The Cybersecurity Defenders Podcast

On today's episode of The Cybersecurity Defenders Podcast we are joined Devon Ackerman, Global Service Line Leader for Digital Forensics and Incident Response (DFIR) services at Kroll Cyber. Prior to Kroll, Devon served as a Supervisory Special Agent at the FBI's Operational Technology Division in the CART Field Operations Unit. He navigated digital forensic issues, managed 56 FBI Division executi...

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel . FortiGaurd Labs encounters a kernel driver that makes use of the open-source donut tool. Checkpoint researchers observe Iranian threat actor Agrius operating against Israeli targets. SentielOne notes changes in the ongoing campaign by Kimsuky . Microsoft...

On today's episode of The Cybersecurity Defenders Podcast we are joined by security engineer Adnan Khan to talk about securing the build pipeline and explore some common vulnerabilities in enterprise Github configurations. Organizations using GitHub Actions with self-hosted runners are at risk of attackers gaining an internal network foothold from the Internet if they compromise one developer’s pe...

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel . Malware Bytes researchers reporting on the Red Stinger group which has targeted entities in Ukraine. Apple is reporting three new zero days affecting iPhones, iPads, Macs and even Apple watches and TVs.  The folks over at CISCO Talos have recently id...

On this episode of the Cybersecurity Defenders Podcast, we have a conversation about mental health in cybersecurity with Amanda Berlin, CEO of Mental Health Hackers. Mental Health Hackers' stated mission is to educate tech professionals about the unique mental health risks faced by those in our field – and often by the people who we share our lives with – and provide guidance on reducing their eff...

On this special episode of the Cybersecurity Defenders Podcast, we have a longer-form discussion about the recent FBI takedown of the Russian malware known as Snake. The FBI dismantled the global peer-to-peer network of Snake-infected computers with Operation MEDUSA in coordination with multiple cybersecurity agencies. Resources referenced in this show: Press release from the Department of Justice...

This episode of the Cybersecurity Defenders podcast is the second part in a two-part mini-series about the greatest cyber attack ever conceived: Stuxnet. Joining to help us tell the story is Kim Zetter, Journalist and Author - Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon. If you have not heard the first episode it is recommended that you do so before listening...

In this episode of the Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel . Threatmmon have uncovered a targeted PowerShell backdoor malware attack that bypasses normal detection methodology. Researchers have uncovered an attack that is based on a classic sideloading technique with a twist in which a first-stage clean application...

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel . The initial  attack vector of 3CX’s network was via malicious software downloaded from Trading Technologies website QuaDream has allegedly fired all of its staff and is shutting down its operations in the coming days State-sponsored campaigns targeti...

On this episode of the Cybersecurity Defenders podcast we have a conversation around the history of security tooling with Dr. Anton Chuvakin, Security Advisor at Office of the CISO, Google Cloud. Dr. Anton Chuvakin is currently involved with security solution strategy at Google Cloud, where he arrived via Chronicle Security (an Alphabet company) acquisition in July 2019. He is also a co-host of Cl...

On this episode of the Cybersecurity Defenders podcast we have a focused discussion on ransomware with Paul Ihme, Co-Founder and Managing Principle at Soteria Security Solutions and Advisory. Paul is a cybersecurity professional with experience in federal and private environments. Wide array of expertise in multiple information technology domains, specializing in penetration testing, vulnerability...

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel . Over 1 million Wordpress sites have been infected by the Balada Injector malware Nokoyawa ransomware attacks are being seen in the wild exploiting a Windows zero-day An emerging Python-based credential harvester and hacktool, named Legion A recently disco...

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel . Emergency security updates issued by Apple : CVE-2023-28206 & CVE-2023-28205 . Check Point researchers have unveiled a new sophisticated and fast acting ransomware . eFile.com, an IRS-authorized e-file software service provider used by many for filing...

