In this episode of ShadowTalk, host Kim, along with Brian, discuss the latest news in cyber security and threat research. Topics this week include:

• Sophisticated backdoor identified in XZ Utils
• Our Spotlight report on SEO poisoning
• Impersonation scams cost $1.1 billion in 2023

In this episode of ShadowTalk, host Chris, along with ReliaQuest Threat Hunter's Caroline and Corey discuss the latest news in cyber security and threat research. This week's topics include:

• Issues with Google AI-powered search generative experience recommending scam sites
• Spain high court judge issues temporary ban on messaging platform 'Telegram'
• Speculative Execution vulnerabilities found on Apple M Series and Intel Raptor Lake CPU's

In this episode of ShadowTalk, host Chris, along with Marken and ReliaQuest CISO Rick, discuss the latest news in cyber security and threat research. This week's topics include:

• 2021 AT&T breach released for free 
• Magnet Goblin threat group exploiting 1-day vulnerabilities
• An introduction to ReliaQuest's Annual Threat Report (ATR)

In this episode of ShadowTalk, host Chris, along with Corey and Caroline, discuss the latest news in cyber security and threat research. Topics this week include:

• TeamCity Server critical vulnerability leaves potential for supply chain risk
• ReliaQuest research into advanced business email compromise (BEC) detections
• Microsoft compromised by Midnight Blizzard password spraying attack

Resources: 

• https://www.rapid7.com/blog/post/2024/03/04/etr-cve-2024-27198-and-cve-2024-27199-jetbrains-teamcity-multiple-authentication-bypass-vulnerabilities-fixed/ 
• https://blog.jetbrains.com/teamcity/2024/03/our-approach-addressing-recently-discovered-vulnerabilities-in-teamcity-on-premises/ 
• https://blog.jetbrains.com/teamcity/2024/03/preventing-exploits-jetbrains-ethical-approach-to-vulnerability-disclosure/ 
• https://www.reliaquest.com/blog/business-email-compromise-detection/

In this episode of ShadowTalk, host Chris, along with Fearghal and Kim, discuss the latest news in cyber security and threat research. Topics include:

• An overview of the critical severity vulnerabilities affecting ConnectWise, patch now!
• ReliaQuest research into Browser Credential Dumping attacks
• The latest in the world of ransomware
• Update to National Institute of Standards and Technology (NIST) framework

Resources:

• https://www.reliaquest.com/blog/browser-credential-dumping/ 

In this episode of ShadowTalk, host Chris, along with Ivan, Caroline, and one of ReliaQuest's CISOs Rick, discuss the latest news in cyber security and threat research. This week's topics include:

• Lockbit return following law enforcement operation
• Recent Structured Analytical Technique (SAT) exercises ran by ReliaQuest
• The Optum Breach and what you need to know
• 'SubdoMailing' malvertising campaign leveraging compromised domains

Resources:

• https://www.reliaquest.com/blog/lockbit-taken-down-what-comes-next/
• https://www.reliaquest.com/blog/scattered-spider-attack-analysis-account-compromise/

In this episode of ShadowTalk, host Chris, along with Brian, Kim, and one of ReliaQuest's CISOs Rick, discuss the latest news in cyber security and threat research. Topics this week include:

• Lockbit taken down by NCA led operation. Does this spell the end for the ransomware group?
• ReliaQuest research into abuse of Remote monitoring and management (RMM) tools
• Insider leaks Chinese government documents on Github

Resources:

• https://www.reliaquest.com/blog/lockbit-taken-down-what-comes-next/

In this episode of ShadowTalk, host Chris, along with Marken and Corey, discuss the latest news in cyber security and threat research. Topics this week include:

• ReliaQuest research into changes observed on SocGholish infection chain
• Update to Volt Typhoon campaign affecting US CNI
• Furore over reporting on Toothbrush smart devices reportedly used in DDoS attacks
• Canada bans Flipper Zero consumer hacking device, over car theft concerns

 Resources:

• https://www.reliaquest.com/blog/new-python-socgholish-infection-chain/
• https://www.reliaquest.com/blog/socgholish-fakeupdates/

In this episode of ShadowTalk, host Chris Morgan is joined by ReliaQuest CISO Rick Holland, Director of Threat Research Brandon Tirado and Intelligence Collection Analyst Fearghal Hughes to discuss the latest news in cyber security and threat research. Topics this week include:

• Breach of Remote Desktop Application 'AnyDesk' results
• Continued Ivanti vulnerability exploitations
• The rise of BEC deepfake social engineering attacks
• ReliaQuest's top priorities for the remainder of Q1 2024

Resources:

• https://event.on24.com/eventRegistration/EventLobbyServlet?target=reg20.jsp&eventid=4448957&sessionid=1&key=3FBF0E608FF3216DD9F1526D92EE5CCE&groupId=5180806&partnerref=website&sourcepage=register
• https://event.on24.com/wcc/r/4387339/A63BC17298406ECD68AABFFEF416702B?partnerref=organic

In this episode of ShadowTalk, host Chris, along with James and Ivan, discuss the latest news in cyber security and threat research. Topics this week include:

• The emergence of Killnet 2.0 
• Best practices for Baselining Detection Rules
• Insights from ReliaQuest's Q4 2023 Ransomware blog

Resources:

• https://www.reliaquest.com/blog/q4-2023-ransomware/