Talkin' Bout [Infosec] News

Tim Cook Announces Apple CEO Exit - 2026-04-20

Black Hills Information Security — Wed, 22 Apr 2026 15:18:33 -0400

This episode covers several major cybersecurity and tech news stories, including a supply chain–related breach at Vercel involving exposed environment variables and compromised third-party AI tooling. The hosts also discuss concerns around AI-driven data risks, including browser extensions and large-scale data collection. Additional topics include a service scraping and republishing Zoom webinar recordings, evolving issues with web cookies and tracking, and industry news such as reports of Apple CEO Tim Cook stepping down.

Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Watch Out for the Brownies
(04:35) - Tim Cook Announces Apple CEO Exit - 2026-04-20
(05:57) - Story # 1: Vercel April 2026 security incident
(19:00) - Story # 2: 'Addicted to hacking': Young hacker behind historic breach speaks out for 1st time, before reporting to prison
(27:19) - Story # 3: Mythos And The CVSS Problem No One Wants to Talk About (But We Need To)
(28:49) - Story # 4: Introducing Claude Opus 4.7
(32:14) - Story # 4b: Identity verification on Claude
(36:00) - Story # 5: Tim Cook to become Apple Executive Chairman John Ternus to become Apple CEO
(40:18) - Story # 6: Microsoft faces fresh Windows Recall security concerns
(44:12) - Story # 7: WebinarTV Secretly Scraped Zoom Meetings of Anonymous Recovery Programs
(48:20) - Story # 8: Google, Microsoft, Meta All Tracking You Even When You Opt Out, According to an Independent Audit
(51:12) - Story # 9: Little Caesars Wants ChatGPT to Order Your Pizza for You
(53:35) - Story # 10: NIST Updates NVD Operations to Address Record CVE Growth
(01:00:08) - Workshop: Rapid Endpoint Investigations for Linux and Mac
(01:01:20) - Cyber Threat Intelligence 101 2 Day Version
(01:02:24) - ANTI-CAST: How to Break Free from the Cybersecurity Burnout Trap w/ Natalia Samman

Links

Story # 1: Vercel April 2026 security incident
Story # 2: ‘Addicted to hacking’: Young hacker behind historic breach speaks out for 1st time, before reporting to prison
Story # 3: Mythos And The CVSS Problem No One Wants to Talk About (But We Need To)
Story # 4: Introducing Claude Opus 4.7
Story # 4b: Identity verification on Claude
Story # 5: Tim Cook to become Apple Executive Chairman John Ternus to become Apple CEO
Story # 6: Microsoft faces fresh Windows Recall security concerns
Story # 7: WebinarTV Secretly Scraped Zoom Meetings of Anonymous Recovery Programs
Story # 8: Google, Microsoft, Meta All Tracking You Even When You Opt Out, According to an Independent Audit
Story # 9: Little Caesars Wants ChatGPT to Order Your Pizza for You
Story # 10: NIST Updates NVD Operations to Address Record CVE Growth
Workshop: Rapid Endpoint Investigations for Linux and Mac
Cyber Threat Intelligence 101 2 Day Version
ANTI-CAST: How to Break Free from the Cybersecurity Burnout Trap w/ Natalia Samman

Creators & Guests

Corey Ham - Host

Ralph May - Host

Patterson Cake - Guest

Wade Wells - Host

Bronwen Aker - Host

Meagan Bentley - Producer

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Anthropic’s Project Glasswing is an Infosec Turning Point – 2026-04-13

Black Hills Information Security — Tue, 14 Apr 2026 15:14:00 -0400

This episode dives into Anthropic’s “Project Glasswing” and the broader implications of AI-driven offensive security, including models autonomously discovering vulnerabilities and attempting sandbox escapes. The hosts discuss how agentic AI testing approaches could reshape vulnerability research, while also raising concerns about AI safety, regulation, and real-world risk. Additional topics include the growing impact of AI on security workflows, rising infrastructure costs tied to AI demand, a new infostealer ecosystem overview, and ongoing debates about data collection practices and platform privacy.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — A Real Studio
(03:43) - Anthropic’s Project Glasswing is an Infosec Turning Point – 2026-04-13
(05:39) - Story # 1: Project Glasswing
(22:20) - Story # 2: AI-Led Remediation Crisis Prompts HackerOne to Pause Bug Bounties
(30:36) - Story # 3: Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit
(32:39) - WEBCAST: Proxy Execution with Microsoft Edge WebView2 w/ Matthew Eidelberg
(51:47) - Story # 4: New "BrowserGate" report claims LinkedIn secretly scans user browsers for installed extensions and collects device data
(56:32) - Story # 5: The silent “Storm”: New infostealer hijacks sessions, decrypts server-side
(58:46) - ChickenSec: the Chicken Accords of 2026
(01:00:27) - Story # 6: EFF is Leaving X
(01:03:01) - Workshop: How to Think Like a Cybersecurity Defender
(01:05:49) - AI Security Ops Podcast

Links

Story # 1: Project Glasswing
Story # 2: AI-Led Remediation Crisis Prompts HackerOne to Pause Bug Bounties
Story # 3: Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit
WEBCAST: Proxy Execution with Microsoft Edge WebView2 w/ Matthew Eidelberg
Story # 4: New “BrowserGate” report claims LinkedIn secretly scans user browsers for installed extensions and collects device data
Story # 5: The silent “Storm”: New infostealer hijacks sessions, decrypts server-side
ChickenSec: the Chicken Accords of 2026
Story # 6: EFF is Leaving X
Workshop: How to Think Like a Cybersecurity Defender
AI Security Ops Podcast

Creators & Guests

Corey Ham - Host

Wade Wells - Host

Alex Minster "Belouve" - Guest

Bronwen Aker - Host

Ralph May - Host

John Strand - Host

Doc Blackburn - Guest

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Artemis Astronaut's Bad Outlooks - 2026-04-06

Black Hills Information Security — Thu, 09 Apr 2026 15:09:30 -0400

This episode covers several major cybersecurity and tech news stories, including a sophisticated NPM supply chain attack that compromised the widely used Axios library through advanced social engineering, and the broader implications for software security. The hosts also discuss the accidental leak of Anthropic’s Claude codebase, what it reveals about AI development practices, and the risks of misconfigurations exposing sensitive systems. Additional conversation touches on AI reliability, “vibe-coded” software, and the growing role of AI in both development and attack techniques.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Professional Sitters
(04:36) - Artemis Astronaut's Bad Outlooks - 2026-04-06
(07:12) - The Absolute Truths of Cybersecurity with Doc Blackburn
(08:52) - Professionally Evil API Testing: AAA and Keys are Not Just for Cars
(09:35) - Story # 1: Post Mortem: axios npm supply chain compromise
(19:54) - Story # 2: Artemis II astronaut: 'I have two Microsoft Outlooks, and neither one of those are working'
(26:02) - Story # 3: Microsoft Copilot Terms of Service Label Copilot is for Entertainment Purposes Only
(30:13) - Story # 4: Here’s what that Claude Code source leak reveals about Anthropic’s plans
(35:03) - Story # 4b: https://neuromatch.social/@jonny/116325123136895805
(37:57) - Story # 5: Meta freezes AI data work after breach puts training secrets at risk
(41:40) - Story # 6: Possible US Government iPhone Hacking Tool Leaked
(44:32) - Story # 7: FBI labels data breach ‘major incident,’ notifies Congress
(46:58) - Story # 8: vSphere and BRICKSTORM Malware: A Defender's Guide
(52:12) - Story # 9: CBP Facility Codes Sure Seem to Have Leaked Via Online Flashcards
(01:04:26) - ChickenSec: Why did the chicken wear a reflective vest? To cross the road of course

Links

The Absolute Truths of Cybersecurity with Doc Blackburn
Professionally Evil API Testing: AAA and Keys are Not Just for Cars
Story # 1: Post Mortem: axios npm supply chain compromise
Story # 2: Artemis II astronaut: ‘I have two Microsoft Outlooks, and neither one of those are working’
Story # 3: Microsoft Copilot Terms of Service Label Copilot is for Entertainment Purposes Only
Story # 4: Here’s what that Claude Code source leak reveals about Anthropic’s plans
Story # 4b: https://neuromatch.social/@jonny/116325123136895805
Story # 5: Meta freezes AI data work after breach puts training secrets at risk
Story # 6: Possible US Government iPhone Hacking Tool Leaked
Story # 7: FBI labels data breach ‘major incident,’ notifies Congress
Story # 8: vSphere and BRICKSTORM Malware: A Defender’s Guide
Story # 9: CBP Facility Codes Sure Seem to Have Leaked Via Online Flashcards
ChickenSec: Why did the chicken wear a reflective vest? To cross the road of course

Creators & Guests

Jennifer Shannon - Guest

Wade Wells - Host

Corey Ham - Host

Ralph May - Host

Ryan Poirier - Producer

Bronwen Aker - Host

Doc Blackburn - Guest

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

FCC Blocks Foreign-Made Routers – 2026-03-30

Black Hills Information Security — Wed, 01 Apr 2026 19:52:07 -0400

This episode covers the FCC’s move to restrict or ban certain foreign-made networking equipment—especially routers tied to Chinese manufacturers—highlighting the potential cybersecurity risks, supply chain implications, and how the rule could affect ISPs and consumers. The hosts also discuss broader concerns around hardware trust, existing infrastructure, and what qualifies as “approved” devices under FCC guidelines, along with a brief, lighter mention of a viral robot incident making the rounds online.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Robot Handlers
(05:11) - FCC Blocks Foreign-Made Routers – 2026-03-30
(06:44) - Story # 1: FCC moves to block new foreign-made routers
(17:00) - Story # 2: FBI Chief Kash Patel’s Gmail Account was Hacked by Iranian Hackers
(20:07) - Story # 3: FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage Ops
(24:18) - Story # 4: LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign
(27:49) - Story # 4b: TeamPCP Supply Chain Campaign
(42:45) - Story # 5: Spylandia: How a Stretch of Florida Real Estate Has Become a Covert Corridor for Chinese and Russian Spies
(45:51) - Story # 6: Anthropic readies Mythos model with high cybersecurity risk
(57:31) - Story # 7: Google Ships WebMCP, The Browser-Based Backbone For The Agentic Web
(01:02:24) - Story # 8: DDR5 Memory Prices Just Took a Noticeable Dive for the First Time in Months, and Google’s TurboQuant Might Be Behind It
(01:04:03) - Securing the Cloud: Foundations by Andrew Krug
(01:04:47) - Incident Response Simplified by Patterson Cake

News Links
Story # 1: FCC moves to block new foreign-made routers
Story # 2: FBI Chief Kash Patel’s Gmail Account was Hacked by Iranian Hackers
Story # 3: FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage Ops
Story # 4: LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign
Story # 4b: TeamPCP Supply Chain Campaign
Story # 5: Spylandia: How a Stretch of Florida Real Estate Has Become a Covert Corridor for Chinese and Russian Spies
Story # 6: Anthropic readies Mythos model with high cybersecurity risk
Story # 7: Google Ships WebMCP, The Browser-Based Backbone For The Agentic Web
Story # 8: DDR5 Memory Prices Just Took a Noticeable Dive for the First Time in Months, and Google’s TurboQuant Might Be Behind It

Securing the Cloud: Foundations by Andrew Krug
Incident Response Simplified by Patterson Cake

Creators & Guests

Andy Pettit "Nerf" - Guest

Andrew Krug - Guest

Wade Wells - Host

Corey Ham - Host

Bronwen Aker - Host

Patterson Cake - Guest

Ryan Poirier - Producer

Ralph May - Host

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Pentagon Plans to Train AI With Classified Data – 2026-03-23

Black Hills Information Security — Fri, 27 Mar 2026 14:01:35 -0400

This episode covers a range of cybersecurity and AI-related news, including how Pokémon Go players may have unknowingly helped train delivery robots using massive image datasets. The hosts also discuss the Pentagon’s reported plans to train AI systems on classified data and the potential risks of exposing sensitive information. Additional topics include major data breaches (such as a third-party breach impacting Crunchyroll user data), ongoing challenges in cybersecurity practices, evolving AI security concerns, and real-world examples of exploits and vulnerabilities affecting mobile devices and organizations.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Easier Than Printers
(05:20) - Pentagon Plans to Train AI With Classified Data – BHIS - Talkin' Bout [infosec] News 2026-03-23
(06:38) - Story # 1: Sears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
(07:38) - Story # 1b: ALT Link - Sears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
(15:35) - Story # 2: Federal cyber experts called Microsoft’s cloud a “pile of shit,” approved it anyway
(24:31) - Story # 3: The Pentagon is planning for AI companies to train on classified data, defense official says
(34:04) - Story # 4: CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization
(37:50) - Story # 5: Warning: Your AI-Generated Password Is a Major Security Risk. Here’s What to Use Instead
(42:21) - Story # 6: CISA warns of active exploitation of Microsoft SharePoint vulnerability (CVE-2026-20963)
(49:57) - Story # 7: Massive China Data Leak: Hackers Access 10 Petabytes of Weapons Testing Data
(51:28) - Story # 8: Anime fans' credit cards might be stolen from Sony streamer Crunchyroll
(55:03) - Story # 9: The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Links
Story # 1: Sears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
Story # 1b: ALT Link - Sears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
Story # 2: Federal cyber experts called Microsoft’s cloud a “pile of shit,” approved it anyway
Story # 3: The Pentagon is planning for AI companies to train on classified data, defense official says
Story # 4: CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization
Story # 5: Warning: Your AI-Generated Password Is a Major Security Risk. Here’s What to Use Instead
Story # 6: CISA warns of active exploitation of Microsoft SharePoint vulnerability (CVE-2026-20963)
Story # 7: Massive China Data Leak: Hackers Access 10 Petabytes of Weapons Testing Data
Story # 8: Anime fans’ credit cards might be stolen from Sony streamer Crunchyroll
Story # 9: The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Creators & Guests

John Strand - Host

Ralph May - Host

Chadd Watson - Guest

Wade Wells - Host

Alex Minster "Belouve" - Guest

Hayden Covington - Host

Bruce Potter - Guest

Ryan Poirier - Producer

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Iranian Hackers Claim Responsibility for Stryker Attack - 2026-03-16

Black Hills Information Security — Tue, 17 Mar 2026 13:05:04 -0400

This episode covers multiple cybersecurity news stories, including Iranian hackers claiming responsibility for a cyberattack on Stryker, ongoing challenges in attributing nation-state cyber operations, and broader trends in global cyber conflict. The hosts also discuss the reliability of public breach claims, emerging threats targeting critical industries, and how organizations are responding to an increasingly complex threat landscape.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Organizing Family Beets
(04:02) - Iranian Hackers Claim Responsibility for Stryker Attack - 2026-03-16
(08:56) - Story # 1: Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
(23:38) - Story # 2: How We Hacked McKinsey's AI Platform
(32:30) - Story # 3: Amazon holds engineering meeting following AI-related outages
(39:11) - Story # 4: Meta gets into social networks for AI agents with acquisition of viral Moltbook platform
(45:24) - Story # 5: Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026
(50:45) - Story # 6: Michelin Confirms Data Breach Linked to Oracle EBS Attack
(51:08) - Story # 7: New Dohdoor malware campaign targets education and health care
(58:10) - Story # 8: Man's dog was riddled with tumors and dying. He used ChatGPT to design a custom cancer vaccine, stunning researchers

Links
Story # 1: Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
Story # 2: How We Hacked McKinsey’s AI Platform
Story # 3: Amazon holds engineering meeting following AI-related outages
Story # 4: Meta gets into social networks for AI agents with acquisition of viral Moltbook platform
Story # 5: Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026
Story # 6: Michelin Confirms Data Breach Linked to Oracle EBS Attack
Story # 7: New Dohdoor malware campaign targets education and health care
Story # 8: Man’s dog was riddled with tumors and dying. He used ChatGPT to design a custom cancer vaccine, stunning researchers

Creators & Guests

Dan Rearden (Haircutfish) - Guest

Bronwen Aker - Host

Ralph May - Host

John Strand - Host

Troy Wojewoda - Guest

Corey Ham - Host

Hayden Covington - Host

Wade Wells - Host

Meagan Bentley - Producer

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

A Nightmare of Vibeware - 2026-03-09

Black Hills Information Security — Tue, 10 Mar 2026 13:24:37 -0400

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — That's Not How It Works
(03:40) - A Nightmare of Vibeware – 2026-03-09
(04:54) - Story # 1: APT36: A Nightmare of Vibeware
(13:56) - Story # 2: Oracle Layoffs: Tech giant to slash 30,000 jobs as banks pull out from financing AI data centres
(16:28) - Story # 3: Iran-linked hacktivist groups target US infrastructure after Feb 28 strikes, cyber activity surges: Report
(24:28) - Story # 4: Introducing the First Frontier Suite built on Intelligence + Trust
(28:59) - Story # 5: Motorola partners with GrapheneOS for future phones
(29:13) - Story # 5b: GrapheneOS: Microsoft Authenticator does not support secure Android OS
(29:53) - Story # 6: Western allies form 6G security coalition amid tech rivalry with China
(34:01) - Story # 7: ShinyHunters claims ongoing Salesforce Aura data theft attacks
(35:47) - Story # 8: Doppelgänger / RRN Disinformation Infrastructure Ecosystem 2026
(44:33) - Story # 9: LexisNexis confirms data breach as hackers leak stolen files
(49:10) - Story # 10: Google urges Supreme Court to strike down geofence warrants as unconstitutional
(55:59) - ANTI-CAST : How to Detect Malicious Remote Workers w/ James McQuiggan
(56:47) - SOC Summit 2026

Links
Story # 1: APT36: A Nightmare of Vibeware
Story # 2: Oracle Layoffs: Tech giant to slash 30,000 jobs as banks pull out from financing AI data centres
Story # 3: Iran-linked hacktivist groups target US infrastructure after Feb 28 strikes, cyber activity surges: Report
Story # 4: Introducing the First Frontier Suite built on Intelligence + Trust
Story # 5: Motorola partners with GrapheneOS for future phones
Story # 5b: GrapheneOS: Microsoft Authenticator does not support secure Android OS
Story # 6: Western allies form 6G security coalition amid tech rivalry with China
Story # 7: ShinyHunters claims ongoing Salesforce Aura data theft attacks
Story # 8: Doppelgänger / RRN Disinformation Infrastructure Ecosystem 2026
Story # 9: LexisNexis confirms data breach as hackers leak stolen files
Story # 10: Google urges Supreme Court to strike down geofence warrants as unconstitutional
ANTI-CAST : How to Detect Malicious Remote Workers w/ James McQuiggan

Troy & Wade’s Upcoming Things:
– Antisyphon Training SOC Summit 2026
– Breach Assessment - The Curious Case of the Comburglar w/ Troy Wojewoda
– Network Forensics and Incident Response with Troy Wojewoda

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Pentagon Declares Anthropic a Supply Chain Risk — 2026-03-02

Black Hills Information Security — Fri, 06 Mar 2026 16:03:45 -0500

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Kerberoasting Too Hard
(05:05) - Pentagon Declares Anthropic a Supply Chain Risk — Talkin’ Bout [infosec] News 2026-03-02
(08:40) - Story # 1: Pentagon Designates Anthropic Supply Chain Risk
(17:27) - Story # 2: European Parliament blocks AI on lawmakers’ devices, citing security risks
(21:23) - Story # 3: Mexican Government Breach and the Rise of Agentic Cyber Threats
(22:58) - Story # 4: 2026 CrowdStrike Global Threat Report: AI Accelerates Adversaries and Reshapes the Attack Surface
(33:04) - Story # 5: Leak confirms GrapheneOS & Motorola partnership for non-Pixel hardware
(38:24) - Story # 5b: Motorola announces a partnership with GrapheneOS Foundation, marking a new chapter in smartphone security and expanding its enterprise portfolio
(39:21) - Story # 6: Immediate Action Required: CISA Issues Emergency Directive to Secure Cisco SD-WAN Systems
(43:12) - Story # 7: Cops back Dutch telco Odido after second wave of ShinyHunters leaks
(45:40) - Story # 8: Discord puts global age verification policy on hold after backlash
(46:30) - Story # 9: A new California law says all operating systems, including Linux, need to have some form of age verification at account setup
(51:51) - Story # 10: User accidentally gains control of over 6,700 robot vacuums
(53:35) - Story # 11: App Warns You if Someone Is Wearing Smart Glasses Nearby
(57:32) - Weekly CTF Winners
(58:28) - Story # 12: Microsoft is blocking 'Microslop' comments in Copilot's official Discord server
(59:01) - Story # 13: New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

Links
Story # 1: Pentagon Designates Anthropic Supply Chain Risk
Story # 2: European Parliament blocks AI on lawmakers’ devices, citing security risks
Story # 3: Mexican Government Breach and the Rise of Agentic Cyber Threats
Story # 4: 2026 CrowdStrike Global Threat Report: AI Accelerates Adversaries and Reshapes the Attack Surface
Story # 5: Leak confirms GrapheneOS & Motorola partnership for non-Pixel hardware
Story # 5b: Motorola announces a partnership with GrapheneOS Foundation, marking a new chapter in smartphone security and expanding its enterprise portfolio
Story # 6: Immediate Action Required: CISA Issues Emergency Directive to Secure Cisco SD-WAN Systems
Story # 7: Cops back Dutch telco Odido after second wave of ShinyHunters leaks
Story # 8: Discord puts global age verification policy on hold after backlash
Story # 9: A new California law says all operating systems, including Linux, need to have some form of age verification at account setup
Story # 10: User accidentally gains control of over 6,700 robot vacuums
Story # 11: App Warns You if Someone Is Wearing Smart Glasses Nearby
Story # 12: Microsoft is blocking ‘Microslop’ comments in Copilot’s official Discord server
Story # 13: New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

The Coming SAAS Apocalypse - 2026-02-23

Black Hills Information Security — Wed, 25 Feb 2026 05:00:00 -0500

In this episode:

Agentic AI tools that can autonomously perform tasks like researching and booking flights, raising concerns about automated purchases, fraud, guardrails, and over-trust in AI systems.
The idea of a coming “SaaS apocalypse,” where AI tools could replicate or replace many small- and mid-tier SaaS products by crawling and recreating their functionality—potentially disrupting payroll, accounting, and other service platforms.
Android’s shift away from its open-platform roots, including concerns about reduced openness, developer anonymity in app stores, and the broader implications for privacy-focused users and alternative operating systems.
Ongoing tensions in the tech ecosystem around platform control, openness, and general-purpose computing, particularly involving large vendors like Google, Apple, Oracle, and major cloud providers.
Broader security implications of AI adoption, including hallucinations, accountability, and how organizations are integrating AI to cut costs versus innovate.

The discussion centers strictly on these current tech news developments and their security, privacy, and market impact.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Take the interstate to Dubai
(04:53) - The Coming SAAS Apocalypse - 2026-02-23
(07:39) - Story # 1: Keep Android Open
(15:34) - Story # 2: Meta patents AI that takes over a dead person’s account to keep posting and chatting
(21:13) - Story # 3: The Coming SaaS Apocalypse...
(28:52) - Story # 4: Firm Data on AI
(29:43) - Story # 4b: Thousands of CEOs just admitted AI had no impact on employment or productivity—and it has economists resurrecting a paradox from 40 years ago
(36:15) - Story # 5: US Defense Secretary Hegseth summons Anthropic CEO for tough talks over military use of Claude, Axios reports
(40:41) - Story # 6: Conduent data breach could be largest in U.S. history
(43:13) - Story # 6: The Erosion of Agency and the New Burden on Leaders
(46:02) - Story # 7: DSA-2026-079: Security Update for RecoverPoint for Virtual Machines Hardcoded Credential Vulnerability
(48:30) - Story # 8: AI-augmented threat actor accesses FortiGate devices at scale
(51:42) - Story # 9: I hacked ChatGPT and Google's AI - and it only took 20 minutes
(01:03:07) - Antisyphon Training SOC Summit, March 25, 2026
(01:03:40) - Antisyphon Training: Attacking, Defending, and Leveraging AI-LLM Systems
(01:03:58) - Antisyphon Workshop: Hacking AI-LLM Applications
(01:04:27) - Antisyphon Anti-Cast: RED TEAMING AI: OWASP LLM TOP 10 WITH BRIAN AND DEREK
(01:04:53) - PODCAST : A.I. Security Ops

Links
Story # 1: Keep Android Open
Story # 2: Meta patents AI that takes over a dead person’s account to keep posting and chatting
Story # 3: The Coming SaaS Apocalypse…
Story # 4: Firm Data on AI
Story # 4b: Thousands of CEOs just admitted AI had no impact on employment or productivity—and it has economists resurrecting a paradox from 40 years ago
Story # 5: US Defense Secretary Hegseth summons Anthropic CEO for tough talks over military use of Claude, Axios reports
Story # 6: Conduent data breach could be largest in U.S. history
Story # 6: The Erosion of Agency and the New Burden on Leaders
Story # 7: DSA-2026-079: Security Update for RecoverPoint for Virtual Machines Hardcoded Credential Vulnerability
Story # 8: AI-augmented threat actor accesses FortiGate devices at scale
Story # 9: I hacked ChatGPT and Google’s AI - and it only took 20 minutes
Antisyphon Training SOC Summit, March 25, 2026
Antisyphon Training: Attacking, Defending, and Leveraging AI-LLM Systems
Antisyphon Workshop: Hacking AI-LLM Applications
Antisyphon Anti-Cast: RED TEAMING AI: OWASP LLM TOP 10 WITH BRIAN AND DEREK
PODCAST : A.I. Security Ops

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

Palo Alto Fears China Retaliation – 2026-02-16

Black Hills Information Security — Sun, 22 Feb 2026 09:47:10 -0500

In this episode, the crew dives into reports that Palo Alto Networks allegedly avoided directly attributing a threat campaign to China over fears of retaliation—sparking a broader debate about corporate and government threat attribution, geopolitics, and whether attribution still matters in today’s cyber landscape.

They also explore the escalating AI arms race, including Meta’s aggressive (and expensive) talent poaching, the growing rivalry between OpenAI and Anthropic, and what it all means for the future of the industry.

