In this episode of ShadowTalk, host Chris Morgan, along with Dani and Dean Murphy, discuss the latest news in cyber security and threat research. Topics this week include:

• A breakdown of ReliaQuest's latest Vulnerability quarterly report
• Aftermath of the ransomware attack affecting Capita
• The "Domino" Backdoor and "Project Nemesis" information stealing malware
• Lockbit targeting macOS

Resources:

• https://www.reliaquest.com/blog/2023-q1-vulnerabilities-cves/
• https://www.reliaquest.com/blog/2023-ransomware-attacks-q1/

In this episode of ShadowTalk, host Stefano, along with Caroline and Kitch, discuss the latest news in cyber security and threat research. Topics this week include:

• A new approach in malicious infrastructure takedown
• The latest TTPs of MERCURY aka MuddyWater
• What's new on this Patch Tuesday?

Resources:

• https://blogs.microsoft.com/on-the-issues/2023/04/06/stopping-cybercriminals-from-abusing-security-tools/
• https://www.microsoft.com/en-us/security/blog/2023/04/07/mercury-and-dev-1084-destructive-attack-on-hybrid-environment/
• https://www.bleepingcomputer.com/news/microsoft/microsoft-april-2023-patch-tuesday-fixes-1-zero-day-97-flaws/

In this episode of ShadowTalk, host Stefano, along with Ivan and Corey, discuss the latest news in cyber security and threat research. Topics this week include:

• The prominent Genesis Market has been seized: What's next?
• Confidential Vulkan Files expose ties between Russian APTs and private sector
• Microsoft mitigates malicious attachments delivered via OneNote

Resources:

• https://news.sky.com/story/notorious-criminal-marketplace-genesis-market-which-sold-stolen-bank-details-taken-down-12850517
• https://www.theguardian.com/technology/2023/mar/30/vulkan-files-leak-reveals-putins-global-and-domestic-cyberwarfare-tactics
• https://www.securityweek.com/microsoft-onenote-starts-blocking-dangerous-file-extensions/
• https://www.reliaquest.com/blog/top-reads-march-2023/

In this early released episode of ShadowTalk, host Chris Morgan, along with ReliaQuest CISO Rick Holland, Kim Bromley, and Colin Ferris discuss the latest news in cyber security and threat research. Topics this week include:

• Implications from the 3CX supply-chain attack and what you need to do going forward
• Russian telco Rostec de-anonymizing Telegram users
• Updates to the IcedID malware

Resources:

• https://www.3cx.com/community/threads/3cx-desktopapp-security-alert.119951/
• https://www.reliaquest.com/blog/3cx-trojan-attack/
• https://www.bleepingcomputer.com/news/security/russia-s-rostec-allegedly-can-de-anonymize-telegram-users/
• https://www.bleepingcomputer.com/news/security/new-icedid-variants-shift-from-bank-fraud-to-malware-delivery/

In this episode of ShadowTalk, host Chris Morgan, along with Ivan Righi and Caroline Fenstermacher, discuss the latest news in the cyber security and the information security landscape. Topics this week include:

• Implications following the arrest of BreachForums administrator Pompompurin
• Cryptojacking activity group the TeamTNT threat group 
• Microsoft Outlook bug CVE-2023-23397

Resources:

• https://www.reliaquest.com/blog/breachforums-arrest-fbi/
• https://www.reliaquest.com/blog/cyber-threats-svb-collapse/
• https://www.reliaquest.com/platform/phishing-analyzer/

In this episode of ShadowTalk, host Stefano De Blasi, along with Rick Holland and Brandon Tirado, discuss cyber threats related to the SVB collapse, the FBI IC3 report and Cl0p ransomware: zero-day vulnerability and victims.

Resources: 

• https://www.reliaquest.com/blog/cyber-threats-svb-collapse/?
• https://www.ic3.gov/Media/PDF/AnnualReport/2022_IC3Report.pdf
• https://www.reliaquest.com/blog/qbot-black-basta-ransomware/
• https://www.reliaquest.com/blog/html-smuggling-dark-web/

In this episode of ShadowTalk, host Stefano, along with Caroline and Dean, discuss:

• the new US National Cybersecurity Strategy
• the return of Emotet
• zero-day exploited by the Cl0p ransomware group.

This weeks ShadowTalk host Chris, along with Rick, Kitch and Corey, discuss:

• the email threat of HTML Smuggling
• the latest guidance on logging from CISA.

This week's ShadowTalk podcast covers the latest developments and implications of the Russian-Urkaine War.

Resources:

• https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-24-feb

This week's ShadowTalk podcast covers the latest in the Trickbot/Conti Sanctions, OneNote Documents, NATO DDoS Attacks.

Resources:

• https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-17-feb