Security Serengeti

Security Serengeti

By David Schwendinger and Matthew KeenerNewsTechnologyTech News
Download on the App Store

Security Serengeti episodes

  • SS-NEWS-124: Smart Cities, FraudGPT and a change in Ransomware Behavior

    Back in the news cycle, we discuss the AI Challenges at Defcon, FraudGPT and similar, Smart Cities and a new wrinkle in Ransomware Behavior.  

    Article 1 - White House challenges hackers to break top AI models at DEF CON 31
    Supporting Articles:
    DEFCON 31 AI Village
    FACT SHEET: Biden-⁠Harris Administration Announces New Actions to Promote Responsible AI Innovation that Protects Americans’ Rights and Safety

    Article 2 - FraudGPT, a new malicious generative AI tool appears in the threat landscape
    Supporting Articles:
    FraudGPT: The Villain Avatar of ChatGPT
    An Updated Non-VBV/MSC BINs List for 2023 - Suspicious site, visit with care
    DarkBERT: New AI Tool Trained on Data From the Dark Web
    Dark AI tools: How profitable are they in the underground ecosystem?

    Article 3 - Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick?

    Article 4 - Yet Another Glitch In The Matrix

    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

    53 min
  • SS-REVW-123: Defcon and Black Hat Trip Report!

    Matthew has returned from Hacker Summer Camp, full of stories and information about new technology.  So sit with us for a while, and listen to a recap of Black Hat and Defcon (and a brief mention of B-Sides LV)!

    Related Links:
    Veilid - Take Back Control

    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

    45 min
  • SS-NEWS-122: Global CISO Survey and National CyberSecurity Strategy

    This week we take a look at CISO pay, the Biden-Harris National Cybersecurity Strategy, and a dystopian future vision by Bruce Schneier.  You know we love our dystopian visions!

    Article 1 - 2023 Global Chief Information Security Officer (CISO) Survey
    Supporting Articles:
    How physician pay in the US compares to other countries: 11 findings

    Article 2 - FACT SHEET: Biden-⁠Harris Administration Publishes the National Cybersecurity Strategy Implementation Plan

    Article 3 - AI and Microdirectives
    Supporting Articles:
    You break the law every day
    Three Felonies A Day: How the Feds Target the Innocent
    With Liberty and Justice for Some: How the Law Is Used to Destroy Equality and Protect the Powerful

    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

    50 min
  • SS-NEWS-121: Phones as Snitches and the End of Log Centralization?

    This week we discuss the TSA and their endless privacy invasions (this time... facial recognition!), an Anton Chuvakin post on the end of Log Centralization, and finally, France decides it's time that your phone started snitching on you, with a bill to allow the police to turn on microphones and cameras remotely to monitor folks under suspicious.

    Article 1 - TSA wants to expand facial recognition to hundreds of airports within next decade
    Supporting Articles:
    Biometric and Digital Identity Solutions For TSA PreCheck® Members
    EPIC Supports Senators’ Call for TSA to Halt the Use of Facial Recognition

    Article 2 - Log Centralization: The End Is Nigh?

    Article 3 - France Passes New Bill Allowing Police to Remotely Activate Cameras on Citizens' Phones
    Supporting Articles:
    Why Apple’s threat to kill iMessage and FaceTime isn’t a bluff