Rounding out the episode, the team discusses the unintended consequences of the AI boom—like global hardware shortages stretching beyond GPUs to hard drives—and examines emerging prompt injection attack techniques, highlighting real-world examples and the growing security risks surrounding AI-powered tools.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Threat Actor Age Range
(05:37) - Palo Alto Fears China Retaliation – 2026-02-16
(11:28) - Story # 1: Exclusive: Palo Alto chose not to tie China to hacking campaign for fear of retaliation from Beijing, sources say
(16:01) - Story # 2: Rent a Human
(20:39) - Story # 3: OpenClaw creator Peter Steinberger joining OpenAI, Altman says
(24:31) - Story # 4: Western Digital runs out of HDD capacity: CEO says massive AI deals secured, price surges ahead
(28:30) - Story # 5: GTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use
(30:32) - Story # 6: Data Exfil from Agents in Messaging Apps
(32:15) - Story # 7: AMOS infostealer targets macOS through a popular AI app
(39:25) - Story # 8: Discord Voluntarily Pushes Mandatory Age Verification Despite Recent Data Breach
(46:11) - Story # 9: Vietnam bans unskippable online video ads longer than 5 seconds from next month
(49:59) - Story # 10: SolarWinds Web Help Desk Exploitation - February 2026
(54:00) - Story # 11: Devilish devs spawn 287 Chrome extensions to flog your browser history to data brokers
(58:13) - Story # 12: Snail mail letters target Trezor and Ledger users in crypto-theft attacks
(01:00:59) - Eric's Workshop
(01:01:31) - Jennifer's Workshop
(01:04:36) - SOC Summit 2026

Links
Story # 1: Exclusive: Palo Alto chose not to tie China to hacking campaign for fear of retaliation from Beijing, sources say
Story # 2: Rent a Human
Story # 3: OpenClaw creator Peter Steinberger joining OpenAI, Altman says
Story # 4: Western Digital runs out of HDD capacity: CEO says massive AI deals secured, price surges ahead
Story # 5: GTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use
Story # 6: Data Exfil from Agents in Messaging Apps
Story # 7: AMOS infostealer targets macOS through a popular AI app
Story # 8: Discord Voluntarily Pushes Mandatory Age Verification Despite Recent Data Breach
Story # 9: Vietnam bans unskippable online video ads longer than 5 seconds from next month
Story # 10: SolarWinds Web Help Desk Exploitation - February 2026
Story # 11: Devilish devs spawn 287 Chrome extensions to flog your browser history to data brokers
Story # 12: Snail mail letters target Trezor and Ledger users in crypto-theft attacks
01:01:00 - Eric’s Workshop
01:01:31 - Jennifer’s Workshop
01:04:37 - SOC Summit 2026

Creators & Guests

Corey Ham - Host

Wade Wells - Host

Bronwen Aker - Host

Ralph May - Host

Ched "cheddar" Wiggins - Guest

Jennifer Shannon - Guest

Eric Kuehn - Guest

Click here to watch a video of this episode.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Click here to view the episode transcript.

Live From WWHF Mile High 2026 – 2026-02-11

Black Hills Information Security — Wed, 18 Feb 2026 05:00:00 -0500

Live from Wild West Hackin’ Fest Denver 2026, the Black Hills Information Security crew brings their signature mix of sharp security insight and off-the-cuff banter to a packed in-person audience.

This episode centers on a controversial Notepad update that introduced Markdown rendering—along with a potential remote code execution (RCE) issue. The hosts unpack what this says about modern software bloat, “vibe coding,” and the growing push to embed AI into everything—whether it belongs there or not. They also explore the implications of Discord's Age verification requirements, AI-generated code, including OpenAI’s latest Codex model, and debate whether we’re headed toward a wave of AI-assisted vulnerabilities.

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Corey Olympics
(02:23) - Story # 1: Critical Notepad vulnerability reignites criticism of Microsoft’s forced AI features
(07:42) - Story # 2: Discord will require a face scan or ID for full access next month
(10:17) - Story # 3: 2026-01-14: The Day the telnet Died
(15:04) - Story # 5: BeyondTrust Remote Access Products 0-Day Vulnerability Allows Remote Code Execution
(16:32) - Story # GRITREP: 0APT and the Victims Who Weren’t
(20:54) - The advanced advancement of AI models

Click here to watch a video of this episode.
Creators & Guests

John Strand - Host

Corey Ham - Host

Derek Banks - Guest

Andrew Krug - Guest

Chadd Watson - Guest

Hayden Covington - Host

Click here to view the episode transcript.

Links
Story # 1: Critical Notepad vulnerability reignites criticism of Microsoft’s forced AI features
Story # 2: Discord will require a face scan or ID for full access next month
Story # 3: 2026-01-14: The Day the telnet Died
Story # 5: BeyondTrust Remote Access Products 0-Day Vulnerability Allows Remote Code Execution
Story # GRITREP: 0APT and the Victims Who Weren’t

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

US Defense Chief Uploads Secret Into to ChatGTP - 2026-02-02

Black Hills Information Security — Thu, 05 Feb 2026 05:00:00 -0500

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

This episode breaks down recent reports of sensitive information being shared with AI tools and what that means for security and operations. The discussion covers OPSEC failures, common misuse of ChatGPT in professional environments, how data actually flows through AI systems, and what organizations should (and shouldn’t) worry about. The hosts focus on practical risk, realistic threat models, and actionable lessons for security teams navigating AI adoption.

Chapters

(00:00) - PreShow Banter™ — Robot Drivers
(06:29) - US Defense Chief Uploads Secret Into to ChatGTP - 2026-02-02
(09:54) - Story # 1: US cyber defense chief accidentally uploaded secret government info to ChatGPT
(19:03) - Story # 2: Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies
(23:01) - Story # 3: Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users
(26:30) - Story # 4: Millions of Gmail, Facebook and other account credentials exposed
(30:55) - Story # 5: Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site
(36:13) - Story # 6: County pays $600,000 to pentesters it arrested for assessing courthouse security
(39:12) - Story # 7: Costco reportedly removes RAM from its display PCs to prevent tech-savvy shoplifters, customers claim — GPUs also absent across stores as PC parts become a hot commodity
(41:13) - Story # 8: Claude Sonnet 5 Is Imminent — And It Could Be a Generation Ahead of Google
(45:09) - Story # 9: Researchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 Countries
(48:49) - Story # 10: Match, Hinge, OkCupid, and Panera Bread breached by ransomware group
(52:05) - Story # 11: Hunterbrook says Ubiquiti powering Russian battlefield communications in Ukraine
(54:28) - Story # 12: Attack on Renewable Energy Plants
(56:26) - Story # 13: Disrupting the World's Largest Residential Proxy Network | Google Cloud Blog

Links
Story # 1: US cyber defense chief accidentally uploaded secret government info to ChatGPT
Story # 2: Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies
Story # 3: Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users
Story # 4: Millions of Gmail, Facebook and other account credentials exposed
Story # 5: Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site
Story # 6: County pays $600,000 to pentesters it arrested for assessing courthouse security
Story # 7: Costco reportedly removes RAM from its display PCs to prevent tech-savvy shoplifters, customers claim — GPUs also absent across stores as PC parts become a hot commodity
Story # 8: Claude Sonnet 5 Is Imminent — And It Could Be a Generation Ahead of Google
Story # 9: Researchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 Countries
Story # 10: Match, Hinge, OkCupid, and Panera Bread breached by ransomware group
Story # 11: Hunterbrook says Ubiquiti powering Russian battlefield communications in Ukraine
Story # 12: Attack on Renewable Energy Plants
Story # 13: Disrupting the World’s Largest Residential Proxy Network | Google Cloud Blog

Wade & Hayden on Simply Cyber -
https://www.youtube.com/live/c_lUP5gR15I

Hayden’s Class -
https://www.antisyphontraining.com/product/foundations-of-security-operations-with-hayden-covington/

Mishaal’s Class -
https://www.antisyphontraining.com/product/next-level-osint-with-mishaal-khan/

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

TikTok's invasive Privacy Policy - 2026-01-26

Black Hills Information Security — Wed, 28 Jan 2026 05:00:00 -0500

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

In this episode, the hosts break down TikTok’s latest privacy policy and why it’s raising serious red flags. They discuss how the app expands data collection and tracking, what that means for user privacy, and the broader security implications—especially concerns around data access and China. Along the way, the conversation connects these changes to ongoing TikTok ban discussions, real-world risk for individuals and organizations, and what users should consider if they continue using the platform. The episode mixes technical insight with practical takeaways, making the privacy risks easy to understand without losing nuance.

Chapters:

(00:00) - PreShow Banter™ — Electroshock Therapy
(02:28) - 2026-01-26
(07:33) - Story # 1: Fortinet confirms critical FortiCloud auth bypass not fully patched
(14:27) - Story # 2: Hackers exploit critical telnetd auth bypass flaw to get root
(17:37) - Story # 3: Clara Hawking’s Post on TikTok's Pivacy Policy
(24:05) - Story # 4: Supreme Court to hear Facebook pixel tracking case
(31:02) - Story # 5: Google accused of grooming kids after child receives this email
(34:38) - Story # 6: House of Lords backs legislation to ban social media for children under 16
(35:47) - Story # 6b: Australia has banned social media for kids under 16. How does it work?
(42:20) - Story # 7: Why Software Blocks Won’t Stop Illegally 3D Printed Guns (And What Actually Might)
(48:29) - Story # 8: 1Password adds pop-up warnings for suspected phishing sites
(52:09) - ClawdBot / Moltbot

Links:
Story # 1: Fortinet confirms critical FortiCloud auth bypass not fully patched
Story # 2: Hackers exploit critical telnetd auth bypass flaw to get root
Story # 3: Clara Hawking’s Post on TikTok’s Pivacy Policy
Story # 4: Supreme Court to hear Facebook pixel tracking case
Story # 5: Google accused of grooming kids after child receives this email
Story # 6: House of Lords backs legislation to ban social media for children under 16
Story # 6b: Australia has banned social media for kids under 16. How does it work?
Story # 7: Why Software Blocks Won’t Stop Illegally 3D Printed Guns (And What Actually Might)
Story # 8: 1Password adds pop-up warnings for suspected phishing sites
ClawdBot / Moltbot
Troy’s Workshop
ANTI-CAST: Effective AI for Practical SecOps Workflows w/ Hayden Covington

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Chinese firms drop US and Israeli cybersecurity software - 2026-01-19

Black Hills Information Security — Tue, 20 Jan 2026 15:29:11 -0500

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –

https://poweredbybhis.com

This episode is a rapid-fire cybersecurity news roundup covering multiple headlines and what they mean for defenders. The crew debates reports that Chinese firms are dropping U.S. and Israeli security vendors, then pivots into breach fallout, malware activity, and real-world attacker behavior. Along the way, they unpack how geopolitics affects procurement, why supply-chain dependencies make “bans” messy, and what happens when organizations swap tools fast.

Expect candid takes on ransomware trends, enterprise security operations, and where hype collides with implementation. The hosts also riff on incident response realities, risk management, and what security teams should watch for next—plus plenty of side commentary and humor in between.

Chapters

(00:00) - PreShow Banter™ — Podcast Banter
(04:13) - Chinese firms to stop using US and Israeli cybersecurity software - 2026-01-19
(08:56) - Story # 1: Exclusive: Beijing tells Chinese firms to stop using US and Israeli cybersecurity software, sources say
(13:42) - Story # 2: Tennessee man to plead guilty to hacking Supreme Court’s electronic case filing system
(16:25) - Story # 3: Hacker gets seven years for breaching Rotterdam and Antwerp ports
(18:20) - Story # 4: 33-year-old Dutchman arrested for enableing criminals to test malware for antivirus programs.
(20:02) - Story # 5: Army to ‘kill NIPR’ at multiple locations in commercial internet experiment
(27:41) - Story # 6: Hungary grants asylum to former Polish minister implicated in spyware probe
(29:12) - Story # 7: California orders Elon Musk’s AI company to immediately stop sharing sexual deepfakes
(41:47) - Story # 8: ServiceNow BodySnatcher flaw highlights risks of rushed AI integrations
(49:30) - Story # 8b: BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow
(55:29) - CTF Winners
(59:19) - ChickenSec: KFC app 'more secure' than Manage My Health, expert claims

Links
Story # 1: Exclusive: Beijing tells Chinese firms to stop using US and Israeli cybersecurity software, sources say
Story # 2: Tennessee man to plead guilty to hacking Supreme Court’s electronic case filing system
Story # 3: Hacker gets seven years for breaching Rotterdam and Antwerp ports
Story # 4: 33-year-old Dutchman arrested for enableing criminals to test malware for antivirus programs.
Story # 5: Army to ‘kill NIPR’ at multiple locations in commercial internet experiment
Story # 6: Hungary grants asylum to former Polish minister implicated in spyware probe
Story # 7: California orders Elon Musk’s AI company to immediately stop sharing sexual deepfakes
Story # 8: ServiceNow BodySnatcher flaw highlights risks of rushed AI integrations
Story # 8b: BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow

ChickenSec: KFC app ‘more secure’ than Manage My Health, expert claims

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

BreachForums Doomsday - 2026-01-12

Black Hills Information Security — Wed, 14 Jan 2026 12:44:09 -0500

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

🔗 Register for FREE webcasts, summits, and workshops -
https://poweredbybhis.com

In this episode, we break down the “Doomsday” incident: a major breach forum gets breached, reminding everyone that even cybercriminal communities suffer constant OPSEC failures. We cover what leaked, why these underground markets keep imploding, and how infighting, reused infrastructure, weak authentication, and sloppy identity hygiene turn “elite hackers” into easy targets. Then we connect the dots to law enforcement’s latest crypto actions—how DOJ seizures and mixer investigations work, why blockchain tracing matters, and what criminals try (and fail) to do to hide money flows. Finally, we translate the news into practical defense: validate breach intel, monitor for credential stuffing, enable MFA, use unique passwords, and tighten access logs. Whether you’re a defender, creator, or online, this is the real-world cybercrime story behind the headlines.

Chapters

(00:00) - PreShow Banter™ — Task Overflow

(02:29) - BreachForums Doomsday - 2026-01-12

(05:09) - Story # 1; Did DOJ Prosecutors Violate Trump’s Executive Order by Selling the Forfeited Samourai Wallet Bitcoin?

(15:42) - Story # 2: Cloudflare defies Italy’s Piracy Shield, won’t block websites on 1.1.1.1 DNS

(23:04) - Story # 3: California bans data broker reselling health data of millions

(28:13) - Story # 4: Apple picks Google’s Gemini to run AI-powered Siri coming this year

(36:00) - Story # 5: Ragebait as a phishing tactic

(38:00) - Story # 6: Doomsday For Cybercriminals — Data Breach Of Major Dark Web Forum

(40:31) - Story # 7: The Great VM Escape: ESXi Exploitation in the Wild

(45:39) - Story # 8: OpenAI says ChatGPT won't use your health information to train its models

(46:23) - Story # 8b: Anthropic brings Claude to healthcare with HIPAA-ready Enterprise tools

(50:15) - Story # 9: Max severity Ni8mare flaw lets hackers hijack n8n servers

(53:05) - Story # 10: Instagram Denies Data Breach, Fixes Unsolicited Password Reset Requests

(56:49) - Reporter remembers saving animals a year after L.A. wildfires

(57:52) - CTF Winners

Links
Story # 1; Did DOJ Prosecutors Violate Trump’s Executive Order by Selling the Forfeited Samourai Wallet Bitcoin?
Story # 2: Cloudflare defies Italy’s Piracy Shield, won’t block websites on 1.1.1.1 DNS
Story # 3: California bans data broker reselling health data of millions
Story # 4: Apple picks Google’s Gemini to run AI-powered Siri coming this year
Story # 5: Ragebait as a phishing tactic
Story # 6: Doomsday For Cybercriminals — Data Breach Of Major Dark Web Forum
Story # 7: The Great VM Escape: ESXi Exploitation in the Wild
Story # 8: OpenAI says ChatGPT won’t use your health information to train its models
Story # 8b: Anthropic brings Claude to healthcare with HIPAA-ready Enterprise tools
Story # 9: Max severity Ni8mare flaw lets hackers hijack n8n servers
Story # 10: Instagram Denies Data Breach, Fixes Unsolicited Password Reset Requests
Reporter remembers saving animals a year after L.A. wildfires

Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest - Join us for our Hybrid Conference and Pre-Conference Training
https://wildwesthackinfest.com

US Cyberattacks on Venezuela - 2026-01-05

Black Hills Information Security — Thu, 08 Jan 2026 23:02:48 -0500

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

🔗 Register for FREE webcasts, summits, and workshops -
https://poweredbybhis.com

In this episode, we break down the growing debate around U.S. cyber operations against Venezuela—and what it means for modern cyber warfare, critical infrastructure security, and geopolitics. The conversation explores how nation-state attacks can target a country’s power grid, the challenges of attributing cyberattacks, and why industrial control systems (ICS/SCADA) remain a high-impact battleground. We also discuss the strategic value (and risks) of disrupting energy infrastructure, how these campaigns compare to other real-world incidents, and what defenders can learn to better protect utilities and national systems.

Chapters

(00:00) - PreShow Banter™ — Undisclosed Closets
(09:07) - US Cyberattacks on Venezuela - 2026-01-05
(10:16) - Story # 1:Trump suggests US used cyberattacks to turn off lights in Venezuela during strikes
(11:14) - Story # 1b: There Were BGP Anomalies During The Venezuela Blackout
(21:06) - Story # 1c: Pizza index of war: Late-night traffic near Pentagon surges again as US strikes Venezuela
(32:40) - Story # 2: Finland seizes ship suspected of damaging subsea cable in Baltic Sea
(35:11) - Story # 3: US cybersecurity experts plead guilty to BlackCat ransomware attacks
(35:46) - Story # 4: MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
(39:06) - Story # 5: Hackers claim to hack Resecurity, firm says it was a honeypot
(42:06) - Story # 6: NordVPN denies breach claims, says attackers have "dummy data"
(42:35) - Story # 7: Hackers say they have stolen 40 million Condé Nast Records - here's how to stay safe
(43:43) - Story # 8: Hacker Dressed As Pink Power Ranger Dismantles Racist Websites Live on Stage
(47:13) - Story # 9: NYC mayoral inauguration bans Flipper Zero, Raspberry Pi devices
(52:18) - Story # 10: Manufacturer issues remote kill command to disable smart vacuum after engineer blocks it from collecting data — user revives it with custom hardware and Python scripts to run offline
(55:15) - Story # 11: Ben Jordan Exposes Severe Security Vulnerabilities in Flock Surveillance Cameras
(57:26) - Story # 11b: We Tracked Ourselves with Exposed Flock Cameras

Links

Story # 1:Trump suggests US used cyberattacks to turn off lights in Venezuela during strikes
Story # 1b: There Were BGP Anomalies During The Venezuela Blackout
Story # 1c: Pizza index of war: Late-night traffic near Pentagon surges again as US strikes Venezuela
Story # 2: Finland seizes ship suspected of damaging subsea cable in Baltic Sea
Story # 3: US cybersecurity experts plead guilty to BlackCat ransomware attacks
Story # 4: MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
Story # 5: Hackers claim to hack Resecurity, firm says it was a honeypot
Story # 6: NordVPN denies breach claims, says attackers have “dummy data”
Story # 7: Hackers say they have stolen 40 million Condé Nast Records - here’s how to stay safe
Story # 8: Hacker Dressed As Pink Power Ranger Dismantles Racist Websites Live on Stage
Story # 9: NYC mayoral inauguration bans Flipper Zero, Raspberry Pi devices
Story # 10: Manufacturer issues remote kill command to disable smart vacuum after engineer blocks it from collecting data — user revives it with custom hardware and Python scripts to run offline
Story # 11: Ben Jordan Exposes Severe Security Vulnerabilities in Flock Surveillance Cameras
Story # 11b: We Tracked Ourselves with Exposed Flock Cameras

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Hot Take Predictions for Next Year – 2025-12-15

Black Hills Information Security — Thu, 18 Dec 2025 17:48:08 -0500

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

🔗 Register for FREE webcasts, summits, and workshops -
https://poweredbybhis.com

Chapters

(00:00) - PreShow Banter™ — testing testing
(00:11) - Hot Take Predictions for Next Year – 2025-12-15
(02:10) - Story # 1: Russian kids revolt as Kremlin bans Roblox, other popular apps
(10:21) - Story # 2: Google's killing off its dark web report because users didn't know what to do with it
(20:05) - Story # 3: Coupang data breach traced to ex-employee who retained system access
(31:13) - Story # 4: Roomba maker iRobot bought by Chinese supplier after filing for bankruptcy
(34:18) - Story # 5: February report from researcher found Chinese KVM had an unclearly documented microphone and communicated with China-based servers, but many of the security issues are now addressed [Updated]
(36:48) - Story # 6: When adversaries bring their own virtual machine for persistence
(41:57) - Story # 7: Oh no! Hackers snuck malware inside uber-popular Windows app Notepad++
(44:20) - Hot Take Predictions for 2026

Links
Story # 1: Russian kids revolt as Kremlin bans Roblox, other popular apps
Story # 2: Google’s killing off its dark web report because users didn’t know what to do with it
Story # 3: Coupang data breach traced to ex-employee who retained system access
Story # 4: Roomba maker iRobot bought by Chinese supplier after filing for bankruptcy
Story # 5: February report from researcher found Chinese KVM had an unclearly documented microphone and communicated with China-based servers, but many of the security issues are now addressed [Updated]
Story # 6: When adversaries bring their own virtual machine for persistence
Story # 7: Oh no! Hackers snuck malware inside uber-popular Windows app Notepad++

The team looks ahead to 2026 and shares practical, sometimes blunt predictions about where cybersecurity is heading. They discuss how AI will continue reshaping both offense and defense, with attackers using automation at scale while defenders struggle to operationalize AI beyond marketing hype.

The conversation highlights growing risk from identity abuse, cloud misconfigurations, and insecure SaaS sprawl, noting that many breaches will still come down to basic failures rather than advanced exploits. They also predict continued burnout in security teams, more consolidation among security vendors, and increasing pressure to prove real ROI from security tools.

On the positive side, the hosts see improved detection engineering, better security education, and more community-driven knowledge sharing. Overall, the message is clear: fundamentals still matter, hype won’t save you, and organizations that focus on people, process, and visibility will be better positioned for 2026.

Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

A Live Stream From inside Lazarus Group – 2025-12-08

Black Hills Information Security — Thu, 11 Dec 2025 18:19:45 -0500

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –

https://poweredbybhis.com

Chat with us on Discord!
https://discord.gg/bhis
🔴live-chat

A Live Stream From inside Lazarus Group – 2025-12-08
This BHIS episode blends cybersecurity humor, hacker culture, and livestream chaos as the team jokes about nation-state threats, leaked webcams, OPSEC mishaps, and technical glitches. With unscripted banter and light industry insights, it’s a fun, energetic listen for fans of ethical hacking, infosec podcasts, and behind-the-scenes security chatter.

Chapters
00:00 - PreShow Banter™ — Industry Leaders
02:34 - A Live Stream From inside Lazarus Group – 2025-12-08
04:24 - Story # 1: React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability
08:58 - Story # 2: A Live Stream from Inside Lazarus Group’s IT Workers Scheme
20:37 - Story # 3: Contractors with hacking records accused of wiping 96 govt databases
26:44 - Story # 4: Apple refuses to pre-install government app on iPhones in India
37:42 - Story # 5: Russia blocks Apple's FaceTime in mounting push against foreign tech platforms
44:55 - Story # 6: ‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted
57:53 - Story # 7: Flock Uses Overseas Gig Workers to Build its Surveillance AI

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

(00:00) - 00:00 - PreShow Banter™ — Industry Leaders
(02:34) - A Live Stream From inside Lazarus Group – 2025-12-08
(04:24) - Story # 1: React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability
(08:57) - Story # 2: A Live Stream from Inside Lazarus Group’s IT Workers Scheme
(20:37) - Story # 3: Contractors with hacking records accused of wiping 96 govt databases
(26:44) - Story # 4: Apple refuses to pre-install government app on iPhones in India
(37:41) - Story # 5: Russia blocks Apple's FaceTime in mounting push against foreign tech platforms
(44:55) - Story # 6: ‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted
(57:52) - Story # 7: Flock Uses Overseas Gig Workers to Build its Surveillance AI

Lawmakers Want to Ban VPNs - 2025-12-01

Black Hills Information Security — Wed, 03 Dec 2025 21:45:26 -0500

https://poweredbybhis.com

Chapters

(00:00) - PreShow Banter™ — The Problem With Extensions
(03:10) - Lawmakers Want to Ban VPNs – BHIS - Talkin' Bout [infosec] News 2025-12-01
(03:47) - Story # 1: Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)
(12:05) - Story # 2: Lawmakers Want to Ban VPNs—And They Have No Idea What They're Doing
(21:18) - Story # 3: Critical 7 Zip Vulnerability With Public Exploit Requires Manual Update
(25:48) - Story # 4: 'Slop Evader' Lets You Surf the Web Like It’s 2022
(37:07) - Story # 5: China’s Espionage in Europe is Deepening and More Sophisticated than Acknowledged, Expert Says
(39:10) - Story # 6: Apple Update Warning For All iPhone 17, 16 And 15 Users—Act Now
(42:38) - Story # 7: Meta is earning a fortune on a deluge of fraudulent ads, documents show
(50:22) - Story # 8: Meta had a 17-strike policy for sex trafficking, former safety leader claims
(52:40) - Story # 9: Man behind in-flight Evil Twin WiFi attacks gets 7 years in prison

News Links
Story # 1: Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)
Story # 2: Lawmakers Want to Ban VPNs—And They Have No Idea What They're Doing
Story # 3: Critical 7 Zip Vulnerability With Public Exploit Requires Manual Update
Story # 4: 'Slop Evader' Lets You Surf the Web Like It’s 2022
Story # 5: China’s Espionage in Europe is Deepening and More Sophisticated than Acknowledged, Expert Says
Story # 6: Apple Update Warning For All iPhone 17, 16 And 15 Users—Act Now
Story # 7: Meta is earning a fortune on a deluge of fraudulent ads, documents show
Story # 8: Meta had a 17-strike policy for sex trafficking, former safety leader claims
Story # 9: Man behind in-flight Evil Twin WiFi attacks gets 7 years in prison

Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

Shai-Hulud malware leaks secrets on GitHub – 2025-11-24

Black Hills Information Security — Wed, 26 Nov 2025 08:16:18 -0500

Chapters

(00:00) - PreShow Banter™ — Stressed about lithium batteries
(04:59) - Shai-Hulud malware leaks secrets on GitHub – BHIS - Talkin' Bout [infosec] News 2025-11-24
(05:57) - Story # 1: Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub
(11:18) - Story # 2: CrowdStrike catches insider feeding information to hackers
(15:50) - Story # 3: Fidelity sues Broadcom over access to key software to avoid outages
(22:17) - Story # 4: NetApp sues former CTO for alleged data breach
(26:48) - Story # 5: CrowdStrike Research: Security Flaws in DeepSeek-Generated Code Linked to Political Triggers
(36:05) - Story # 6: A major Cloudflare outage took down large parts of the internet - X, ChatGPT and more were affected, but all recovered now
(37:11) - Story # 6b: Cloudflare outage on November 18, 2025
(41:43) - Story # 7: Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt
(46:34) - Story # 8: This Hacker Conference Installed a Literal Antivirus Monitoring System
(51:10) - Story # 9: Microsoft to integrate Sysmon directly into Windows 11, Server 2025
(56:40) - Story # 10: Crypto and Carcasses: Undercover Sting Recovers $700K in Bitcoin Miners, Foils $75K Frozen Turkey Heist

News Links
Story # 1: Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub
Story # 2: CrowdStrike catches insider feeding information to hackers
Story # 3: Fidelity sues Broadcom over access to key software to avoid outages
Story # 4: NetApp sues former CTO for alleged data breach
Story # 5: CrowdStrike Research: Security Flaws in DeepSeek-Generated Code Linked to Political Triggers
Story # 6: A major Cloudflare outage took down large parts of the internet - X, ChatGPT and more were affected, but all recovered now
Story # 6b: Cloudflare outage on November 18, 2025
Story # 7: Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt
Story # 8: This Hacker Conference Installed a Literal Antivirus Monitoring System
Story # 9: Microsoft to integrate Sysmon directly into Windows 11, Server 2025
Story # 10: Crypto and Carcasses: Undercover Sting Recovers $700K in Bitcoin Miners, Foils $75K Frozen Turkey Heist

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

A.I. Transcription Startup Was Just A Guy Taking Notes- 2025-11-17

Black Hills Information Security — Thu, 20 Nov 2025 20:48:00 -0500

https://poweredbybhis.com

00:00:00 - PreShow Banter™ — The Way the Community Rumbles

00:08:21 - A.I. Transcription Startup Was Just A Guy Taking Notes - BHIS - Talkin’ Bout [infosec] News 2025-11-17

00:09:01 - Story # 1: New data shows companies are rehiring former employees as AI falls short of expectations

00:18:06 - Eric & Whitney’s “Podcast” [webcast] on training your own LLM

00:22:12 - Story # 2: Founder Admits His “AI Transcription” Startup Was Just Him Joining People’s Meetings and Taking Notes by Hand

00:26:20 - Story # 3: Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies

00:37:35 - Story # 4: Google is easing up on Android’s new sideloading restrictions!

