Hello everyone, welcome to podcast 136 of the security box. On this edition of the program, we're going to talk about a group that has quite a bit up its sleve. We also have a bunch of news from around the landscape, a familiar foe that could in theory get the moron of the podcast yet again and much more. We hope that you enjoy the program and thanks for listening!

Possible moron

I wrote a thought article on my blog with no accompanying article. Here is that blog post titled TikTok says: “We’re embedded” in to the operating system. I am not sure if this will be it, and if someone puts something else in, we'll add it to this list. We could in theory add this blog post about Bite Dance Surveiling journalists to this too.

Topic: Vice Society

This blog post titled Vice Society Ransomware Group Targets Manufacturing Companies is probably the beginning. This seems to be a new group and it seems pretty dangerous. While it hasn't targetted the United States yet, we know that anything is possible in this crazy world.

Supporting our podcast

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

Hello folks, welcome to podcast 135 of the security box. On this podcast, we're going to talk about the court system allowing the lawsuit to continue against one of the most proliferated companies who continue to claim they don't do anything wrong and their software that is used by law enforcement to solve crimes. Who is that group? The NSO group out of Israel. We'll also have news, notes, at least one moron of the podcast, but rumor has it that we have a few, and much more.

Morons of the podcast

George Santos has some revelations that has come out and an investigation has since been started.

The blog post in question is right here, and is titled George Santos masterminded 2017 fraud case. It leads to a lengthy read about what the investigations entale although we don't know what will eventually happen.

If you really want to talk about Morons, the FBI admitted to buying data which really should not be a surprise. We could possibly add Elon Musk apologizing for firing a disabled worker of twitter as well.

This blog post about twitter news covers the fact that the root certificate has now expired and Elon Musk has since fired everyone of alue including the one who has delbt with the Root CA which was internal to the company, so now ... they're screwed.

Don't forget the Freenom ordeal too. This blog post leads to Krebs on Security talking about this. I also put in some discussion about this too.

Have any other possible morons? Do you disagree on some of these not being complete morons? I completely understand, but we do have at least two of them listed and others may just be complete stories within themselves.

Musing

I found this quite interesting in regards to Mastodon VS the rest of the Social Media universe such as Facebook, Twitter, Instagram and Tiktok. It says: Earle Zwicker: Boosting Ethan Schoonover (ethanschoonover): Stop thinking of Twitter, TikTok, IG, (et al) as social media sites.

They are **Content Refineries.**

Like processed food manufacturers they take user content & extract the most addicting/engaging content. Brains eat it up but in an unhealthy “devour the whole bag of chips” way.

They make hyper-processed social media junk food.

Mastodon is more like a potluck. We're all bringing dishes. It's a mess. Kids are running all over. But we are, at least, real people sharing real things.

Our topic, the NSO group

Supreme Court clears way for WhatsApp case against NSO Group, opening spyware firm to more lawsuits is the article that comes to us from Cyberscoop. Its going to be a very interesting discussion. We'll just have to see how it goes.

Support our podcast. Let us know what you think or suggest topics. Thanks!

Hello folks, welcome to the Security box, podcast 134. This podcast is going to talk about PBKDF2, an encryption algorithm that is used in certain situations. We'll also have a moron of the week, maybe two, maybe more! We'll also dip our toes in the landscape and see what is on other folks minds.

Morons of the podcast

This first one is quite dumb. In fact, when I saw the boost which saw it, I had to title this the way I did. You Stupid F**k … its not going to look good for you now when you get picked up is my blog post on an article coming from a site called news24.com.

Not only is this guy found guilty, you're going to read that he just chose not to even show up! How dumb can you be?

This second one comes from this blog post about TikTok's newest challenge. There is some strong language with this post, and from at least two people, it is well warranted. I try not to use strong language in my posts, but this one is definitely beyond repair.

The short of this, for those who may be offended by strong language, is that scammers will stop at nothing to either get their wares out or to cause as much harm as possible. In this latest twist, we have someone going aroudn claiming they can turn loved one's ashes to a sculpture or even a painting. They claim its free ... but it isn't. The article leads to this Kim Komando article talking about the TikTok Scam. If it isn't mentioned as part of this segment, which it just may, please feel free to weigh in on this one.

Our topic, PBKDF2

PBKdf2 is one of many encryption types for passwords and the like. Here's the Wikipedia article on it as we take from the first two sections for now. There are replacements for it and its covered within this article, but we'll let you look this up later.

Book Selection: Tracers in the dark

I chose my next book. Tracers in the Dark by Andy Greenberg. During the podcast, we'll check in with folks to see where they are in this ... or other books that are on our list. This is my blog post talking about Tracers in the dark if you need it.

I finally got my book review up for If it's smart, its vulnerable by Mikko Hypponnen. Here's that blog post if you're interested to see what I have to say about it.

Supporting our podcast

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

We have a round table today on the security box.

Domains, schemes, scams, tiktok, the landscape and much much more on this open forum of the program. Hope you all enjoy the program!

Welcome to the security box, podcast 132. On this edition of the program, we're going to talk about a newcomer I think, one that might be and up and comer. We have a rumor that we might have at least one moron, but who knows how many. We'll have news, notes and other commentary as well. Rumor has it, we've got a surprise while making a phone call before last Saturday's security hour that someone who I thought wouldn't read books is reading the same book several of us are reading. Find out as you listen to the podcast edition of the program.

