Security Take Two - Real. Serious. Security.

Colonial Pipeline made headlines when it was forced to shutdown a pipeline delivering more than 45% of the fuel in the United States due to a ransomware attack. This incident had many lessons and did something few other incidents have done, spur the government to take action.

https://en.wikipedia.org/wiki/Colonial_Pipeline_ransomware_attack

https://www.axios.com/2021/05/10/fuel-pipeline-cyberattack-us-state-of-emergency

https://www.lexology.com/library/detail.aspx?g=b876592e-65d0-4098-99b8-f82a33d88490

https://www.cisa.gov/news-events/news/attack-colonial-pipeline-what-weve-learned-what-weve-done-over-past-two-years

https://cyote.inl.gov/content/uploads/24/2025/12/CyOTE-Case-Study_Colonial-Pipeline.pdf

https://www.csoonline.com/article/3807871/trump-administration-disbands-dhs-board-investigating-salt-typhoon-hacks.html

https://www.reuters.com/business/colonial-pipeline-ceo-tells-senate-cyber-defenses-were-compromised-ahead-hack-2021-06-08/

https://www.congress.gov/117/meeting/house/112689/witnesses/HHRG-117-HM00-Wstate-CarmakalC-20210609.pdf

The security world has spun itself into a whirling dervish over the release of the latest security focused LLMs like Anthropic’s Mythos. In this episode, Ben and Chester discuss the different security personas that Mythos is likely to impact most and attempt to find the truth amongst the hype.

GLM-5.2, not Mythos, is the real security emergency - Joshua Saxe’s SubStack

Our last episode covered Sony’s cybersecurity woes from 2005 until 2011, we pick up where we left of in the midst of the 50 days of LulzSec. This episode covers everything up until the alleged theft of the PS5 root signing keys in January 2026. So much s0wnage and so little time…

2014 Sony Pictures hack - Wikipedia

When it comes to information security, Sony has had a bit of a tough go of it. In fact, there have been so many incidents, Ben and Chet decided to make this a multi-part series. This post covers 2005 to mid-2011 which we are referring to as part 1. From rootkits, to DDoS, stolen credit cards and SQL injection, Sony has been through a lot. These are opportunities to reflect for the rest of us, though. We can recognize some of the weaknesses we ourselves may still have and hopefully take away lessons on hardening our own defences.

Firewall Times - Sony Data Breaches: Full Timeline Through 2023

May 12, 2017 was memorable for many in the information security industry, but it was also memorable in health care, manufacturing, shipping and more as the WannaCry worm laid waste to unpatched Windows machines the world over. May it be the last widespread worm we need to cover on this podcast…

Wikipedia - WannaCry

For 50 days in mid-2011 the hacker world and even the wider pop-culture world was enthralled by a rampant series of brazen hacks conducted by a splinter group of anonymous who called themselves LulzSec. They claimed it was “just for the lulz”, but as we explore in this episode, there was much more to this than simply the lulz.

Wikipedia - LulzSec

May 4, 2000 many people in world woke up to a love letter in their INBOX. It wasn’t your typical love letter, this one was one of the world’s most destructive email worms and it quickly spread to infect an estimated 10% of the world’s PCs. For a longer write-up on ILOVEYOU, see my LinkedIn Post.

Wikipedia - ILOVEYOU

Uber has suffered many breaches over the years, so this podcast has focused just on breaches that involved external parties and not internal employee abuse of privileges. There is much to learn from Uber’s misfortune and in this episode we cover 5 distinct hacks and a couple of third-party breaches impacting Uber customers and drivers.

The Uber data breach cover-up: A timeline of events

The Transport for London (Operator of the London UK region’s transit network) was crippled by a cyber attack in September, 2024 that had widespread impacts on it’s operation. Fortunately safety was not a casualty, but we explore a bit of the nuance in incident response, segmnentation and other important lessons from this hack.

Boy arrested over London transport cyber hack

SamSam may not be the most well known ransomware group, but they triggered a pivotal change when then began operations at the end of 2015. Over the course of nearly 3 years they demonstrated the profitability of extorting businesses instead of consumers and paved the path from $1000 ransom demands to the astronimical sums we see today. Allegedly operating from Iran they demonstrated sanctions evasion, the use of LOLbins and tested the waters for what amounts could be extorted from Western businesses. This podcast explores their operations and explains how they changed the ransomware landscape.

US Department of Justice indictment, wanted poster and victim list