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel . Crowdstrike reports the 3CX supply chain attack . Agents arrested Conor Brian Fitzpatrick on a charge of conspiracy to commit access device fraud. SentinelOne reporting on the CatB ransomware family which is sometimes referred to as CatB99 or Baxtoy. A ne...

This episode of the Cybersecurity Defenders podcast is the first part in a two-part mini-series about the greatest cyber attack ever conceived: Stuxnet. Joining to help us tell the story is Kim Zetter, Journalist and Author - Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon. Stuxnet is a malicious computer worm first uncovered in 2010 and thought to have been in de...

In this episode, we sit down with Matt Bromiley to talk about some of the latest intel coming out of the LimaCharlie community Slack channel :  CVE-2023-23397 : A zero-touch exploit that affects all versions of Windows Outlook. ( Sigma rule )  CVE-2023-24880 : An unpatched security bypass in Microsoft’s SmartScreen security feature. Mandiant observes China-nexus threat actors targeting t...

In this episode, we sit down with Matt Bromiley to talk about some of the latest intel coming out of the LimaCharlie community Slack channel: A new Microsoft Word Vulnerability: CVE-2023-21716.  The Emotet botnet is back spamming again. A previously undisclosed toolset used by Sharp Panda, a long-running Chinese cyber-espionage operation targeting Southeast Asian government entities. A SpaceX...

In this episode, we sit down with Matt Bromiley to talk about some of the latest intel coming out of the LimaCharlie community Slack channel: Menlo Labs has uncovered an unknown threat actor that’s running an evasive threat campaign which is being distributed via Discord and is targeting government entities. TA569 is a prolific threat actor who has been deploying website injections that run a Java...

In this episode, we sit down with Matt Bromiley to talk about some of the latest intel coming out of the LimaCharlie community Slack channel. After that, an interview with Nick Gipson, Director of Cyber Operations at Pareto Cyber. The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.

In this episode of the Cybersecurity Defenders podcast, we recount some hacker history, and with the help of Marcus Hutchins, tell the story of the WannaCry ransomware attack. The WannaCry ransomware attack was a worldwide cyberattack in May 2017 by the WannaCry ransomware cryptoworm, which targeted computers running the Microsoft Windows operating system by encrypting data and demanding ransom pa...

This week on the Simply Cyber Report: Scores of Redis servers infested by sophisticated custom-built malware. Oktapus hackers are back and targeting tech and gaming companies. Russian hackers using new Graphiron information stealer in Ukraine. New QakNote attacks push QBot malware via Microsoft OneNote files. Fresh, buggy Clop ransomware variant targets Linux systems. We also sit down with Ira Win...

In this episode of the Cybersecurity Defenders Podcast, Matt Bromiley opens up the Adversary Toolbox to tell us all about BITS jobs. We also sit down with Tyler Shields: a cybersecurity veteran, entrepreneur, and angel investor. In our conversation, we talk about the economic conditions driving the tech sector layoffs we are seeing, what zombie companies are, and speculate on the future of AI. The...

Microsoft has started blocking the execution of XLL add-ins downloaded from the Internet. The hacking group DragonSpark is leveraging Golang source code interpretation to evade detection. Threat actors are turning to Sliver to replace more popular frameworks Cobalt Strike and Metasploit. Over 4,500 WordPress sites have been hacked and Emote malware makes a comeback. Emotet is back with new evasion...

In this episode of the Cybersecurity Defenders podcast, we recount some hacker history and tell the story of Amit Serper, a hacker and reverse engineer, who was instrumental in stopping the most devastating cyber attack in history: NotPetya. On 27 June 2017, a major global cyberattack began (Ukrainian companies were among the first to state they were being attacked), utilizing a new variant of Pet...

In this episode of the Cybersecurity Defenders Podcast, Matt Bromiley opens up the Adversary Toolbox to tell us all about RDP. We also sit down with Michael Laudenslager, VP of Cybersecurity at Churchill Mortgage and talk about security in the cloud. The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.