ShadowTalk: Powered by ReliaQuest

In this episode of ShadowTalk, host Chris, along with Gjergji and Ivan, discuss the latest news in cyber security and threat research. Topics this week include:

• What you need to know on the MOVEit Zero-day vulnerability
• RaidForums user's data breached
• The Buhti ransomware taking a unique approach to targeting victims

Resources:

• https://www.reliaquest.com/blog/moveit-transfer-zero-day/
• https://www.bleepingcomputer.com/news/security/new-buhti-ransomware-gang-uses-leaked-windows-linux-encryptors/
• https://www.bleepingcomputer.com/news/security/new-hacking-forum-leaks-data-of-478-000-raidforums-members/

Summary: In this episode of ShadowTalk, host Stefano, along with Kim, Rick, and Dean, discuss the latest news in cyber security and threat research. Topics this week include:

• An investigation into the GootLoader malware
• The latest operation from hacktivist group Intrusion Truth
• A cyber espionage campaign conduct by Volt Typhoon
• RQ Exponent conference debrief

Resources:

• https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-144a
• https://www.washingtonpost.com/politics/2023/05/15/they-dox-chinese-hackers-now-theyre-back/

In this episode of ShadowTalk, host Chris Morgan , along with Caroline Fenstermacher and Gjergji Paco, discuss the latest news in cyber security and threat research. Topics this week include:

• Revisiting the SocGholish malware distribution framework 
• Getting pricked by the Cactus ransomware
• Greatness Phishing-as-a-service 

Resources:

• https://www.reliaquest.com/blog/socgholish-fakeupdates/
• https://thehackernews.com/2023/05/new-ransomware-strain-cactus-exploits.html
• https://www.bleepingcomputer.com/news/security/new-greatness-service-simplifies-microsoft-365-phishing-attacks/

Summary: In this episode of ShadowTalk, host Stefano, along with Caroline and Colin, discuss the latest news in cyber security and threat research. Topics this week include:

• Five Eyes agencies takedown FSB-linked Snake malware
• Hunting Kubernetes for privilege escalation techniques
• Investigation offers insights into Caffeine PhaaS platform

Resources:

• https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-129a
• https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/whitepapers/kubernetes-privilege-escalation-excessive-permissions-in-popular-platforms
• https://www.bleepingcomputer.com/news/security/caffeine-service-lets-anyone-launch-microsoft-365-phishing-attacks/

In this episode of ShadowTalk, host Chris Morgan is joined by Corey Carter and Ivan Righi to discuss:

• A day in the life of a Threat Engineer at ReliaQuest
• ALPHV leaking internal comm's related to victims incident response
• High Severity vulnerability affecting Veeam back servers exploited in the wild (CVE-2023-27532)

In this episode of ShadowTalk, host Stefano, along with Kim, Ivan, and Brandon, discuss the latest news in cyber security and threat research. Topics this week include:

• Highlights from the ReliaQuest Ransomware Quarterly Report Q1 2023
• A supply-chain of a supply-chain: 3CX Update
• Analysis of Russia-Ukraine cyber operations
• A look into recent shifts in the cybercriminal ecosystem

Resources:

• https://www.reliaquest.com/blog/2023-ransomware-attacks-q1/
• https://www.ncsc.gov.uk/news/new-analysis-eccri-highlights-ukraine-defence-against-russian-offensive
• https://www.mandiant.com/resources/blog/3cx-software-supply-chain-compromise

In this episode, host and CISO Rick Holland is joined by ReliaQuest's Chief Technical Officer Joe Partlow and Chief Strategy Officer Jason Pfeiffer to discuss 

• cyber trends they're seeing across RSA Conference 2023
• the benefits of such an event
• AI in cyber and more.

In this episode of ShadowTalk, host Chris Morgan, along with Dani and Dean Murphy, discuss the latest news in cyber security and threat research. Topics this week include:

• A breakdown of ReliaQuest's latest Vulnerability quarterly report
• Aftermath of the ransomware attack affecting Capita
• The "Domino" Backdoor and "Project Nemesis" information stealing malware
• Lockbit targeting macOS

Resources:

• https://www.reliaquest.com/blog/2023-q1-vulnerabilities-cves/
• https://www.reliaquest.com/blog/2023-ransomware-attacks-q1/

In this episode of ShadowTalk, host Stefano, along with Caroline and Kitch, discuss the latest news in cyber security and threat research. Topics this week include:

• A new approach in malicious infrastructure takedown
• The latest TTPs of MERCURY aka MuddyWater
• What's new on this Patch Tuesday?

Resources:

• https://blogs.microsoft.com/on-the-issues/2023/04/06/stopping-cybercriminals-from-abusing-security-tools/
• https://www.microsoft.com/en-us/security/blog/2023/04/07/mercury-and-dev-1084-destructive-attack-on-hybrid-environment/
• https://www.bleepingcomputer.com/news/microsoft/microsoft-april-2023-patch-tuesday-fixes-1-zero-day-97-flaws/

In this episode of ShadowTalk, host Stefano, along with Ivan and Corey, discuss the latest news in cyber security and threat research. Topics this week include:

• The prominent Genesis Market has been seized: What's next?
• Confidential Vulkan Files expose ties between Russian APTs and private sector
• Microsoft mitigates malicious attachments delivered via OneNote

Resources:

• https://news.sky.com/story/notorious-criminal-marketplace-genesis-market-which-sold-stolen-bank-details-taken-down-12850517
• https://www.theguardian.com/technology/2023/mar/30/vulkan-files-leak-reveals-putins-global-and-domestic-cyberwarfare-tactics
• https://www.securityweek.com/microsoft-onenote-starts-blocking-dangerous-file-extensions/
• https://www.reliaquest.com/blog/top-reads-march-2023/