Talkin' Bout [Infosec] News

00:00:00 - PreShow Banter™ — Coffee With Wade Wells 00:05:41 - BHIS - Talkin’ Bout [infosec] News 2025-01-06 00:06:45 - Story # 1: BeyondTrust says hackers breached Remote Support SaaS instances 00:13:18 - Things Continued to be ignored in 2025 00:24:39 - Story # 2: Classified fighter jet specs leaked on War Thunder – again 00:28:26 - Story # 3: New Proposed HIPAA Security Rule Changes 00:34:33 -...

00:00 - PreShow Banter™ — ChickenSec News Part 3 12:23 - BHIS - Talkin’ Bout [infosec] News 2024-12-16 14:48 - Story # 1: $50 Million Radiant Capital Heist Blamed on North Korean Hackers 20:30 - Story # 2: Trump administration wants to go on cyber offensive against China 32:53 - Story # 3: Krispy Kreme cyberattack impacts online orders and operations 43:02 - Story # 4: Arctic Wolf and BlackBerry A...

00:00 - PreShow Banter™ — A Better Mike 04:46 - BHIS - Talkin’ Bout [infosec] News 2024-12-09 05:43 - Story # 1: FBI Warns iPhone And Android Users—Stop Sending Texts 23:36 - Story # 2: US agency proposes new rule blocking data brokers from selling Americans’ sensitive personal data 42:55 - Story # 3: Vodka maker Stoli files for bankruptcy in US after ransomware attack 46:48 - Story # 4: British h...

00:00:00 - PreShow Banter™ — C Squad 00:11:03 - BHIS - Talkin’ Bout [infosec] News 2024-12-02 00:15:43 - Story # 1: Gaming Engines: An Undetected Playground for Malware Loaders - Check Point Research 00:30:41 - Story # 2: FTC finds that smart-device makers fail to make clear how long their products will be supported 00:44:47 - Story # 3: US senators propose law to require bare minimum security sta...

00:00:00 - PreShow Banter™ — Discordgate 00:09:24 - BHIS - Talkin’ Bout [infosec] News 2024-11-25 00:10:46 - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly 00:12:08 - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership 00:19:16 - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Netw...

00:00 - PreShow Banter™ — Yacht Doc 07:40 - BHIS - Talkin’ Bout [infosec] News 2024-11-18 08:49 - Story # 1: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit 16:02 - Story # 2: CISA Director Jen Easterly to depart agency on January 20 19:26 - Story # 3: Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack 28:44 - Story # 4: T-Mobi...

00:00 - PreShow Banter™ — The Old and The New 02:27 - BHIS - Talkin’ Bout [infosec] News 2024-11-11 03:44 - Story # 1: Mattel pulls thousands of ‘Wicked’ dolls off shelves after printing adult website on packaging 08:03 - Story # 2: Office apps crash on Windows 11 24H2 PCs with CrowdStrike antivirus 11:41 - Story # 3: Mislabeled patch sends Windows Server 2022 admins on unwanted upgrade to 2025 16...

00:00:00 - PreShow Banter™ — The Grey Times 00:04:33 - BHIS - Talkin’ Bout [infosec] News 2024-11-04 00:05:54 - Story # 1: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files 00:16:45 - Story # 2: Follow Up - 5 Things To Know On Delta’s Lawsuit Against CrowdStrike 00:17:43 - Story # 2b: CrowdStrike Sues Delta: 5 Key Takeaways 00:22:04 - Story # 3: Russian charged by U.S....

00:00:00 - PreShow Banter™ — Sarsaparilla 00:05:50 - BHIS - Talkin’ Bout [infosec] News 2024-10-28 00:06:46 - Story # 1: AWS, Azure auth keys found in Android and iOS apps used by millions 00:15:02 - Story # 2: Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs 00:29:03 - Story # 3: Delta officially launches lawyers at $500M CrowdStrike problem 00:40...

00:00:00 - PreShow Banter™ — Log Con 00:11:41 - BHIS - Talkin’ Bout [infosec] News 2024-10-21 00:12:51 - Story # 1: Internet Archive exposed again – this time through Zendesk 00:14:57 - Story # 1b: Hackers steal information from 31 million Internet Archive users 00:20:42 - Story # 2: Sophos buys Secureworks for $859 mln to beef up cybersecurity portfolio 00:24:21 - Story # 3: USDoD hacker behind N...

00:00:00 - PreShow Banter™ — Cast of Special Characters 00:06:37 - BHIS - Talkin’ Bout [infosec] News 2024-09-30 00:08:06 - Story # 1: CUPS flaws enable Linux remote code execution, but there’s a catch 00:23:40 - Story # 2: US Capitol Hit by Massive Dark Web Cyber Attack - Newsweek 00:27:40 - Story # 2b: ‘I’m a black NAZI!’: NC GOP nominee for governor made dozens of disturbing comments on porn fo...

00:00 - PreShow Banter™ — Plane Talk 05:50 - BHIS - Talkin’ Bout [infosec] News 2024-09-23 06:16 - A SANS Difference Maker Award Finalist 09:47 - Story # 1: Pagers attack brings to life long-feared supply chain threat 24:08 - Story # 2: Recaptcha Phish - John Hammond 25:49 - Story # 2b: Clever ‘GitHub Scanner’ campaign abusing repos to push malware 30:05 - Story # 3: Lazarus Group Targets Develope...

