In this episode of the TOSS C3 Podcast, host Neil Haley converses with Greg Hanna, founder of TOSS C3, about a sophisticated phishing attack targeting Microsoft 365 users. The discussion highlights a recent phishing campaign that exploits executives in various industries using a technique called "Evil Proxy," which intercepts and manipulates login attempts to steal sensitive information.

Greg explains how attackers use visually similar domain names and convincing login pages to trick users into providing their credentials and two-factor authentication (2FA) codes. Once obtained, these credentials allow attackers to gain unauthorized access to the real Microsoft environment, enabling them to steal information, redirect payments, and manipulate employee data.

The conversation emphasizes the critical need for robust cybersecurity measures, including endpoint detection and response (EDR) systems and managed detection and response (MDR) services. Greg advocates for investing in enterprise-level security solutions equipped with artificial intelligence, machine learning, and behavioral analysis to protect against such attacks. He also discusses the importance of a 24/7 Security Operations Center (SOC) to provide continuous monitoring and rapid response.

Listeners are encouraged to take proactive steps to safeguard their systems, such as setting up a Zero Day Protection Service (ZPS) and conducting regular vulnerability assessments. Greg offers complimentary penetration tests and personalized consultations to help businesses strengthen their cybersecurity posture.

To learn more and secure your business, visit TOSS C3's website and schedule a call with Greg Hanna. The episode underscores the evolving landscape of cyber threats and the importance of staying vigilant and prepared.

In this episode of the TOSS C3 Podcast, host Neil Haley engages in a dynamic conversation with Greg Hanna, the founder of TOSS C3, about the critical issue of zero-day vulnerabilities. The discussion centers around a significant cybersecurity breach involving Sony Interactive Entertainment, which was caused by a zero-day vulnerability in Progress Software's MOVEit Transfer platform. This incident impacted nearly 6,791 individuals, highlighting the severe consequences of such exploits.

Greg and Neil delve into the nature of zero-day vulnerabilities, emphasizing their unpredictability and the lack of available defenses until they are discovered and patched by vendors. The conversation also explores a recent SQL injection attack on MOVEit, which underscores the importance of timely patching and vigilant cybersecurity measures.

The episode provides valuable insights into proactive steps organizations can take to protect themselves, such as implementing advanced technologies from the security sector, zero trust network access systems, and constant posture checking devices. Greg shares his experiences and the innovative solutions TOSS C3 is developing to safeguard against these threats.

The podcast concludes with a broader discussion on the impact of cybersecurity breaches on consumer behavior, particularly in online sales, and the increasing reliance on trusted, large-scale e-tailers like Amazon. Greg Hanna encourages listeners to stay informed and vigilant, highlighting the need for ongoing cybersecurity awareness and preparedness.

In this episode of the Toss C3 podcast, host Greg Hanna, founder of Toss C3, discusses the crucial role of automation in incident response and cybersecurity. As cyber threats become increasingly sophisticated and frequent, the need for automated, real-time responses is more vital than ever. Greg explains how Toss C3 utilizes advanced technologies such as artificial intelligence, behavioral analysis, and machine learning to automatically detect and neutralize potential threats.

In this episode of the Toss C3 podcast, Greg Hanna, founder of Toss C3, delves into the vulnerabilities associated with biometric authentication on mobile devices. While facial recognition and fingerprint scanning offer convenience, they also present significant security risks. Greg explains how hackers can exploit these features using advanced techniques like 3D printing and photographic manipulation to gain unauthorized access to your devices and sensitive information.

Greg discusses the pros and cons of using biometrics for different applications and provides practical advice on when to avoid these features, especially for banking and critical apps. He also touches on the importance of multi-factor authentication and the limitations it may have if your device falls into the wrong hands. Tune in to learn why convenience shouldn't compromise your security and how to better protect your mobile devices from sophisticated attacks.