00:43:44 - Story # 5: Google is collecting troves of data from downgraded Nest thermostats

00:44:58 - Story # 5b: Hackers are saving Google’s abandoned Nest thermostats with open-source firmware

00:51:34 - Story # 6: FFmpeg to Google: Fund Us or Stop Sending Bugs

01:00:40 - Story # 7: Teens are Hacking School Systems. Let’s Teach Them to Protect Communities Instead

01:05:55 - Story # 8: Disrupting the first reported AI-orchestrated cyber espionage campaign

01:14:58 - Discord CTF Winners

(00:00) - PreShow Banter™ — The Way the Community Rumbles
(08:21) - A.I. Transcription Starup Was Just A Guy Taking Notes - BHIS - Talkin' Bout [infosec] News 2025-11-17
(09:01) - Story # 1: New data shows companies are rehiring former employees as AI falls short of expectations
(18:05) - Eric & Whitney's "Podcast" [webcast] on training your own LLM
(22:12) - Story # 2: Founder Admits His “AI Transcription” Startup Was Just Him Joining People’s Meetings and Taking Notes by Hand
(26:20) - Story # 3: Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies
(37:34) - Story # 4: Google is easing up on Android's new sideloading restrictions!
(43:43) - Story # 5: Google is collecting troves of data from downgraded Nest thermostats
(44:58) - Story # 5b: Hackers are saving Google's abandoned Nest thermostats with open-source firmware
(51:33) - Story # 6: FFmpeg to Google: Fund Us or Stop Sending Bugs
(01:00:39) - Story # 7: Teens are Hacking School Systems. Let’s Teach Them to Protect Communities Instead
(01:05:55) - Story # 8: Disrupting the first reported AI-orchestrated cyber espionage campaign
(01:14:58) - Discord CTF Winners

Louvre’s Video Security Password Was ‘Louvre’ 2025-11-10

Black Hills Information Security — Thu, 13 Nov 2025 16:26:01 -0500

Chapters

00:00 - PreShow Banter™ — Humans are Done

03:04 - Louvre’s video security password was ‘Louvre’ – BHIS - Talkin’ Bout [infosec] News 2025-11-10

05:11 - Story # 1: I Tried the Robot That’s Coming to Live With You. It’s Still Part Human.

15:14 - Story # 2: How to trade your $214,000 cybersecurity job for a jail cell

25:14 - Story # 3: The Louvre’s video security password was reportedly ‘Louvre’

29:04 - Story # 4: Dangerous runC flaws could allow hackers to escape Docker containers

32:58 - Story # 5: List of AI Tools Promoted by Threat Actors in Underground Forums and Their Capabilities

40:00 - Story # 5b: GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools

56:37 - BHIS Webcast – X-Typhoon - Not your Father’s China with John Strand

(00:00) - PreShow Banter™ — Humans are Done
(03:03) - Louvre’s video security password was ‘Louvre’ – BHIS - Talkin' Bout [infosec] News 2025-11-10
(05:10) - Story # 1: I Tried the Robot That’s Coming to Live With You. It’s Still Part Human.
(15:14) - Story # 2: How to trade your $214,000 cybersecurity job for a jail cell
(25:13) - Story # 3: The Louvre’s video security password was reportedly ‘Louvre’
(29:03) - Story # 4: Dangerous runC flaws could allow hackers to escape Docker containers
(32:58) - Story # 5: List of AI Tools Promoted by Threat Actors in Underground Forums and Their Capabilities
(40:00) - Story # 5b: GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools
(56:37) - BHIS Webcast – X-Typhoon - Not your Father's China with John Strand

Ransomware Victims Stop Paying Hackers – 2025-11-03

Black Hills Information Security — Thu, 06 Nov 2025 08:36:00 -0500

00:00 - PreShow Banter™ — Musical Views of the Universe

04:05 - – BHIS - Talkin’ Bout [infosec] News 2025-11-03

04:39 - Story # 1: Ransomware profits drop as victims stop paying hackers

06:22 - Chart since 2019

16:06 - Story # 2: More than a million people every week show suicidal intent when chatting with ChatGPT, OpenAI estimates

33:02 - Story # 3: 10M people watched a YouTuber shim a lock; the lock company sued him. Bad idea.

41:18 - Story # 4: ‘Dangerous’ YouTube videos struck down for bypassing Windows 11 account setup [Update: Restored]

47:13 - Story # 5: Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says

51:08 - Story # 6: Microsoft: DNS outage impacts Azure and Microsoft 365 services

54:33 - Story # 7: EY Data Leak – Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure

55:22 - Stordy # 8: Black Hat Europe 2025 Arsenal: 8 AI Security Tools Transforming Cybersecurity

(00:00) - PreShow Banter™ — Musical Views of the Universe
(04:04) - Ransomware Victims Stop Paying Hackers – BHIS - Talkin' Bout [infosec] News 2025-11-03
(04:38) - Story # 1: Ransomware profits drop as victims stop paying hackers
(06:22) - Chart since 2019 (thumbnail)
(16:06) - Story # 2: More than a million people every week show suicidal intent when chatting with ChatGPT, OpenAI estimates
(33:02) - Story # 3: 10M people watched a YouTuber shim a lock; the lock company sued him. Bad idea.
(41:18) - Story # 4: ‘Dangerous’ YouTube videos struck down for bypassing Windows 11 account setup [Update: Restored]
(47:12) - Story # 5: Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says
(51:07) - Story # 6: Microsoft: DNS outage impacts Azure and Microsoft 365 services
(54:33) - Story # 7: EY Data Leak – Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure
(55:22) - Story # 8: Black Hat Europe 2025 Arsenal: 8 AI Security Tools Transforming Cybersecurity

The AI Browser Wars - 2025-10-27

Black Hills Information Security — Thu, 30 Oct 2025 22:20:00 -0400

https://poweredbybhis.com

The BHIS crew breaks down the latest cybersecurity stories making waves — from data breaches and malware campaigns to privacy issues, exploit trends, and tech policy shake-ups. Join our panel of security pros for expert analysis, sharp humor, and practical insights you can actually use. Whether it’s social engineering, AI-powered attacks, or bizarre security headlines, we dig into what matters most for defenders and curious minds alike. Stay informed, entertained, and one step ahead in the ever-changing world of infosec.

00:00:00 - PreShow Banter™ — The Cost of War.xyz

00:03:42 - The AI Browser Wars - BHIS - Talkin’ Bout [infosec] News 2025-10-27

00:04:04 - Story # 1: Smart bed owners experience AWS outage nightmare as they’re left sweating and stuck in upright position

00:10:49 - Story # 2: Robots May Replace 600,000 Human Employees at Amazon

00:14:40 - Story # 3: Meet Mico, Microsoft’s AI version of Clippy

00:20:59 - Story # 4: Exploitation of Windows Server Update Services Remote Code Execution Vulnerability

00:26:31 - Story # 5: Ex-L3Harris executive accused of selling trade secrets to Russia

00:31:29 - Story # 6: Introducing ChatGPT Atlas

00:43:34 - Story # 7: ‘Phased Out’—Google Confirms Bad News For 3 Billion Chrome Users

00:52:26 - Story # 8: The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn

01:00:16 - Story # 9: KFC Venezuela Alleged Data Breach – 1 Million Customer Records Exposed

(00:00) - PreShow Banter™ — The Cost of War.xyz
(03:42) - The AI Browser Wars - BHIS - Talkin' Bout [infosec] News 2025-10-27
(04:04) - Story # 1: Smart bed owners experience AWS outage nightmare as they're left sweating and stuck in upright position
(10:48) - Story # 2: Robots May Replace 600,000 Human Employees at Amazon
(14:40) - Story # 3: Meet Mico, Microsoft’s AI version of Clippy
(20:58) - Story # 4: Exploitation of Windows Server Update Services Remote Code Execution Vulnerability
(26:30) - Story # 5: Ex-L3Harris executive accused of selling trade secrets to Russia
(31:28) - Story # 6: Introducing ChatGPT Atlas
(43:34) - Story # 7: ‘Phased Out’—Google Confirms Bad News For 3 Billion Chrome Users
(52:25) - Story # 8: The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn
(01:00:15) - Story # 9: KFC Venezuela Alleged Data Breach – 1 Million Customer Records Exposed

Online Book Store Takes Down Half the Internet - BHIS - Talkin' Bout [infosec] News 2025-10-20

Black Hills Information Security — Fri, 24 Oct 2025 00:13:58 -0400

https://poweredbybhis.com

00:00:00 - PreShow Banter™ — AWS Snow Day Party

00:11:31 - Online Book Store Takes Down Half of the Internet - BHIS - Talkin’ Bout [infosec] News 2025-10-20

00:12:12 - Story # 1: F5 says hackers stole undisclosed BIG-IP flaws, source code

00:35:11 - Story # 2: Newsom signs age verification law, siding with tech giants over Hollywood

00:48:39 - Story # 3: Researchers find a startlingly cheap way to steal your secrets from space

00:55:04 - Story # 4: Jeff Bezos Has a Plan to Curb AI’s Carbon Footprint: Send Data Centers to Space

01:02:22 - Story # 5: SolarWinds Security Chief reflects on the Russian hack that exposed US government agencies

(00:00) - PreShow Banter™ — AWS Snow Day Party
(11:30) - Online Book Store Takes Down Half of the Internet - BHIS - Talkin' Bout [infosec] News 2025-10-20
(12:12) - Story # 1: F5 says hackers stole undisclosed BIG-IP flaws, source code
(35:10) - Story # 2: Newsom signs age verification law, siding with tech giants over Hollywood
(48:39) - Story # 3: Researchers find a startlingly cheap way to steal your secrets from space
(55:03) - Story # 4: Jeff Bezos Has a Plan to Curb AI’s Carbon Footprint: Send Data Centers to Space
(01:02:21) - Story # 5: SolarWinds Security Chief reflects on the Russian hack that exposed US government agencies

Hackers claim Discord breach exposed data of 5.5 million users - 2025-10-13

Black Hills Information Security — Fri, 17 Oct 2025 22:51:47 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — A Real Podcast

03:15 - Hackers claim Discord breach exposed data of 5.5 million users – BHIS - Talkin' Bout [infosec] News 2025-10-13

05:44 - Story # 1: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code

24:27 - Story # 2: Hackers claim Discord breach exposed data of 5.5 million users

36:52 - Story # 3: Velociraptor leveraged in ransomware attacks

46:47 - Story # 4: Huntress Threat Advisory: Widespread SonicWall SSLVPN Compromise

54:48 - CTF Challenge

(00:00) - PreShow Banter™ — A Real Podcast
(03:14) - Hackers claim Discord breach exposed data of 5.5 million users – BHIS - Talkin' Bout [infosec] News 2025-10-13
(05:43) - Story # 1: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
(24:26) - Story # 2: Hackers claim Discord breach exposed data of 5.5 million users
(36:52) - Story # 3: Velociraptor leveraged in ransomware attacks
(46:46) - Story # 4: Huntress Threat Advisory: Widespread SonicWall SSLVPN Compromise
(54:48) - CTF Challenge

2 Million Cisco Devices Targeted by Exploited 0-Day – 2025-09-29

Black Hills Information Security — Wed, 01 Oct 2025 22:55:59 -0400

00:00 - PreShow Banter™ — A little radiation never hurt anybody.

03:07 - BHIS - Talkin’ Bout [infosec] News 2025-09-29

03:29 - Story # 1: As many as 2 million Cisco devices affected by actively exploited 0-day

19:07 - Story # 2: Viral call-recording app Neon goes dark after exposing users’ phone numbers, call recordings, and transcripts | TechCrunch

24:25 - Story # 3: AI Darwin Awards Show AI’s Biggest Problem Is Human

29:32 - Story # 4: Nikon revokes all C2PA image authenticity certificates after major vulnerability exposed

34:14 - Story # 5: ‘You’ll never need to work again’: Criminals offer reporter money to hack BBC

38:18 - Story # 6: Cybersecurity Training Programs Don’t Prevent Employees from Falling for Phishing Scams

46:48 - Mini CTF Walkthrough

56:03 - Story # 7: U.S. Secret Service dismantles imminent telecommunications threat in New York tristate area

(00:00) - PreShow Banter™ — A little radiation never hurt anybody.
(03:07) - BHIS - Talkin' Bout [infosec] News 2025-09-29
(03:28) - Story # 1: As many as 2 million Cisco devices affected by actively exploited 0-day
(19:06) - Story # 2: Viral call-recording app Neon goes dark after exposing users' phone numbers, call recordings, and transcripts | TechCrunch
(24:24) - Story # 3: AI Darwin Awards Show AI’s Biggest Problem Is Human
(29:31) - Story # 4: Nikon revokes all C2PA image authenticity certificates after major vulnerability exposed
(34:14) - Story # 5: 'You'll never need to work again': Criminals offer reporter money to hack BBC
(38:18) - Story # 6: Cybersecurity Training Programs Don’t Prevent Employees from Falling for Phishing Scams
(46:48) - Mini CTF Walkthrough
(56:02) - Story # 7: U.S. Secret Service dismantles imminent telecommunications threat in New York tristate area

Dirk-Jan Mollema Walks Us Through the Entra ID Cross-Tenant Vulnerability Discovery– 2025-09-22

Black Hills Information Security — Wed, 24 Sep 2025 23:03:00 -0400

00:00 - PreShow Banter™ — Unnatural European Fridges

03:34 - The Entra ID Cross-Tenant Vulnerability Discovery – BHIS - Talkin’ Bout [infosec] News 2025-09-22

04:14 - Story # 1: One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

21:32 - Story # 2: Shai-Hulud: Self-Replicating Worm Compromises 500+ NPM Packages

40:50 - OSSPREY – NPM Package @Ctrl/Tinycolor Compromised: Shai Hulud Malware Targets Secrets and Persistence

51:41 - Story # 3: Verified Steam game steals streamer’s cancer treatment donations

57:16 - Story # 4: Heathrow warns of second day of disruption after cyber-attack

(00:00) - PreShow Banter™ — Unnatural European Fridges
(03:07) - The Entra ID Cross-Tenant Vulnerability Discovery – BHIS - Talkin' Bout [infosec] News 2025-09-22
(03:45) - Story # 1: One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
(20:09) - Story # 2: Shai-Hulud: Self-Replicating Worm Compromises 500+ NPM Packages
(38:51) - OSSPREY – NPM Package @Ctrl/Tinycolor Compromised: Shai Hulud Malware Targets Secrets and Persistence
(49:28) - Story # 3: Verified Steam game steals streamer's cancer treatment donations
(54:51) - Story # 4: Heathrow warns of second day of disruption after cyber-attack

Kerberoasting Goes to Washington – 2025-09-15

Black Hills Information Security — Fri, 19 Sep 2025 21:02:04 -0400

???? Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com

00:00 - PreShow Banter™ — Enter Dark John

03:15 - Kerberoasting Goes to Washington – BHIS - Talkin’ Bout [infosec] News 2025-09-15

03:49 - Story # 1: Senator blasts Microsoft for making default Windows vulnerable to “Kerberoasting”

12:46 - Story # 2: How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations

32:42 - Story # 3: Some JLR suppliers ‘face bankruptcy’ due to hack crisis

41:30 - Story # 4: AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

46:07 - Story # 5: All your vulns are belong to us! CISA wants to maintain gov control of CVE program

49:55 - Story # 6: Qantas penalizes executives for July cyberattack

51:15 - Story # 7: America’s second largest egg producer breached, claim hackers

54:55 - Story # 8: Undocumented Radios Found in Solar-Powered Devices

(00:00) - PreShow Banter™ — Enter Dark John
(03:14) - Kerberoasting Goes to Washington – BHIS - Talkin' Bout [infosec] News 2025-09-15
(03:49) - Story # 1: Senator blasts Microsoft for making default Windows vulnerable to “Kerberoasting”
(12:46) - Story # 2: How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations
(32:41) - Story # 3: Some JLR suppliers 'face bankruptcy' due to hack crisis
(41:29) - Story # 4: AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns
(46:06) - Story # 5: All your vulns are belong to us! CISA wants to maintain gov control of CVE program
(49:54) - Story # 6: Qantas penalizes executives for July cyberattack
(51:14) - Story # 7: America’s second largest egg producer breached, claim hackers
(54:55) - Story # 8: Undocumented Radios Found in Solar-Powered Devices

Anthropic 1.5 Billion © Settlement - 2025-09-08

Black Hills Information Security — Wed, 10 Sep 2025 18:20:50 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — If I Were French

04:35 - Anthropic 1.5 Billion © Settlement - BHIS - Talkin’ Bout [infosec] News 2025-09-08

05:48 - Hackers Threaten to Submit Artists’ Data to AI Models If Art Site Doesn’t Pay Up

08:40 - Anthropic Agrees to Pay Authors at Least $1.5 Billion in AI Copyright Settlement

23:58 - This Company Turns Dashcams into ‘Virtual CCTV Cameras.’ Then Hackers Got In

33:38 - Ice obtains access to Israeli-made spyware that can hack phones and encrypted apps

40:07 - Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack

44:27 - npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack

46:38 - Update on Mandiant Drift and Salesloft Application Investigations

51:04 - M&S hackers claim to be behind Jaguar Land Rover cyber attack

51:55 - New TP-Link zero-day surfaces as CISA warns other flaws are exploited

54:52 - ChickenSec: US turns to Russia for chicken eggs for the first time in 32 years, despite sanctions to cripple its economy

57:58 - Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions

(00:00) - PreShow Banter™ — If I Were French
(04:35) - Anthropic 1.5 Billion © Settlement - BHIS - Talkin' Bout [infosec] News 2025-09-08
(05:47) - Hackers Threaten to Submit Artists' Data to AI Models If Art Site Doesn't Pay Up
(08:40) - Anthropic Agrees to Pay Authors at Least $1.5 Billion in AI Copyright Settlement
(23:57) - This Company Turns Dashcams into ‘Virtual CCTV Cameras.’ Then Hackers Got In
(33:38) - Ice obtains access to Israeli-made spyware that can hack phones and encrypted apps
(40:07) - Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack
(44:26) - npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack
(46:37) - Update on Mandiant Drift and Salesloft Application Investigations
(51:03) - M&S hackers claim to be behind Jaguar Land Rover cyber attack
(51:54) - New TP-Link zero-day surfaces as CISA warns other flaws are exploited
(54:52) - ChickenSec: US turns to Russia for chicken eggs for the first time in 32 years, despite sanctions to cripple its economy
(57:57) - Cybercriminals Exploit X's Grok AI to Bypass Ad Protections and Spread Malware to Millions

Chinese agent tried to recruit Stanford Student - 2025-09-02

Black Hills Information Security — Sat, 06 Sep 2025 12:03:47 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — It’s 8ft skeleton season.

02:18 - BHIS - Talkin’ Bout [infosec] News 2025-09-02

03:07 - Story # 1: Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks

07:35 - Story # 2: DSLRoot, Proxies, and the Threat of ‘Legal Botnets’

13:46 - Story # 3: Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling

17:44 - Story # 4: Ransomware crooks knock Swedish municipalities offline for measly sum of $168K

19:39 - Story # 5: As crippling cyberattack against Nevada continues, Lombardo says ‘we’re working through it.’

20:56 - Story # 6: Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025

22:43 - Story # 7: NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-7775, CVE-2025-7776 and CVE-2025-8424

25:20 - Story # 8: First known AI-powered ransomware uncovered by ESET Research

30:00 - Story # 9: In the rush to adopt hot new tech, security is often forgotten. AI is no exception

32:06 - Story # 10: TransUnion suffers data breach impacting over 4.4 million people

34:17 - Story # 11: ChickenSec FollowUp: Artificial Intelligence: The other AI

35:20 - Story # 12: They weren’t lovin’ it - hacker cracks McDonald’s security in quest for free nuggets, and it was apparently not too tricky

39:29 - Identify the birds you see or hear with Merlin Bird ID

40:04 - Story # 13: Detecting and countering misuse of AI: August 2025

51:31 - Story # 14: I’m a Stanford student. A Chinese agent tried to recruit me as a spy

(00:00) - PreShow Banter™ — It’s 8ft skeleton season.
(02:17) - BHIS - Talkin' Bout [infosec] News 2025-09-02
(03:07) - Story # 1: Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks
(07:35) - Story # 2: DSLRoot, Proxies, and the Threat of ‘Legal Botnets’
(13:46) - Story # 3: Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling
(17:44) - Story # 4: Ransomware crooks knock Swedish municipalities offline for measly sum of $168K
(19:39) - Story # 5: As crippling cyberattack against Nevada continues, Lombardo says ‘we’re working through it.’
(20:56) - Story # 6: Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025
(22:43) - Story # 7: NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-7775, CVE-2025-7776 and CVE-2025-8424
(25:19) - Story # 8: First known AI-powered ransomware uncovered by ESET Research
(30:00) - Story # 9: In the rush to adopt hot new tech, security is often forgotten. AI is no exception
(32:05) - Story # 10: TransUnion suffers data breach impacting over 4.4 million people
(34:16) - Story # 11: ChickenSec FollowUp: Artificial Intelligence: The other AI
(35:20) - Story # 12: They weren't lovin' it - hacker cracks McDonald's security in quest for free nuggets, and it was apparently not too tricky
(39:29) - Identify the birds you see or hear with Merlin Bird ID
(40:03) - Story # 13: Detecting and countering misuse of AI: August 2025
(51:31) - Story # 14: I’m a Stanford student. A Chinese agent tried to recruit me as a spy

The Impending AI Bubble 2025-08-25

Black Hills Information Security — Sat, 30 Aug 2025 18:59:28 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Canadian Chicken

02:01 - The AI Bubble BHIS - Talkin’ Bout [infosec] News 2025-08-25

02:23 - Story # 1: Congressman proposes bringing back letters of marque for cyber privateers

09:27 - Story # 2: SIM-Swapper, Scattered Spider Hacker Gets 10 Years

12:43 - Story # 3: Developer jailed for taking down employer’s network with kill switch malware

16:33 - Story # 4: Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet

20:42 - The Utopia Chronicles

23:20 - Story # 5: “Unstoppable Power Surges”: China’s Quantum Processor Outspeeds Supercomputers by 1 Quadrillion and Triggers US Intelligence Panic

28:47 - Story # 6: Bank forced to rehire workers after lying about chatbot productivity, union says

41:21 - Story # 7: It Took Many Years And Billions Of Dollars, But Microsoft Finally Invented A Calculator That Is Wrong Sometimes

43:41 - Story # 8: Copilot Broke Your Audit Log, but Microsoft Won’t Tell You

46:33 - Story # 9: Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices

49:24 - Story # 10 : Zero-Day Clickjacking Flaws Found in Password Managers Used by Millions

53:12 - Story # 11: Cybersecurity training doesn’t work: time wasted with no impact, study finds

59:07 - ChickenSec: Artificial Intelligence: The other AI

(00:00) - PreShow Banter™ — Canadian Chicken
(02:01) - The AI Bubble BHIS - Talkin' Bout [infosec] News 2025-08-25
(02:23) - Story # 1: Congressman proposes bringing back letters of marque for cyber privateers
(09:27) - Story # 2: SIM-Swapper, Scattered Spider Hacker Gets 10 Years
(12:42) - Story # 3: Developer jailed for taking down employer's network with kill switch malware
(16:33) - Story # 4: Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet
(20:41) - The Utopia Chronicles
(23:20) - Story # 5: “Unstoppable Power Surges”: China’s Quantum Processor Outspeeds Supercomputers by 1 Quadrillion and Triggers US Intelligence Panic
(28:46) - Story # 6: Bank forced to rehire workers after lying about chatbot productivity, union says
(41:21) - Story # 7: It Took Many Years And Billions Of Dollars, But Microsoft Finally Invented A Calculator That Is Wrong Sometimes
(43:41) - Story # 8: Copilot Broke Your Audit Log, but Microsoft Won’t Tell You
(46:33) - Story # 9: Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices
(49:24) - Story # 10 : Zero-Day Clickjacking Flaws Found in Password Managers Used by Millions
(53:12) - Story # 11: Cybersecurity training doesn’t work: time wasted with no impact, study finds
(59:06) - ChickenSec: Artificial Intelligence: The other AI

Cyberattack Bricks Speed Cameras – 2025-08-18

Black Hills Information Security — Wed, 20 Aug 2025 17:33:03 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — The gif that keeps on giffing

01:46 - Cyberattack Bricks Speed Cameras – BHIS - Talkin’ Bout [infosec] News 2025-08-18

02:39 - Story # 1: Perplexity made a sky-high $34.5 billion bid for Google Chrome — a bold and unusual move in the midst of antitrust scrutiny

07:16 - Story # 2: Exclusive: US embeds trackers in AI chip shipments to catch diversions to China, sources say

10:22 - Story # 3: How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes

12:17 - Story # 4: Cisco discloses maximum-severity defect in firewall software

13:56 - Story # 5: Data Dump From APT Actor Yields Clues to Attacker Capabilities

19:13 - Story # 6: Russian cyberattack in the Netherlands leaves speed cameras offline indefinitely

23:30 - Story # 7: HTTP/2 MadeYouReset Vulnerability Enables Massive DDoS Attacks

24:51 - Story # 8: LAPD Eyes ‘GeoSpy’, an AI Tool That Can Geolocate Photos in Seconds

29:05 - Story # 9: Manpower discloses data breach affecting nearly 145,000 people

34:51 - Story # 10: Hacker Offers to Sell 15.8 Million Plain-Text PayPal Credentials On Dark Web Forum

35:34 - Story # 11: The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived

40:54 - Story # 12: New Clever Phishing Attack Uses Japanese Character “ん” to Mimic Forward Slash “/”

