The Jerich Show Podcast

In this episode, Erich and Javvad discuss some data breaches, issues with outdated and End-of-Life (EOL) hardware and software and issues with government collection of zero-day vulnerabilities and issues related to mandatory reporting with too little time to understand the issue.  Like, subscribe and share! Fashion retailer Guess discloses data breach after ransomware attack: https://www.bleepingc...

In this episode, Charl van der Walt jions Erich and Javvad as they talk about the news stories related to the new CISA 'Bad Practices' guidance, My Book Live devices being remotely wiped, Windows print spoolers being weaponized and data movement by pigeons. Charl then talks about what it's like being a CEO, what he looks for in potential employees, the state of security organizations in South Afri...

In this episode Javvad and Erich discuss the death of John McAfee, a story where 2 brothers in South Africa disappear under mysterious circumstances (and along with $2.2 billion in BTC) and, Facebook calls out Apple by funding an attempt at an academic-ish paper, as they strive to protect you from the evils of monopolistic behavior (or maybe just to protect their own profits). All this and more in...

In this episode, Javvad and Erich are joined by Magda de Jager (aka Mags) to discuss this weeks news stories, including the Peloton bike vulnerability (or is it?), the takedown of the Clot ransomware gang and credential stuffing attacks targeting the travel and retail industries. Mags also discusses her journey to working in infosec and much, much more! Please like, share and subscribe About Mags:...

In this episode Javvad and Erich welcome Mo Amin, -------- at ------- as we discuss the Fastly outage, some vulnerabilities in some MQTT handlers, what might be the biggest password dump of all times and we have some serious discussion about company security culture and what that means to an organization. Don’t forget to like, share and subscribe for more great weekly content! About Mo: Twitter:  ...

In this episode, Jim Zuffoletti, CEO & Co-Founder of SafeGuard Cyber, joins the show as we discuss several ransomware attacks from the week, talk about how security has evolved to bring about some signficant challenges securing human and cloud architectures and the data involved, and much, much more.  Jim's info: SafeGuard Cyber: https://www.safeguardcyber.com/ SafeGuard Cyber's Twitter: @SafeGuar...

In this episode, Erich is recovering from a minor spinal surgery an hour before recording and Javvad makes him discuss topics ranging from the FBI notice about Conti attacking hospitals and first responders, the governement attempting to get control of data breaches, a huge illegal Russian dark web market and recent Japan hacks Don't forget to like, share and subscribe! Links from the show: The mo...

In this episode, Javvad and Erich welcome Andra Zaharia to the show as they talk about an issue with an update to servers behind some cloud cameras that allowed people to view other feeds, how a Russian keyboard can stop malware and about infosec marketing, both externally to customers and internally to your leadership. Stories: Bug Exposes Eufy Camera Private Feeds to Random Users https://threatp...

This week Erich and Javvad talk about the issues of law enforcement making changes to private companies servers, the spotting of some CIA malware, another government data breach and an awesome bug bounty story.  Listen, like and subscribe!   Links from the show: This software update is deleting botnet malware from infected PCs around the world https://www.msn.com/en-us/news/technology/this-police-...

In this episode, Erich and Javvad discuss a 50-year-old male Japanese motorcycler that tricked his fans in to believing he was a 20-something-year-old female with digital face swap trickery, How McDonalds $18k ice cream machines have a dirty little secret, and maybe a fix for that with a Raspberry Pi, and free or cheap alternatives to some popular graphics design programs. All this and more. Don't...

Have you ever wanted to start an infosec conference of your very own? This week Erich and Javvad talk with Derrick Thomas, a co-founder of BSides Tampa, about what it's like to start and grow a conference, some pitfalls and reaching for stars.  They will also discuss the FBI fixing Exchange servers via search warrants, Derrick will be distracted by a clickbait ad about twerking, and realtors showi...

In this great episode, Erich and Javvad welcome Tricia Howard to the show as they discuss the Ziggy ransomware game giving refunds (no, really), the 500 million user LinkedIn profile scrape, getting in to the cybersecurity industry from outside, and more. Trisha even uses her amazing theatrical skills to do a dramatic reading of a ransomware note.  Remember to watch, like, and subscribe! Trisha's...

In the episode, Javvad and Erich welcome Kai Roer to the show to talk about a Twitter account takeover, a big potential data leak, responsibility in a phishing click and of course, about security culture. About Kai: Twitter: @kairoer LinkedIn: https://www.linkedin.com/in/kairoer/ Stories From the Show: Phish Leads to Breach at Calif. State Controller https://krebsonsecurity.com/2021/03/phish-leads...

