Sign up to save your podcasts
Or
Share The Insecurity Brief
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
The Insecurity Brief episodes
- Cyber Criminals Conquer Bank Security With Telegram-Powered Bots
Cybercriminals are using Telegram bots to steal one-time passwords and defrauding people through banks and online payment systems, including PayPal, Apple Pay and Google Pay
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. Honey Beez and Trip Elix have unique experiences to share in an unpaired podcast experience.
Join our community!!
Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
@HoneyBeez0x@trip_elixinks
Our Website: https://www.tripelix.com/insecurity/cybercriminals-conquer-bank-security-with-telegram-powered-bots
Youtube https://youtu.be/9svjjzRG-Pothe link to the podcast itunes:https://podcasts.apple.com/us/podcast/cyber-criminals-conquer-bank-security-with-telegram/id1583788677?i=1000537076545
Spoify:https://open.spotify.com/episode/5Vi2S9POXFZgbBG6k4rUoK
Soundcloud:https://soundcloud.com/user-841713900/cybercriminals-conquer-bank-security-with-telegram-powered-bots?si=ef0e0c4cd9d14f2297d0b254906dae82
Trip’s bookshttps://www.tripelix.com/merchHoney’s books
https://beedefense.net#zoho #eset #FBI #telegram #paypal #applepay #googlepay @ATM #bot
FamousSparrow: A suspicious hotel guestESET researchers have uncovered a new cyberespionage group targeting hotels, governments, and private companies worldwide. We have named this group FamousSparrow and we believe it has been active since at least 2019.
https://www.welivesecurity.com/2021/09/23/famoussparrow-suspicious-hotel-guest/
FBI and CISA: Hackers exploit a critical Zoho bugThe FBI, CISA and the Coast Guard (CGCYBER) warned today that state-backed persistent threat (APT) groups have been exploiting a critical bug in a Zoho system since early August 2021.
https://en.secnews.gr/366332/fbi-cisa-hacker-ekmetallevontai-ena-krisimo-bug-zoho/Cybercriminals going after one-time passwords with Telegram-powered botsAll the services Intel 471 has observed, which have only been in operation since June, either operate via a Telegram bot or provide support for customers via a Telegram channel. Two-factor authentication is one of the easiest ways for people to protect any online account. So, of course criminals are trying to circumvent that protection.
https://
16 min - Multiple Vulnerabilities in Microsoft Edge Web Browser- PATCH: NOW
Microsoft Edge is a Chromium based internet browser made by Microsoft, which is installed by default on all new Windows computers. This browser has several critical vulnerabilities that need to be patched immediately
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. Honey Beez and Trip Elix have unique experiences to share in an unpaired podcast experience.
Join our community!!
Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
@HoneyBeez0x@trip_elixinks
Our Website:
https://www.tripelix.com/insecurity/multiple-vulnerabilities-in-microsoft-edge-web-browser-patch-now/Youtube https://youtu.be/epXh4cLrtcAthe link to the podcast itunes:https://podcasts.apple.com/us/podcast/multiple-vulnerabilities-in-microsoft-edge-web-browser/id1583788677?i=1000536961219
Spotify:https://open.spotify.com/episode/7GQQbngLkccmCHGVnFu8cb
Soundcloud:https://soundcloud.com/user-841713900/multiple-vulnerabilities-in-microsoft-edge-web-browser-patch-now?si=ad80e8f173fa43efa97d4789c8197304
Trip’s bookshttps://www.tripelix.com/merchHoney’s books
https://beedefense.net#Edge #Microsoft #Google #Android #Facebook #scrape #clubhouse
Multiple Vulnerabilities in Microsoft Edge Could Allow for Arbitrary Code ExecutionMultiple vulnerabilities have been discovered in Microsoft Edge, the most severe of which could result in remote code execution. Microsoft Edge is a Chromium based internet browser made by Microsoft, which is installed by default on all new Windows computers.
https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-microsoft-edge-could-allow-for-arbitrary-code-execution_2021-123/
Android users without access to Google Maps, YouTube and Gmail from todayMillions of Android phones will be blocked from using popular apps, such as Google Maps, YouTube and Gmail, from today.
https://en.secnews.gr/367302/android-xristes-xoris-prosvasi-google-maps-gmail-youtube/
3.8 billion Clubhouse and Facebook user records allegedly scraped and merged, put for sale onlineA user on a popular hacker forum is selling a database that purportedly contains 3.8 billion user records.