46:28 - Story # 13: Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild

48:13 - Story # 14: Plex warns users to patch security vulnerability immediately

50:53 - ChickenSec: Noble Foods using soil mapping technology at organic egg farm

(00:00) - PreShow Banter™ — The gif that keeps on giffing
(01:46) - Cyberattack Bricks Speed Cameras – BHIS - Talkin' Bout [infosec] News 2025-08-18
(02:38) - Story # 1: Perplexity made a sky-high $34.5 billion bid for Google Chrome — a bold and unusual move in the midst of antitrust scrutiny
(07:16) - Story # 2: Exclusive: US embeds trackers in AI chip shipments to catch diversions to China, sources say
(10:22) - Story # 3: How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes
(12:16) - Story # 4: Cisco discloses maximum-severity defect in firewall software
(13:55) - Story # 5: Data Dump From APT Actor Yields Clues to Attacker Capabilities
(19:13) - Story # 6: Russian cyberattack in the Netherlands leaves speed cameras offline indefinitely
(23:30) - Story # 7: HTTP/2 MadeYouReset Vulnerability Enables Massive DDoS Attacks
(24:51) - Story # 8: LAPD Eyes ‘GeoSpy’, an AI Tool That Can Geolocate Photos in Seconds
(29:04) - Story # 9: Manpower discloses data breach affecting nearly 145,000 people
(34:50) - Story # 10: Hacker Offers to Sell 15.8 Million Plain-Text PayPal Credentials On Dark Web Forum
(35:34) - Story # 11: The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived
(40:53) - Story # 12: New Clever Phishing Attack Uses Japanese Character “ん” to Mimic Forward Slash “/”
(46:27) - Story # 13: Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild
(48:13) - Story # 14: Plex warns users to patch security vulnerability immediately
(50:52) - ChickenSec: Noble Foods using soil mapping technology at organic egg farm

DEF CON RECAP – 2025-08-11

Black Hills Information Security — Thu, 14 Aug 2025 17:43:54 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Wading Through Woods

06:06 - DEF CON RECAP - Talkin’ Bout [infosec] News 2025-08-11

09:16 - Story # 1: It’s time to acknowledge HTTP/1.1 is insecure

12:36 - Story # 2: Research reveals possible privacy gaps in Apple Intelligence’s data handling

17:51 - Story # 3: Federal court filing system hit in sweeping hack

21:09 - Story # 4: Cisco discloses data breach impacting Cisco.com user accounts

32:17 - Story # 5: Google says its AI-based bug hunter found 20 security vulnerabilities

34:20 - Story # 6: Automate security reviews with Claude Code

39:01 - Story # 7: Flipper Zero ‘DarkWeb’ Firmware Bypasses Rolling Code Security on Major Vehicle Brands

44:44 - Story # 7b: OnStar assists CHP in stopping fleeing SUV with toddler inside

47:12 - Story # 7c: That viral video of a ‘deactivated’ Tesla Cybertruck is a fake

49:37 - Story # 8: LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code

50:53 - Story # 9: Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools

53:08 - Story # 10: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT

58:10 - Story # 11: Millions of Dell Laptops Vulnerable to Device Takeover and Persistent Malware Attacks

(00:00) - PreShow Banter™ — Wading Through Woods
(06:06) - DEF CON RECAP - Talkin' Bout [infosec] News 2025-08-11
(09:15) - Story # 1: It's time to acknowledge HTTP/1.1 is insecure
(12:36) - Story # 2: Research reveals possible privacy gaps in Apple Intelligence’s data handling
(17:50) - Story # 3: Federal court filing system hit in sweeping hack
(21:08) - Story # 4: Cisco discloses data breach impacting Cisco.com user accounts
(32:16) - Story # 5: Google says its AI-based bug hunter found 20 security vulnerabilities
(34:20) - Story # 6: Automate security reviews with Claude Code
(39:00) - Story # 7: Flipper Zero ‘DarkWeb’ Firmware Bypasses Rolling Code Security on Major Vehicle Brands
(44:43) - Story # 7b: OnStar assists CHP in stopping fleeing SUV with toddler inside
(47:11) - Story # 7c: That viral video of a ‘deactivated’ Tesla Cybertruck is a fake
(49:36) - Story # 8: LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code
(50:52) - Story # 9: Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools
(53:08) - Story # 10: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
(58:09) - Story # 11: Millions of Dell Laptops Vulnerable to Device Takeover and Persistent Malware Attacks

Perplexity Stealth Crawlers Evade No-Crawl Directives - 2025-08-04

Black Hills Information Security — Thu, 07 Aug 2025 15:13:00 -0400

https://poweredbybhis.com

00:00:00 - PreShow Banter™ — Stop Asking Wade if he’s in Vegas

00:02:16 - Perplexity Uses Stealth Crawlers to Evade No-Crawl Directives – 2025-08-04

00:11:25 - Story # 1: Insurance won’t cover $5M in City of Hamilton claims for cyberattack, citing lack of log-in security

00:18:40 - Story # 2: States Enact Safe Harbor Laws that Provide Affirmative Defenses in Data Breach Litigation

00:26:45 - Story # 3: Hackers Destroy Aeroflot’s IT Infrastructure, Causing Over 42 Flight Cancellations

00:34:18 - Story # 4: Attackers exploit link-wrapping services to steal Microsoft 365 logins

00:40:09 - Story # 5: Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons

00:42:18 - Wade’s plugin recommendation

00:44:39 - Story # 6: Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives

00:51:11 - Story # 7: After Backlash, ChatGPT Removes Option to Have Private Chats Indexed by Google

00:55:21 - AI 2027

01:01:01 - What’s Ralph been up to?

(00:00) - PreShow Banter™ — Stop Asking Wade if he's in Vegas
(02:16) - Perplexity Uses Stealth Crawlers to Evade No-Crawl Directives – 2025-08-04
(11:25) - Story # 1: Insurance won't cover $5M in City of Hamilton claims for cyberattack, citing lack of log-in security
(18:39) - Story # 2: States Enact Safe Harbor Laws that Provide Affirmative Defenses in Data Breach Litigation
(26:44) - Story # 3: Hackers Destroy Aeroflot’s IT Infrastructure, Causing Over 42 Flight Cancellations
(34:18) - Story # 4: Attackers exploit link-wrapping services to steal Microsoft 365 logins
(40:09) - Story # 5: Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons
(42:17) - Wade’s plugin recommendation
(44:38) - Story # 6: Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives
(51:10) - Story # 7: After Backlash, ChatGPT Removes Option to Have Private Chats Indexed by Google
(55:20) - AI 2027
(01:01:00) - What’s Ralph been up to?

UK Bans Ransomware Payments - 2025-07-28

Black Hills Information Security — Thu, 31 Jul 2025 21:11:44 -0400

00:00 - PreShow Banter™ — National Chicken Wing Day

04:16 - BHIS - Talkin’ Bout [infosec] News 2025-07-28

05:30 - Story # 1: Bad vibes: How an AI agent coded its way to disaster

08:40 - Story # 1b: Replit goes rogue, deletes entire database.

15:44 - Story # 2: A major AI training data set contains millions of examples of personal data

26:05 - Story # 3: Women Dating Safety App ‘Tea’ Breached, Users’ IDs Posted to 4chan

33:19 - Story # 4:A Startup is Selling Data Hacked from Peoples’ Computers to Debt Collectors

40:28 - Story # 5: Clorox Sues IT Provider Cognizant For Simply Giving Employee Password to Hackers

49:46 - Story # 6: Businesses banned from paying hackers’ ransoms to target cybercrime

57:38 - SharePoint Follow Up

(00:00) - PreShow Banter™ — National Chicken Wing Day
(04:15) - BHIS - Talkin' Bout [infosec] News 2025-07-28
(05:29) - Story # 1: Bad vibes: How an AI agent coded its way to disaster
(08:39) - Story # 1b: Replit goes rogue, deletes entire database.
(15:43) - Story # 2: A major AI training data set contains millions of examples of personal data
(26:04) - Story # 3: Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan
(33:18) - Story # 4:A Startup is Selling Data Hacked from Peoples’ Computers to Debt Collectors
(40:27) - Story # 5: Clorox Sues IT Provider Cognizant For Simply Giving Employee Password to Hackers
(49:46) - Story # 6: Businesses banned from paying hackers’ ransoms to target cybercrime
(57:38) - SharePoint Follow Up

Microsoft's OverSharePoint 0-Day Exploit – 2025-07-21

Black Hills Information Security — Wed, 23 Jul 2025 16:04:39 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — PaintBallers

03:55 - BHIS - Talkin’ Bout [infosec] News 2025-07-21

04:21 - Story # 1: Microsoft 0-day Mass Exploitation

09:39 - Story # 2: Replit AI went rogue, deleted a company’s entire database, then hid it and lied about it

13:15 - Story # 3: ‘All US forces must now assume their networks are compromised’ after Salt Typhoon breach

18:08 - Story # 4: After FBI Warning, Alaska Airlines Grounded; Salt Typhoon Suspected

20:45 - Story # 5: FBI Cybersecurity Breach Led to Murders of Informants in El Chapo Case

21:54 - Story # 5b: FBI’s Report

29:57 - Story # 6: Google fixes actively exploited sandbox escape zero day in Chrome

31:30 - Story # 7: Exploited Wing file transfer bug risks ‘total server compromise,’ CISA warns

32:33 - Story # 8: CitrixBleed 2 situation update — everybody already got owned

33:01 - Story # 9: At Least 750 US Hospitals Faced Disruptions During Last Year’s CrowdStrike Outage, Study Finds

46:14 - Story # 10: Amazon Ring Doorbell May 28 Mass Hacking Claim Goes Viral

48:56 - jdbgmgr.exe virus hoax

51:52 - Story # 11: HPE warns of hardcoded passwords in Aruba access points

(00:00) - PreShow Banter™ — PaintBallers
(03:55) - BHIS - Talkin' Bout [infosec] News 2025-07-21
(04:20) - Story # 1: Microsoft 0-day Mass Exploitation
(09:39) - Story # 2: Replit AI went rogue, deleted a company's entire database, then hid it and lied about it
(13:14) - Story # 3: ‘All US forces must now assume their networks are compromised’ after Salt Typhoon breach
(18:08) - Story # 4: After FBI Warning, Alaska Airlines Grounded; Salt Typhoon Suspected
(20:44) - Story # 5: FBI Cybersecurity Breach Led to Murders of Informants in El Chapo Case
(21:53) - Story # 5b: FBI's Report
(29:56) - Story # 6: Google fixes actively exploited sandbox escape zero day in Chrome
(31:30) - Story # 7: Exploited Wing file transfer bug risks ‘total server compromise,’ CISA warns
(32:32) - Story # 8: CitrixBleed 2 situation update — everybody already got owned
(33:00) - Story # 9: At Least 750 US Hospitals Faced Disruptions During Last Year’s CrowdStrike Outage, Study Finds
(46:14) - Story # 10: Amazon Ring Doorbell May 28 Mass Hacking Claim Goes Viral
(48:55) - jdbgmgr.exe virus hoax
(51:52) - Story # 11: HPE warns of hardcoded passwords in Aruba access points

McDonald’s Over 64 Million Exposed Job Applicants - 2025-07-14

Black Hills Information Security — Wed, 16 Jul 2025 16:00:50 -0400

00:00 - PreShow Banter™ — Traditional Finger

00:21 - BHIS - Talkin’ Bout [infosec] News 2025-07-14

01:29 - Story # 1: ‘123456’ password exposed chats for 64 million McDonald’s job chatbot applications

22:12 - Story # 2: Employee gets $920 for credentials used in $140 million bank heist

33:50 - Story # 3: Microsoft laying off about 9,000 employees in latest round of cuts

37:21 - Story # 5: Scammy YouTube Ads

46:31 - Story # 6: New ServiceNow flaw lets attackers enumerate restricted data

(00:00) - PreShow Banter™ — Traditional Finger
(00:21) - BHIS - Talkin' Bout [infosec] News 2025-07-14
(01:28) - Story # 1: '123456' password exposed chats for 64 million McDonald’s job chatbot applications
(22:12) - Story # 2: Employee gets $920 for credentials used in $140 million bank heist
(33:50) - Story # 3: Microsoft laying off about 9,000 employees in latest round of cuts
(37:20) - Story # 5: Scammy YouTube Ads
(46:31) - Story # 6: New ServiceNow flaw lets attackers enumerate restricted data

North Korean Remote Workers are at it Again! – BHIS - Talkin' Bout [infosec] News 2025-07-07

Black Hills Information Security — Wed, 09 Jul 2025 14:40:44 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Pre Stream Appropriate

03:39 - N. Korean Remote Workers are at it Again! – BHIS - Talkin’ Bout [infosec] News 2025-07-07

05:41 - Story # 1: Fortune 500 Cyber Spending Pays Off: Large Enterprise Risk Falls 33% Despite Rising Threats

20:01 - Story # 2: Jasper Sleet: North Korean remote IT workers’ evolving tactics to infiltrate organizations

25:49 - Story # 2b: Engineer caught juggling multiple startup jobs is a cautionary tale of ‘extreme’ hustle culture, experts say

34:47 - Story # 3: Taking SHELLTER: a commercial evasion framework abused in- the- wild

42:15 - Story # 3b: Statement Regarding Recent Misuse of Shellter Elite and Elastic Security Labs’ Handling

46:58 - Story # 4: Ingram Micro outage caused by SafePay ransomware attack

49:45 - Story # 5: Germany asks Google, Apple to remove DeepSeek AI from app stores

53:13 - Story # 6: This Call of Duty game just hit Xbox Game Pass, but it’s infested with RCE hackers — I’d take cover and avoid playing until there’s a fix

(00:00) - PreShow Banter™ — Pre Stream Appropriate
(03:39) - N. Korean Remote Workers are at it Again! – BHIS - Talkin' Bout [infosec] News 2025-07-07
(05:40) - Story # 1: Fortune 500 Cyber Spending Pays Off: Large Enterprise Risk Falls 33% Despite Rising Threats
(20:00) - Story # 2: Jasper Sleet: North Korean remote IT workers’ evolving tactics to infiltrate organizations
(25:49) - Story # 2b: Engineer caught juggling multiple startup jobs is a cautionary tale of ‘extreme’ hustle culture, experts say
(34:47) - Story # 3: Taking SHELLTER: a commercial evasion framework abused in- the- wild
(42:14) - Story # 3b: Statement Regarding Recent Misuse of Shellter Elite and Elastic Security Labs’ Handling
(46:58) - Story # 4: Ingram Micro outage caused by SafePay ransomware attack
(49:44) - Story # 5: Germany asks Google, Apple to remove DeepSeek AI from app stores
(53:13) - Story # 6: This Call of Duty game just hit Xbox Game Pass, but it's infested with RCE hackers — I'd take cover and avoid playing until there's a fix

Year of the [European Union] Linux Desktop Finally Arrives? | BHIS - Talkin' Bout [infosec] News 2025-06-30

Black Hills Information Security — Thu, 03 Jul 2025 20:32:02 -0400

https://poweredbybhis.com

Chapters:

00:00 - PreShow Banter™ — Names on Cups

01:39 - Year of the [European Union] Linux Desktop Finally Arrives? | BHIS - Talkin’ Bout [infosec] News 2025-06-30

03:34 - Story # 1: You should probably delete any sensitive screenshots you have in your phone right now.

10:55 - Story # 2: Ongoing Campaign Abuses Microsoft 365’s Direct Send to Deliver Phishing Emails

14:07 - Story # 3: The year of the European Union Linux desktop may finally arrive

24:46 - Story # 4: Restricted data once again leaked on War Thunder forums

27:04 - Story # 5: Scale AI Leaks Meta, Google, xAI Confidential Files Through ‘Incredibly Janky’ Document Practices

31:47 - Story # 6: French police reportedly arrest suspected BreachForums administrators

34:22 - Story # 7: Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages

39:41 - Story # 8: CitrixBleed 2: Electric Boogaloo — CVE-2025–5777

42:16 - Story # 9: Millions of Brother Printers Hit by Critical, Unpatchable Bug

47:05 - Story # 10: Canada orders China’s Hikvision to close Canadian operations

50:13 - Story # 11: US House bans WhatsApp on staff devices over security concerns

53:17 - ChickenSec: Chickens are becoming 3rd most popular pet: Tractor Supply CEO

56:34 - Story # 12: Norway Dam Hacked, Valve Opened But No Danger

58:11 - Review your calendar invites!

(00:00) - PreShow Banter™ — Names on Cups
(01:38) - Year of the [European Union] Linux Desktop Finally Arrives? | BHIS - Talkin' Bout [infosec] News 2025-06-30
(03:33) - Story # 1: You should probably delete any sensitive screenshots you have in your phone right now.
(10:55) - Story # 2: Ongoing Campaign Abuses Microsoft 365’s Direct Send to Deliver Phishing Emails
(14:07) - Story # 3: The year of the European Union Linux desktop may finally arrive
(24:45) - Story # 4: Restricted data once again leaked on War Thunder forums
(27:03) - Story # 5: Scale AI Leaks Meta, Google, xAI Confidential Files Through ‘Incredibly Janky’ Document Practices
(31:46) - Story # 6: French police reportedly arrest suspected BreachForums administrators
(34:21) - Story # 7: Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
(39:40) - Story # 8: CitrixBleed 2: Electric Boogaloo — CVE-2025–5777
(42:16) - Story # 9: Millions of Brother Printers Hit by Critical, Unpatchable Bug
(47:05) - Story # 10: Canada orders China's Hikvision to close Canadian operations
(50:12) - Story # 11: US House bans WhatsApp on staff devices over security concerns
(53:16) - ChickenSec: Chickens are becoming 3rd most popular pet: Tractor Supply CEO
(56:33) - Story # 12: Norway Dam Hacked, Valve Opened But No Danger
(58:11) - Review your calendar invites!

Iran Shuts Down It's Own Internet - 2025-06-23

Black Hills Information Security — Thu, 26 Jun 2025 12:24:56 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Explaining the Muppets

03:09 - Iran Shuts Down It's Own Internet- BHIS - Talkin’ Bout [infosec] News 2025-06-23

04:52 - Story # 1: Iran’s government says it shut down internet to protect against cyberattacks

20:20 - Story # 2: Iranian bank linked to revolutionary guard hit by ‘cyber attack’

22:11 - Story # 3: Hackers switch to targeting U.S. insurance companies

23:32 - Story # 3b: Statement: Erie Insurance Information Security Incident (June 23)

33:33 - Story # 4: No, the 16 billion credentials leak is not a new data breach

43:23 - Story # 5: ‘Water Curse’ Targets Infosec Pros via Poisoned GitHub Repositories

47:09 - Story # 6: CISA Reveals ‘Pattern’ of Ransomware Attacks Against SimpleHelp RMM

48:49 - Story # 7: Report Links Los Pollos and RichAds to Malware Traffic Operations

58:29 - Story # 8: Minnesota lawmaker’s alleged killer had list of data broker websites in car, FBI says

(00:00) - PreShow Banter™ — Explaining the Muppets
(03:08) - Iran Shuts Down It's Own Internet - BHIS - Talkin' Bout [infosec] News 2025-06-23
(04:52) - Story # 1: Iran’s government says it shut down internet to protect against cyberattacks
(20:19) - Story # 2: Iranian bank linked to revolutionary guard hit by ‘cyber attack’
(22:11) - Story # 3: Hackers switch to targeting U.S. insurance companies
(23:31) - Story # 3b: Statement: Erie Insurance Information Security Incident (June 23)
(33:32) - Story # 4: No, the 16 billion credentials leak is not a new data breach
(43:22) - Story # 5: 'Water Curse' Targets Infosec Pros via Poisoned GitHub Repositories
(47:09) - Story # 6: CISA Reveals 'Pattern' of Ransomware Attacks Against SimpleHelp RMM
(48:48) - Story # 7: Report Links Los Pollos and RichAds to Malware Traffic Operations
(58:29) - Story # 8: Minnesota lawmaker’s alleged killer had list of data broker websites in car, FBI says

Denmark is Done with Teams! - 2025-06-16

Black Hills Information Security — Wed, 18 Jun 2025 12:16:00 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Government Linux

04:16 - Denmark is Done with Teams! - Talkin’ Bout [infosec] News 2025-06-16

05:02 - Story # 1: ‘We’re done with Teams’: German state hits uninstall on Microsoft

17:34 - Story # 1b: Denmark Wants to Dump Microsoft Software for Linux, LibreOffice

18:14 - Story # 2: Zero-click AI data leak flaw uncovered in Microsoft 365 Copilot

25:50 - Story # 3: Fog ransomware attacks use employee monitoring tool to break into business networks

30:25 - Story # 4: Expired Discord Invites Hijacked for Stealthy Malware Attacks

34:00 - Story # 5: SmartAttack uses smartwatches to steal data from air-gapped systems

40:25 - Story # 6: Mirai Botnets Exploiting Wazuh Security Platform Vulnerability

44:47 - Story # 7: Google Cloud and Cloudflare hit by widespread service outages

48:04 - Story # 8: UNFI cyberattack shuts down network and leaves Whole Foods and others in limbo

50:34 - Story # 9: New SharePoint Phishing Attacks Using Lick Deceptive Techniques

51:08 - Story # 10: US-backed Israeli company’s spyware used to target European journalists, Citizen Lab finds

53:32 - Story # 11: Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud

(00:00) - PreShow Banter™ — Government Linux
(04:15) - Denmark is Done with Teams! - Talkin' Bout [infosec] News 2025-06-16
(05:02) - Story # 1: 'We're done with Teams': German state hits uninstall on Microsoft
(17:33) - Story # 1b: Denmark Wants to Dump Microsoft Software for Linux, LibreOffice
(18:14) - Story # 2: Zero-click AI data leak flaw uncovered in Microsoft 365 Copilot
(25:49) - Story # 3: Fog ransomware attacks use employee monitoring tool to break into business networks
(30:24) - Story # 4: Expired Discord Invites Hijacked for Stealthy Malware Attacks
(33:59) - Story # 5: SmartAttack uses smartwatches to steal data from air-gapped systems
(40:25) - Story # 6: Mirai Botnets Exploiting Wazuh Security Platform Vulnerability
(44:47) - Story # 7: Google Cloud and Cloudflare hit by widespread service outages
(48:03) - Story # 8: UNFI cyberattack shuts down network and leaves Whole Foods and others in limbo
(50:33) - Story # 9: New SharePoint Phishing Attacks Using Lick Deceptive Techniques
(51:08) - Story # 10: US-backed Israeli company’s spyware used to target European journalists, Citizen Lab finds
(53:31) - Story # 11: Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud

Chatbot Tells Addict to Take Drugs - 2025-06-09

Black Hills Information Security — Wed, 11 Jun 2025 20:45:28 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Time to Bake

05:12 - Chatbot Tells Addict to Take Drugs - Talkin’ Bout [infosec] News 2025-05-06

06:08 - Story # 1: Meta and Yandex are de-anonymizing Android users’ web browsing identifiers

12:55 - Story # 2: Therapy Chatbot Tells Recovering Addict to Have a Little Meth as a Treat

16:11 - Story # 3: The Cost of a Call: From Voice Phishing to Data Extortion

26:56 - Story # 4: Questions Swirl Around ConnectWise Flaw Used in Attacks

27:40 - Story # 4b: ConnectWise email

35:28 - Story # 5: Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI

39:27 - Story # 6: Misconfigured HMIs Expose US Water Systems to Anyone With a Browser

52:20 - Story # 7: Fact Sheet: President Donald J. Trump Reprioritizes Cybersecurity Efforts to Protect America

(00:00) - PreShow Banter™ — Time to Bake
(05:12) - Chatbot Tells Addict to Take Drugs - Talkin' Bout [infosec] News 2025-05-06
(06:08) - Story # 1: Meta and Yandex are de-anonymizing Android users’ web browsing identifiers
(12:55) - Story # 2: Therapy Chatbot Tells Recovering Addict to Have a Little Meth as a Treat
(16:11) - Story # 3: The Cost of a Call: From Voice Phishing to Data Extortion
(26:56) - Story # 4: Questions Swirl Around ConnectWise Flaw Used in Attacks
(27:40) - Story # 4b: ConnectWise email
(35:27) - Story # 5: Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
(39:26) - Story # 6: Misconfigured HMIs Expose US Water Systems to Anyone With a Browser
(52:19) - Story # 7: Trump cyber executive order takes aim at prior orders, secure software, identity

Victoria’s Secrets are Compromised - 2025-06-02

Black Hills Information Security — Thu, 05 Jun 2025 16:21:56 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — natural MSG

05:31 - Victoria’s Secrets are Compromised - Talkin’ Bout [infosec] News 2025-06-02

06:31 - Story # 1: Authors Are Accidentally Leaving AI Prompts In their Novels

08:36 - Story # 1b: This Latest AI Book Debacle Is A Disturbing Part Of A Growing Trend

09:41 - Story # 2: Developer Builds Tool That Scrapes YouTube Comments, Uses AI to Predict Where Users Live

10:48 - Story # 2b: AI-powered OSINT tool profiles YouTube users, raising privacy concerns

15:55 - Story # 2c: Researchers Dump 2 Billion Scraped Discord Messages Online

20:28 - Story # 3: Vending-Bench: A Benchmark for Long-Term Coherence of Autonomous Agents

21:02 - Story # 3b: An AI Goes Insane, Emails FBI Over $2 (YouTube)

26:55 - Story # 4: The UK will totally replace two-thirds of junior civil servants with AI chatbots, says the chatbot

27:27 - Story # 4b: Reeves confirms 15% cut to Civil Service running costs

29:29 - Story # 5: ConnectWise Breached, ScreenConnect Customers Targeted

31:28 - LOLRMM - a curated list of Remote Monitoring and Management (RMM) tools that could potentially be abused by threat actors.

35:34 - Story # 6: New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers

36:19 - Story # 7: US intelligence employee arrested for alleged double-dealing of classified info

40:12 - Story # 8: Victoria’s Secret takes down website after security incident

45:43 - Story # 9: Microsoft and CrowdStrike partner to link hacking group names

46:59 - Story # 10: Zscaler Acquisition of Red Canary

49:57 - Story # 11: Most of CISA’s senior leaders are leaving the agency

51:22 - Story # 12: Telegram announces partnership with Musk’s xAI

51:32 - Story # 13: Google warns of Vietnam-based hackers using bogus AI video generators to spread malware

(00:00) - PreShow Banter™ — natural MSG
(05:31) - BHIS - Talkin' Bout [infosec] News 2025-06-02
(06:31) - Story # 1: Authors Are Accidentally Leaving AI Prompts In their Novels
(08:36) - Story # 1b: This Latest AI Book Debacle Is A Disturbing Part Of A Growing Trend
(09:40) - Story # 2: Developer Builds Tool That Scrapes YouTube Comments, Uses AI to Predict Where Users Live
(10:47) - Story # 2b: AI-powered OSINT tool profiles YouTube users, raising privacy concerns
(15:55) - Story # 2c: Researchers Dump 2 Billion Scraped Discord Messages Online
(20:28) - Story # 3: Vending-Bench: A Benchmark for Long-Term Coherence of Autonomous Agents
(21:02) - Story # 3b: An AI Goes Insane, Emails FBI Over $2 (YouTube)
(26:55) - Story # 4: The UK will totally replace two-thirds of junior civil servants with AI chatbots, says the chatbot
(27:27) - Story # 4b: Reeves confirms 15% cut to Civil Service running costs
(29:28) - Story # 5: ConnectWise Breached, ScreenConnect Customers Targeted
(31:27) - LOLRMM - a curated list of Remote Monitoring and Management (RMM) tools that could potentially be abused by threat actors.
(35:33) - Story # 6: New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers
(36:18) - Story # 7: US intelligence employee arrested for alleged double-dealing of classified info
(40:12) - Story # 8: Victoria’s Secret takes down website after security incident
(45:42) - Story # 9: Microsoft and CrowdStrike partner to link hacking group names
(46:59) - Story # 10: Zscaler Acquisition of Red Canary
(49:57) - Story # 11: Most of CISA’s senior leaders are leaving the agency
(51:21) - Story # 12: Telegram announces partnership with Musk's xAI
(51:32) - Story # 13: Google warns of Vietnam-based hackers using bogus AI video generators to spread malware

Blackmailing A.I. - 2025-05-27

Black Hills Information Security — Thu, 29 May 2025 20:02:21 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — I just want Jorts!

