The 443 - Security Simplified

This week on the podcast, we cover a cloud security alert courtesy of Cybersecurity & Infrastructure Security Agency (CISA) and encrypted DNS guidance from the NSA. We also discuss a macOS malware evasion technique that has eluded analysis for over 5 years, until now.

This week on the podcast we dive into what will likely be remembered as the hack of the decade. With victims including dozens of Fortune 500 companies and US Federal agencies, the SolarWinds supply chain breach has had a massive impact on the industry and as the potential to change client/vendor trust relationships going forward.

Happy Holidays! This week on the podcast, we're going back to one of our favorite episodes from 2019 where we sat down with Biohacking pioneer Amal Graafstra to discuss implants, RFID technology and the future of human/technology interactions.

This week on the podcast, we jump in to WatchGuard Threat Lab's 2021 security predictions. From automated spear phishing to booby-trapped electric vehicle chargers, we'll discuss each of the 8 predictions we made and why we made them. You can read about the predictions in full at watchguard.com/predictions.

Every November, WatchGuard Threat Lab tries to make predictions about potential security events in the coming year. While some predictions might come off as a bit extreme, they're all grounded in actual trends that we see and expect to continue. With 2020 almost under wraps, its time for us to look back to the predictions we made one year ago and grade ourselves on how well we did.

This week on the podcast, we sit down with ESG Analyst John Grady again, this time to chat about the topic of SMB Security. We'll cover how the cyber threat landscape has changed throughout 2020 and what SMBs got right, and wrong when it came to adapting.

This week on the podcast we sit down with John Grady, analyst at Enterprise Strategy Group, to break down the latest industry industry terms Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA). We'll dive in to exactly what they encompass and then get John's thoughts on where they stand in small and medium enterprises.

This week on the podcast we discuss a previously unsolved mystery from the dark web that was just solved with a little help from the IRS. We'll then discuss the growing issue of malicious opensource packages and libraries after researchers last week discovered a malicious package masquerading as a popular communications service.

This week on the podcast, we'll discuss an alert from US-CERT and the FBI that details an "imminent threat" to hospitals and other healthcare facilities, as well as some recently disclosed critical vulnerabilities in a popular healthcare records software. After that, we'll give you your (hopefully) last dose of election security news with some election related hacking from the past week.

With the US elections only a week away, we're talking election security on this week's episode. We'll cover what we do and don't think attackers will target in the coming week and what we can do as a country to improve our security posture.

This week on the podcast, we discuss the latest round of indictments against foreign intelligence agents for cyber espionage. After that, we cover a Microsoft-lead coalition that has so far made a significant impact in taking down the infrastructure behind one of the largest active botnets. Finally, we highlight key takeaways from the latest Google Threat Analysis Group update on foreign hacking e...

This week on The 443, we cover research from Microsoft's security team on a new Android ransomware variant that gets around Google's latest protections. We also cover a UEFI malware loader discovered by Kaspersky and the US Department of Justice's actions against a popular video game console mod chip manufacturer.

This week on the podcast we circle back to cover a critical vulnerability in Windows Server, that could allow an attacker to obtain the keys to the kingdom with minimal effort. After that, we discuss a pair of alerts from the US Department of Treasury Office of Foreign Assets Control and Financial Crimes Enforcement Network on the topic of ransomware payments.

This week on the podcast, we cover the latest internet security report from WatchGuard Threat Lab. We'll go over the key takeaways from the Q2 2020 report including malware and network attacks that targeted WatchGuard customer networks. Before that though, we'll discuss an alert from the US Cybersecurity and Infrastructure Security Agency (CISA) that detailed a successful cyber attack against an u...

This week on The 443 – Security Simplified, we sit down for a chat on disinformation with Nina Jankowicz, author of How to Lose the Information War. From the US to Estonia, we’ll discuss how nation states are weaponizing social discussion against their adversaries to sow discord and advance their own influence and agenda, in some cases without even having to pick a side.

This week on the podcast, we cover the city of Portland's ban on facial recognition technology for both public and private organizations, malware targeting VOIP soft switches, and an update from Microsoft on foreign hacking attempts into entities involved in this year's US elections.

This week on the podcast we cover an update on the MYSTIC surveillance platform, one of several covert and potentially illegal spying programs that former NSA contractor Edward Snowden leaked the existence of in 2014. Additionally, we'll discus an update on the payment card skimming malware MageCart and a Python Remote Access Trojan. Episode Note: Yes, we posted this episode a bit late but we'll b...

This week on the podcast we cover the latest updates on Uber’s cover up of their 2016 data breach that impacted 57 million customers and employees. After that, we discuss a DDoS attack against the New Zealand Stock Exchange and an interesting malware delivery technique that researchers at ProofPoint recently disclosed.

This week on the podcast, we cover Generative Pre-trained Transformer 3 or GPT-3, an AI model that a UC Berkeley student recently used to generate blog posts that fooled humans enough to propel one of them to the top of Hacker News. Additionally, we'll discuss a P2P botnet that has been targeting SSH servers on the internet.

This week on the podcast, we’re bringing back a favorite episode from the very beginnings of The 443 – Security Simplified where we dove in to the Dark Web and discussed how It works, where it came from, and who uses it now. This episode originally aired in 2018.

With BlackHat’s online-only 2020 edition conference in the bag we take a look back at a few of our favorite briefings and discuss the takeaways as they apply to our industry. From a penetration test gone wrong to what security professionals can learn from an EMT, we cover the best talks from this year’s event.

With the Black Hat and DEF CON security conferences starting this week, albeit in an online-only mode, we decided to take a look through this year’s agenda and pick some of the talks we are most looking forward to. We’ve picked out talks ranging from new research to updates on recent vulnerabilities to discuss on this week’s episode. Be sure to check out defcon.org this weekend since the conferenc...

This week on The 443 – Security Simplified we discuss yet another alert from the UK National Cyber Security Center, this time on cyber-attacks targeting sporting organizations. We also take a quick dive into Meowing, a wave of destructive hacking that’s been targeting exposed databases online. Finally, with only a few weeks to go before the online-only editions of Black Hat and DEF CON, we chat ab...

This week on The 443 – Security Simplified we cover a massive security breach at Twitter that resulted in an attacker taking over dozens of high-profile accounts ranging from former presidents to Apple. We also discuss the latest Microsoft patch Tuesday which included a fix for a critical security vulnerability in Windows DNS Server.

Welcome back to another episode of The 443 – Security Simplified. This week in the news, we cover an open source vulnerability scanner from Google and phishing campaign that combines Microsoft 365 and Zoom. After that, we dive in to the world of facial recognition and discuss recent research from WatchGuard Threat Lab and other concerns about the technology.