The database was allegedly compiled by combining 3.8 billio15 min - Microsoft Uncovers Phishing As A Service Includes Easy To Use Templates Just Add Domain
Microsoft uncovered a large-scale organization and phishing-as-a-service operation. The turnkey platform budding criminals to create customized campaigns and develop their own phishing schemes complete with phishing kits, email templates, and hosting services needed to launch attacks.
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. Honey Beez and Trip Elix have unique experiences to share in an unpaired podcast experience.
Join our community!!
Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
@HoneyBeez0x@trip_elixinks
Our Website: https://www.tripelix.com/insecurity/microsoft-uncovers-phishing-as-a-service-includes-easy-to-use-templates-just-add-domain/
Youtube: https://youtu.be/4BNqBdtFjuQthe link to the podcast itunes:https://podcasts.apple.com/us/podcast/microsoft-uncovers-phishing-as-a-service-includes/id1583788677?i=1000536840309
Spoify:https://open.spotify.com/episode/6b4XeV3PNKto3U1lqx6XZG
Soundcloud:https://soundcloud.com/user-841713900/microsoft-uncovers-phishing-as-a-service-includes-easy-to-use-templates-just-add-domain?si=46bf561030cb41d89f0c0a215c6f8c51
Trip’s bookshttps://www.tripelix.com/merchHoney’s books
https://beedefense.net#Android #apple #malware #hack#Covid19 #icloud #tanglebot #cyberattack #sms
Google releases emergency fix to plug zero‑day hole in ChromeGoogle has released an emergency update for its Chrome web browser to fix a zero-day vulnerability that is known to be actively exploited in the wild by malicious actors. The security loophole affects the Windows, macOS, and Linux versions of the popular browser.
https://www.welivesecurity.com/2021/09/27/google-releases-emergency-fix-plug-zero-day-hole-chrome/
Large-Scale Phishing-as-a-Service Operation ExposedMicrosoft uncovered a large-scale, well-organization and sophisticated phishing-as-a-service (PhaaS) operation. The turnkey platform allows users to customize campaigns and develop their own phishing ploys so they can then use the PhaaS platform to help with phishing kits, email templates and hosting services needed to launch attacks.
https://threatpost.com/phishing-as-a-service-exposed/174932/
22 min - COVID-19 Text Message Malware Targets Android Users Across U.S. And Canada
This malware, coined TangleBot, can directly obtain personal information, control device interaction with apps and overlay screens, and steal account information from financial activities initiated on the device.
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. Honey Beez and Trip Elix have unique experiences to share in an unpaired podcast experience.
Join our community!!
Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
@HoneyBeez0x@trip_elixinks
Our Website: https://www.tripelix.com/insecurity/covid-19-text-message-malware-targets-android-users-across-u-s-and-canada/
Youtube https://youtu.be/RSV881Tp6yUthe link to the podcast itunes:https://podcasts.apple.com/us/podcast/covid-19-text-message-malware-targets-android-users/id1583788677?i=1000536712774
Spoify:https://open.spotify.com/episode/34aA8rRGfZYeDDxVI04PFF
Soundcloud:https://soundcloud.com/user-841713900/covid-19-text-message-malware-targets-android-users-across-us-and-canada
100,000,000 Android phone owners for sale
https://lists.nextmark.com/market?page=order/online/datacard&id=578695Trip’s books
https://www.tripelix.com/merchHoney’s books
https://beedefense.net#Android #apple #malware #hack#Covid19 #icloud #tanglebot #cyberattack #sms
TangleBot: New Advanced SMS Malware Targets Mobile Users Across U.S. and Canada with COVID-19 LuresCloudmark threat analysts have discovered a new piece of mobile malware spreading via SMS and currently targeting Android mobile users in the United States and Canada.TangleBot uses SMS text message lures with content about COVID regulations
https://www.cloudmark.com/en/blog/mobile/tanglebot-new-advanced-sms-malware-targets-mobile-users-across-us-and-canada-covid-19
iCloud Private Relay flaw leaks users’ IP addressesA flaw discovered in Apple’s new iCloud Private Relay defeats the feature’s raison d’etre by exposing a user’s IP address when certain conditions are met.
