The Hackle Box

Eric and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month: Windows zero-day exploited in the wild https://projecthyphae.com/threat/windows-zero-day-being-exploited-in-ransomware-attacks/ 3CX Supply Chain Attack https://thehackernews.com/2023/03/3cx-supply-chain-attack-heres-...

This week, Oscar and Brad sit down to catch up on all the latest in security news. Links: The Sound of Silence Critical Microsoft Outlook Vulnerability https://projecthyphae.com/threat/the-sound-of-silence-critical-microsoft-outlook-vulnerability/ Fastest Ransomware Encryption in History https://gbhackers.com/rorschach/ 'Operation Cookie Monster': International police action seizes dark web market...

Eric and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month: Microsoft Word vulnerability goes public https://projecthyphae.com/threat/microsoft-word-vulnerability-goes-public-users-wondering-if-a-rtf-means-risky-text-file/ Emotet is back (again) after another hiatus https://w...

Oscar and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month: Developer pleads guilty to hacking his own company https://www.theverge.com/2023/2/3/23584414/ubiquiti-developer-guilty-extortion-hack-security-breach-bitcoin-ransom Google plagued with 'malvertisers' in January 202...

Oscar, Eric, and Pinky are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, security breaches, and exploits. Discussed this month: Rackspace Ransomware Incident Highlights Risks of Relying on Mitigation Alone https://www.darkreading.com/vulnerabilities-threats/rackspace-ransomware-incident-highligh...

Oscar and Pinky are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Discussed this month: Russian Actors Use Compromised Healthcare Networks Against Ukrainian Orgs https://www.darkreading.com/threat-intelligence/russian-actors-compromised-heal...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Discussed this month: Critical Citrix, VMware Bugs threaten remote workspaces https://www.darkreading.com/vulnerabilities-threats/patch-asap-critical-citrix-vmware-bugs...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Discussed this month: Fortinet Authentication Bypass ZeroDay: ProxyShell 2 (or 3?) Microsoft Addresses Zero-Days, Exchange Server Exploit Chain Remains Unpatched Phishi...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's episode includes: Defcon Recap EvilProxy TeslaGun Broken Ice Cream Machines and McDonalds Please like, subscribe, and follow us on social! Facebook: https:...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's episode includes: NPM supply chain attack impacts hundreds of websites and apps https://www.bleepingcomputer.com/news/security/npm-supply-chain-attack-impa...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's episode includes: 02:14 Atlassian Confluence – CVE-2022-26134 https://packetstormsecurity.com/files/167430/Confluence-OGNL-Injection-Remote-Code-Execution....

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Please like, subscribe, and follow us on social! Facebook: https://www.facebook.com/frsecure/ Twitter: https://twitter.com/frsecure/ Instagram: https://www.instagram.co...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's episode includes: - Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests” - Forged Signatures: Not Just For Troubled Youths Anymore. #Nvidia...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's episode includes: - AutoWarp vulnerability in Microsoft Azure - APC's Burning Down - Dirty Pipe - Russian Attack on Ukraine Please like, subscribe, and fol...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's episode includes: - EyeMed fined $600k in data breach - Attackers reviving a 20-year-old tactic in Microsoft 365 phishing campaigns - Google auto-enables t...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month, the trio dives into: • Log4j Overview and updates • CSA advisory on Russian Cyber Threat to US Critical Infrastructure. • Norton and Cryptominers in your AV...

Oscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month, the trio dives into: • Cyber Actors Exploiting Microsoft Exchange in Furtherance of Malicious Activities • FBI Website exploited resulting in hoax email bla...

Oscar, Eric, and Pinky are back with another session of the Hackle Box, a series where they break down current cybersecurity threats, breaches, vulnerabilities, and more. This month, the trio discusses: Phishing Report – Holiday Phishing Trends Hacker Tip of the Month News Topics: ‘Trojan Source’ Bug Threatens the Security of All Code https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens...

Team Ambush members Oscar, Eric, and Pinky are back with another session of the Hackle Box—a series where they break down new and noteworthy breaches, vulnerabilities, exploits, and more over the last month. This month's topics: Microsoft going “passwordless” https://arstechnica.com/gadgets/2021/09/starting-today-you-can-remove-your-password-from-your-microsoft-account/ OMIGOD—an exploitable hole...

The boys are back with another session of the Hackle Box. This month features in-depth discussion on four vulnerabilities/exploits that have gained the attention of Oscar, Pinky, and Eric over the last month or so. IDN Phishing — Outlook emails showing legitimate contact cards from lookalike domains https://arstechnica.com/information-technology/2021/09/microsoft-outlook-shows-real-persons-contact...