In this episode of ShadowTalk, host Chris, along with Marken, discuss the latest news in cyber security and threat research. Topics this week include:

• Scattered Spider leader reportedly arrested, as group pivot to target SaaS solutions
• ReliaQuest research into supply chain compromise. Detections to improve your resilience
• Classifying insider threats and the difficulties of proving intent

Resources:

• https://www.reliaquest.com/blog/what-is-scattered-spider/
• https://www.reliaquest.com/blog/scattered-spider-attack-analysis-account-compromise/
• https://www.reliaquest.com/blog/software-supply-chain-risk-management/
• https://www.reliaquest.com/blog/virtual-machines-defense-evasion/

In this Special Guest Episode of ShadowTalk, host Chris and one of ReliaQuest's CISOs Rick Holland are joined by University of Kansas Health System (UKHS) CISO Michael Meis to discuss the latest news in cyber security and threat research. Topics this week include:

• Significant threats facing healthcare: Ransomware, accidental insiders
• The influence of COVID on ransomware activity
• The immediate and long term impact of the Optum breach
• The importance of understanding your revenue cycle to weather the storm of a breach
• Methods of maintaining engagement and retaining staff
• AI and automation: Improving timeliness and efficiency of incident response

In this episode of ShadowTalk, host Chris Morgan is joined by ReliaQuest Chief Strategy Officer Jason Pfeiffer LIVE on the InfoSec Europe show floor in London, UK to discuss:

• How InfoSec stacks up against the US cyber conferences
• Snowflake data breach affecting TicketMaster and others
• Cybercriminal reflections on generative AI

Resources:

• https://www.reliaquest.com/blog/common-infostealers/

In this episode of ShadowTalk host Corey, along with Gjergji and Brian, discuss the latest news in cyber security and threat research. Topics this week include:

• Microsoft set to begin the deprecation of VBScript in the second half of 2024 
• ReliaQuest research into the top three Infostealers 
• Dive into a new crypto miner dubbed 'GhostEngine' 
• ReliaQuest analysis of a BlackSuit ransomware attack 

Resources:

• https://techcommunity.microsoft.com/t5/windows-it-pro-blog/vbscript-deprecation-timelines-and-next-steps/ba-p/4148301
• https://www.reliaquest.com/blog/common-infostealers/
• https://www.elastic.co/security-labs/invisible-miners-unveiling-ghostengine 
• https://www.reliaquest.com/blog/blacksuit-attack-analysis/ 

In this episode of ShadowTalk, host Chris, along with Director of Threat Research Brandon Tirado, discuss the latest news in cyber security and threat research. Topics this week include:

• Microsoft mandating multi-factor authentication across Azure
• ReliaQuest research exploring fileless malware and living against the land (LoTL) techniques 
• Use of deepfakes in social engineering in 2024

Resources:

• https://www.reliaquest.com/blog/socgholish-fakeupdates/
• https://www.reliaquest.com/blog/new-python-socgholish-infection-chain/
• https://www.reliaquest.com/blog/living-off-the-land-fileless-malware/
   

In this episode of ShadowTalk, host Chris, along with Ivan and Marken, discuss the latest news in cyber security and threat research. Topics this week include:

• Recent ransomware attacks on the healthcare sector do not necessarily suggest a change in targeting preferences
• Black Basta pivot TTPs: New social engineering campaign using mass sign ups to mailing list spam
• Pain on the adversary, in having multiple controls to slow down an attacker, can greatly improve cyber resilience when combined with network visibility 
• Initial access brokers (IAB) continuing to play a crucial role in facilitating cybercrime

Resources:

• https://www.reliaquest.com/blog/q1-2024-attacker-trends/

In this episode of ShadowTalk, host Rick Holland is joined by ReliaQuest CTO Joe Partlow and Chief Scientist Brian P. Murphy LIVE on the RSAC show floor in San Francisco, CA to discuss all things AI and automation.

In this episode of ShadowTalk, host Chris, along with Brian and Corey, discuss their career paths, as well as offering tips for individuals aiming to gain employment within cybersecurity.

• The importance of tact and developing both soft and hard skills
• Working around personnel constraints  
• Picking the right vendors to compliment your security model
• Recommendations for advancing your own career

In this episode of ShadowTalk, host Chris, along Kim and one of ReliaQuest's CISO's Rick, discuss the latest news in cyber security and threat research. Topics this week include:

• APT28 Exploit 6 year old CISCO vulnerability
• ReliaQuest research on Iran/Israel Tensions
• Ransomware Rebrands
• Apple notify users impacted by Spyware

Resources:

• https://www.reliaquest.com/blog/cyber-threats-linked-to-iran-israel-conflict/

In this episode of ShadowTalk, host Chris, along with Marken, discuss the latest news in cyber security and threat research. This weeks topics include:

• Palo Alto Critical Vulnerability under active exploitation 
• ReliaQuest research on VPN attack surface management
• Optum Healthcare data breached by RansomHub group