https://appleinsider.com/articles/21/09/25/icloud-private-relay-flaw-leaks-users-ip-addresses
Port of Houston target of suspected nation-state hackThe Port of Houston, a critical piece of infrastructure along the Gulf Coast, issued a statement Thurs
22 min - Microsoft Exchange Flaw Leeks Login Credentials Across The Internet
An unpatched design flaw in the implementation of Microsoft Exchange’s Autodiscover protocol has resulted in the leak of tens of thousands of login names and passwords for Windows domains worldwide.
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. Honey Beez and Trip Elix have unique experiences to share in an unpaired podcast experience.
Join our community!!
Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
@HoneyBeez0x@trip_elixLinks
Our Website: https://www.tripelix.com/insecurity/microsoft-exchange-flaw-leeks-login-credentials-across-the-internet/Youtube :https://youtu.be/SZgwCeN1bpwthe link to the podcast
itunes: https://podcasts.apple.com/us/podcast/microsoft-exchange-flaw-leeks-login-credentials-across/id1583788677?i=1000536475650
Spoify:https://open.spotify.com/episode/1CukwWBT9pyH4yEVJ1xiad
Soundcloud: https://soundcloud.com/user-841713900/microsoft-exchange-flaw-leeks-login-credentials-across-the-internet
Trip’s bookshttps://www.tripelix.com/merch
Honey’s bookshttps://beedefense.net
#windows #Exchange #microsoft #scam #zoho #hackersAutodiscovering the Great Leak
As a part of the ongoing security research efforts by the Guardicore Labs team, we have discovered an interesting case of credential leak affecting a large number of people and organizations worldwide. The credentials that are being leaked are valid Windows domain credentials used to authenticate to Microsoft Exchange servers.https://www.guardicore.com/labs/autodiscovering-the-great-leak/Microsoft Exchange Bug Exposes ~100,000 Windows Domain Credentials
An unpatched design flaw in the implementation of Microsoft Exchange’s Autodiscover protocol has resulted in the leak of approximately 100,000 login names and passwords for Windows domains worldwide.https://thehackernews.com/2021/09/microsoft-exchange-bug-exposes-100000.htmlFBI: $ 113 million lost online romantic scams this year
The FBI warned today that a huge increase in online romance scams has caused Americans to lose more than $ 113 million since the beginning of 2021.https://en.secnews.gr/366350/fbi-fetos-xathikan-113-ekatommuria-dolaria-diadiktuakes-romantikes-apates/14 min - New Windows Malware Targets Linux Subsystem To Evade Detection
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. Honey Beez and Trip Elix have unique experiences to share in an unpaired podcast experience.
Join our community!!
Subscribe to the Insecurity Brief podcast now on every platform we can find
Follow us on Twitter
@HoneyBeez0x
@trip_elix
links
https://www.tripelix.com/insecurity/new-windows-malware-targets-linux-subsystem-to-evade-detection/
Itunes: https://podcasts.apple.com/us/podcast/new-windows-malware-targets-linux-subsystem-to-evade/id1583788677?i=1000536364061
Youtube: https://youtu.be/dxw2cXD0pcw
Spoify: https://open.spotify.com/episode/1PJigJfGDHvsEduIRORo9k
Soundcloud: https://soundcloud.com/user-841713900/new-windows-malware-targets-linux-subsystem-to-evade-detection
Trip’s books
https://www.tripelix.com/merch
Honey’s books
https://beedefense.net
#windows #python #linux #repulican #openbox #windows11 #microsoft #malware
New Python Based Malware Attack Windows Subsystem for Linux To Evade Detection
The Lumen Black Lotus Labs has identified Linux binaries or Python Based Malware built for the Windows Subsystem for Linux (WSL) to evade detection. The threat actors are seeking new techniques to stealthily compromise Windows computers.https://cybersecuritynews.com/new-python-based-malware-attack-windows-subsystem-for-linux/Republican Governors Association email server breached by state hackers
The Republican Governors Association (RGA) revealed in data breach notification letters sent last week that its servers were breached during an extensive Microsoft Exchange hacking campaign that hit organizations worldwide in March 2021.https://www.bleepingcomputer.com/news/security/republican-governors-association-email-server-breached-by-state-hackers/Windows 11 is no longer compatible with Oracle VirtualBox VMs
Windows 11 is no longer compatible with the immensely popular Oracle VirtualBox virtualization platform after Microsoft changed its hardware requirement policies for virtual machines.https://www.bleepingcomputer.com/news/microsoft/windows-11-is-no-longer-compatible-with-oracle-virtualbox-vms/21 min - Apple Devices Vulnerable iOS,iPadOS, WatchOS, tvOS,Xcode,Safari, iTunes
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. Honey Beez and Trip Elix have unique experiences to share in an unpaired podcast experience.