05:42 - Blackmailing A.I. - Talkin’ Bout [infosec] News 2025-05-27

07:01 - Story # 1: Experimental drones developed to neutralize mass shooters, disable weapons

11:29 - Story # 2: How a global malware operation was taken down from a federal court in Georgia

13:50 - Story # 3: Judge allows Workday AI bias lawsuit to proceed as collective action

15:23 - Marker 17

19:25 - Story # 4: Anthropic’s new AI model turns to blackmail when engineers try to take it offline

32:19 - Story # 5: TeleMessage customers include DC Police, Andreessen Horowitz, JP Morgan, and hundreds more

34:53 - Story # 6: TikTok videos now push infostealer malware in ClickFix attacks

36:57 - Story # 7: Beware, Coinbase users. Crypto thieves are taking fingers now

40:56 - Story # 8: Signal now blocks Microsoft Recall screenshots on Windows 11

43:16 - Story # 9: Suspected InfoStealer Malware Data Breach Exposed 184 Million Logins and Passwords

44:54 - Story # 10: Google Chrome’s Built-in Manager Lets Users Update Breached Passwords with One Click

48:09 - Story # 11: Russian military hackers ‘Fancy Bear’ target Western aid supply chains to Ukraine, NSA report says

50:13 - Story # 12: Google Gemini AI assistant coming to new cars in 2025, starting with Volvo

54:17 - Story # 13: Hacker Conference HOPE Says U.S. Immigration Crackdown Caused Massive Crash in Ticket Sales

56:55 - Story # 13b: [HOPE_16] International Travel Tips

(00:00) - PreShow Banter™ — I just want Jorts!
(05:41) - Blackmailing A.I. - Talkin' Bout [infosec] News 2025-05-27
(07:00) - Story # 1: Experimental drones developed to neutralize mass shooters, disable weapons
(11:28) - Story # 2: How a global malware operation was taken down from a federal court in Georgia
(13:49) - Story # 3: Judge allows Workday AI bias lawsuit to proceed as collective action
(19:24) - Story # 4: Anthropic’s new AI model turns to blackmail when engineers try to take it offline
(32:18) - Story # 5: TeleMessage customers include DC Police, Andreessen Horowitz, JP Morgan, and hundreds more
(34:53) - Story # 6: TikTok videos now push infostealer malware in ClickFix attacks
(36:57) - Story # 7: Beware, Coinbase users. Crypto thieves are taking fingers now
(40:56) - Story # 8: Signal now blocks Microsoft Recall screenshots on Windows 11
(43:16) - Story # 9: Suspected InfoStealer Malware Data Breach Exposed 184 Million Logins and Passwords
(44:53) - Story # 10: Google Chrome's Built-in Manager Lets Users Update Breached Passwords with One Click
(48:08) - Story # 11: Russian military hackers 'Fancy Bear' target Western aid supply chains to Ukraine, NSA report says
(50:13) - Story # 12: Google Gemini AI assistant coming to new cars in 2025, starting with Volvo
(54:17) - Story # 13: Hacker Conference HOPE Says U.S. Immigration Crackdown Caused Massive Crash in Ticket Sales
(56:54) - Story # 13b: [HOPE_16] International Travel Tips

WORLDS FIRST CPU Ransomware! - 2025-05-19

Black Hills Information Security — Wed, 21 May 2025 17:58:17 -0400

https://poweredbybhis.coma

00:00 - PreShow Banter™ — Twiddle Me This

02:04 - WORLDS FIRST CPU Ransomware! - Talkin’ Bout [infosec] News 2025-05-19

03:10 - Story # 1: Coinbase - Standing Up to Extortionists

11:26 - Story # 2: World’s first CPU-level ransomware

15:09 - Story # 3: New Intel CPU flaws leak sensitive data from privileged memory

19:04 - Story # 4: After latest kidnap attempt, crypto types tell crime bosses: Transfers are traceable

21:39 - Story # 5: Chinese ‘kill switches’ found hidden in US solar farms

27:52 - Story # 6: Congress proposes 10-year ban on state AI regulations

31:41 - Story # 7: Hackers Abuse Copilot AI in SharePoint to Steal Passwords and Sensitive Data

36:02 - Story # 8: European Vulnerability Database Launches Amid US CVE Chaos

37:32 - Story # 9: 89 million Steam accounts reportedly leaked. Change your password now.

40:06 - Story # 10: Hackers Now Targeting US Retailers After UK Attacks, Google

41:11 - Story # 11: How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes

43:08 - Story # 11b: DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage’s archive server

47:12 - ChickenSec: ‘A Minecraft Movie’ Viral TikTok Trend Wreaks Havoc In Theaters

51:20 - Story # 12: Education giant Pearson hit by cyberattack exposing customer data

(00:00) - PreShow Banter™ — Twiddle Me This
(02:03) - WORLDS FIRST CPU Ransomware! - Talkin' Bout [infosec] News 2025-05-19
(03:10) - Story # 1: Coinbase - Standing Up to Extortionists
(11:25) - Story # 2: World's first CPU-level ransomware
(15:09) - Story # 3: New Intel CPU flaws leak sensitive data from privileged memory
(19:03) - Story # 4: After latest kidnap attempt, crypto types tell crime bosses: Transfers are traceable
(21:38) - Story # 5: Chinese ‘kill switches’ found hidden in US solar farms
(27:52) - Story # 6: Congress proposes 10-year ban on state AI regulations
(31:41) - Story # 7: Hackers Abuse Copilot AI in SharePoint to Steal Passwords and Sensitive Data
(36:01) - Story # 8: European Vulnerability Database Launches Amid US CVE Chaos
(37:32) - Story # 9: 89 million Steam accounts reportedly leaked. Change your password now.
(40:06) - Story # 10: Hackers Now Targeting US Retailers After UK Attacks, Google
(41:10) - Story # 11: How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes
(43:08) - Story # 11b: DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server
(47:12) - ChickenSec: ‘A Minecraft Movie’ Viral TikTok Trend Wreaks Havoc In Theaters
(51:20) - Story # 12: Education giant Pearson hit by cyberattack exposing customer data

Inside DragonForce 2025-05-12

Black Hills Information Security — Wed, 14 May 2025 20:39:43 -0400

https://poweredbybhis.coma

00:00 - PreShow Banter™ — Crime is bad

00:18 - dangerous trend of destroying Chromebooks

04:33 - BHIS - Talkin’ Bout [infosec] News 2025-05-12

05:40 - Story # 1: LockBit Ransomware Hacked, Insider Secrets Exposed

06:36 - Story # 1b: https://ransomch.at

09:31 - Story # 2: White House Proposes $500 Million Cut to CISA

10:35 - Story # 2b: Update to How CISA Shares Cyber-Related Alerts and Notifications

18:09 - Story # 3: Inside DragonForce, the Group Tied to M&S, Co-op and Harrods Hacks

22:28 - Story # 4: Despite ransom payment, PowerSchool hacker now extorting individual school districts

26:28 - Story # 5: Tech CEOs warn Senate: Outdated US power grid threatens AI ambitions

32:20 - Story # 6: Warning — 19 Billion Compromised Passwords Have Been Published Online

34:37 - Story # 7: Botnet Dismantled in International Operation, Russian and Kazakhstani Administrators Indicted

36:33 - Story # 8: How a new type of AI is helping police skirt facial recognition bans

48:38 - Story # 9: Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware

51:33 - Story # 10: A Framework to Report AI’s Flaws

53:42 - Story # 10b: MITRE ATLAS™

54:49 - Simply Hot Ones Challenge | LIVE FIRE SPICE

(00:00) - PreShow Banter™ — Crime is bad
(00:18) - dangerous trend of destroying Chromebooks
(04:32) - BHIS - Talkin' Bout [infosec] News 2025-05-12
(05:39) - Story # 1: LockBit Ransomware Hacked, Insider Secrets Exposed
(06:36) - Story # 1b: https://ransomch.at
(09:31) - Story # 2: White House Proposes $500 Million Cut to CISA
(10:35) - Story # 2b: Update to How CISA Shares Cyber-Related Alerts and Notifications
(18:08) - Story # 3: Inside DragonForce, the Group Tied to M&S, Co-op and Harrods Hacks
(22:28) - Story # 4: Despite ransom payment, PowerSchool hacker now extorting individual school districts
(26:28) - Story # 5: Tech CEOs warn Senate: Outdated US power grid threatens AI ambitions
(32:20) - Story # 6: Warning — 19 Billion Compromised Passwords Have Been Published Online
(34:37) - Story # 7: Botnet Dismantled in International Operation, Russian and Kazakhstani Administrators Indicted
(36:33) - Story # 8: How a new type of AI is helping police skirt facial recognition bans
(48:37) - Story # 9: Threat Actor Bypass SentinelOne EDR to Deploy Babuk Ransomware
(51:32) - Story # 10: A Framework to Report AI’s Flaws
(53:42) - Story # 10b: MITRE ATLAS™
(54:48) - Simply Hot Ones Challenge | LIVE FIRE SPICE 🔥 and CYBER

Scatterd Spider Weaves Another Attack- 2025-05-05

Black Hills Information Security — Fri, 09 May 2025 00:07:00 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Double Coffee

05:04 - BHIS - Talkin’ Bout [infosec] News 2025-05-05

06:05 - Story # 1: Largest bank in the world issues stark security warning about technology that billions use every single day

11:15 - Story # 2: M&S cyber-attack linked to hacking group Scattered Spider

13:47 - Story # 3: Top Tier Target | What It Takes to Defend a Cybersecurity Company from Today’s Adversaries

20:10 - Story # 4: A North Korean agent applied for a job at a popular crypto firm: They tripped him up with a simple question about Halloween

21:54 - Story # 4b: The one interview question that will protect you from North Korean fake workers

23:09 - Story # 5: Santa Clarita Man Agrees to Plead Guilty to Hacking Disney Employee’s Computer, Downloading Confidential Data from Company

25:33 - Story # 6: TerraStealerV2 and TerraLogger: Golden Chickens’ New Malware Families Discovered

29:19 - Story # 7: Gremlin Stealer: New Stealer on Sale in Underground Forum

33:17 - Story # 8: Over 290,000 citizens at risk: CloudSEK uncovers major data breach at Bangalore Water Supply and Sewerage Board

34:56 - Story # 9: The Signal Clone the Trump Admin Uses Was Hacked

39:58 - Story # 10: Windows RDP lets you log in using revoked passwords. Microsoft is OK with that.

42:19 - Story # 11: Software dev fortifies his blog with ‘zip bombs’ — attacking bots meet their end with explosive data package

43:44 - Story # 12: WhatsApp says in-app AI tools will still keep messages secret

45:37 - Story # 13: House passes bill to study routers’ national security risks

49:48 - Simply Hot Ones Challenge (YouTube)

(00:00) - PreShow Banter™ — Double Coffee
(05:03) - BHIS - Talkin' Bout [infosec] News 2025-05-05
(06:05) - Story # 1: Largest bank in the world issues stark security warning about technology that billions use every single day
(11:15) - Story # 2: M&S cyber-attack linked to hacking group Scattered Spider
(13:46) - Story # 3: Top Tier Target | What It Takes to Defend a Cybersecurity Company from Today’s Adversaries
(20:10) - Story # 4: A North Korean agent applied for a job at a popular crypto firm: They tripped him up with a simple question about Halloween
(21:54) - Story # 4b: The one interview question that will protect you from North Korean fake workers
(23:09) - Story # 5: Santa Clarita Man Agrees to Plead Guilty to Hacking Disney Employee’s Computer, Downloading Confidential Data from Company
(25:33) - Story # 6: TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered
(29:19) - Story # 7: Gremlin Stealer: New Stealer on Sale in Underground Forum
(33:16) - Story # 8: Over 290,000 citizens at risk: CloudSEK uncovers major data breach at Bangalore Water Supply and Sewerage Board
(34:55) - Story # 9: The Signal Clone the Trump Admin Uses Was Hacked
(39:57) - Story # 10: Windows RDP lets you log in using revoked passwords. Microsoft is OK with that.
(42:19) - Story # 11: Software dev fortifies his blog with 'zip bombs' — attacking bots meet their end with explosive data package
(43:43) - Story # 12: WhatsApp says in-app AI tools will still keep messages secret
(45:36) - Story # 13: House passes bill to study routers’ national security risks
(49:47) - Simply Hot Ones Challenge (YouTube)

InfoSec CEO Charged with Installing Malware! – 2025-04-28

Black Hills Information Security — Wed, 30 Apr 2025 16:32:43 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Talking Bout Red Green

02:24 - InfoSec CEO Charged with Installing Malware! – BHIS - Talkin’ Bout [infosec] News 2025-04-28

03:01 - Story # 1: CEO of cybersecurity firm charged with installing malware on hospital systems

11:22 - Story # 2: 2025 Data Breach Investigations Report

25:05 - Story # 3: The Age of Realtime Deepfake Fraud Is Here

29:00 - Story # 4: Whistleblower: DOGE Siphoned NLRB Case Data

33:09 - Story # 5: Top employee monitoring app leaks 21 million screenshots on thousands of users

36:59 - Story # 6: 159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure

42:13 - Story # 7: SAP zero-day vulnerability under widespread active exploitation

46:29 - Story # 8: FBI: US lost record $16.6 billion to cybercrime in 2024

47:55 - Story # 8b: FBI Report Doc

53:50 - Story # 9: M- Trends 2025 Report

(00:00) - PreShow Banter™ — Talking Bout Red Green
(02:24) - InfoSec CEO Charged with Installing Malware! – BHIS - Talkin' Bout [infosec] News 2025-04-28
(03:01) - Story # 1: CEO of cybersecurity firm charged with installing malware on hospital systems
(11:21) - Story # 2: 2025 Data Breach Investigations Report
(25:04) - Story # 3: The Age of Realtime Deepfake Fraud Is Here
(28:59) - Story # 4: Whistleblower: DOGE Siphoned NLRB Case Data
(33:09) - Story # 5: Top employee monitoring app leaks 21 million screenshots on thousands of users
(36:58) - Story # 6: 159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure
(42:12) - Story # 7: SAP zero-day vulnerability under widespread active exploitation
(46:29) - Story # 8: FBI: US lost record $16.6 billion to cybercrime in 2024
(47:54) - Story # 8b: FBI Report Doc
(53:49) - Story # 9: M- Trends 2025 Report

The CVE Saga - Talkin’ Bout [infosec] News 2025-04-21

Black Hills Information Security — Wed, 23 Apr 2025 19:00:00 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — A Monocle and a Glass of Wine

05:36 - The CVE Saga - Talkin’ Bout [infosec] News 2025-04-21

06:43 - Story # 1: US agency extends support for cyber vulnerability database

29:08 - Story # 1b: CVE Foundation

32:35 - Story # 2: Former cybersecurity agency chief Chris Krebs leaves SentinelOne after Trump targets him in executive order

33:57 - Story # 3: 4chan Is Down Following What Looks to Be a Major Hack Spurred By Meme War

37:17 - Story # 4: TA Phone Home: EDR Evasion Testing Reveals Extortion Actor’s Toolkit

44:57 - Story # 5: The Sophos Annual Threat Report: Cybercrime on Main Street 2025

(00:00) - PreShow Banter™ — A Monocle and a Glass of Wine
(05:36) - The CVE Saga - Talkin' Bout [infosec] News 2025-04-21
(06:43) - Story # 1: US agency extends support for cyber vulnerability database
(29:08) - Story # 1b: CVE Foundation
(32:34) - Story # 2: Former cybersecurity agency chief Chris Krebs leaves SentinelOne after Trump targets him in executive order
(33:57) - Story # 3: 4chan Is Down Following What Looks to Be a Major Hack Spurred By Meme War
(37:16) - Story # 4: TA Phone Home: EDR Evasion Testing Reveals Extortion Actor's Toolkit
(44:56) - Story # 5: The Sophos Annual Threat Report: Cybercrime on Main Street 2025

Largest Corporate Espionage Case this Century - 2025-04-14

Black Hills Information Security — Wed, 16 Apr 2025 11:00:00 -0400

https://poweredbybhis.com

00:00 - PreShow Banter™ — Trigger Warning

00:42 - Trump Vs Chris Krebs | BHIS - Talkin’ Bout [infosec] News 2025-04-14

01:54 - Story # 1: Cybersecurity Community Must Not Remain Silent On Executive Order Attacking Former CISA Director

17:04 - Story # 2: Cybersecurity industry falls silent as Trump turns ire on SentinelOne

18:00 - Story # 3: Maryland pharmacist used keyloggers to spy on coworkers for a decade, victim alleges

33:13 - Story # 4: Rippling Believe it or Not: How the Largest Corporate Espionage Case this Century Happened

41:36 - Story # 5: Moroccan cybercrime group Atlas Lion hiding in plain sight during attacks on retailers

52:18 - Story # 6: Pentagon to end $5.1 billion in contracts with Accenture, Deloitte, others

(00:00) - PreShow Banter™ — Trigger Warning
(00:41) - Trump Vs Chris Krebs | BHIS - Talkin' Bout [infosec] News 2025-04-14
(01:54) - Story # 1: Cybersecurity Community Must Not Remain Silent On Executive Order Attacking Former CISA Director
(17:03) - Story # 2: Cybersecurity industry falls silent as Trump turns ire on SentinelOne
(17:59) - Story # 3: Maryland pharmacist used keyloggers to spy on coworkers for a decade, victim alleges
(33:12) - Story # 4: Rippling Believe it or Not: How the Largest Corporate Espionage Case this Century Happened
(41:36) - Story # 5: Moroccan cybercrime group Atlas Lion hiding in plain sight during attacks on retailers
(52:17) - Story # 6: Pentagon to end $5.1 billion in contracts with Accenture, Deloitte, others

Desperate Times Makes for More Cyber Crimes -2025-04-07

Black Hills Information Security — Wed, 09 Apr 2025 13:30:00 -0400

https://poweredbybhis.com

Chapters

00:00 - PreShow Banter™ — A Complex Business

06:40 - BHIS - Talkin’ Bout [infosec] News 2025-04-07

07:34 - Story # 1: Oracle quietly admits data breach, days after lawsuit accused it of cover-up

12:47 - Story # 2: Twitter (X) Hit by 2.8 Billion Profile Data Leak in Alleged Insider Job

21:13 - Story # 3: Phishing platform ‘Lucid’ behind wave of iOS, Android SMS attacks

28:14 - Story # 4: GitHub expands security tools after 39 million secrets leaked in 2024

37:28 - Story # 5: The 10 Biggest Crypto Hacks in History

40:11 - Story # 6: OpenAI tests watermarking for ChatGPT-4o Image Generation model

45:44 - Story # 7: National Security Agency chief fired as Trump ousts another top military officer

(00:00) - PreShow Banter™ — A Complex Business
(06:40) - BHIS - Talkin' Bout [infosec] News 2025-04-07
(07:34) - Story # 1: Oracle quietly admits data breach, days after lawsuit accused it of cover-up
(12:46) - Story # 2: Twitter (X) Hit by 2.8 Billion Profile Data Leak in Alleged Insider Job
(21:12) - Story # 3: Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks
(28:13) - Story # 4: GitHub expands security tools after 39 million secrets leaked in 2024
(37:28) - Story # 5: The 10 Biggest Crypto Hacks in History
(40:10) - Story # 6: OpenAI tests watermarking for ChatGPT-4o Image Generation model
(45:43) - Story # 7: National Security Agency chief fired as Trump ousts another top military officer

The Oracle of Lies! – 2025-03-31

Black Hills Information Security — Thu, 03 Apr 2025 16:00:00 -0400

00:00 - PreShow Banter™ — The Bed Slinger

08:34 - The Oracle of Lies! - BHIS - Talkin’ Bout [infosec] News 2025-03-31

10:43 - Story # 1: Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service

20:00 - Story # 2: A Sneaky Phish Just Grabbed my Mailchimp Mailing List

26:17 - Story # 3: Windows 11 is closing a loophole that let you skip making a Microsoft account

29:51 - Story # 4: The Trump Administration Accidentally Texted Me Its War Plans

32:51 - Story # 4b: Signal is ‘absolutely not suitable’ for government use: Former NSA hacker

37:42 - Story # 5: How the FBI Tracked, and Froze, Millions Sent to Criminals in Massive Caesars Casino Hack

42:27 - Story # 6: Retail giant Sam’s Club investigates Clop ransomware breach claims

45:07 - WEBCAST – Keeping Things Local – Making Your Own Private LLM w/ Bronwen Aker

46:16 - Story # 7: New VanHelsing ransomware targets Windows, ARM, ESXi systems

48:28 - Story # 8: Infostealer campaign compromises 10 npm packages, targets devs

53:13 - Story # 9: Risky Biz News: EU bans anonymous crypto payments

56:02 - ChickenSec: South African Poultry Company Reports $1M Loss After Cyber Intrusion

(00:00) - PreShow Banter™ — The Bed Slinger
(08:34) - BHIS - Talkin' Bout [infosec] News 2025-03-31
(10:43) - Story # 1: Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service
(20:00) - Story # 2: A Sneaky Phish Just Grabbed my Mailchimp Mailing List
(26:16) - Story # 3: Windows 11 is closing a loophole that let you skip making a Microsoft account
(29:50) - Story # 4: The Trump Administration Accidentally Texted Me Its War Plans
(32:51) - Story # 4b: Signal is 'absolutely not suitable' for government use: Former NSA hacker
(37:41) - Story # 5: How the FBI Tracked, and Froze, Millions Sent to Criminals in Massive Caesars Casino Hack
(42:26) - Story # 6: Retail giant Sam’s Club investigates Clop ransomware breach claims
(45:07) - WEBCAST – Keeping Things Local – Making Your Own Private LLM w/ Bronwen Aker
(46:15) - Story # 7: New VanHelsing ransomware targets Windows, ARM, ESXi systems
(48:27) - Story # 8: Infostealer campaign compromises 10 npm packages, targets devs
(53:12) - Story # 9: Risky Biz News: EU bans anonymous crypto payments
(56:02) - ChickenSec: South African Poultry Company Reports $1M Loss After Cyber Intrusion

Trading in Jock Straps for Jock Hacks – 2025-03-24

Black Hills Information Security — Wed, 26 Mar 2025 15:30:00 -0400

00:00 - PreShow Banter™ — We’re Not Ready For the Finger Thing

01:40 - Trading in Jock Straps for Jock Hacks – BHIS - Talkin’ Bout [infosec] News 2025-03-24

03:24 - Story # 1: GitHub Action hack likely led to another in cascading supply chain attack

07:53 - Story # 2: Wiz to Join Google Cloud: Making Magic Together

14:47 - Story # 3: Oracle denies breach after hacker claims theft of 6 million data records

19:52 - Story # 4: Critical flaw in Next.js lets hackers bypass authorization

25:47 - Story # 5: Cloudflare builds an AI to lead AI scraper bots into a horrible maze of junk content

29:20 - Story # 6: Ex-Michigan QB coach Matt Weiss facing 24 federal charges in hack of thousands of student accounts

35:47 - Story # 7: DNA of 15 Million People for Sale in 23andMe Bankruptcy

38:40 - Story # 8: Everything you say to your Echo will be sent to Amazon starting on March 28

44:03 - Story # 9: We partner with world-renowned scambusters to create our own fraud-fighting call centre

52:01 - Story # 10: Sperm donation giant California Cryobank warns of a data breach

54:19 - Story # 11: Microsoft: New RAT malware used for crypto theft, reconnaissance

56:32 - Story # 12: TrustedSec | Trimarc Joins Forces with TrustedSec to Strengthen…

(00:00) - PreShow Banter™ — We're Not Ready For the Finger Thing
(01:40) - Trading in Jock Straps for Jock Hacks – BHIS - Talkin' Bout [infosec] News 2025-03-24
(03:23) - Story # 1: GitHub Action hack likely led to another in cascading supply chain attack
(07:53) - Story # 2: Wiz to Join Google Cloud: Making Magic Together
(14:46) - Story # 3: Oracle denies breach after hacker claims theft of 6 million data records
(19:51) - Story # 4: Critical flaw in Next.js lets hackers bypass authorization
(25:46) - Story # 5: Cloudflare builds an AI to lead AI scraper bots into a horrible maze of junk content
(29:20) - Story # 6: Ex-Michigan QB coach Matt Weiss facing 24 federal charges in hack of thousands of student accounts
(35:46) - Story # 7: DNA of 15 Million People for Sale in 23andMe Bankruptcy
(38:40) - Story # 8: Everything you say to your Echo will be sent to Amazon starting on March 28
(44:02) - Story # 9: We partner with world-renowned scambusters to create our own fraud-fighting call centre
(52:00) - Story # 10: Sperm donation giant California Cryobank warns of a data breach
(54:19) - Story # 11: Microsoft: New RAT malware used for crypto theft, reconnaissance
(56:32) - Story # 12: TrustedSec | Trimarc Joins Forces with TrustedSec to Strengthen…

News 2025-03-17 - Malicious Browser Plugins will Destroy us ALL!!!!!

Black Hills Information Security — Wed, 19 Mar 2025 00:00:00 -0400

00:00 - PreShow Banter™ — Fun Jank Decks

05:25 - BHIS - Talkin’ Bout [infosec] News 2025-03-17 - Malicious browser plugins will destroy us ALL!!!!!

