ShadoSec Cyber Security Podcast

Important Microsoft patch coming soon so make sure to patch your systems soon

A short form version of the main stories of the week

Jorge and Neema do Kaseya and we talk ICloud Max Max baby!

Neema and Jorge pretend it's may. Jorge edits audio for the first time.

 - Ransomware trends ~ 4:30

Topic Links

https://thehackernews.com/2021/06/emerging-ransomware-targets-dozens-of.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29

https://nymag.com/intelligencer/2021/06/fbi-snooped-on-criminals-using-encrypted-messaging-app.html

https://threatpost.com/supply-chain-attack-airlines-state-actor/166842/

Android stuff Links

Android & RUST - https://security.googleblog.com/2021/05/integrating-rust-into-android-open.html

Android Ready SE

 - https://security.googleblog.com/2021/03/announcing-android-ready-se-alliance.html

IOXT Alliance

https://www.ioxtalliance.org/

BSC Links

https://github.com/dineshsonachalam/Lucid-Dynamodb

https://github.com/muc-dev/linked

https://github.com/ProtonMail/WebClient/issues/242

https://www.indiegogo.com/projects/paperd-ink--2#/

https://www.infoq.com/news/2021/05/grain-web-assembly-first/

https://github.com/google/zx

Jorge is away on holiday and Neema steers the cyber ship!

Stories:

https://www.computerweekly.com/news/252501665/Exagrid-pays-26m-to-Conti-ransomware-attackers

https://www.computerweekly.com/news/252501665/Exagrid-pays-26m-to-Conti-ransomware-attackers

https://www.securityweek.com/kenyan-arrested-qatar-first-targeted-phishing-attack?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+securityweek+%28SecurityWeek+RSS+Feed%29

https://techcrunch.com/2021/06/02/stack-overflow-acquired-by-prosus-for-a-reported-1-8-billion/

Jorge and Neema blasting cyber security to ashes

Stories: 

https://japantoday.com/category/crime/people-in-japan-can-now-earn-%C2%A510-000-bounties-for-scamming-scammers

https://www.zdnet.com/article/colonial-pipeline-ransomware-attack-everything-you-need-to-know/

https://www.pcmag.com/news/darkside-ransomware-group-loses-server-access-after-us-moves-to-disrupt

https://www.flurry.com/blog/ios-14-5-opt-in-rate-att-restricted-app-tracking-transparency-worldwide-us-daily-latest-update/

https://blog.mozilla.org/security/2021/05/18/introducing-site-isolation-in-firefox/

https://blog.ethereum.org/2021/05/18/country-power-no-more/

https://blog.1password.com/welcoming-linux-to-the-1password-family/

Jorge and Neema doing their Cyber thang

Stories: 

https://www.bleepingcomputer.com/news/security/hashicorp-is-the-latest-victim-of-codecov-supply-chain-attack/amp/

https://www.securemac.com/news/facebook-finds-new-ios-spyware-phenakite

https://www.eff.org/press/releases/eff-and-aclu-ask-supreme-court-review-case-against-warrantless-searches-international

https://www.unibw.de/patch/papers/usenixsecurity20-wasm.pdf

https://www.cnbc.com/2021/04/30/eu-says-apples-app-store-breaches-competition-rules.html

Jorge and Neema spice things up with some Dual Core luvin! 

Stories: 

https://www.securityweek.com/us-expels-russian-diplomats-imposes-new-round-sanctions?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Securityweek+%28SecurityWeek+RSS+Feed%29

https://threatpost.com/attackers-target-proxylogon-cryptojacker/165418/1

https://techcrunch.com/2021/04/13/fbi-launches-operation-to-remotely-remove-microsoft-exchange-server-backdoors/

https://www.theregister.com/2021/04/21/signal_cellebrite/

Useful links 

https://www.apple.com/privacy/docs/A_Day_in_the_Life_of_Your_Data.pdf

https://github.com/WICG/floc/issues/100

https://techcrunch.com/2021/04/13/fortnite-maker-epic-completes-1b-funding-round

Just when you thought we were gone ..... Jorge and Neema return with a BANG! 

Defenders perspective on Azure! 

Useful links:

https://threatpost.com/cna-hit-novel-ransomware/165044/

https://adsecurity.org/?p=4277

https://dirkjanm.io/

https://www.pentestpartners.com/security-blog/azure-ad-attack-of-the-default-config/

Jorge and Neema hitchhike the open plains of cyber security! 

News stories

https://gizmodo.com/this-mom-allegedly-created-deepfakes-to-bully-her-daugh-1846471615

https://thehackernews.com/2021/03/google-to-reveals-what-personal-data.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29

https://www.zdnet.com/article/apple-developers-targeted-by-new-malware-eggshell-backdoor/

https://medium.com/nextdns/cname-cloaking-the-dangerous-disguise-of-third-party-trackers-195205dc522a

https://www.zdnet.com/article/google-cloud-here-are-the-six-best-vulnerabilities-security-researchers-found-last-year/

https://www.nytimes.com/interactive/2021/03/18/magazine/facial-recognition-clearview-ai.html

Bitsized chuncks 

https://slack.engineering/migrating-millions-of-concurrent-websockets-to-envoy/ 

https://www.learnlatex.org/en/ 

https://www.audacityteam.org/audacity-3-0-0-released/ 

https://symflower.com/en/company/blog/2021/git-autofixup/ 

https://lwn.net/SubscriberLink/849125/c4422a7c318a5a17/