Moron of the podcast

Nick, our normal staple now a day, mentioned this story in passing. Turns out that do have a moron as you'll see in the accompanying blog post.

As it turns out, other articles about this 90 million dollar takeover can be found, but my blog post This was mentioned as our possible moron of the podcast … a suspect found guilty but attorney will appeal has the details and some very interesting questions I think we need to talk about as this gentleman, Vladislav Klyushin, is our moron of the podcast. You should've stayed with cybersecurity and you would have been OK. Enjoy your award, the hammer is down on you this time.

Dark Pink

This week, we learn about a new group out there called Dark Pink. Dark Pink, a newly discovered hacking campaign, threatens Southeast Asian military, government organizations is the article and it comes from Cyberscoop. Come with us as we take this malware apart and talk about what its up to. It comes from a group as you've probably read if you found the article through our list or even blog. This is going to get very interesting.

Supporting the podcast

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

One sware word within the first hour and 15 minutes. A note has been placed in the audio for folks who need to be aware of it. Full notes below.

Hello everyone. Welcome to program 131 of the Security box. I hope you'll enjoy what we have to offer you today. On this podcast, we have a rumor that indicates that we'll definitely have at least one moron of the podcast, maybe more. We'll also have the topic of the Q4 threat trends Report from Phishlabs as well as questions, comments and more. We hope you'll enjoy the program and thanks for listening!

Here's a moron set for you

There were two articles in which broke this, and it definitely fits our Moron of the podcast. This blog post from February 10th has links to each of the articles and initial thoughts.

Also, I'm not too sure about this one, but we could probly fit this IRS update from February 10th as well as this blog post talking about an article by Andy Greenberg and a guy who thinks that he won't be caught as he apparently got a mixer going on and he's supposedly taken the right precautions.

If you have anything in this category, feel free to mention it by sending us an email, an imessage, find me on Mastodon and even text or whats app me.

Our topic

Seems like QBot is back in the news as the top threat in this last quarters report from Phishlabs and Fortra. The article is titled QBot Campaigns Overwhelmingly Lead Reported Payloads in Q4 is the article we'll be taking from. It was posted to TSB's list last December, and of course, I do try and cover it. The threat may still be there, and with all of what we'll be talking about here, all of these threats have not gone away.

Supporting our podcast and work

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

Hello everyone. Welcome to podcast 130A. We're going to rebroadcast a podcast from Cyber Crime Magazine about the book Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency which is also linked on our resources page.

I found the program of interest, and this could in theory be my next book. I hope that everyone enjoys this interview about the book!

Welcome to the security box, podcast 130. On this show, we're going to talk about a very interesting article that covers the fact that Coppa is out of date and congress hasn't done anything about it. We'll have news, notes, commentary and more. Who knows, will we have a bonehead award of the podcast? We'll have to see.

Topic: Coppa and Congress

I blogged this one, and on this podcast, we're going to discuss State legislators aren't waiting for Congress to regulate children's online privacy. It was quite interesting to see that Coppa is needing to be changed yet companies aren't really following it like they should.

Adult disclaimer

This program may contain some strong language. Parental desgression is advised. This means its an infrequent occurrence, but there.

There is one spot where some strong language is used within the following podcast. We want people to be aware of that. Its only one word, but due to rules and regs, we must bring this up to the listener.

Hello folks, welcome to the security box podcast 129. Last week, we talked about the government, but there's more to the story in which people may not be aware of.

Apparently, there has been a watch dog group out there taking reports on what the government has or has not done.

The article is titled Government watchdog: Feds fail to implement vast majority of cybersecurity recommendations and was covered by Cyberscoop.

This is a very interesting article which we'll be stepping through.

Besides that, my hunch may indicate that we'll have a moron of the podcast, people may have questions, and we'll see what the show has in store.

Welcome to the Security box, podcast 128. On this podcast, we probably have two morons of the podcast, one of which should've gotten it before we came up with the idea. We also ask the question, What's going on over at CISA? This acronuym stands for Cybersecurity and Infrastructure Security Agency.

Seems as though they don't know what's going on, or at least might be confused.

Moron of the podcast

We have listed both morons of the podcast by listing the basics of the story and links to the stories themselves.

1. It seems as though T-Mobile has had yet another breach with at least another estimated 37 million consumers, whether prepaid or postpaid.

2. The second moron goes to a guy in Russia that thought it would be fun to launder crypto currency. Not only was he funneling Crypto, but he was the founder of a crypto currency exchange. Russian founder of a cryptocurrency exchange known for funneling ransomware profits arrested comes to us from Cyberscoop and hasn't been blogged as of yet, but will be.

Topic: What's going on at CISA?

CISA has been known to send notifications via an email list that people can subscribe to. How I got on it, I don't remember, but it has since changed the way things are sent. Regardless, the article Insiders worry CISA is too distracted from critical cyber mission is our article that will help us with our discussion. It also comes from Cyberscoop.

Other stuff

I know that Nick missed last week's program so we'll give him an opportunity to get on the program and talk about anything from last week. We'll go through news, notes and other things too.

Supporting the podcast

If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.