00:00 - PreShow Banter™ — Pour Over News 06:01 - BHIS - Talkin’ Bout [infosec] News 2024-09-16 07:14 - Story # 1: Fortinet confirms data breach after hacker claims to steal 440GB of files 15:37 - Story # 2: Snowflake slams ‘more MFA’ button again – months after Ticketmaster, Santander breaches 21:30 - Story # 3: Omnipresent AI cameras will ensure good behavior, says Larry Ellison 28:11 - Story # 4...

00:00 - Introduction 01:22 - The Scenario 02:50 - First Steps 03:48 - Endpoint Analysis Roll 04:22 - Logon Scripts Were installed 05:09 - I.R. Team Introductions 07:17 - Second Step 10:32 - Network Threat Hunting Roll 11:36 - Third Step 15:12 - Anyway Here’s Firewall Roll 15:43 - Fourth Step 18:26 - SIEM Roll 19:41 - Fifth Step 20:47 - UEBA Roll 21:19 - Senario Recap 22:20 - Senario Plausibility?...

00:00 - PreShow Banter™ — Revenge of the Nerds / More Chicken Related Crimes 05:19 - N.Y. Official Charged With Taking Money, Travel and Poultry to Aid China 09:23 - BHIS - Talkin’ Bout [infosec] News 2024-09-09 09:50 - Story # 1: YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel 20:35 - Story # 2: Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Dat...

00:00 - PreShow Banter™ — Move to Signal 03:47 - BHIS - Talkin’ Bout [infosec] News 2024-08-26 04:37 - Story # 1: Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance 11:03 - Story # 1b: Moxie on X.com 23:17 - Story # 2: Unveiling “sedexp”: A Stealthy Linux Malware Exploiting udev Rules 29:39 - Story # 3: Seattle airport ‘possible cyberattack’ snarls travel yet again 32:42 - Story # 4: Iran...

00:00:00 - PreShow Banter™ — Nine Years for Chicken Wings 00:08:19 - BHIS - Talkin’ Bout [infosec] News 2024-08-19 00:09:03 - Story # 1: NationalPublicData.com Hack Exposes a Nation’s Data 00:18:17 - Story # 1b: National Public Data Published Its Own Passwords 00:25:01 - Story # 2: RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks 00:26:52 - Story # 3: T-Mobile fined $60 million...

00:00 - PreShow Banter™ — Scotty’s Pizza (Not Sponsored) 03:38 - BHIS - Talkin’ Bout [infosec] News 2024-08-12 03:59 - Hacker Summer Camp Report 2024 08:56 - Story # 1: ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections 14:26 - Story # 2: Black Hat USA 2024, DEF CON 32 attendees treated like children – or criminals – with invasive hotel room checks 29...

00:00 - PreShow Banter™ — What’s the f___ 03:34 - BHIS - Talkin’ Bout [infosec] News 2024-08-05 06:57 - Story # 1: Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails 23:57 - Story # 2: Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say 36:47 - Story # 3: Eavesdropping on HDMI cables can reveal computer screen’s content...

00:00 - PreShow Banter™ — Microsoft Sad Face 02:13 - BHIS - Talkin’ Bout [infosec] News 2024-07-29 03:08 - Story # 1: Fake CrowdStrike repair manual pushes new infostealer malware 15:26 - Story # 1b: 83-year-old man found safe a week after going missing when CrowdStrike outage canceled flight 20:39 - Story # 2: Multifactor Authentication Is Not Enough to Protect Cloud Data 38:59 - Graphrunner 47:1...

00:00 - PreShow Banter™ — CrowdStroke Memes 05:59 - BHIS - Talkin’ Bout [infosec] News 2024-07-22 07:01 - Story # 1: A Windows version from 1992 is saving Southwest’s butt right now 07:36 - Crowdstrike Global Outage - BHIS - Talkin’ Bout [infosec] #News 09:48 - Story # 1b: CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft 12:13 - Story # 1c: Let’s blame the dev who pr...

The outage of the decade!

00:00 - PreShow Banter™ — Absolute Madmen 02:28 - BHIS - Talkin’ Bout [infosec] News 2024-07-15 03:18 - Wi-Fi Forge 07:31 - Story # 1: CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth 22:39 - Story # 2: AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach 33:35 - Story # 3: FTC study...

00:00 - PreShow Banter™ — A Bunch of Lunatics 05:09 - BHIS - Talkin’ Bout [infosec] News 2024-07-08 08:41 - Story # 1: Europol takes down 593 Cobalt Strike servers used by cybercriminals 09:54 - Story # 1b: National Crime Agency leads international operation to degrade illegal versions of Cobalt Strike 15:17 - Story # 2: ‘RockYou2024’: Nearly 10 billion passwords leaked online 22:12 - Story # 3: T...

00:00 - PreShow Banter™ — Ice Cream Season 07:22 - BHIS - Talkin’ Bout [infosec] News 2024-07-01 07:48 - Story # 1: TeamViewer’s corporate network was breached in alleged APT hack 09:11 - Story # 1b: TeeamViewer Security Update – June 28, 2024, 12:10 PM CEST 16:33 - Story # 2: Supreme Court orders new look at Texas, Florida social media laws 21:32 - Story # 3: New OpenSSH Vulnerability Could Lead...