Security Serengeti

By David Schwendinger and Matthew Keener

A news analysis focused information security podcast dedicated to getting you the actionable information and analysis you need to improve your company's posture and response!... more

5

11 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Security Serengeti:

How many episodes does Security Serengeti have?

The podcast currently has 155 episodes available.

Security Serengeti episodes:

August 28, 2023 SS-NEWS-124: Smart Cities, FraudGPT and a change in Ransomware Behavior
Back in the news cycle, we discuss the AI Challenges at Defcon, FraudGPT and similar, Smart Cities and a new wrinkle in Ransomware Behavior.
Article 1 - White House challenges hackers to break top AI models at DEF CON 31
Supporting Articles:
DEFCON 31 AI Village
FACT SHEET: Biden-⁠Harris Administration Announces New Actions to Promote Responsible AI Innovation that Protects Americans’ Rights and Safety
Article 2 - FraudGPT, a new malicious generative AI tool appears in the threat landscape
Supporting Articles:
FraudGPT: The Villain Avatar of ChatGPT
An Updated Non-VBV/MSC BINs List for 2023 - Suspicious site, visit with care
DarkBERT: New AI Tool Trained on Data From the Dark Web
Dark AI tools: How profitable are they in the underground ecosystem?
Article 3 - Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick?
Article 4 - Yet Another Glitch In The Matrix
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
53min
August 21, 2023 SS-REVW-123: Defcon and Black Hat Trip Report!
Matthew has returned from Hacker Summer Camp, full of stories and information about new technology. So sit with us for a while, and listen to a recap of Black Hat and Defcon (and a brief mention of B-Sides LV)!
Related Links:
Veilid - Take Back Control
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
45min
August 14, 2023 SS-NEWS-122: Global CISO Survey and National CyberSecurity Strategy
This week we take a look at CISO pay, the Biden-Harris National Cybersecurity Strategy, and a dystopian future vision by Bruce Schneier. You know we love our dystopian visions!
Article 1 - 2023 Global Chief Information Security Officer (CISO) Survey
Supporting Articles:
How physician pay in the US compares to other countries: 11 findings
Article 2 - FACT SHEET: Biden-⁠Harris Administration Publishes the National Cybersecurity Strategy Implementation Plan
Article 3 - AI and Microdirectives
Supporting Articles:
You break the law every day
Three Felonies A Day: How the Feds Target the Innocent
With Liberty and Justice for Some: How the Law Is Used to Destroy Equality and Protect the Powerful
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
50min
August 07, 2023 SS-NEWS-121: Phones as Snitches and the End of Log Centralization?
This week we discuss the TSA and their endless privacy invasions (this time... facial recognition!), an Anton Chuvakin post on the end of Log Centralization, and finally, France decides it's time that your phone started snitching on you, with a bill to allow the police to turn on microphones and cameras remotely to monitor folks under suspicious.
Article 1 - TSA wants to expand facial recognition to hundreds of airports within next decade
Supporting Articles:
Biometric and Digital Identity Solutions For TSA PreCheck® Members
EPIC Supports Senators’ Call for TSA to Halt the Use of Facial Recognition
Article 2 - Log Centralization: The End Is Nigh?
Article 3 - France Passes New Bill Allowing Police to Remotely Activate Cameras on Citizens' Phones
Supporting Articles:
Why Apple’s threat to kill iMessage and FaceTime isn’t a bluff
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
33min
July 31, 2023 SS-NEWS-120: Stolen Microsoft Keys and QR Code Phishing
Back from summer break baby! WARNING - There is a spicy joke to open up the episode. I went back and forth on bleeping it. We don't want to turn into Paul's Security Weekly. Let me know if you would prefer that to be bleeped out.
This week we discuss the debacle with Microsoft and their keys, Google blocking staff internet access, and QR Code Phishing! Because we just don't have enough ways to defraud folks.
Article 1 - Stolen Microsoft key may have opened up a lot more than US govt email inboxesSupporting Articles:Under CISA pressure/collab, Microsoft makes cloud security logs available for free
Article 2 - Google blocks staff's internet access to reduce attacks - but will it work?Supporting Articles:BeyondCorp A new approach to enterprise security.
Article 3 - Phishing with QR Codes: How Darktrace Detected and Blocked the Bait