06:35 - Story # 1: Polymorphic Extensions: The Sneaky Extension That Can Impersonate Any Browser Extension

14:37 - Story # 1b: Chrome Web Store is a mess

31:14 - Story # 2: Lazarus Strikes npm Again with New Wave of Malicious Packages

36:17 - Story # 3: China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days

44:44 - Story # 4: Saudi Arabia Buys Pokémon Go, and Probably All of Your Location Data

49:31 - Story # 5: Second biggest bank in US hit by major data breach stealing social security numbers and other personal info

51:25 - Story # 6: Hackers Take Credit for X Cyberattack

54:32 - Story # 7: Hackers Using Advanced MFA-Bypassing Techniques To Gain Access To User Account

(00:00) - PreShow Banter™ — Fun Jank Decks
(05:24) - BHIS - Talkin' Bout [infosec] News 2025-03-17 - Malicious Browser Plugins will Destroy us ALL!!
(06:35) - Story # 1: Polymorphic Extensions: The Sneaky Extension That Can Impersonate Any Browser Extension
(14:37) - Story # 1b: Chrome Web Store is a mess
(31:14) - Story # 2: Lazarus Strikes npm Again with New Wave of Malicious Packages
(36:17) - Story # 3: China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days
(44:43) - Story # 4: Saudi Arabia Buys Pokémon Go, and Probably All of Your Location Data
(49:31) - Story # 5: Second biggest bank in US hit by major data breach stealing social security numbers and other personal info
(51:25) - Story # 6: Hackers Take Credit for X Cyberattack
(54:32) - Story # 7: Hackers Using Advanced MFA-Bypassing Techniques To Gain Access To User Account

2025-03-10 — Agent A.I.

Black Hills Information Security — Wed, 12 Mar 2025 12:00:00 -0400

00:00 - PreShow Banter™ — Agent A.I.

07:35 - BHIS - Talkin’ Bout [infosec] News 2025-03-10

10:47 - Story # 1: 12 Chinese hackers charged with US Treasury breach — and much, much more

15:25 - Story # 2: Signal President Meredith Whittaker calls out agentic AI as having ‘profound’ security and privacy issues

25:33 - Story # 3: X/Twitter is down for a third time today

27:33 - Story # 4: Developer sabotaged ex-employer with kill switch activated when he was let go

33:37 - Story # 5: Undocumented commands found in Bluetooth chip used by a billion devices

45:37 - Story # 6: Cybercrime’s Cobalt Strike Use Plummets 80% Worldwide

46:19 - Story # 7: Majority of Orgs Hit by AI Cyber-Attacks as Detection Lags

55:01 - Story # 8: Ransomware gang encrypted network from a webcam to bypass EDR

(00:00) - PreShow Banter™— Agent A.I.
(07:35) - BHIS - Talkin' Bout [infosec] News 2025-03-10
(10:47) - Story # 1: 12 Chinese hackers charged with US Treasury breach — and much, much more
(15:24) - Story # 2: Signal President Meredith Whittaker calls out agentic AI as having ‘profound’ security and privacy issues
(25:32) - Story # 3: X/Twitter is down for a third time today
(27:33) - Story # 4: Developer sabotaged ex-employer with kill switch activated when he was let go
(33:37) - Story # 5: Undocumented commands found in Bluetooth chip used by a billion devices
(45:36) - Story # 6: Cybercrime's Cobalt Strike Use Plummets 80% Worldwide
(46:19) - Story # 7: Majority of Orgs Hit by AI Cyber-Attacks as Detection Lags
(55:00) - Story # 8: Ransomware gang encrypted network from a webcam to bypass EDR

2025-03-03 - Not Talking About Anything

Black Hills Information Security — Wed, 05 Mar 2025 12:00:00 -0500

00:00 - PreShow Banter™ — Not Talking About Anything

04:29 - BHIS - Talkin’ Bout [infosec] News 2025-03-03

05:42 - Story # 1: FBI Warns iPhone, Android Users—We Want ‘Lawful Access’ To All Your Encrypted Data

24:28 - Story # 2: Disney engineer downloaded ‘helpful’ AI tool that ended up completely destroying his life

34:28 - Story # 3: Have I Been Pwned adds 284M accounts stolen by infostealer malware

43:22 - Story # 4: Dragos’s 8th Annual OT Cybersecurity Year in Review Is Now Available

45:53 - Story # 5: Trump administration retreats in fight against Russian cyber threats

55:19 - Story # 5b: Exclusive: US intel shows Russia and China are attempting to recruit disgruntled federal employees, sources say

57:33 - Story # 6: Feds: Army soldier suspected of AT&T heist Googled ‘can hacking be treason,’ ‘defecting to Russia’

(00:00) - PreShow Banter™ — Not Talking About Anything
(04:28) - BHIS - Talkin' Bout [infosec] News 2025-03-03
(05:42) - Story # 1: FBI Warns iPhone, Android Users—We Want ‘Lawful Access’ To All Your Encrypted Data
(24:27) - Story # 2: Disney engineer downloaded 'helpful' AI tool that ended up completely destroying his life
(34:27) - Story # 3: Have I Been Pwned adds 284M accounts stolen by infostealer malware
(43:22) - Story # 4: Dragos's 8th Annual OT Cybersecurity Year in Review Is Now Available
(45:53) - Story # 5: Trump administration retreats in fight against Russian cyber threats
(55:19) - Story # 5b: Exclusive: US intel shows Russia and China are attempting to recruit disgruntled federal employees, sources say
(57:32) - Story # 6: Feds: Army soldier suspected of AT&T heist Googled ‘can hacking be treason,’ ‘defecting to Russia’

2025-05-24 - Get Political (With Jake Williams)

Black Hills Information Security — Wed, 26 Feb 2025 12:03:08 -0500

00:00 - PreShow Banter™ — Get Political

05:27 - BHIS - Talkin’ Bout [infosec] News 2025-02-25

06:07 - Story # 1: Trump 2.0 Brings Cuts to Cyber, Consumer Protections

37:57 - Story # 2: OpenAI Uncovers Evidence of A.I.-Powered Chinese Surveillance Tool

49:48 - Story # 3: Apple pulls data protection tool after UK government security row

55:00 - Story # 4: Judge dismisses Chris Hadnagy lawsuit against DEF CON

(00:00) - PreShow Banter™ — Get Political
(05:26) - BHIS - Talkin' Bout [infosec] News 2025-02-25
(06:07) - Story # 1: Trump 2.0 Brings Cuts to Cyber, Consumer Protections
(37:56) - Story # 2: OpenAI Uncovers Evidence of A.I.-Powered Chinese Surveillance Tool
(49:48) - Story # 3: Apple pulls data protection tool after UK government security row
(54:59) - Story # 4: Judge dismisses Chris Hadnagy lawsuit against DEF CON

2025-02-17 - Prove That You're Wearing Pants

Black Hills Information Security — Wed, 19 Feb 2025 17:16:36 -0500

00:00 - PreShow Banter™ — Prove That You’re Wearing Pants

05:50 - BHIS - Talkin’ Bout [infosec] News 2025-05-17

06:46 - Story # 1: Fortinet discloses second firewall auth bypass patched in January

07:12 - Story # 1b: Fortinet CEO boasts it was voted the “most trusted” cybersecurity firm. Don’t die laughing

08:45 - Story # 1c: Forbes Most Trusted Companies in America 2025 List

16:25 - Story # 2: SAML Bypass Authentication on GitHub Enterprise Servers to Login as Other User Account

18:37 - Story # 2b: Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation

20:04 - Story # 3: Putting the human back into AI is key, former NSA Director Nakasone says

36:35 - Story # 4: Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack

37:44 - Story # 5: DOGE Exposes Once-Secret Government Networks, Making Cyber-Espionage Easier than Ever

43:14 - Story # 5b: DOGE’s .gov site lampooned as coders quickly realize it can be edited by anyone

46:59 - Story # 6: Man who SIM-swapped the SEC’s X account pleads guilty

51:26 - Story # 7: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs

53:55 - Story # 8: Nearly 10 years after Data and Goliath, Bruce Schneier says: Privacy’s still screwed

(00:00) - PreShow Banter™ — Prove That You're Wearing Pants
(05:49) - BHIS - Talkin' Bout [infosec] News 2025-05-17
(06:46) - Story # 1: Fortinet discloses second firewall auth bypass patched in January
(07:11) - Story # 1b: Fortinet CEO boasts it was voted the “most trusted” cybersecurity firm. Don't die laughing
(08:44) - Story # 1c: Forbes Most Trusted Companies in America 2025 List
(16:24) - Story # 2: SAML Bypass Authentication on GitHub Enterprise Servers to Login as Other User Account
(18:37) - Story # 2b: Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation
(20:04) - Story # 3: Putting the human back into AI is key, former NSA Director Nakasone says
(36:34) - Story # 4: Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack
(37:43) - Story # 5: DOGE Exposes Once-Secret Government Networks, Making Cyber-Espionage Easier than Ever
(43:14) - Story # 5b: DOGE’s .gov site lampooned as coders quickly realize it can be edited by anyone
(46:58) - Story # 6: Man who SIM-swapped the SEC's X account pleads guilty
(51:26) - Story # 7: Russia's Sandworm caught snarfing credentials, data from American and Brit orgs
(53:55) - Story # 8: Nearly 10 years after Data and Goliath, Bruce Schneier says: Privacy’s still screwed

2025-02-10 - Walking Through Denver

Black Hills Information Security — Thu, 13 Feb 2025 13:12:08 -0500

00:00 - PreShow Banter™ — Walking Through Denver

02:23 - BHIS - Talkin’ Bout [infosec] News 2025-02-10

04:35 - Story # 1: Ransomware payments declined in 2024 despite massive. well-known hacks

05:02 - Story # 1b: 35% Year-over-Year Decrease in Ransomware Payments, Less than Half of Recorded Incidents Resulted in Victim Payments

14:19 - Story # 2: Critical Cisco ISE bug can let attackers run commands as root

16:43 - Story # 3: The Untold Story of a Crypto Crimefighter’s Descent Into Nigerian Prison

24:18 - Story # 4: IoT’s botnet problem is up 500% – three things admins must do now

31:49 - Story # 5: WhatsApp identifies dozens of users hacked by Paragon spyware company

39:41 - Story # 6: Sri Lanka goes bananas after monkey unplugs nation

43:36 - Story # 7: Microsoft Study Finds AI Makes Human Cognition “Atrophied and Unprepared”

50:17 - ChickenSec Story #: 1 Here’s a Super Bowl riddle: Why are egg prices surging — but not chicken wings?

52:21 - Story # 8: DOGE Staffer Previously Fired From Cybersecurity Company for Leaking Secrets

58:07 - ChickenSec Story #2: Americans to Eat 1.47 Billion Chicken Wings for Super Bowl LIX

(00:00) - PreShow Banter™ — Walking Through Denver
(02:23) - BHIS - Talkin' Bout [infosec] News 2025-02-10
(04:34) - Story # 1: Ransomware payments declined in 2024 despite massive. well-known hacks
(05:02) - Story # 1b: 35% Year-over-Year Decrease in Ransomware Payments, Less than Half of Recorded Incidents Resulted in Victim Payments
(14:18) - Story # 2: Critical Cisco ISE bug can let attackers run commands as root
(16:42) - Story # 3: The Untold Story of a Crypto Crimefighter’s Descent Into Nigerian Prison
(24:17) - Story # 4: IoT’s botnet problem is up 500% – three things admins must do now
(31:48) - Story # 5: WhatsApp identifies dozens of users hacked by Paragon spyware company
(39:40) - Story # 6: Sri Lanka goes bananas after monkey unplugs nation
(43:35) - Story # 7: Microsoft Study Finds AI Makes Human Cognition “Atrophied and Unprepared”
(50:16) - ChickenSec Story #: 1 Here's a Super Bowl riddle: Why are egg prices surging — but not chicken wings?
(52:21) - Story # 8: DOGE Staffer Previously Fired From Cybersecurity Company for Leaking Secrets
(58:06) - ChickenSec Story #2: Americans to Eat 1.47 Billion Chicken Wings for Super Bowl LIX

2025-02-05 - LIVE FROM WWHF DENVER 2025

Black Hills Information Security — Wed, 12 Feb 2025 12:00:00 -0500

00:00 - PreShow Banter™ — Community Swear Bucket

01:40 - BHIS - Talkin’ Bout [infosec] News 2025-02-05

03:27 - Story # 1: DeepSeek R1 Exposed: Security Flaws in China’s AI Model

11:25 - Story # 2: Backdoor found in two healthcare patient monitors, linked to IP in China

15:21 - Story # 3: Facebook flags Linux topics as ‘cybersecurity threats’ — posts and users being blocked

20:56 - Story # 4: Here’s how Musk’s access to Treasury system may impact Social Security, other government payments

31:29 - Story # 5: Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections

34:34 - Story # 6: Insurance Company Globe Life Notifying 850,000 People of Data Breach

36:15 - Story # 10: DeepSeek Fails Researchers’ Safety Tests

38:35 - Story # 11: Engineering giant Smiths Group discloses security breach

(00:00) - PreShow Banter™ — Community Swear Bucket
(01:39) - BHIS - Talkin' Bout [infosec] News 2025-02-05
(03:26) - Story # 1: DeepSeek R1 Exposed: Security Flaws in China’s AI Model
(11:24) - Story # 2: Backdoor found in two healthcare patient monitors, linked to IP in China
(15:20) - Story # 3: Facebook flags Linux topics as 'cybersecurity threats' — posts and users being blocked
(20:55) - Story # 4: Here’s how Musk’s access to Treasury system may impact Social Security, other government payments
(31:28) - Story # 5: Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections
(34:34) - Story # 6: Insurance Company Globe Life Notifying 850,000 People of Data Breach
(36:15) - Story # 10: DeepSeek Fails Researchers' Safety Tests
(38:35) - Story # 11: Engineering giant Smiths Group discloses security breach

2025-01-27 - Fake Australian

Black Hills Information Security — Wed, 29 Jan 2025 12:00:00 -0500

00:00 - PreShow Banter™ — Fake Australian

04:17 - BHIS - Talkin’ Bout [infosec] News 2025-01-27

04:34 - Story # 1: DeepSeek sparks AI stock selloff; Nvidia posts record market-cap loss

30:50 - Story # 2: Tech giants are putting $500bn into ‘Stargate’ to build up AI in US

42:23 - Story # 3: DeepSeek Faces Large-scale Cyberattack, Halts New User Registrations

43:34 - Story # 4: DHS cyber review board cleaned out in Trump move to eliminate ‘misuse of resources’

47:38 - Story # 5: UnitedHealth estimates 190M people impacted by Change Healthcare cyberattack

50:02 - Story # 5b: UnitedHealth now says 190 million impacted by 2024 data breach

53:09 - Story # 6: Cloudflare Issue Can Leak Chat App Users’ Broad Location

54:09 - Story # 7: Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel

59:40 - Story # 8: Researchers say new attack could take down the European power grid

(00:00) - PreShow Banter™ — Fake Australian
(04:17) - BHIS - Talkin' Bout [infosec] News 2025-01-27
(04:34) - Story # 1: DeepSeek sparks AI stock selloff; Nvidia posts record market-cap loss
(30:49) - Story # 2: Tech giants are putting $500bn into 'Stargate' to build up AI in US
(42:23) - Story # 3: DeepSeek Faces Large-scale Cyberattack, Halts New User Registrations
(43:33) - Story # 4: DHS cyber review board cleaned out in Trump move to eliminate ‘misuse of resources’
(47:38) - Story # 5: UnitedHealth estimates 190M people impacted by Change Healthcare cyberattack
(50:01) - Story # 5b: UnitedHealth now says 190 million impacted by 2024 data breach
(53:08) - Story # 6: Cloudflare Issue Can Leak Chat App Users' Broad Location
(54:09) - Story # 7: Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
(59:39) - Story # 8: Researchers say new attack could take down the European power grid

2025-01-20 - Highest Rated Chalk

Black Hills Information Security — Wed, 22 Jan 2025 12:00:00 -0500

00:00 - PreShow Banter™ — Highest Rated Chalk

04:14 - BHIS - Talkin’ Bout [infosec] News 2025-01-20

08:53 - Story # 1: Data From 15,000 Fortinet Firewalls Leaked by Hackers

14:25 - Story # 2: China’s Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says

16:29 - Story # 3: TikTok reportedly plans ‘immediate’ Sunday shutdown in the US if it’s banned

25:47 - Story # 4: FBI forces Chinese malware to delete itself from thousands of US computers

35:06 - WWHF Denver

36:03 - BSides San Diego

37:23 - Security Stadium

38:22 - Story # 5: Exchange 2016 and 2019 reach end-of-life status later this year

42:45 - Story # 6: Snyk security researcher deploys malicious NPM packages targeting Cursor.com

46:17 - Story # 7: New UEFI Secure Boot flaw exposes systems to bootkits, patch now

57:34 - Story # 8: Lawsuit: Allstate used GasBuddy and other apps to quietly track driving

(00:00) - PreShow Banter™ — Highest Rated Chalk
(04:13) - BHIS - Talkin' Bout [infosec] News 2025-01-20
(08:53) - Story # 1: Data From 15,000 Fortinet Firewalls Leaked by Hackers
(14:24) - Story # 2: China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says
(16:28) - Story # 3: TikTok reportedly plans ‘immediate’ Sunday shutdown in the US if it’s banned
(25:47) - Story # 4: FBI forces Chinese malware to delete itself from thousands of US computers
(35:05) - WWHF Denver
(36:03) - BSides San Diego
(37:22) - Security Stadium
(38:21) - Story # 5: Exchange 2016 and 2019 reach end-of-life status later this year
(42:45) - Story # 6: Snyk security researcher deploys malicious NPM packages targeting Cursor.com
(46:16) - Story # 7: New UEFI Secure Boot flaw exposes systems to bootkits, patch now
(57:33) - Story # 8: Lawsuit: Allstate used GasBuddy and other apps to quietly track driving behavior

2025-01-13 — An RGB State of Mind

Black Hills Information Security — Wed, 15 Jan 2025 00:00:00 -0500

00:00:00 - PreShow Banter™ — An RGB State of Mind

00:07:20 - BHIS - Talkin’ Bout [infosec] News 2025-01-13

00:10:24 - Story # 1: A Day in the Life of a Prolific Voice Phishing Crew

00:18:39 - Story # 2: Dental group lied through teeth about data breach, fined $350,000

00:25:49 - Story # 3: Hacker claims breach of US location tracking company Gravy Analytics

00:27:48 - Story # 4: License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data

00:33:19 - Story # 5: US Cyber Trust Mark launches as the Energy Star of smart home security

00:43:08 - Story # 6: Hackers are exploiting a new Ivanti VPN security bug to hack into company networks

00:45:09 - Story # 7: Hacker Broke into ‘Path of Exile 2’ Admin Account, Hijacked Wave of Characters

00:47:36 - Story # 8: Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit

00:54:47 - Story # 9: Ransomware crew abuses AWS native encryption

01:00:41 - Story # 10: Cannabis company Stiiizy says hackers accessed customers’ ID documents

(00:00) - PreShow Banter™ — An RGB State of Mind
(07:19) - BHIS - Talkin' Bout [infosec] News 2025-01-13
(10:24) - Story # 1: A Day in the Life of a Prolific Voice Phishing Crew
(18:38) - Story # 2: Dental group lied through teeth about data breach, fined $350,000
(25:48) - Story # 3: Hacker claims breach of US location tracking company Gravy Analytics
(27:47) - Story # 4: License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data
(33:18) - Story # 5: US Cyber Trust Mark launches as the Energy Star of smart home security
(43:08) - Story # 6: Hackers are exploiting a new Ivanti VPN security bug to hack into company networks
(45:09) - Story # 7: Hacker Broke into ‘Path of Exile 2’ Admin Account, Hijacked Wave of Characters
(47:35) - Story # 8: Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit
(54:47) - Story # 9: Ransomware crew abuses AWS native encryption
(01:00:40) - Story # 10: Cannabis company Stiiizy says hackers accessed customers’ ID documents

2025-01-06 - Coffee With Wade

Black Hills Information Security — Thu, 09 Jan 2025 12:00:00 -0500

00:00:00 - PreShow Banter™ — Coffee With Wade Wells

00:05:41 - BHIS - Talkin’ Bout [infosec] News 2025-01-06

00:06:45 - Story # 1: BeyondTrust says hackers breached Remote Support SaaS instances

00:13:18 - Things Continued to be ignored in 2025

00:24:39 - Story # 2: Classified fighter jet specs leaked on War Thunder – again

00:28:26 - Story # 3: New Proposed HIPAA Security Rule Changes

00:34:33 - Story # 4: The Breachies 2024: The Worst, Weirdest, Most Impactful Data Breaches of the Year

00:35:47 - Story # 5: AT&T and Verizon say networks secure after Salt Typhoon breach

00:37:20 - Story # 6: Net Neutrality Rules Struck Down by Appeals Court

00:41:56 - Story # 7: U.S. Army Soldier Arrested in AT&T, Verizon Extortions

00:45:28 - Story # 8: New U.S. DoJ Rule Halts Bulk Data Transfers to Adversarial Nations to Protect Privacy

00:48:38 - Story # 9: Meta’s AI Profiles Are Indistinguishable From Terrible Spam That Took Over Facebook

00:50:42 - Story # 9b: Meta deletes AI character profiles after backlash, racism accusations

00:51:40 - Story # 10: Watch: Tiny robot ‘kidnaps’ 12 big Chinese bots from a Shanghai showroom, shocks world

00:55:27 - Story # 11: China Arrests 4 Who Weaponized ChatGPT for Ransomware Attacks

00:58:42 - Story # 12: Man Accused of SQL Injection Hacking Gets 69-Month Prison Sentence

01:01:22 - Story # 13: Germany cuts hacker access to 30,000 devices infected with BadBox malware

(00:00) - PreShow Banter™ — Coffee With Wade Wells
(05:40) - BHIS - Talkin' Bout [infosec] News 2025-01-06
(06:44) - Story # 1: BeyondTrust says hackers breached Remote Support SaaS instances
(13:17) - Things Continued to be ignored in 2025
(24:38) - Story # 2: Classified fighter jet specs leaked on War Thunder – again
(28:25) - Story # 3: New Proposed HIPAA Security Rule Changes
(34:32) - Story # 4: The Breachies 2024: The Worst, Weirdest, Most Impactful Data Breaches of the Year
(35:46) - Story # 5: AT&T and Verizon say networks secure after Salt Typhoon breach
(37:19) - Story # 6: Net Neutrality Rules Struck Down by Appeals Court
(41:55) - Story # 7: U.S. Army Soldier Arrested in AT&T, Verizon Extortions
(45:28) - Story # 8: New U.S. DoJ Rule Halts Bulk Data Transfers to Adversarial Nations to Protect Privacy
(48:38) - Story # 9: Meta's AI Profiles Are Indistinguishable From Terrible Spam That Took Over Facebook
(50:41) - Story # 9b: Meta deletes AI character profiles after backlash, racism accusations
(51:40) - Story # 10: Watch: Tiny robot ‘kidnaps’ 12 big Chinese bots from a Shanghai showroom, shocks world
(55:27) - Story # 11: China Arrests 4 Who Weaponized ChatGPT for Ransomware Attacks
(58:42) - Story # 12: Man Accused of SQL Injection Hacking Gets 69-Month Prison Sentence

2024-12-16 - ChickenSec News Part 3

Black Hills Information Security — Wed, 18 Dec 2024 12:00:00 -0500

00:00 - PreShow Banter™ — ChickenSec News Part 3

12:23 - BHIS - Talkin’ Bout [infosec] News 2024-12-16

14:48 - Story # 1: $50 Million Radiant Capital Heist Blamed on North Korean Hackers

20:30 - Story # 2: Trump administration wants to go on cyber offensive against China

32:53 - Story # 3: Krispy Kreme cyberattack impacts online orders and operations

43:02 - Story # 4: Arctic Wolf and BlackBerry Announce Acquisition Agreement for Cylance

52:02 - Story # 5: Europol announces takedown of major DDoS-for-hire network

56:50 - Story # 6: Data breach at Senior Dating website spills info of 765,000 users

58:46 - Story # 7: US sanctions Chinese firm for hacking firewalls in ransomware attacks

(00:00) - PreShow Banter™ — ChickenSec News Part 3
(12:22) - BHIS - Talkin' Bout [infosec] News 2024-12-16
(14:47) - Story # 1: $50 Million Radiant Capital Heist Blamed on North Korean Hackers
(20:29) - Story # 2: Trump administration wants to go on cyber offensive against China
(32:53) - Story # 3: Krispy Kreme cyberattack impacts online orders and operations
(43:01) - Story # 4: Arctic Wolf and BlackBerry Announce Acquisition Agreement for Cylance
(52:02) - Story # 5: Europol announces takedown of major DDoS-for-hire network
(56:50) - Story # 6: Data breach at Senior Dating website spills info of 765,000 users
(58:45) - Story # 7: US sanctions Chinese firm for hacking firewalls in ransomware attacks

2024-12-09 - A Better Mike

Black Hills Information Security — Wed, 11 Dec 2024 12:00:00 -0500

00:00 - PreShow Banter™ — A Better Mike

04:46 - BHIS - Talkin’ Bout [infosec] News 2024-12-09

05:43 - Story # 1: FBI Warns iPhone And Android Users—Stop Sending Texts

23:36 - Story # 2: US agency proposes new rule blocking data brokers from selling Americans’ sensitive personal data

42:55 - Story # 3: Vodka maker Stoli files for bankruptcy in US after ransomware attack

46:48 - Story # 4: British hospitals hit by cyberattacks still battling to get systems back online

(00:00) - PreShow Banter™ — A Better Mike
(04:46) - BHIS - Talkin' Bout [infosec] News 2024-12-09
(05:43) - Story # 1: FBI Warns iPhone And Android Users—Stop Sending Texts
(23:36) - Story # 2: US agency proposes new rule blocking data brokers from selling Americans’ sensitive personal data
(42:55) - Story # 3: Vodka maker Stoli files for bankruptcy in US after ransomware attack
(46:48) - Story # 4: British hospitals hit by cyberattacks still battling to get systems back online

2024-12-02 - C Squad

Black Hills Information Security — Wed, 04 Dec 2024 12:00:00 -0500

00:00:00 - PreShow Banter™ — C Squad

00:11:03 - BHIS - Talkin’ Bout [infosec] News 2024-12-02

00:15:43 - Story # 1: Gaming Engines: An Undetected Playground for Malware Loaders - Check Point Research

00:30:41 - Story # 2: FTC finds that smart-device makers fail to make clear how long their products will be supported

00:44:47 - Story # 3: US senators propose law to require bare minimum security standards

00:46:35 - Story # 4: Starbucks baristas can’t view their schedules after ransomware attack on vendor

01:04:26 - Story # 5: Volunteer DEF CON hackers dive into America’s leaky water infrastructure

01:08:45 - Shameless Plugs

(00:00) - PreShow Banter™ — C Squad
(11:02) - BHIS - Talkin' Bout [infosec] News 2024-12-02
(15:42) - Story # 1: Gaming Engines: An Undetected Playground for Malware Loaders - Check Point Research
(30:40) - Story # 2: FTC finds that smart-device makers fail to make clear how long their products will be supported
(44:46) - Story # 3: US senators propose law to require bare minimum security standards
(46:35) - Story # 4: Starbucks baristas can’t view their schedules after ransomware attack on vendor
(01:04:26) - Story # 5: Volunteer DEF CON hackers dive into America's leaky water infrastructure
(01:08:44) - Shameless Plugs - 40% off all items in the store -- cYb3rM0nD@Y40OFF This discount is good until Tuesday, Dec 2nd at 8pm ET. https://spearphish-general-store.myshopify.com/

