The Cyber Riddler

Dive into the shadowy world of lateral movement in cybersecurity.  In this episode of The Cyber Riddler. Explore how attackers stealthily navigate networks post-breach, using techniques from credential exploitation to abusing legitimate tools. Featuring real-world scenarios, this episode unveils the strategies behind advanced persistent threats and red team tactics. Learn about essential defenses like network segmentation and vigilant monitoring. Tune in for an essential guide to understanding and countering these hidden cyber maneuvers.

• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

In this episode of The Cyber Riddler, we dive deep into the shadowy world of insider threats. We unravel the complexities of individuals within an organization who pose a risk to its security from the inside. We'll explore real-life cases, dissect the motives behind insider attacks, and discuss the latest strategies and technologies to safeguard your company against this often underestimated danger

• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

In this episode we've talked about The Lazarus Group, Which is a cybercrime group made up of an unknown number of individuals run by the government of North Korea. We've discussed about their latest campaign where they targeted security researchers. and how they did the same act in the past. hope you like the episode.

• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

In this episode we've covered the basics of malware analysis. Things that malware authors want to hide in their malware. How they want to make it hard for malware analysts to do their job. Our guest today has an extensive experience in malware analysis. He publishes many videos on malware reverse engineering on his channel and he is very knowledgeable when it comes to this field.

Full Interview below:

• https://youtu.be/HuHATqK850s

Blog Post:

•  https://thecyberriddler.com/blog/malware-analysis-karsten

• Karsten's Twitter account
• https://twitter.com/struppigel
• Karsten's YouTube channel
• https://www.youtube.com/@MalwareAnalysisForHedgehogs
• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

In this episode we've talked about kernel drivers, We covered a variety of different topics like how to load a driver, signing process, HVCI and others, and we closed with Intel CET and Shadow stack. Yarden has a very great experience when it comes to windows internals topics, her work mainly in the defending side, she previously worked at SentinelOne and CrowdStrike and currently she is a senior security researcher at Trail of Bits, I hope you enjoy the episode.

Full Interview below:

• https://youtu.be/rhmnXmxSH2k

• Yarden's Twitter account
• https://twitter.com/yarden_shafir
• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

Dive into cybersecurity's captivating world with our latest episode on Vulnerability Research! Discover the secrets of ethical hackers, uncover different vulnerabilities, and explore responsible disclosure processes. Get insider tips and tricks to level up your cybersecurity knowledge. Our guest  Kevin is a renowned cybersecurity specialist and ethical hacker with years of experience and a keen eye for security flaws. 

Full Interview below:

• https://youtu.be/YURVs70d4ik

Other Links:

• Blog Post: https://thecyberriddler.com/blog/vulnerability-research-kevin-backhouse
• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

This Week's episode is about Windows Internals in depth, we've talked about things from an offensive and defensive perspective. Things like Hooks, Kernel callbacks, how security companies are using them and how Red Teamers are leveraging them as well. We've talked about many other concepts such as user space mode and kernel space mode, Patch Guard and many others. This episode is part of The Cyber Riddler podcast, Check out the other episodes on any of your favorite podcast apps. Just search the name "The Cyber Riddler". Not all of the episodes are in YouTube. links below

Full Interview below:

• https://www.youtube.com/watch?v=7pQpc1g7foc

• Pavel's YouTube Channel
• https://www.youtube.com/@zodiacon 
• https://thecyberriddler.com/blog/windows-internals
• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

In this episode we talked about Digital forensics and Incident response aka DFIR, how to get started, and how crucial it is to deal with incidents. We also talked about various topics including memory dump and analysis, ransomeware and stories from the past about interesting incidents. This episode was starring Paula Januszkiewicz, CQURE CEO.

Who's Paula?

• https://thecyberriddler.com/person/paula-januszkiewicz

Find the full description on the blog post available in the podcast website below:

• https://thecyberriddler.com/blog/getting-started-with-dfir-paula-januszkiewicz

This episode has a video as well, you can check it out on the link below: 

• https://www.youtube.com/watch?v=fs6kVl_r5ic

Contact us on:

• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

This week's episode talks about DNS in general and DNS attacks, we barely scratched the surface. DNS is playing a major role in our network communication and hackers take advantage of DNS attacks for their own gain. 

• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com

LoLBins or Living Off The Land Binaries are binaries within the operating system it doesn't matter if it's a windows or unix based system. these binaries are heavily utilized by hackers to avoid detections, in this episode we will be diving into the world of LoLBins and we will discover how hackers are using them. 

• Twitter: @almorabea
• Twitter: @CyberRiddler
• Website: https://thecyberriddler.com