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
29min
July 10, 2023 SS-NEWS-119: US Intelligence Tracking us all through Data Brokers
This week we discuss JP Morgan's document retention snafu, the US Intelligence Community's reliance on Data Brokers to purchase data they're legally prevented from collecting, and the final results of the EncroChat bust from 2020.
Article 1 - JP Morgan accidentally deletes evidence in multi-million record retention screwup
Article 2 - U.S. Intelligence Has Amassed 'Sensitive and Intimate' Data on 'Nearly Everyone'Supporting Articles:The FBI Has Been Buying Bulk Internet Data from This Florida CompanyODNI SENIOR ADVISORY GROUP PANEL DECLASSIFIED REPORT ON COMMERCIALLY AVAILABLE INFORMATIONCrisis and Leviathan Critical Episodes in the Growth of American Government (25th Anniversary Edition)Parallel construction
Article 3 - EncroChat dismantling led to 6,558 arrests and the seizure of $979M in criminal fundsSupporting Article:Busted ‘secure’ EncroChat messaging service leads to over 6,500 arrests by police
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
45min
July 03, 2023 SS-NEWS-118: Solarwinds Exec targeted by SEC
This week we discuss the SEC targeting Solarwinds Executives, the recent Teams vulnerability allowing malware to be sent to your users, and Japan's Digital ID card woes.
Article 1 - SolarWinds Execs Targeted by SEC, CEO Vows to FightSupporting Articles:SolarWinds executives receive Wells notice from US SECU.S. SEC considering action against SolarWinds over cyber disclosuresSS-NEWS-086: Solarwinds facing Lawsuit and Gov Action
Article 2 - Microsoft Teams bug allows malware delivery from external accountsSupporting Article:Can Microsoft Teams chat be monitored?
Article 3 - Japan's digital ID card gets emergency review amid data leaksSupporting Articles:Fujitsu admits it fluffed the fix for Japan’s flaky ID card schemeReal ID Act
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
27min
June 26, 2023 SS-NEWS-117: Mt Gox Hackers Named and Public Wifi!
This week we discuss the Mt. Gox hack, 9 years on, due to the recent charging, we discuss how sextortion is changing with the addition of AI, and then Public Wifi... is it finally safe to use? Spoiler alert, depends on where you are and what you're doing.
Article 1 - Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange HackSupporting Articles:WizSec - The missing MtGox bitcoins17 biggest crypto heists of all timeMt Gox Hack Explained
Article 2 - Warning: Victims' faces placed on explicit images in sextortion scamSupporting Articles:It’s way too easy to trick Lensa AI into making NSFW images
Article 3 - Public and free WiFi: Can I safely use it?Supporting Articles:Research Shows 25% of Travelers Hacked Via Public Wi-Fi While AbroadBiggest Wi-Fi Hacks of Recent Times - Lessons Learnt?
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
26min
June 19, 2023 SS-NEWS-116: First SOAR with Generative AI!
FINALLY! A SOAR platform called Blink has added generative AI to the creating automations. I'm sure this is just a step in getting there, but I'M EXCITED! Also, we talk about some other stuff I guess. NY suing Hyundai and Kia, and Barracuda ESG's getting popped.
Article 1 - Blink Copilot Brings Generative AI to Security Automation
Article 2 - New York City latest to sue Hyundai and Kia claiming their cars are too easy to stealSupporting Articles:What Is an Immobilizer and Does My Car Have One?The Kia Challenge, explained
Article 3 - Barracuda tells its ESG owners to 'immediately' junk buggy kitSupporting Articles:Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to ChinaBarracuda identified a vulnerability (CVE-2023-2868) in our Email Security Gateway appliance (ESG) on May 19, 2023.
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
34min
June 12, 2023 SS-NEWS-115: Malicious Bookmarks? What Can't Be Malicious?
This week we talk the economics of Ransomware as a service, a new method of infecting hosts using bookmarklets, China calling the kettle black, and another internal threat trying to get a ransomware payment.
Article 1 - Ransomware-as-a-service groups rain money on their affiliates
Article 2 - Discord Admins Hacked by Malicious BookmarksSupporting Articles:Wikipedia - Bookmarklet
Article 3 - China labels USA 'Empire of hacking' based on old Wikileaks dumps
Article 4 - IT employee impersonates ransomware gang to extort employer
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
...more
29min

FAQs about Security Serengeti:

How many episodes does Security Serengeti have?

The podcast currently has 155 episodes available.