SecurityMetrics News

Watch this week as Heff and Forrest dive into the latest on the HUGE US Colonial Pipeline breach, the recent D.C. police ransomware, and the recent change in malware as a service.

Watch to learn more about additional stories:
-Apple Airtags HACKABLE!
-Ireland refuses to pay any ransomware.
-Frag Attacks expose vulnerabilities in all wifi devices.

Hosted by Matthew Heffelfinger (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF, PECB) and Forrest Barth (SOC Analyst, CISSP, CMNO, Security+).

Watch this week as Heff and Forrest discuss the recent Ivanti breach, Apple ransomware, SonicWall's 3 zero days, and more.

Listen to learn more about additional stories:

• 92% of businesses that pay ransomware never get their data back
• Recent security additions to Apple's recent software update
• Passing of Dan Kaminsky

Hosted by Matthew Heffelfinger (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF, PECB) and Forrest Barth (SOC Analyst, CISSP, CMNO, Security+).

Heff and Forrest analyze the recent court order allowing the FBI to remotely hack hundreds of private computers. They also cover recent malware introduced via LinkedIn and the downplaying of the Facebook and Ubiquiti data breaches.

Listen to learn more about additional stories:

• Homeless man "pen tests" USC football practice
• How to search if to see your data was part of a recent breach
• Corporations that gaslight their customers after compromises

Hosted by Matthew Heffelfinger (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF, PECB) and Forrest Barth (SOC Analyst, CISSP, CMNO, Security+).

https://haveibeenpwned.com/

Heff and Forrest analyze prominent data breaches in the news, including the PHP Git Server, SITA, and Hobby Lobby. They brief viewers on the current state of ransomware–now known as ransomware 2.0, and dissect the extent of Ubiquiti’s breach; their possible ransom payments, and organizational missteps. 

Listen to learn more about additional stories:

• US Strategic Command Base Command’s Twitter account left unattended and results spur conspiracy theories.
• The depths phone scammers will go to trick the elderly into sending cash. 
• The prevalence of nation-state cyber attacks, retaliation, and overall impact on national security. 

Hosted by Matthew Heffelfinger (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF, PECB) and Forrest Barth (SOC Analyst, CISSP, CMNO, Security+).

Heff and Forrest analyze recent cybersecurity news, including the Verkada Security Camera Breach, WeLeakInfo Return, updates on the Microsoft Exchange Server, and an examination of hacker group FIN8.

Hosted by Matthew Heffelfinger (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF, PECB) and Forrest Barth (SOC Analyst, CISSP, CMNO, Security+).

Watch to learn more about:

150,000 of Verkada’s AI-driven camera feeds exposed by hacktivists including private homes, prisons, hospitals, and businesses
Formerly shut-down WeLeakInfo website domain lapses and a new hacker takes over
Analysis of  phishing training campaign tactics and revisions on guidance by NIST

Resources:
-https://www.latimes.com/business/tech...​
-https://www.businessinsider.com/molso...​
-https://www.infosecurity-magazine.com...​
-https://www.helpnetsecurity.com/2021/...​
-https://www.fireeye.com/content/dam/f...​
-https://thehackernews.com/2021/03/fin...​
-https://www.zdnet.com/article/dutch-p...​

SecurityMetrics News, from SecurityMetrics Threat Intelligence Center, is a cybersecurity news series to inform businesses of developing threats, and provide analysis, best practices, and tips to protect your data. SecurityMetrics News airs new episodes bi-monthly, with new topics every time. In this episode, Heff and Forrest cover topics including:

• Emergency directive to patch Microsoft Exchange server zero-days immediately 
• SEO Cyberattack: hackers use strategy to push malicious web pages up the rankings
• Are password managers safe? Experts compare LastPass vs. 1Password

SecurityMetrics News, from SecurityMetrics Threat Intelligence Center, is a cybersecurity news series to inform businesses of developing threats, and provide analysis, best practices, and tips to protect your data. SecurityMetrics News airs new episodes bi-monthly, with new topics every time. In this episode, Heff and Forrest cover topics including: 

• New creative hacking methods involving supercookies and favicons
• Cyber attack at Oldsmar water-treatment facility 
• SolarWinds attack updates
• Cyberpunk 2077 source code sold
• Tips for better security of your IoT devices–Google Home, Alexa, Siri

Matthew Heffelfinger - (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF,  PECB)
Forrest Barth - (SOC Analyst, CISSP, CMNO, Security+)

SecurityMetrics News, from SecurityMetrics Threat Intelligence Center, is a cybersecurity news series to inform businesses of developing threats, and provide analysis, best practices, and tips to protect your data. SecurityMetrics News airs new episodes bi-monthly, with new topics every time. This episode includes: 

• Apple’s recent security updates
• Emotet takedown by the U.S. Government
• New strains of ransomware
• The Parler saga and COVID vaccine misinformation

Matthew Heffelfinger - (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF,  PECB)
Forrest Barth - (SOC Analyst, CISSP, CMNO, Security+)

[Disclaimer] Before implementing any policies or procedures you hear about on this or any other episodes, make sure to talk to your legal department, IT department, and any other department assisting with your data security and compliance efforts.

Learn more at https://www.securitymetrics.com/​

Links
- https://www.helpnetsecurity.com/2021/...​
- https://support.apple.com/en-us/HT201222​
- https://www.europol.europa.eu/newsroo...​
- https://www.justice.gov/opa/pr/depart...​
-  https://www.bankinfosecurity.com/rans...​
​

In this SecurityMetrics News episode, Heff and Forrest analyze recent cybersecurity news, including the recent breaches in the US Capitol, the details on the Ubiquiti breach, Malwarebytes breach update, and the nasty cyber-attacks on Parler CEO. They dive in to help you understand the threats and attacks, and give tips to avoid data breaches at your organization.

Matthew Heffelfinger - (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF,  PECB)
Forrest Barth - (SOC Analyst, CISSP, CMNO, Security+)


[Disclaimer] Before implementing any policies or procedures you hear about on this or any other episodes, make sure to talk to your legal department, IT department, and any other department assisting with your data security and compliance efforts.

In this SecurityMetrics News episode, Heff and Forrest analyze recent cybersecurity news, including the recent Microsoft source code leak, the T-Mobile breach, Whirlpool ransomware attack, updates on the alarming Solarwinds breach, and a review of all the nasty breaches recorded in 2020. They dive in to help you understand the attacks and give tips to avoid data breaches at your organization.

Matthew Heffelfinger - (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF,  PECB)
Forrest Barth - (SOC Analyst, CISSP, CMNO, Security+)

[Disclaimer] Before implementing any policies or procedures you hear about on this or any other episodes, make sure to talk to your legal department, IT department, and any other department assisting with your data security and compliance efforts.