2024-11-25 - Discordgate

Black Hills Information Security — Wed, 27 Nov 2024 12:26:15 -0500

00:00:00 - PreShow Banter™ — Discordgate

00:09:24 - BHIS - Talkin’ Bout [infosec] News 2024-11-25

00:10:46 - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly

00:12:08 - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership

00:19:16 - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

00:24:37 - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches

00:25:46 - Discordgate Follow Up

00:26:26 - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

00:31:08 - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack

00:34:01 - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking”

00:38:49 - Story # 7: T-Mobile finally managed to thwart a data breach before it occured

00:40:22 - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw

00:43:07 - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators

00:46:19 - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison

00:48:31 - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December

00:50:10 - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It

00:55:11 - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks

00:57:02 - Story # 13: Hackers Breach Andrew Tate’s Online ‘University,’ Exposing 800,000 Users

01:00:36 - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually

01:01:31 - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure

01:03:07 - Story # 16: US charges five linked to Scattered Spider cybercrime gang

01:04:25 - Plug: Secure Code Summit 2024

(00:00) - PreShow Banter™ — Discordgate
(09:23) - BHIS - Talkin' Bout [infosec] News 2024-11-25
(10:45) - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly
(12:07) - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership
(19:15) - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access
(24:37) - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches
(25:46) - Discordgate Follow Up
(26:25) - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
(31:07) - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack
(34:01) - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking”
(38:49) - Story # 7: T-Mobile finally managed to thwart a data breach before it occured
(40:21) - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw
(43:06) - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators
(46:19) - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison
(48:31) - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December
(50:10) - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It
(55:11) - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks
(57:02) - Story # 13: Hackers Breach Andrew Tate's Online 'University,' Exposing 800,000 Users
(01:00:36) - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually
(01:01:31) - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure
(01:03:06) - Story # 16: US charges five linked to Scattered Spider cybercrime gang
(01:04:25) - Plug: Secure Code Summit 2024

2024-11-18 - Yacht Doc

Black Hills Information Security — Thu, 21 Nov 2024 00:00:00 -0500

00:00 - PreShow Banter™ — Yacht Doc

07:40 - BHIS - Talkin’ Bout [infosec] News 2024-11-18

08:49 - Story # 1: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

16:02 - Story # 2: CISA Director Jen Easterly to depart agency on January 20

19:26 - Story # 3: Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack

28:44 - Story # 4: T-Mobile hacked in massive Chinese breach of telecom networks, WSJ reports

30:55 - Story # 4b: T-Mobile confirms it was hacked in recent wave of telecom breaches

33:03 - Story # 5: An Interview With the Target & Home Depot Hacker

40:04 - Story # 6: Hacker gets 10 years in prison for extorting US healthcare provider

42:47 - Story # 7: Ransomware fiends boast they’ve stolen 1.4TB from US pharmacy network

44:21 - Story # 8: A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine

45:23 - Story # 9: 23andMe cuts 40% of its workforce and discontinues therapeutics division

50:38 - Story # 10: FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023

56:45 - CPTC - Education Through Competition

(00:00) - PreShow Banter™ — Yacht Doc
(07:39) - BHIS - Talkin' Bout [infosec] News 2024-11-18
(08:49) - Story # 1: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit
(16:01) - Story # 2: CISA Director Jen Easterly to depart agency on January 20
(19:26) - Story # 3: Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack
(28:43) - Story # 4: T-Mobile hacked in massive Chinese breach of telecom networks, WSJ reports
(30:55) - Story # 4b: T-Mobile confirms it was hacked in recent wave of telecom breaches
(33:02) - Story # 5: An Interview With the Target & Home Depot Hacker
(40:03) - Story # 6: Hacker gets 10 years in prison for extorting US healthcare provider
(42:47) - Story # 7: Ransomware fiends boast they've stolen 1.4TB from US pharmacy network
(44:20) - Story # 8: A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine
(45:22) - Story # 9: 23andMe cuts 40% of its workforce and discontinues therapeutics division
(50:37) - Story # 10: FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023
(56:44) - CPTC - Education Through Competition

2024-11-11 - The Old and The New

Black Hills Information Security — Fri, 15 Nov 2024 13:12:57 -0500

00:00 - PreShow Banter™ — The Old and The New

02:27 - BHIS - Talkin’ Bout [infosec] News 2024-11-11

03:44 - Story # 1: Mattel pulls thousands of ‘Wicked’ dolls off shelves after printing adult website on packaging

08:03 - Story # 2: Office apps crash on Windows 11 24H2 PCs with CrowdStrike antivirus

11:41 - Story # 3: Mislabeled patch sends Windows Server 2022 admins on unwanted upgrade to 2025

16:49 - Story # 4: Suspected Snowflake Hacker Arrested in Canada

18:26 - Story # 5: Interpol Cybercrime Sweep Takes Down 22,000 IP Addresses, Arrests 41

29:47 - Story # 6: Google Cloud to mandate MFA for all users in 2025

41:30 - Story # 7: Cisco scores a perfect CVSS 10 with critical flaw in its wireless system

49:26 - Story # 8: H.I.G. Capital and Thoma Bravo to Acquire CompTIA Brand and Products

59:05 - SANS Holiday Hack Challenge™ 2024

(00:00) - PreShow Banter™ — The Old and The New
(02:27) - BHIS - Talkin' Bout [infosec] News 2024-11-11
(03:44) - Story # 1: Mattel pulls thousands of 'Wicked' dolls off shelves after printing adult website on packaging
(08:03) - Story # 2: Office apps crash on Windows 11 24H2 PCs with CrowdStrike antivirus
(11:41) - Story # 3: Mislabeled patch sends Windows Server 2022 admins on unwanted upgrade to 2025
(16:48) - Story # 4: Suspected Snowflake Hacker Arrested in Canada
(18:25) - Story # 5: Interpol Cybercrime Sweep Takes Down 22,000 IP Addresses, Arrests 41
(29:47) - Story # 6: Google Cloud to mandate MFA for all users in 2025
(41:30) - Story # 7: Cisco scores a perfect CVSS 10 with critical flaw in its wireless system
(49:26) - Story # 8: H.I.G. Capital and Thoma Bravo to Acquire CompTIA Brand and Products
(59:04) - SANS Holiday Hack Challenge™ 2024

2024-11-04 - The Grey Times

Black Hills Information Security — Wed, 06 Nov 2024 12:00:00 -0500

00:00:00 - PreShow Banter™ — The Grey Times

00:04:33 - BHIS - Talkin’ Bout [infosec] News 2024-11-04

00:05:54 - Story # 1: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files

00:16:45 - Story # 2: Follow Up - 5 Things To Know On Delta’s Lawsuit Against CrowdStrike

00:17:43 - Story # 2b: CrowdStrike Sues Delta: 5 Key Takeaways

00:22:04 - Story # 3: Russian charged by U.S. for creating RedLine infostealer malware

00:22:59 - Story # 3b: How a series of opsec failures led US authorities to the alleged developer of the Redline password-stealing malware

00:28:09 - Story # 4: Fired Disney staffer accused of hacking menu to add profanity, wingdings, removes allergen info

00:30:02 - Story # 4b: ‘We strive to put humanity above all’: Disney drops arbitration demand over wrongful death lawsuit after woman died from fatal food allergy

00:37:10 - Story # 5: OCR Announces First Financial Penalty Under HIPAA Risk Analysis Enforcement Initiative

00:44:54 - Story # 6: Security researchers found a serious zero-click bug in Synology’s Photos app

00:50:10 - Story # 7: Inside a Firewall Vendor’s 5-Year War With the Chinese Hackers Hijacking Its Devices

00:52:21 - Story # 8: Microsoft wants $30 if you want to delay Windows 11 switch

01:00:03 - Story # 9: Colorado Secretary of State posted spreadsheet with voting system passwords

(00:00) - PreShow Banter™ — The Grey Times
(04:33) - BHIS - Talkin' Bout [infosec] News 2024-11-04
(05:54) - Story # 1: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files
(16:46) - Story # 2: Follow Up - 5 Things To Know On Delta’s Lawsuit Against CrowdStrike
(17:44) - Story # 2b: CrowdStrike Sues Delta: 5 Key Takeaways
(22:05) - Story # 3: Russian charged by U.S. for creating RedLine infostealer malware
(23:00) - Story # 3b: How a series of opsec failures led US authorities to the alleged developer of the Redline password-stealing malware
(28:10) - Story # 4: Fired Disney staffer accused of hacking menu to add profanity, wingdings, removes allergen info
(30:04) - Story # 4b: ‘We strive to put humanity above all’: Disney drops arbitration demand over wrongful death lawsuit after woman died from fatal food allergy
(37:11) - Story # 5: OCR Announces First Financial Penalty Under HIPAA Risk Analysis Enforcement Initiative
(44:56) - Story # 6: Security researchers found a serious zero-click bug in Synology's Photos app
(50:12) - Story # 7: Inside a Firewall Vendor's 5-Year War With the Chinese Hackers Hijacking Its Devices
(52:23) - Story # 8: Microsoft wants $30 if you want to delay Windows 11 switch
(01:00:06) - Story # 9: Colorado Secretary of State posted spreadsheet with voting system passwords

2024-10-28 - Sarsaparilla

Black Hills Information Security — Wed, 30 Oct 2024 16:33:51 -0400

00:00:00 - PreShow Banter™ — Sarsaparilla

00:05:50 - BHIS - Talkin’ Bout [infosec] News 2024-10-28

00:06:46 - Story # 1: AWS, Azure auth keys found in Android and iOS apps used by millions

00:15:02 - Story # 2: Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs

00:29:03 - Story # 3: Delta officially launches lawyers at $500M CrowdStrike problem

00:40:60 - Story # 4: New Rules for US National Security Agencies Balance AI’s Promise With Need to Protect Against Risks

00:46:25 - Story # 4b: CISA proposes new security requirements to protect govt, personal data

00:51:03 - Story # 5: Largest Retail Breach in History: 350 Million “Hot Topic” Customers’ Personal & Payment Data Exposed — As a Result of Infostealer Infection

00:55:35 - Story # 6: Throne’s toilet camera takes pictures of your poop

01:04:57 - A Community Support Moment - https://www.crisistextline.org

(00:00) - PreShow Banter™ — Sarsaparilla
(05:49) - BHIS - Talkin' Bout [infosec] News 2024-10-28
(06:45) - Story # 1: AWS, Azure auth keys found in Android and iOS apps used by millions
(15:02) - Story # 2: Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs
(29:03) - Story # 3: Delta officially launches lawyers at $500M CrowdStrike problem
(40:59) - Story # 4: New Rules for US National Security Agencies Balance AI’s Promise With Need to Protect Against Risks
(46:25) - Story # 4b: CISA proposes new security requirements to protect govt, personal data
(51:02) - Story # 5: Largest Retail Breach in History: 350 Million “Hot Topic” Customers’ Personal & Payment Data Exposed — As a Result of Infostealer Infection
(55:35) - Story # 6: Throne’s toilet camera takes pictures of your poop
(01:04:56) - A Community Support Moment - https://www.crisistextline.org

2024-10-21 - Logging Con

Black Hills Information Security — Fri, 25 Oct 2024 12:04:43 -0400

00:00:00 - PreShow Banter™ — Log Con

00:11:41 - BHIS - Talkin’ Bout [infosec] News 2024-10-21

00:12:51 - Story # 1: Internet Archive exposed again – this time through Zendesk

00:14:57 - Story # 1b: Hackers steal information from 31 million Internet Archive users

00:20:42 - Story # 2: Sophos buys Secureworks for $859 mln to beef up cybersecurity portfolio

00:24:21 - Story # 3: USDoD hacker behind National Public Data breach arrested in Brazil

00:27:12 - Story # 4: Debunking Hype: China Hasn’t Broken Military Encryption With Quantum

00:32:14 - Story # 5: Microsoft said it lost weeks of security logs for its customers’ cloud products

00:35:03 - Story # 6: Should We Chat, Too? FAQ

00:40:05 - Story # 7: More than two dozen countries have used internet outages to sway elections

00:43:50 - Story # 8: Pokemon dev Game Freak confirms breach after stolen data leaks online

00:46:32 - Story # 9: Hackers made robot vacuums randomly yell racial slurs

00:49:19 - Story # 9b: We hacked a robot vacuum — and could watch live through its camera

00:50:19 - Story # 10: The government is getting fed up with ransomware payments fueling endless cycle of cyberattacks

00:54:55 - Story # 11: Google’s Chrome Browser Starts Disabling uBlock Origin

01:01:00 - WWHF Recorvery

(00:00) - PreShow Banter™ — Log Con
(11:41) - BHIS - Talkin' Bout [infosec] News 2024-10-21
(12:50) - Story # 1: Internet Archive exposed again – this time through Zendesk
(14:56) - Story # 1b: Hackers steal information from 31 million Internet Archive users
(20:42) - Story # 2: Sophos buys Secureworks for $859 mln to beef up cybersecurity portfolio
(24:20) - Story # 3: USDoD hacker behind National Public Data breach arrested in Brazil
(27:11) - Story # 4: Debunking Hype: China Hasn't Broken Military Encryption With Quantum
(32:13) - Story # 5: Microsoft said it lost weeks of security logs for its customers’ cloud products
(35:02) - Story # 6: Should We Chat, Too? FAQ
(40:05) - Story # 7: More than two dozen countries have used internet outages to sway elections
(43:49) - Story # 8: Pokemon dev Game Freak confirms breach after stolen data leaks online
(46:32) - Story # 9: Hackers made robot vacuums randomly yell racial slurs
(49:18) - Story # 9b: We hacked a robot vacuum — and could watch live through its camera
(50:19) - Story # 10: The government is getting fed up with ransomware payments fueling endless cycle of cyberattacks
(54:54) - Story # 11: Google's Chrome Browser Starts Disabling uBlock Origin
(01:01:00) - WWHF Recorvery

2024-09-30 — Cast of Special Characters

Black Hills Information Security — Wed, 02 Oct 2024 12:00:00 -0400

00:00:00 - PreShow Banter™ — Cast of Special Characters

00:06:37 - BHIS - Talkin’ Bout [infosec] News 2024-09-30

00:08:06 - Story # 1: CUPS flaws enable Linux remote code execution, but there’s a catch

00:23:40 - Story # 2: US Capitol Hit by Massive Dark Web Cyber Attack - Newsweek

00:27:40 - Story # 2b: ‘I’m a black NAZI!’: NC GOP nominee for governor made dozens of disturbing comments on porn forum

00:35:57 - Story # 3: NIST proposes barring some of the most nonsensical password rules

00:47:01 - Story # 3b: Why Two-Factor Authentication Is So Important - Teen Vogue

00:54:04 - Story # 4: Hacker plants false memories in ChatGPT to steal user data in perpetuity

01:00:42 - Story # 5: Millions of Vehicles Could Be Hacked and Tracked Thanks to a Simple Website Bug

01:02:54 - Story # 6: Massive E-Learning Platform Udemy Gave Teachers a Gen AI ‘Opt-Out Window’. It’s Already Over.

(00:00) - PreShow Banter™ — Cast of Special Characters
(06:37) - BHIS - Talkin' Bout [infosec] News 2024-09-30
(08:06) - Story # 1: CUPS flaws enable Linux remote code execution, but there’s a catch
(23:39) - Story # 2: US Capitol Hit by Massive Dark Web Cyber Attack - Newsweek
(27:40) - Story # 2b: ‘I’m a black NAZI!’: NC GOP nominee for governor made dozens of disturbing comments on porn forum
(35:56) - Story # 3: NIST proposes barring some of the most nonsensical password rules
(47:00) - Story # 3b: Why Two-Factor Authentication Is So Important - Teen Vogue
(54:03) - Story # 4: Hacker plants false memories in ChatGPT to steal user data in perpetuity
(01:00:42) - Story # 5: Millions of Vehicles Could Be Hacked and Tracked Thanks to a Simple Website Bug
(01:02:53) - Story # 6: Massive E-Learning Platform Udemy Gave Teachers a Gen AI 'Opt-Out Window'. It's Already Over.

2024-09-23 - Plane Talk

Black Hills Information Security — Thu, 26 Sep 2024 12:00:00 -0400

00:00 - PreShow Banter™ — Plane Talk

05:50 - BHIS - Talkin’ Bout [infosec] News 2024-09-23

06:16 - A SANS Difference Maker Award Finalist

09:47 - Story # 1: Pagers attack brings to life long-feared supply chain threat

24:08 - Story # 2: Recaptcha Phish - John Hammond

25:49 - Story # 2b: Clever ‘GitHub Scanner’ campaign abusing repos to push malware

30:05 - Story # 3: Lazarus Group Targets Developers in Fresh VMConnect Campaign

35:22 - Story # 4: LinkedIn Addresses User Data Collection for AI Training

37:40 - Story # 5: Disney ditching Slack after massive July data breach

41:42 - Story # 6: FTC exposes massive surveillance of kids, teens by social media giants

51:35 - Story # 7: Kaspersky deletes itself, installs UltraAV antivirus without warning

(00:00) - PreShow Banter™ — Plane Talk
(05:49) - BHIS - Talkin' Bout [infosec] News 2024-09-23
(06:15) - A SANS Difference Maker Award Finalist
(09:46) - Story # 1: Pagers attack brings to life long-feared supply chain threat
(24:08) - Story # 2: Recaptcha Phish - John Hammond
(25:49) - Story # 2b: Clever 'GitHub Scanner' campaign abusing repos to push malware
(30:05) - Story # 3: Lazarus Group Targets Developers in Fresh VMConnect Campaign
(35:22) - Story # 4: LinkedIn Addresses User Data Collection for AI Training
(37:39) - Story # 5: Disney ditching Slack after massive July data breach
(41:42) - Story # 6: FTC exposes massive surveillance of kids, teens by social media giants
(51:35) - Story # 7: Kaspersky deletes itself, installs UltraAV antivirus without warning

2024-09-16 - Pour Over News

Black Hills Information Security — Wed, 18 Sep 2024 12:00:00 -0400

00:00 - PreShow Banter™ — Pour Over News

06:01 - BHIS - Talkin’ Bout [infosec] News 2024-09-16

07:14 - Story # 1: Fortinet confirms data breach after hacker claims to steal 440GB of files

15:37 - Story # 2: Snowflake slams ‘more MFA’ button again – months after Ticketmaster, Santander breaches

21:30 - Story # 3: Omnipresent AI cameras will ensure good behavior, says Larry Ellison

28:11 - Story # 4: Mastercard bolsters threat intelligence capabilities with $2.65 billion deal for Recorded Future

34:27 - Story # 5: Cyber insurance set for explosive growth

40:20 - Story # 6: 23andMe will pay $30 million to settle 2023 data breach lawsuit

45:25 - Story # 7: Google faces EU investigation over AI data compliance

50:35 - Story # 8: Rogue WHOIS server gives researcher superpowers no one should ever have

(00:00) - PreShow Banter™ — Pour Over News
(06:01) - BHIS - Talkin' Bout [infosec] News 2024-09-16
(07:14) - Story # 1: Fortinet confirms data breach after hacker claims to steal 440GB of files
(15:36) - Story # 2: Snowflake slams 'more MFA' button again – months after Ticketmaster, Santander breaches
(21:29) - Story # 3: Omnipresent AI cameras will ensure good behavior, says Larry Ellison
(28:11) - Story # 4: Mastercard bolsters threat intelligence capabilities with $2.65 billion deal for Recorded Future
(34:27) - Story # 5: Cyber insurance set for explosive growth
(40:19) - Story # 6: 23andMe will pay $30 million to settle 2023 data breach lawsuit
(45:24) - Story # 7: Google faces EU investigation over AI data compliance
(50:35) - Story # 8: Rogue WHOIS server gives researcher superpowers no one should ever have

SPECIAL PRESENTATION: Backdoors & Breaches Live

Black Hills Information Security — Mon, 16 Sep 2024 01:00:00 -0400

00:00 - Introduction

01:22 - The Scenario

02:50 - First Steps

03:48 - Endpoint Analysis Roll

04:22 - Logon Scripts Were installed

05:09 - I.R. Team Introductions

07:17 - Second Step

10:32 - Network Threat Hunting Roll

11:36 - Third Step

15:12 - Anyway Here’s Firewall Roll

15:43 - Fourth Step

18:26 - SIEM Roll

19:41 - Fifth Step

20:47 - UEBA Roll

21:19 - Senario Recap

22:20 - Senario Plausibility?

25:51 - Wrap-up Takeaways

(00:00) - Introduction
(01:21) - The Scenario
(02:50) - First Steps
(03:47) - Endpoint Analysis Roll
(04:21) - Logon Scripts Were installed
(05:09) - I.R. Team Introductions
(07:16) - Second Step
(10:32) - Network Threat Hunting Roll
(11:36) - Third Step
(15:12) - Anyway Here's Firewall Roll
(15:42) - Fourth Step
(18:26) - SIEM Roll
(19:41) - Fifth Step
(20:47) - UEBA Roll
(21:18) - Senario Recap
(22:19) - Senario Plausibility?
(25:50) - Wrap-up Takeaways

2024-09-09 - More Chicken Related Crimes

Black Hills Information Security — Wed, 11 Sep 2024 12:00:00 -0400

00:00 - PreShow Banter™ — Revenge of the Nerds / More Chicken Related Crimes

05:19 - N.Y. Official Charged With Taking Money, Travel and Poultry to Aid China

09:23 - BHIS - Talkin’ Bout [infosec] News 2024-09-09

09:50 - Story # 1: YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

20:35 - Story # 2: Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database

25:24 - Story # 3: California legislature passes sweeping AI safety bill

38:02 - Story # 4: Brain Cipher claims attack on Olympic venue, promises 300 GB data leak

41:59 - Story # 5: How Navy chiefs conspired to get themselves illegal warship Wi-Fi

42:45 - Story # 5b: After seeing Wi-Fi network named “STINKY,” Navy found hidden Starlink dish on US warship

49:18 - Story # 6: Researchers say a bug let them add fake pilots to rosters used for TSA checks

51:32 - Story # 7: Durex India spilled customers’ private order data

54:53 - Story # 8: City of Columbus Sues Researcher Who Disclosed Impact of Ransomware Attack

(00:00) - PreShow Banter™ — Revenge of the Nerds / More Chicken Related Crimes
(05:19) - N.Y. Official Charged With Taking Money, Travel and Poultry to Aid China
(09:23) - BHIS - Talkin' Bout [infosec] News 2024-09-09
(09:50) - Story # 1: YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel
(20:34) - Story # 2: Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database
(25:23) - Story # 3: California legislature passes sweeping AI safety bill
(38:02) - Story # 4: Brain Cipher claims attack on Olympic venue, promises 300 GB data leak
(41:59) - Story # 5: How Navy chiefs conspired to get themselves illegal warship Wi-Fi
(42:44) - Story # 5b: After seeing Wi-Fi network named “STINKY,” Navy found hidden Starlink dish on US warship
(49:18) - Story # 6: Researchers say a bug let them add fake pilots to rosters used for TSA checks
(51:32) - Story # 7: Durex India spilled customers’ private order data
(54:53) - Story # 8: City of Columbus Sues Researcher Who Disclosed Impact of Ransomware Attack

2024-08-26 - Move to Signal

Black Hills Information Security — Thu, 29 Aug 2024 10:58:20 -0400

00:00 - PreShow Banter™ — Move to Signal

03:47 - BHIS - Talkin’ Bout [infosec] News 2024-08-26

04:37 - Story # 1: Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance

11:03 - Story # 1b: Moxie on X.com

23:17 - Story # 2: Unveiling “sedexp”: A Stealthy Linux Malware Exploiting udev Rules

29:39 - Story # 3: Seattle airport ‘possible cyberattack’ snarls travel yet again

32:42 - Story # 4: Iran named as source of Trump campaign phish, leaks

38:53 - Story # 5: Man who hacked Hawaii state registry to forge his own death certificate sentenced to 81 months

44:11 - Story # 6: Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide

47:26 - Story # 7: New ‘ALBeast’ Misconfiguration Exposes Weakness in AWS Application Load Balancer

48:52 - Story # 8: “We will hold them accountable”: General Motors sued for selling customer driving data to third parties

(00:00) - PreShow Banter™ — Move to Signal
(03:47) - BHIS - Talkin' Bout [infosec] News 2024-08-26
(04:37) - Story # 1: Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance
(11:03) - Story # 1b: Moxie on X.com
(23:17) - Story # 2: Unveiling "sedexp": A Stealthy Linux Malware Exploiting udev Rules
(29:39) - Story # 3: Seattle airport 'possible cyberattack' snarls travel yet again
(32:42) - Story # 4: Iran named as source of Trump campaign phish, leaks
(38:52) - Story # 5: Man who hacked Hawaii state registry to forge his own death certificate sentenced to 81 months
(44:10) - Story # 6: Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide
(47:25) - Story # 7: New 'ALBeast' Misconfiguration Exposes Weakness in AWS Application Load Balancer
(48:51) - Story # 8: “We will hold them accountable”: General Motors sued for selling customer driving data to third parties

2024-08-19 Nine Years for Chicken Wings

Black Hills Information Security — Wed, 21 Aug 2024 12:00:00 -0400

00:00:00 - PreShow Banter™ — Nine Years for Chicken Wings

00:08:19 - BHIS - Talkin’ Bout [infosec] News 2024-08-19

00:09:03 - Story # 1: NationalPublicData.com Hack Exposes a Nation’s Data

00:18:17 - Story # 1b: National Public Data Published Its Own Passwords

00:25:01 - Story # 2: RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks

00:26:52 - Story # 3: T-Mobile fined $60 million for failing to stop data breaches

00:34:03 - Story # 4: Massive Cyber Attack On AWS Targets 230 Million Unique Cloud Environments

00:45:43 - Story # 5: The US wants to use facial recognition to identify migrant children as they age

00:54:16 - Story # 6: Six ransomware gangs behind over 50% of 2024 attacks

00:59:56 - Story # 7: US accuses man of being ‘elite’ ransomware pioneer they’ve hunted for years

01:01:57 - Rinsed: From Cartels to Crypto: How the Tech Industry Washes Money for the World’s Deadliest Crooks

(00:00) - PreShow Banter™ — Nine Years for Chicken Wings
(08:19) - BHIS - Talkin' Bout [infosec] News 2024-08-19
(09:02) - Story # 1: NationalPublicData.com Hack Exposes a Nation’s Data
(18:17) - Story # 1b: National Public Data Published Its Own Passwords
(25:01) - Story # 2: RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks
(26:52) - Story # 3: T-Mobile fined $60 million for failing to stop data breaches
(34:02) - Story # 4: Massive Cyber Attack On AWS Targets 230 Million Unique Cloud Environments
(45:42) - Story # 5: The US wants to use facial recognition to identify migrant children as they age
(54:16) - Story # 6: Six ransomware gangs behind over 50% of 2024 attacks
(59:55) - Story # 7: US accuses man of being 'elite' ransomware pioneer they've hunted for years
(01:01:56) - Rinsed: From Cartels to Crypto: How the Tech Industry Washes Money for the World's Deadliest Crooks

