In this episode of ShadowTalk, hosts Chris and Kim, along with Ivan Righi, discuss the latest news in cyber security and threat research. Topics this week include:

• Rise of the Deepfakes: Threat actors target Ferrari, Fake North Korean IT worker fake's job interview
• Developments in ransomware: Stormous v3, VSXI, Black Basta develop custom malware
• ReliaQuest Research: Beyond the Endpoint: Threats Bypassing your Endpoint Detection and Response (EDR) solutions

Resources:

• https://www.reliaquest.com/blog/beyond-the-endpoint-cyber-threats-eluding-endpoint-detection/
• https://arstechnica.com/tech-policy/2024/07/us-security-firm-unwittingly-hired-apparent-nation-state-hacker-from-north-korea/
• https://www.drive.com.au/news/ferrari-ceo-impersonated-ai-deepfake-scam/

In this episode of ShadowTalk, hosts Chris and Kim, along with ReliaQuest CISO Rick Holland, and Detection Researcher Corey Carter, discuss the latest news in cyber security and threat research. Topics this week include:

• CrowdStrike Global IT Outage breaks records in impacting 8.5 million devices (1:22)
• The importance of accountability and trust when working with third party vendors
• ReliaQuest research into threats facing Financial & Insurance (18:46)

Resources:

• https://www.reliaquest.com/blog/crowdstrike-outage-script-phishing-and-social-engineering-attacks/

In this episode of ShadowTalk, hosts Chris and Kim, along with guest CISO Craig McEwen, discuss the latest news in cyber security and threat research. Topics this week include:

• ReliaQuest Research: Ransomware in Q2 2024
• Weekly roundup: Threat actors weaponizing exploits within 22 minutes, Disney/AT&T breaches
• Linking security strategy to expenditure
• Supporting cyber apprenticeships and investing in people

Resources:

• https://www.reliaquest.com/blog/q2-2024-ransomware/
• https://app.galabid.com/shawburyproms/items

In this episode of ShadowTalk, hosts Chris and Kim, along with Brian, discuss the latest news in cyber security and threat research.

• The influence of Generative Artificial Intelligence (GenAI) on cybercrime
• Tango down: Law enforcement takedown over 600 Cobalt Strike servers
• Record breaking DDoS attack disclosed by researchers
• Rockyou2024: 9.9 Billion stolen passwords posted onto BreachForums

Resource: AI-powered Cybercrime Report

In this episode of ShadowTalk, hosts Chris and Kim, along with Marken, discuss the latest news in cyber security and threat research. Topics this week include:

• TeamViewer compromised by APT29 in supply chain attack
• MOVEit in the headlines again, critical severity vulnerability disclosed
• Popular Content Delivery Network (CDN) providers compromised in supply chain attacks
• ReliaQuest research in a case study attributed to the Medusa ransomware group

Resources: 

• https://www.reliaquest.com/blog/medusa-attack-analysis/

In this episode of ShadowTalk, hosts Chris and Kim, along with Ivan and Gjergji, discuss the latest news in cyber security and threat research. Topics this week include:

• Lockbit claim breach of the US Federal Reserve, but are they telling the truth? 
• ReliaQuest research into misuse of Protocol Tunneling
• Fallout from the US Ban of Kaspersky

Resources:

• https://www.reliaquest.com/blog/protocol-tunneling-tools-and-techniques/#:~:text=Protocol%20tunneling%20is%20a%20technique%20used%20to%20encapsulate,be%20transmitted%20through%20a%20secure%20or%20otherwise-allowed%20protocol.

In this episode of ShadowTalk, host Chris, along with Marken, discuss the latest news in cyber security and threat research. Topics this week include:

• Scattered Spider leader reportedly arrested, as group pivot to target SaaS solutions
• ReliaQuest research into supply chain compromise. Detections to improve your resilience
• Classifying insider threats and the difficulties of proving intent

Resources:

• https://www.reliaquest.com/blog/what-is-scattered-spider/
• https://www.reliaquest.com/blog/scattered-spider-attack-analysis-account-compromise/
• https://www.reliaquest.com/blog/software-supply-chain-risk-management/
• https://www.reliaquest.com/blog/virtual-machines-defense-evasion/

In this Special Guest Episode of ShadowTalk, host Chris and one of ReliaQuest's CISOs Rick Holland are joined by University of Kansas Health System (UKHS) CISO Michael Meis to discuss the latest news in cyber security and threat research. Topics this week include:

• Significant threats facing healthcare: Ransomware, accidental insiders
• The influence of COVID on ransomware activity
• The immediate and long term impact of the Optum breach
• The importance of understanding your revenue cycle to weather the storm of a breach
• Methods of maintaining engagement and retaining staff
• AI and automation: Improving timeliness and efficiency of incident response

In this episode of ShadowTalk, host Chris Morgan is joined by ReliaQuest Chief Strategy Officer Jason Pfeiffer LIVE on the InfoSec Europe show floor in London, UK to discuss:

• How InfoSec stacks up against the US cyber conferences
• Snowflake data breach affecting TicketMaster and others
• Cybercriminal reflections on generative AI

Resources:

• https://www.reliaquest.com/blog/common-infostealers/

In this episode of ShadowTalk host Corey, along with Gjergji and Brian, discuss the latest news in cyber security and threat research. Topics this week include:

• Microsoft set to begin the deprecation of VBScript in the second half of 2024 
• ReliaQuest research into the top three Infostealers 
• Dive into a new crypto miner dubbed 'GhostEngine' 
• ReliaQuest analysis of a BlackSuit ransomware attack 

Resources:

• https://techcommunity.microsoft.com/t5/windows-it-pro-blog/vbscript-deprecation-timelines-and-next-steps/ba-p/4148301
• https://www.reliaquest.com/blog/common-infostealers/
• https://www.elastic.co/security-labs/invisible-miners-unveiling-ghostengine 
• https://www.reliaquest.com/blog/blacksuit-attack-analysis/