In this episode Javvad and Erich discuss a number of issues with Android phones, including an unofficial WhatsApp app stealing user accounts, how the Always-on VPN is leaking traffic and more.

Facebook Login Details at Risk as Meta Identifies Over 400 Malicious Apps

Android leaks some traffic even when 'Always-on VPN' is enabled

Lloyd's of London cuts off network after dodgy activity detected

In this episode, Erich and Javvad talking about human trafficking related to cybercrime operations, social media account takeovers and more!

Stories from the show:

Guilty verdict in the Uber breach case makes personal liability real for CISOs

Jury Finds Former Uber CSO Joe Sullivan Guilty of Cover-Up

Twitter post by Whitney Merrill - @wbm312

SUPERSEDING INDICTMENT

Twitter whistleblower tells Senate of ‘egregious’ security failings by company

Hundreds of Indians Reportedly Trafficked to Myanmar by Cybercrime Operations

Police arrest teen for using leaked Optus data to extort victims

An identity scam that has grown in the past 12 months by more than 1,000% - social media account takeover

In this episode, Erich and Javvad speak about the Uber breach, using WeTransfer to spread malware, UK folks fear that their kids will turn to cybercrime due to the rising cost-of-living, and more.

Stories from the show:

Uber investigating 'cybersecurity incident' after report of breach

Cybercrime Fears for Children as Cost-of-Living Bites

Hackers are using WeTransfer links to spread malware

Hackers now use ‘sock puppets’ for more realistic phishing attacks

Hong Kong consumers want right to choose when firms use AI

This week, Javvad and Erich discuss the campaign the Lazarus group is using against US energy companies, surveillance camera access for sale, and how credential stuffing compromised almost 200k accounts at North Face. All this and more!

Stories from the show:

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

200,000 North Face accounts hacked in credential stuffing attack

North Korea’s Lazarus hackers are exploiting Log4j flaw to hack US energy companies

How the ‘man in black’ was exposed by the Russian women he terrorised

https://www.bbc.com/news/world-europe-62799246

In this episode, Javvad and Erich discussa crafty coinminer malware that lays dormant for a while, Okta credential thefts, a huge increase in potential victims of a ransomware attack, and a possible device that allows bad actors to simulate swipes and taps on phones from under a table. 

All this and more!

Accepted the Risk Video:

Twilio Hackers Scarf 10K Okta Credentials in Sprawling Supply-Chain Attack

Windows malware delays coinminer install by a month to evade detection

Individuals affected by vendor ransomware attack reaches 2.7M

Hacking device can secretly swipe and tap your smartphone screen

In this episode, Erich is on the road in Dallas for the Podcast Movement conference, but him and Javvad still take the time out to discuss some major stories on cybersecurity this week. 

Stories from the show:

LastPass developer systems hacked to steal source code

Twitter whistleblower alleges ‘egregious deficiencies’ in security measures

Cyber attackers disrupt services at French hospital, demand $10 million ransom

Researchers Find Counterfeit Phones with Backdoor to Hack WhatsApp Accounts

In this episode, Javvad and Erich talk about the Cisco hack and wrap up the 2022 Black Hat experience.

Stories from the show:

Las Vegas slammed with more flash floods as iconic strip, casinos under water again

Cloudflare: Someone tried to pull the Twilio phishing tactic on us too

Cisco Talos shares insights related to recent cyber attack on Cisco

Erich and Javvad discuss a crypto currency theft of around $190mil, FEMA warns about patching emergency alerts systems and macros have become a top way to spread ransomware, plus more stories of the week. 

Join us live and chat with us on LinkedIn

Stories from the show:

Hack of US cryptocurrency firm Nomad leads to $190 million loss in bridge attack

87% of the ransomware found on the dark web has been delivered via malicious macros

FEMA warns emergency alert systems could be hacked to transmit fake messages unless software is updated

Ex-T-Mobile US store owner phished staff, raked in $25m from unlocking phones

In this episode Erich and Javvad discuss cyber attacks on the Port of Los Angeles, the value T-Mobile places on your data and much more!

T-Mobile Pitches $4-Per-Customer Settlement for Data Leak Impacting 80M People

https://www.darkreading.com/application-security/t-mobile-pitches-4-per-customer-settlement-for-data-leak

Cyber-attacks on Port of Los Angeles have doubled since pandemic

https://www.bbc.com/news/business-62260272

In this episode, Javvad and Erich discuss a Florida man charged with selling fake Cisco gear, a phish designed to get around MFA, ransomware gangs allow searching of dumped data and Google updates their password manager.

Stories from the show:

Florida man charged with selling fake Cisco equipment in $1 billion scheme

This big phish can swim around MFA, says Microsoft Security

Ransomware gang now lets you search their stolen data

Google Updates Password Manager With New Security, Management Tools 

India: How a fake 'IPL' cricket league ran for Russian punters