Join our community!!Subscribe to the Insecurity Brief podcast now on every platform we can find
Follow us on Twitter@HoneyBeez0x@trip_elix
linksOur Website: https://www.tripelix.com/insecurity/apple-devices-vulnerable-the-entire-suite-of-devices-and-operating-systems/Youtube :https://youtu.be/mk5MhvPHfIoThe link to the podcast itunes: https://podcasts.apple.com/us/podcast/apple-devices-vulnerable-ios-ipados-watchos-tvos-xcode/id1583788677?i=1000536243269
Spoify: https://open.spotify.com/episode/5POIA9UuoYUAtEWnhyUbYK
Soundcloud:https://soundcloud.com/user-841713900/apple-devices-vulnerable-iosipados-watchostvosxcodesafari-itunes
Trip’s bookshttps://www.tripelix.com/merchHoney’s bookshttps://beedefense.net#windows #azure #microsoft #bluetooth #ransomware #exploitNSO’s Pegasus spyware: here’s what we know
Pegasus is spyware developed by a private contractor for use by government agencies. The program infects a target’s phone and sends back data, including photos, messages, and audio / video recordings. Pegasus’ developer, an Israeli company called NSO Group,https://www.theverge.com/22589942/nso-group-pegasus-project-amnesty-investigation-journalists-activists-targetedMultiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Apple Products, the most severe of which could allow for arbitrary code execution in the context of the affected user.https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-apple-products-could-allow-for-arbitrary-code-execution_2021-116/IoT ‘Nutrition’ Labels Aim to Put Security on Display
An all-out effort to develop a consumer-focused security labeling program will likely initially focus on Internet of Things (IoT) devices and could include many technology products used by small businesses as well.https://www.darkreading.com/endpoint/iot-nutrition-labels-aim-to-put-security-on-display15 min - Massive Bluetooth EXPLOIT Affects Billions of Devices Worldwide
Trip and Honey discuss tech like no one else
Join our community!!Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
@HoneyBeez0x@trip_elixlinks
Our Website: https://www.tripelix.com/insecurity/massive-bluetooth-exploit-affects-billions-of-devices-worldwide/
Youtube :https://youtu.be/0WpTVrxvUTMthe link to the podcastitunes:https://podcasts.apple.com/us/podcast/massive-bluetooth-exploit-affects-billions-of/id1583788677?i=1000536112924
Spoify:https://open.spotify.com/episode/79agFyHbs52mtdjXad9hAe
Soundcloud:https://soundcloud.com/user-841713900/massive-bluetooth-exploit-affects-billions-of-devices-worldwide
Trip’s books
https://www.tripelix.com/merchHoney’s bookshttps://beedefense.net#windows #azure #microsoft #bluetooth #ransomware #exploitMisconfiguration in EventBuilder exposes 100K event registrants’ personal information
EventBuilder allows by providing pre-registration and attendee-only content, Microsoft Teams and Skype for Business can work together seamlessly. More than one million CSV/JSON files containing the personal information of people who registered for events via Microsoft Teams https://thedigitalhacker.com/misconfiguration-in-eventbuilder-exposes-100k-event-registrants-personal-information/Billions of devices impacted by new BrakTooth Bluetooth vulnerabilities
A team of security researchers has published details this week about a suite of 16 vulnerabilities that impact the Bluetooth software stack that ships with System-on-Chip (SoC) boards from several popular vendors. The vulnerabilities, collectively known as BrakTooth, allow attackers to crash or freeze devices or, in the worst-case scenarios, execute malicious code and take over entire systems.https://therecord.media/billions-of-devices-impacted-by-new-braktooth-bluetooth-vulnerabilities/South Africa Ransomware Attacks Go On with One More Hit: the Whole Network of the Department of Justice Affected
On the 6th of September, South Africa’s Department of Justice was hit by a ransomware attack that targeted its network and managed to encrypt its entire systems, thus electronic services were not available anymore, neither internally, nor to the public.https://heimdalsecurity.com/blog/south-africa-ransomware-attack-department-of-justice/13 min - Netgear Complete Compromise Researcher Reveiles DOS & Password Bypass
