial Malware ExamplesCounterfit - A CLI that provides a generic automation layer for assessing the security of ML ModelsFraudsters Used AI to Mimic CEO’s Voice in Unusual Cybercrime CaseTwitter taught Microsoft’s AI chatbot to be a racist asshole in less than a day

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this episode, we bring in a ringer!  Tyler, a friend of ours who is deep into AI and ML, is here to explain how it works, complete with hand puppets and crayons.  

No supporting articles this week, we just sit back and listened to Tyler, and the melodious sound of his voice.

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this week's episode, we discuss indicted Chinese hackers, more lawyer discussion and backups.  Test your backups.  TEST THEM.

Article 1 - US Accuses China of Using Criminal Hackers in Cyber Espionage OperationsSupporting Articles:Four Chinese Nationals Working with the Ministry of State Security Charged with Global Computer Intrusion Campaign Targeting Intellectual Property and Confidential Business Information, Including Infectious Disease ResearchUS and Global Allies Accuse China of Massive Microsoft Exchange AttackUS, EU, UK, NATO blame china for “reckless” Exchange attacksBiden administration, US allies condemn China's malicious hacking, espionage actionsUS charges four suspected Chinese spies who coordinated APT40 hackersChinese State-Sponsored Cyber Operations: Observed TTPsTactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China’s MSS Hainan State Security DepartmentJCAT Intelligence Guide for First RespondersMajor foreign holders of U.S. treasury securities as of March 2020

Article 2 - Law Firm for Ford, Pfizer, Exxon Discloses Ransomware AttackSupporting Articles:Campbell Conroy & O'Neil Provides Notice of Data Privacy IncidentQuantifying the Costs of Data Breaches

Article 3 - Don’t Wanna Pay Ransom Gangs? Test Your Backups.

Updates mentioned at the end:NSO Says ‘Enough Is Enough,’ Will No Longer Talk to the Press About Damning ReportsKaseya Gets Universal Decryptor to Help REvil Ransomware Victims

As always, plea

In this week's episode, we discuss CYBERINSURANCE.  It's in caps, you have to read it in caps!  It's actually a more interesting topic than I expected.

Supporting Articles:The cost of cyber insurance increased 32 per cent last year and shows no signs of easingWhat is cyber insurance?Types of Cyber InsuranceWhat Is Cyber Insurance, and Why Is It In High Demand?Cyber Insurance: A Hard ResetWhat does a ‘hard market’ mean for insurance customers?

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this week's episode, we discuss Kaseya because we really have to.  Then we talk lawyers and IR again, and discover most everyone seems to have a miscomprehension of how "privilege" works.  Really want to read that article if you're in IR.

Article 1 - IT management biz Kaseya's VSA abused to infect businesses with ransomwareSupporting articles:Reddit Thread from Huntress LabsMatthew's favorite article on this - The Kaseya Ransomware Attack Is a Really Big DealWhat Happened in the Kaseya VSA Incident? Updates Regarding VSA Security IncidentUK Paper David called out as his favorite - Call for views on cyber security in supply chains and managed service providersThere are so many articles, I refuse to link them all.  Seriously, your RSS feed is full of them I'm sure.

Article 2 - 8 Ways to Preserve Legal Privilege After a Cybersecurity Incident

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this episode we review and discuss one of the books on the Cybersecurity Canon - The Phoenix Project!

In as spoiler free way as possible, we discuss the lessons for business that you should be taking from this book.  It's a great book, and we think you should absolutely read it!

Links:Cybersecurity Canon Hall of FameThe Phoenix Project

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this episode we discuss three articles.  First, a brief summary of security planning in mergers and acquisitions.  Second, what's most important during a security incident?  Finally, PROCESS GHOSTING!

 

Article 1 - How to Plan Your M&A Security Strategy

Supporting Articles:

Marriott data breach FAQ: How did it happen and what was the impact?

Why Evaluating Cybersecurity Prior to Mergers and Acquisitions is Necessary

 

Article 2 - Mission Critical: What Really Matters in a Cybersecurity Incident

Supporting Articles:

Malware Archaeology Logging Cheat Sheets

NIST 800-61: Computer Security Incident Handling Guide

Amazon AWS S3 Pricing

 

Article 3 - Researchers Uncover 'Process Ghosting' — A New Malware Evasion Technique

Supporting Articles:

Process Doppelganging: New Malware Evasion Technique Works On All Windows Versions

Herpaderping: Security Risk or Unintended Behavior?

Submitted Github issue to allow ProcessHacker to detect these methods of evasion

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do