From security camera feeds being pwned to tracking people through lens scratches and dust and big issues with some Adobe software, cameras and related items are the topic today for Javvad and Erich. Links from the show:  FB can track you via dust and scratches: https://www.tiktok.com/@jengolbeck/video/6936959507356486918 The FB patent for associating cameras with users and objects in a social netw...

In this episode, Erich and Javvad are joined by their colleague and friend, James McQuiggan, as they discuss Elder Fraud, phishing attacks targeting AOL users,  Cash App phishing kits and bogus Capital Calls among other things. James McQuiggans info: Twitter: @James_McQuiggan LinkedIn: https://www.linkedin.com/in/jmcquiggan/ His book Pick: Transformational Security Awareness: What Neuroscientists,...

Mohammed Aldoub AKA @voulnet is an API and Cloud security expert. While Erich is off nursing a sore neck, Mohammed keeps Javvad quiet and drops some serious API security knowledge. Links discussed: Clubhouse https://twitter.com/_DanielSinclair/status/1363738761339826177?s=19  Hacking Starbucks https://samcurry.net/hacking-starbucks/  Cloud pricing specialists https://www.duckbillgroup.com/ API vul...

Javvad's internet is broken, so he is a pixelated mess, but we still talk ransomware and the new Mac M1 virus.  Stories from the show: Kia Motors Hit With $20M Ransomware Attack – Report  (with a cameo ad for Erich's upcoming ThreatPost panel) https://threatpost.com/kia-motors-ransomware-attack/164085/ When Cyber Gangs Disregard Ransomware Payments, Victims Can Be Hit Twice https://securityintelli...

In this episode, Erich and Javvad welcome Kylee Lockwood, a pro in the field of compliance, to the show as they discuss issues with ICS, the impact of cat filters on professional people and another loss of source code. Kylee's contact information: LinkedIn - https://www.linkedin.com/in/kyleemarie/ Twitter - @kyleemariel Links from the show: Hackers steal StormShield firewall source code in data br...

In this episode Erich and Javvad discuss stories related to ransomware, vulnerabilites in some WiFi chipsets and issues related to the Greek police officers being issued hardware allowing for facial recognition and fingerprint identification. Stories in this episode: Critical Bugs Found in Popular Realtek Wi-Fi Module for Embedded Devices: https://thehackernews.com/2021/02/critical-bugs-found-in-p...

This week Javvad and Erich welcome a long time friend and former colleague of Javvad's, Adrian Sanabria to the show as they discuss news around the takedown of the the Emotet group, a new phishing toolkit that dynamically changes brands and other news from they cybersecurity world. Adrian also discusses his new job and how it will change the future of infosec tool product reviews. Don't forget to...

Knowing that Erich was going in for doctor visit that morning, Javvad decided rather than a traditional show, to help take his mind off things, he would put Erich on the spot to comment to stories he had no idea were coming.  Welcome to Headline Roulette, a speed response to the following stories with no time to actually read these articles:    Privacy-focused search engine DuckDuckGo grew by 62%...

In this episode, Javvad and Erich are joined by privacy expert Rowenna Fielding for a fun and informative show discussing privacy issues around the globe. The group discusses changes made by TikTok, the new WhatsApp privacy debacle, the use crowdsourcing by law enforcement after the capitol fiasco, and how to move from and infosec role to a job focused on privacy.  Rowenna’s recommended books: • S...

Join Javvad and Erich as they trick the ever funny and good humored Garrett Gross in to joining, them one last time before their end of year break, for a solid 9 minutes of great discussion followed by his dismissal. Once rid of him, the team turns the topic to their own favorite infosec stories of 2020.  After this episode Erich and Javvad will be taking a break until the new year while they try...

In this episode, Javvad and Erich welcome Althe Denis, winner of the Social Engineering Capture the The Flag (SECTF) at DEFCON and one of the most motivated and awesome people we have met.  They discuss her path to an infosec career, how she keeps things straight and advice for those interested in getting in to the infosec community from other careers.  They also discuss some interesting news stor...

In this special Thanksgiving episode, Erich and Javvad talk about privacy issues related to both the government and in the private sector. Should your employer judge your performance on based on an Office 360 report? Should the government restrict singing in your own home?  These questions and more will be answered in this episode. Don't forget to like and subscribe! Links from the show: CDC Guida...