Trip and Honey discuss tech like no one else
Join our community!!Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter@HoneyBeez0x@trip_elixlinks.Gov compromises hosting online Pharmacy content w/ obfuscationhttps://www.youtube.com/watch?v=7T1HBpO_Xlw&t=1sOur Website:https://www.tripelix.com/insecurity/netgear-complete-compromise-researcher-reveiles-dos-password-bypass/Youtube : https://youtu.be/Bvsa7cYciusThe link to the podcast itunes: https://podcasts.apple.com/us/podcast/netgear-complete-compromise-researcher-reveiles-dos/id1583788677?i=1000535978646Spoify: https://open.spotify.com/episode/3aiMoHdgBMmQ1CuSriwER2Soundcloud: https://soundcloud.com/user-841713900/netgear-complete-compromise-researcher-reveiles-dos-password-bypassTrip’s bookshttps://www.tripelix.com/merchHoney’s bookshttps://beedefense.net#windows #azure #microsoft #kali #zeroday #exploit#At&t #iphone #android #netgear #exploit #compromise #DOS #porn #viagraAT&T lost $200M in seven years to illegal phone unlocking scheme
A Pakistani fraudster was sentenced to 12 years in prison earlier this week after AT&T, the world’s largest telecommunications company, lost over $200 million after he and his co-conspirators coordinated a seven-year scheme that led to the fraudulent unlocking of almost 2 million phones.https://www.bleepingcomputer.com/news/security/atandt-lost-200m-in-seven-years-to-illegal-phone-unlocking-scheme/Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released
New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control of vulnerable devices.https://thehackernews.com/2021/09/third-critical-bug-affects-netgear.htmlUSA: Government websites display porn and Viagra ads
Security researcher Zach Edwards has identified the issue in these .gov and .mil domains and is using a common product provided by Laserfiche. Laserfiche provides services to the FBI, the CIA, the Ministry of Finance of USA, the army and many other government bodies.19 min - Microsoft Ditches Passwords In Favor Of Software Apps What Could Go Wrong?
Honey discuss tech like no one else
Join our community!!Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
@HoneyBeez0x@trip_elixlinks
Our Website: https://www.tripelix.com/insecurity/microsoft-ditches-passwords-in-favor-of-software-apps-what-could-go-wrong
Youtube :https://youtu.be/D9kkRu22PEk
the link to the podcastitunes:https://podcasts.apple.com/us/podcast/microsoft-ditches-passwords-in-favor-of-software/id1583788677?i=1000535616634
Spoify:https://open.spotify.com/episode/3URoxZPiMtXZ5DnioSM8Jn
Soundcloud:https://soundcloud.com/user-841713900/insecurity-brief-ep5-microsoft-ditches-passwords-in-favor-of-software-apps-what-could-go-wrong
Trip’s books
https://www.tripelix.com/merchHoney’s bookshttps://beedefense.net#windows #azure #microsoft #kali #zeroday #exploit
“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution
Wiz’s research team recently discovered a series of alarming vulnerabilities that highlight the supply chain risk of open source code, particularly for customers of cloud computing services.https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-executionYou Can Now Sign-in to Your Microsoft Accounts Without a Password
Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification code sent via SMS or email.https://thehackernews.com/2021/09/you-can-now-sign-in-to-you-microsoft.htmlThe Most Advanced Penetration Testing Distribution
Kali Linux is an open-source, Debian-based Linux distribution geared towards various information security tasks, such as Penetration Testing, Security Research, Computer Forensics and Reverse Engineering.https://www.kali.org/24 min
About The Insecurity Brief
From the publisher's feed
Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us. Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from a different point of view.
#followthewhiterabbit