    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

    33 min
  • SS-NEWS-120: Stolen Microsoft Keys and QR Code Phishing
    Back from summer break baby!  WARNING - There is a spicy joke to open up the episode.  I went back and forth on bleeping it.  We don't want to turn into Paul's Security Weekly.  Let me know if you would prefer that to be bleeped out.
    This week we discuss the debacle with Microsoft and their keys, Google blocking staff internet access, and QR Code Phishing!  Because we just don't have enough ways to defraud folks.
    Article 1 - Stolen Microsoft key may have opened up a lot more than US govt email inboxesSupporting Articles:Under CISA pressure/collab, Microsoft makes cloud security logs available for free
    Article 2 - Google blocks staff's internet access to reduce attacks - but will it work?Supporting Articles:BeyondCorp A new approach to enterprise security.
    Article 3 - Phishing with QR Codes: How Darktrace Detected and Blocked the Bait
    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
    29 min
  • SS-NEWS-119: US Intelligence Tracking us all through Data Brokers
    This week we discuss JP Morgan's document retention snafu, the US Intelligence Community's reliance on Data Brokers to purchase data they're legally prevented from collecting, and the final results of the EncroChat bust from 2020.
    Article 1 - JP Morgan accidentally deletes evidence in multi-million record retention screwup
    Article 2 - U.S. Intelligence Has Amassed 'Sensitive and Intimate' Data on 'Nearly Everyone'Supporting Articles:The FBI Has Been Buying Bulk Internet Data from This Florida CompanyODNI SENIOR ADVISORY GROUP PANEL DECLASSIFIED REPORT ON COMMERCIALLY AVAILABLE INFORMATIONCrisis and Leviathan Critical Episodes in the Growth of American Government (25th Anniversary Edition)Parallel construction
    Article 3 - EncroChat dismantling led to 6,558 arrests and the seizure of $979M in criminal fundsSupporting Article:Busted ‘secure’ EncroChat messaging service leads to over 6,500 arrests by police
    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
    45 min
  • SS-NEWS-118: Solarwinds Exec targeted by SEC
    This week we discuss the SEC targeting Solarwinds Executives, the recent Teams vulnerability allowing malware to be sent to your users, and Japan's Digital ID card woes.
    Article 1 - SolarWinds Execs Targeted by SEC, CEO Vows to FightSupporting Articles:SolarWinds executives receive Wells notice from US SECU.S. SEC considering action against SolarWinds over cyber disclosuresSS-NEWS-086: Solarwinds facing Lawsuit and Gov Action
    Article 2 - Microsoft Teams bug allows malware delivery from external accountsSupporting Article:Can Microsoft Teams chat be monitored?
    Article 3 - Japan's digital ID card gets emergency review amid data leaksSupporting Articles:Fujitsu admits it fluffed the fix for Japan’s flaky ID card schemeReal ID Act
    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
    27 min
  • SS-NEWS-117: Mt Gox Hackers Named and Public Wifi!
    This week we discuss the Mt. Gox hack, 9 years on, due to the recent charging, we discuss how sextortion is changing with the addition of AI, and then Public Wifi... is it finally safe to use?  Spoiler alert, depends on where you are and what you're doing.  
    Article 1 - Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange HackSupporting Articles:WizSec - The missing MtGox bitcoins17 biggest crypto heists of all timeMt Gox Hack Explained
    Article 2 - Warning: Victims' faces placed on explicit images in sextortion scamSupporting Articles:It’s way too easy to trick Lensa AI into making NSFW images
    Article 3 - Public and free WiFi: Can I safely use it?Supporting Articles:Research Shows 25% of Travelers Hacked Via Public Wi-Fi While AbroadBiggest Wi-Fi Hacks of Recent Times - Lessons Learnt?
    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
    26 min
  • SS-NEWS-116: First SOAR with Generative AI!
    FINALLY!  A SOAR platform called Blink has added generative AI to the creating automations.  I'm sure this is just a step in getting there, but I'M EXCITED!  Also, we talk about some other stuff I guess.  NY suing Hyundai and Kia, and Barracuda ESG's getting popped.
    Article 1 - Blink Copilot Brings Generative AI to Security Automation
    Article 2 - New York City latest to sue Hyundai and Kia claiming their cars are too easy to stealSupporting Articles:What Is an Immobilizer and Does My Car Have One?The Kia Challenge, explained
    Article 3 - Barracuda tells its ESG owners to 'immediately' junk buggy kitSupporting Articles:Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to ChinaBarracuda identified a vulnerability (CVE-2023-2868) in our Email Security Gateway appliance (ESG) on May 19, 2023.
    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
    34 min
  • SS-NEWS-115: Malicious Bookmarks? What Can't Be Malicious?
    This week we talk the economics of Ransomware as a service, a new method of infecting hosts using bookmarklets, China calling the kettle black, and another internal threat trying to get a ransomware payment.
    Article 1 - Ransomware-as-a-service groups rain money on their affiliates
    Article 2 - Discord Admins Hacked by Malicious BookmarksSupporting Articles:Wikipedia - Bookmarklet
    Article 3 - China labels USA 'Empire of hacking' based on old Wikileaks dumps
    Article 4 - IT employee impersonates ransomware gang to extort employer
    If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
    29 min

About Security Serengeti

From the publisher's feed

A news analysis focused information security podcast dedicated to getting you the actionable information and analysis you need to improve your company's posture and response!