Security Serengeti

In this episode, we discuss conferences.  What are they?  When should you go?  Which ones should you go to?  Included is some discussion of personal experiences at various conferences.

During the show, I mentioned a site that has a list of all of the information security conferences, so here it is - https://infosec-conferences.com/

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do.

In this episode we discuss the Wired Article on the RSA Breach of 2011.  The NDA's have expired, and the full story has come out!

The Full Story of the Stunning RSA Hack Can Finally Be Told

 As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do.

In this episode we discuss two articles.  First, how much responsibility should cloud providers take for their customers security?  Second, Norton 360 to 'allow' customers to mine Ethereum with their AV!  New business model.  How many companies soon to follow?

Article 1 - The Misaligned Incentives for Cloud SecuritySupporting Articles: 0 PatchAWS Shared Responsibility Model

Article 2 - Norton 360 antivirus now lets you mine Ethereum cryptocurrencySupporting Articles:Anti-Virus Service Provider Norton Rolls Out Ether Mining FeatureBest Graphics Cards for Gaming in 2021Profitability Calculator

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do

In this episode, we do a quick review of what ATT&CK is, some ways that you can use it, and a summary of changes in v9.

Related links:Main ATT&CK SiteGetting Started with ATT&CKATT&CK NavigatorMore information on ATT&CK datasourcesHow to Implement and User The MITRE ATT&CK Framework - This one has some phenomenal links and summaries of great ways to get started using ATT&CK!

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do.

In this episode, we deep dive into two articles with a wild side tangent on Cyber Letters of Marque and Reprisal.  I'm really looking forward to being able to plunder ransomware gangs for their bitcoin, and making them walk the cyberplank!

Article 1 - DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash SeizedSupporting articles:The moral underground? Ransomware operators retreat after Colonial Pipeline hackRussian-language cybercriminal forum ‘XSS’ bans DarkSide and other ransomware groupsNonPetya ransomware forced Maersk to reinstall 4000 servers, 45000 PCsOpen-ended working group on developments in the field of information and telecommunications in the context of international security

Article 2 - Don't Let Scary Headlines Shape Your Company's Cyber Resilience StrategySupporting articles: None

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do.

In this episode, we analyze the 2021 Proofpoint State of the Phish Report, and discuss some of the more interesting findings.

Report Download (with personal information disclosure)

As always, the views and opinions shared on the podcast do not reflect the views and opinions of our employers.  

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we deep dive into two articles, with a bonus on hacking from drones where we wildly speculate on hacking attacks from drones.  I don't think we really addressed the article at all.

As a side note, when I was talking with my wife after we finished recording, she pointed out a very good reason for a new number... frequently deals at providers require a "new line of service" to get a discount.  

Article 1 - Your Old Phone Number Can Be Used to Hack You, Study FindsSupporting Articles:ORIGINAL PAPER - Security and Privacy Risks of Number Recycling at Mobile Carriers in the United StatesRecycled U.S. Phone Numbers Linked to Security ThreatsApple Loses Bid to Move Consumer Privacy Suit to ArbitrationPorting: Keeping Your Phone Number When You Change ProvidersTransfer, Park & Keep your Phone Number

Article 2 - Malicious Office 365 Apps Are the Ultimate InsidersSupporting Articles - TA2552 Uses OAuth Access Token Phishing to Exploit Read-Only Risks

Article 3 - TBONE: for public release on 2021-04-28Supporting Articles - Tesla Remotely Hacked from a Drone

In this episode we review Attack Surface Monitoring, discuss what it is and what you should look at if you're reviewing products.

Related Webcast from SANS - https://www.sans.org/webcasts/attack-surface-management-virtual-conference-118750

Related Whitepaper from SANS - https://www.sans.org/reading-room/whitepapers/analyst/membership/39905

As always, the views and opinions shared on the podcast do not reflect the views and opinions of our employers.  

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we deep dive into two articles, linked below:Half of Q1's malware traffic observed by Sophos was TLS encrypted, hiding inside legit requests to legit services

Did Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020?

Supporting Articles mentioned:Link to the Sophos Report

VT Detection of the fourth Solarwinds Backdoor

As always, the views and opinions shared on the podcast do not reflect the views or opinions of our employers.  

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we take a deep dive into the new Mandiant sponsored Ponemon Institute report "The Second Annual Study on the Economics of the Security Operations Center".

There are some known and obvious findings, and some surprising ones, especially around what SOC's are monitoring, and what SOC analysts say they are getting paid.

Link to Mandiant press release:https://www.fireeye.com/company/press-releases/2021/new-ponemon-research--growing-security-operation-center-challenges-increasing-complexity-and-rising-costs-drive-investments-in-XCR-and-security-automation.html

Link to Download (after sharing all your info):https://respond-software.com/resources/reports-ebooks/second-economics-of-the-soc/

As always, the views and opinions shared on the podcast do not reflect the views and opinions of our employers.  

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!