2024-08-12 — Scotty's Pizza (Not Sponsored)

Black Hills Information Security — Wed, 14 Aug 2024 11:56:42 -0400

00:00 - PreShow Banter™ — Scotty’s Pizza (Not Sponsored)

03:38 - BHIS - Talkin’ Bout [infosec] News 2024-08-12

03:59 - Hacker Summer Camp Report 2024

08:56 - Story # 1: ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

14:26 - Story # 2: Black Hat USA 2024, DEF CON 32 attendees treated like children – or criminals – with invasive hotel room checks

29:49 - Story # 3: DEF CON Badge Maker Pulled Off Stage Amid Claims of Non-Payment and Failed Work

30:06 - New raspberry pi chip in badge

33:31 - Story # 4: Exploit released for Cisco SSM bug allowing admin password changes

34:12 - Story # 5: 0.0.0.0 Day: Exploiting Localhost APIs From the Browser

38:02 - Story # 6: Intelligence bill would elevate ransomware to a terrorist threat

44:36 - Story # 6b: Proposed bill would block large ransomware payments by financial institutions

46:26 - Story # 6c: Report shows decreased ransomware payments

54:26 - Story # 7: After global IT meltdown, CrowdStrike courts hackers with action figures and gratitude

55:12 - Story # 8: CrowdStrike pursuing deal to buy patch management specialist Action1

57:24 - Story # 9: Microsoft punches back at Delta Air Lines and its legal threats

(00:00) - PreShow Banter™ — Scotty's Pizza (Not Sponsored)
(03:38) - BHIS - Talkin' Bout [infosec] News 2024-08-12
(03:59) - Hacker Summer Camp Report 2024
(08:55) - Story # 1: ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections
(14:25) - Story # 2: Black Hat USA 2024, DEF CON 32 attendees treated like children – or criminals – with invasive hotel room checks
(29:49) - Story # 3: DEF CON Badge Maker Pulled Off Stage Amid Claims of Non-Payment and Failed Work
(30:05) - New raspberry pi chip in badge
(33:31) - Story # 4: Exploit released for Cisco SSM bug allowing admin password changes
(34:11) - Story # 5: 0.0.0.0 Day: Exploiting Localhost APIs From the Browser
(38:02) - Story # 6: Intelligence bill would elevate ransomware to a terrorist threat
(44:35) - Story # 6b: Proposed bill would block large ransomware payments by financial institutions
(46:26) - Story # 6c: Report shows decreased ransomware payments
(54:26) - Story # 7: After global IT meltdown, CrowdStrike courts hackers with action figures and gratitude
(55:11) - Story # 8: CrowdStrike pursuing deal to buy patch management specialist Action1
(57:24) - Story # 9: Microsoft punches back at Delta Air Lines and its legal threats

2024-08-05 - What's the f_____

Black Hills Information Security — Tue, 06 Aug 2024 17:00:00 -0400

00:00 - PreShow Banter™ — What’s the f___

03:34 - BHIS - Talkin’ Bout [infosec] News 2024-08-05

06:57 - Story # 1: Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

23:57 - Story # 2: Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say

36:47 - Story # 3: Eavesdropping on HDMI cables can reveal computer screen’s content

37:43 - Story # 3b Hak5 Screen Crab

39:18 - Story # 4: Microsoft says massive Azure outage was caused by DDoS attack

43:31 - Story # 5: CrowdStrike says it’s not to blame for Delta’s days-long outage

55:34 - Story # 6: CrowdStrike sued by investors over massive global IT outage

(00:00) - PreShow Banter™ — What's the f___
(03:34) - BHIS - Talkin' Bout [infosec] News 2024-08-05
(06:57) - Story # 1: Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails
(23:57) - Story # 2: Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say
(36:47) - Story # 3: Eavesdropping on HDMI cables can reveal computer screen’s content
(37:43) - Story # 3b Hak5 Screen Crab
(39:18) - Story # 4: Microsoft says massive Azure outage was caused by DDoS attack
(43:31) - Story # 5: CrowdStrike says it’s not to blame for Delta’s days-long outage
(55:34) - Story # 6: CrowdStrike sued by investors over massive global IT outage

2024-07-29 - Microsoft Sad Face

Black Hills Information Security — Wed, 31 Jul 2024 12:00:00 -0400

00:00 - PreShow Banter™ — Microsoft Sad Face

02:13 - BHIS - Talkin’ Bout [infosec] News 2024-07-29

03:08 - Story # 1: Fake CrowdStrike repair manual pushes new infostealer malware

15:26 - Story # 1b: 83-year-old man found safe a week after going missing when CrowdStrike outage canceled flight

20:39 - Story # 2: Multifactor Authentication Is Not Enough to Protect Cloud Data

38:59 - Graphrunner

47:19 - Story # 3: Data pilfered from Pentagon IT supplier Leidos

57:57 - Story # 4: How a North Korean Fake IT Worker Tried to Infiltrate Us

(00:00) - PreShow Banter™ — Microsoft Sad Face
(02:13) - BHIS - Talkin' Bout [infosec] News 2024-07-29
(03:08) - Story # 1: Fake CrowdStrike repair manual pushes new infostealer malware
(15:26) - Story # 1b: 83-year-old man found safe a week after going missing when CrowdStrike outage canceled flight
(20:39) - Story # 2: Multifactor Authentication Is Not Enough to Protect Cloud Data
(38:59) - Graphrunner
(47:19) - Story # 3: Data pilfered from Pentagon IT supplier Leidos
(57:57) - Story # 4: How a North Korean Fake IT Worker Tried to Infiltrate Us

2024-07-24 - CrowdStroke Memes

Black Hills Information Security — Wed, 24 Jul 2024 12:00:00 -0400

00:00 - PreShow Banter™ — CrowdStroke Memes

05:59 - BHIS - Talkin’ Bout [infosec] News 2024-07-22

07:01 - Story # 1: A Windows version from 1992 is saving Southwest’s butt right now

07:36 - Crowdstrike Global Outage - BHIS - Talkin’ Bout [infosec] #News

09:48 - Story # 1b: CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft

12:13 - Story # 1c: Let’s blame the dev who pressed “Deploy”

17:23 - Figure 1

22:14 - Story # 2: DHS Has a DoS Robot to Disable Internet of Things ‘Booby Traps’ Inside Homes

25:58 - Story # 3: Notorious Hacker Kingpin ‘Tank’ Is Finally Going to Prison

28:08 - Story # 4: UK Police Arrest Suspect in MGM Ransomware Attack

30:49 - Story # 5: Russians plead guilty to involvement in LockBit ransomware attacks

33:24 - Story # 6: DHS watchdog rebukes CISA and law enforcement training center for failing to protect data

38:32 - Story # 7: Yacht giant MarineMax data breach impacts over 123,000 people

40:38 - Story # 8: Sizable Chunk of SEC Charges Against SolarWinds Tossed Out of Court

47:14 - Story # 9: The US Supreme Court Kneecapped US Cyber Strategy

52:12 - Story # 10: War Thunder does it again, this time with classified documents relating to 3 Russian tanks

(00:00) - PreShow Banter™ — CrowdStroke Memes
(05:59) - BHIS - Talkin' Bout [infosec] News 2024-07-22
(07:01) - Story # 1: A Windows version from 1992 is saving Southwest’s butt right now
(07:36) - Crowdstrike Global Outage - BHIS - Talkin' Bout [infosec] #News
(09:48) - Story # 1b: CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft
(12:13) - Story # 1c: Let's blame the dev who pressed "Deploy"
(17:23) - Figure 1
(22:14) - Story # 2: DHS Has a DoS Robot to Disable Internet of Things ‘Booby Traps’ Inside Homes
(25:58) - Story # 3: Notorious Hacker Kingpin ‘Tank’ Is Finally Going to Prison
(28:08) - Story # 4: UK Police Arrest Suspect in MGM Ransomware Attack
(30:49) - Story # 5: Russians plead guilty to involvement in LockBit ransomware attacks
(33:24) - Story # 6: DHS watchdog rebukes CISA and law enforcement training center for failing to protect data
(38:32) - Story # 7: Yacht giant MarineMax data breach impacts over 123,000 people
(40:38) - Story # 8: Sizable Chunk of SEC Charges Against SolarWinds Tossed Out of Court
(47:14) - Story # 9: The US Supreme Court Kneecapped US Cyber Strategy
(52:12) - Story # 10: War Thunder does it again, this time with classified documents relating to 3 Russian tanks

2024-07-22 - Crowdstrike Global Outage

Black Hills Information Security — Mon, 22 Jul 2024 00:00:00 -0400

The outage of the decade!

2024-07-18 - Absolute Madmen

Black Hills Information Security — Thu, 18 Jul 2024 15:39:31 -0400

00:00 - PreShow Banter™ — Absolute Madmen

02:28 - BHIS - Talkin’ Bout [infosec] News 2024-07-15

03:18 - Wi-Fi Forge

07:31 - Story # 1: CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

22:39 - Story # 2: AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach

33:35 - Story # 3: FTC study finds ‘dark patterns’ used by a majority of subscription apps and websites

38:48 - Story # 4: Club Penguin fans breached Disney Confluence server, stole 2.5GB of data

41:52 - Story # 5: Heritage Foundation Exec Threatens ‘Gay Furry Hackers’ in Unhinged Texts

47:51 - Story # 6: German Navy to replace aging 8-inch floppy drives with an emulated solution for its anti-submarine frigates

50:14 - Story # 7: 1.4 GB NSA Data Leaked Online – Email Address, Phone Number & Gov Classified Data Exposed

53:56 - Story # 8: Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages

(00:00) - PreShow Banter™ — Absolute Madmen
(02:28) - BHIS - Talkin' Bout [infosec] News 2024-07-15
(03:18) - Wi-Fi Forge
(07:31) - Story # 1: CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
(22:39) - Story # 2: AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach
(33:35) - Story # 3: FTC study finds ‘dark patterns’ used by a majority of subscription apps and websites
(38:48) - Story # 4: Club Penguin fans breached Disney Confluence server, stole 2.5GB of data
(41:52) - Story # 5: Heritage Foundation Exec Threatens ‘Gay Furry Hackers’ in Unhinged Texts
(47:51) - Story # 6: German Navy to replace aging 8-inch floppy drives with an emulated solution for its anti-submarine frigates
(50:14) - Story # 7: 1.4 GB NSA Data Leaked Online – Email Address, Phone Number & Gov Classified Data Exposed
(53:56) - Story # 8: Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages

2024-07-08 – A Bunch of Lunatics

Black Hills Information Security — Wed, 10 Jul 2024 00:00:00 -0400

00:00 - PreShow Banter™ — A Bunch of Lunatics

05:09 - BHIS - Talkin’ Bout [infosec] News 2024-07-08

08:41 - Story # 1: Europol takes down 593 Cobalt Strike servers used by cybercriminals

09:54 - Story # 1b: National Crime Agency leads international operation to degrade illegal versions of Cobalt Strike

15:17 - Story # 2: ‘RockYou2024’: Nearly 10 billion passwords leaked online

22:12 - Story # 3: Ticketmaster Breach: ShinyHunters Leak 440K Taylor Swift Eras Tour Ticket Data

24:20 - Story # 3b: Hackers reverse-engineer Ticketmaster’s barcode system to unlock resales on other platforms

27:41 - Story # 4: US Supreme Court ruling will likely cause cyber regulation chaos

39:39 - Story # 5: California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition

41:13 - Story # 5b: Senator Scott Wiener

43:45 - Story # 6: OpenAI Did Not Disclose 2023 Breach to Feds, Public: Report

53:10 - Story # 7: Microsoft’s Midnight Blizzard source code breach also impacted federal agencies

55:27 - Story # 8: Japan’s Government Finally Stops Using Floppy Disks

57:48 - Story # 9: This smart toilet paper monitor tells you when you need a new roll

58:50 - Story # 10: Twilio says hackers identified cell phone numbers of two-factor app Authy users

(00:00) - PreShow Banter™ — A Bunch of Lunatics
(05:09) - BHIS - Talkin' Bout [infosec] News 2024-07-08
(08:41) - Story # 1: Europol takes down 593 Cobalt Strike servers used by cybercriminals
(09:54) - Story # 1b: National Crime Agency leads international operation to degrade illegal versions of Cobalt Strike
(15:17) - Story # 2: ‘RockYou2024’: Nearly 10 billion passwords leaked online
(22:12) - Story # 3: Ticketmaster Breach: ShinyHunters Leak 440K Taylor Swift Eras Tour Ticket Data
(24:20) - Story # 3b: Hackers reverse-engineer Ticketmaster’s barcode system to unlock resales on other platforms
(27:41) - Story # 4: US Supreme Court ruling will likely cause cyber regulation chaos
(39:39) - Story # 5: California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition
(41:13) - Story # 5b: Senator Scott Wiener
(43:45) - Story # 6: OpenAI Did Not Disclose 2023 Breach to Feds, Public: Report
(53:10) - Story # 7: Microsoft’s Midnight Blizzard source code breach also impacted federal agencies
(55:27) - Story # 8: Japan's Government Finally Stops Using Floppy Disks
(57:48) - Story # 9: This smart toilet paper monitor tells you when you need a new roll
(58:50) - Story # 10: Twilio says hackers identified cell phone numbers of two-factor app Authy users

2024-07-01 - Ice Cream Season

Black Hills Information Security — Wed, 03 Jul 2024 12:00:00 -0400

00:00 - PreShow Banter™ — Ice Cream Season

07:22 - BHIS - Talkin’ Bout [infosec] News 2024-07-01

07:48 - Story # 1: TeamViewer’s corporate network was breached in alleged APT hack

09:11 - Story # 1b: TeeamViewer Security Update – June 28, 2024, 12:10 PM CEST

16:33 - Story # 2: Supreme Court orders new look at Texas, Florida social media laws

21:32 - Story # 3: New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

24:52 - Story # 4: CISA: Most critical open source projects not using memory safe code

40:03 - Story # 5: Exploit for critical Fortra FileCatalyst Workflow SQLi flaw released

42:35 - Story # 6: South Korean telecom company attacks customers with malware — over 600,000 torrent users report missing files, strange folders, and disabled PCs

49:24 - Story # 7: Drone As First Responder Programs Are Swarming Across the United States

55:22 - GRC Rapid Fire

(00:00) - PreShow Banter™ — Ice Cream Season
(07:22) - BHIS - Talkin' Bout [infosec] News 2024-07-01
(07:48) - Story # 1: TeamViewer's corporate network was breached in alleged APT hack
(09:11) - Story # 1b: TeeamViewer Security Update – June 28, 2024, 12:10 PM CEST
(16:33) - Story # 2: Supreme Court orders new look at Texas, Florida social media laws
(21:32) - Story # 3: New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems
(24:52) - Story # 4: CISA: Most critical open source projects not using memory safe code
(40:03) - Story # 5: Exploit for critical Fortra FileCatalyst Workflow SQLi flaw released
(42:35) - Story # 6: South Korean telecom company attacks customers with malware — over 600,000 torrent users report missing files, strange folders, and disabled PCs
(49:24) - Story # 7: Drone As First Responder Programs Are Swarming Across the United States
(55:22) - GRC Rapid Fire

2024-06-24 - Life is a Highway

Black Hills Information Security — Wed, 26 Jun 2024 12:00:00 -0400

00:00 - PreShow Banter™ — Life is a Highway

04:28 - BHIS - Talkin’ Bout [infosec] News 2024-06-24

05:30 - Story # 1: Colorado Privacy Act Amended To Include Biometric Data Provisions

14:18 - Story # 2: Scathing report on Medibank cyberattack highlights unenforced MFA

24:30 - Story # 3: CDK suffered another data breach as it was attempting to recover

35:08 - Story # 4: LockBit claims the hack of the US Federal Reserve

40:00 - Story # 5: Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers

45:36 - Story # 6: That PowerShell ‘fix’ for your root cert ‘problem’ is a malware loader in disguise

51:13 - Story # 7: US sanctions Kaspersky Lab executives, board members over ‘cooperation’ with Russia

53:23 - Story # 7b: Treasury Sanctions Kaspersky Lab Leadership in Response to Continued Cybersecurity Risks

(00:00) - PreShow Banter™ — Life is a Highway
(04:28) - BHIS - Talkin' Bout [infosec] News 2024-06-24
(05:30) - Story # 1: Colorado Privacy Act Amended To Include Biometric Data Provisions
(14:18) - Story # 2: Scathing report on Medibank cyberattack highlights unenforced MFA
(24:30) - Story # 3: CDK suffered another data breach as it was attempting to recover
(35:08) - Story # 4: LockBit claims the hack of the US Federal Reserve
(40:00) - Story # 5: Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers
(45:36) - Story # 6: That PowerShell 'fix' for your root cert 'problem' is a malware loader in disguise
(51:13) - Story # 7: US sanctions Kaspersky Lab executives, board members over ‘cooperation’ with Russia
(53:23) - Story # 7b: Treasury Sanctions Kaspersky Lab Leadership in Response to Continued Cybersecurity Risks

2024-06-17 - Recall Gets Recalled

Black Hills Information Security — Wed, 19 Jun 2024 12:00:00 -0400

00:00 - PreShow Banter™ — Hungry Hungry Hipaa

03:39 - BHIS - Talkin’ Bout [infosec] News 2024-06-17

05:40 - Story # 1: Windows security hole allows attackers to install malware via Wi-Fi — new patch plugs gaping vulnerability

16:27 - Story # 2: Microsoft’s all-knowing Recall AI feature is being delayed

25:34 - Story # 3: Here’s how Apple’s AI model tries to keep your data private

32:27 - Story # 4: New Linux malware is controlled through emojis sent from Discord

35:28 - Story # 5: Pure Storage confirms data breach after Snowflake account hack

38:44 - Story # 6: Microsoft Chose Profit Over Security and Left U.S. Government Vulnerable to Russian Hack, Whistleblower Says

(00:00) - PreShow Banter™ — Hungry Hungry Hipaa
(03:39) - BHIS - Talkin' Bout [infosec] News 2024-06-17
(05:40) - Story # 1: Windows security hole allows attackers to install malware via Wi-Fi — new patch plugs gaping vulnerability
(16:27) - Story # 2: Microsoft’s all-knowing Recall AI feature is being delayed
(25:34) - Story # 3: Here’s how Apple’s AI model tries to keep your data private
(32:27) - Story # 4: New Linux malware is controlled through emojis sent from Discord
(35:28) - Story # 5: Pure Storage confirms data breach after Snowflake account hack
(38:44) - Story # 6: Microsoft Chose Profit Over Security and Left U.S. Government Vulnerable to Russian Hack, Whistleblower Says

2024-6-13 - Recall Disaster, Ransomware and Drone Police

Black Hills Information Security — Thu, 13 Jun 2024 10:38:00 -0400

00:00 - PreShow Banter™ — Louie is Live

04:53 - BHIS - Talkin’ Bout [infosec] News 2024-06-10

07:09 - Story # 1: UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

18:39 - Story # 2: Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster.

39:02 - Story # 3: TikTok fixes zero-day bug used to hijack high-profile accounts

41:34 - Story # 4: The Age of the Drone Police Is Here

52:07 - Story # 5: London hospitals declare emergency following ransomware attack

54:45 - Story # 6: Former Senior Executive and Former Sales Manager Convicted of Selling Data on Millions of U.S. Consumers to Perpetrators of Mail Fraud Schemes

56:40 - Story # 7: FBI Kicks Hackers In The Teeth With Free 7,000 Ransomware Key Giveaway

57:32 - Story # 8: FCC OKs pilot to bolster school, library cybersecurity

(00:00) - PreShow Banter™ — Louie is Live
(04:53) - BHIS - Talkin' Bout [infosec] News 2024-06-10
(07:09) - Story # 1: UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion
(18:39) - Story # 2: Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster.
(39:02) - Story # 3: TikTok fixes zero-day bug used to hijack high-profile accounts
(41:34) - Story # 4: The Age of the Drone Police Is Here
(52:07) - Story # 5: London hospitals declare emergency following ransomware attack
(54:45) - Story # 6: Former Senior Executive and Former Sales Manager Convicted of Selling Data on Millions of U.S. Consumers to Perpetrators of Mail Fraud Schemes
(56:40) - Story # 7: FBI Kicks Hackers In The Teeth With Free 7,000 Ransomware Key Giveaway
(57:32) - Story # 8: FCC OKs pilot to bolster school, library cybersecurity

2024-06-2024 - RVs, Hackers and Poison.

Black Hills Information Security — Thu, 06 Jun 2024 14:02:22 -0400

00:00:00 - PreShow Banter™ — In an RV down by the dumpster

00:07:39 - BHIS - Talkin’ Bout [infosec] News 2024-06-03

00:09:21 - Story # 1: Ticketmaster confirms massive breach after stolen data for sale online

00:10:46 - Story # 1b: Snowflake, Cloud Storage Giant, Suffers Massive Breach: Hacker Confirms to Hudson Rock Access Through Infostealer Infection

00:13:03 - Story # 1c: Detecting and Preventing Unauthorized User Access: Instructions

00:13:42 - Story # 1d: Snowflake Denies Responsibility for Ticketmaster, Santander Breaches

00:21:21 - Story # 2: Chinese hackers hide on military and govt networks for 6 years

00:29:17 - Story # 3: Federal agency warns critical Linux vulnerability being actively exploited

00:34:19 - Story # 4: US dismantles 911 S5 botnet used for cyberattacks, arrests admin

00:39:19 - Story # 4b: How the FBI’s fake cell phone company put criminals into real jail cells

00:43:48 - Story # 5: Exploit released for maximum severity Fortinet RCE bug, patch now

00:46:09 - Story # 6: Enforcement Alert: Drinking Water Systems to Address Cybersecurity Vulnerabilities

00:54:44 - Story # 6b: Hackers attempt to poison Florida city’s water supply near Super Bowl

01:03:32 - Story # 7: GPT-4o’s Chinese token-training data is polluted by spam and porn websites

(00:00) - PreShow Banter™ — In an RV down by the dumpster
(07:39) - BHIS - Talkin' Bout [infosec] News 2024-06-03
(09:21) - Story # 1: Ticketmaster confirms massive breach after stolen data for sale online
(10:46) - Story # 1b: Snowflake, Cloud Storage Giant, Suffers Massive Breach: Hacker Confirms to Hudson Rock Access Through Infostealer Infection
(13:03) - Story # 1c: Detecting and Preventing Unauthorized User Access: Instructions
(13:42) - Story # 1d: Snowflake Denies Responsibility for Ticketmaster, Santander Breaches
(21:21) - Story # 2: Chinese hackers hide on military and govt networks for 6 years
(29:17) - Story # 3: Federal agency warns critical Linux vulnerability being actively exploited
(34:19) - Story # 4: US dismantles 911 S5 botnet used for cyberattacks, arrests admin
(39:19) - Story # 4b: How the FBI's fake cell phone company put criminals into real jail cells
(43:48) - Story # 5: Exploit released for maximum severity Fortinet RCE bug, patch now
(46:09) - Story # 6: Enforcement Alert: Drinking Water Systems to Address Cybersecurity Vulnerabilities
(54:44) - Story # 6b: Hackers attempt to poison Florida city's water supply near Super Bowl
(01:03:32) - Story # 7: GPT-4o’s Chinese token-training data is polluted by spam and porn websites

2024-05-23 - Sneaky AI Policies, Two Year Linux Backdoor and Good Ol' Fraud!

Black Hills Information Security — Thu, 23 May 2024 13:40:22 -0400

00:00 - PreShow Banter™ — Antichafing Training.

04:31 - BHIS - Talkin’ Bout [infosec] News 2024-05-20

07:12 - Story # 1: Linux maintainers were infected for 2 years by SSH-dwelling backdoor with huge reach

29:49 - Story # 2: Palo Alto Networks is buying security assets from IBM to expand customer base

36:50 - Story # 3: Charges and Seizures Brought in Fraud Scheme Aimed at Denying Revenue for Workers Associated with North Korea

43:55 - Story # 4: FCC might require telecoms to report on securing internet’s BGP technology

52:45 - Story # 5: Slack under attack over sneaky AI training policy

(00:00) - PreShow Banter™ — Antichafing Training.
(04:31) - BHIS - Talkin' Bout [infosec] News 2024-05-20
(07:12) - Story # 1: Linux maintainers were infected for 2 years by SSH-dwelling backdoor with huge reach
(29:49) - Story # 2: Palo Alto Networks is buying security assets from IBM to expand customer base
(36:50) - Story # 3: Charges and Seizures Brought in Fraud Scheme Aimed at Denying Revenue for Workers Associated with North Korea
(43:55) - Story # 4: FCC might require telecoms to report on securing internet's BGP technology
(52:45) - Story # 5: Slack under attack over sneaky AI training policy

2024-05-16 - Hackers Target Children, FBI Surveillance and RSA Cookies?

Black Hills Information Security — Thu, 16 May 2024 12:36:41 -0400

00:00 - PreShow Banter™ — World Class RSA Cookies

04:49 - BHIS - Talkin’ Bout [infosec] News 2024-05-14

06:33 - Story # 1: Zscaler takes “test environment” offline after rumors of a breach

18:48 - Story # 2: Okta’s security chief on the company’s own cyberattack and how the ‘battleground’ has shifted

43:36 - Story # 3: Leaked FBI email stresses need for warrantless surveillance of Americans

48:46 - Story # 4: Despite big tech lobbying, Maryland passes two internet privacy bills

52:26 - Story # 4b: The Anxious Generation

53:46 - Story # 5:Hackers are now targeting the children of corporate executives in elaborate ransomware attacks

(00:00) - PreShow Banter™ — World Class RSA Cookies
(04:49) - BHIS - Talkin' Bout [infosec] News 2024-05-14
(06:33) - Story # 1: Zscaler takes "test environment" offline after rumors of a breach
(18:48) - Story # 2: Okta’s security chief on the company’s own cyberattack and how the ‘battleground’ has shifted
(43:36) - Story # 3: Leaked FBI email stresses need for warrantless surveillance of Americans
(48:46) - Story # 4: Despite big tech lobbying, Maryland passes two internet privacy bills
(52:26) - Story # 4b: The Anxious Generation
(53:46) - Story # 5:Hackers are now targeting the children of corporate executives in elaborate ransomware attacks

2024-05-07 - LastPass Goes Independent, Hacker Sentenced, Vulnerabilities Among us.

Black Hills Information Security — Wed, 08 May 2024 12:00:00 -0400

00:00 - PreShow Banter™ — RSA Power Moves

08:14 - BHIS - Talkin’ Bout [infosec] News 2024-05-06

09:49 - Story # 1: Shortridge Makes Sense of the 2024 Verizon DBIR

15:04 - Story # 2: A recent security incident involving Dropbox Sign

20:30 - Story # 3: Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover

28:40 - Story # 4: Millions of Docker repos found pushing malware, phishing sites

32:53 - Story # 5: 1,400 GitLab Servers Impacted by Exploited Vulnerability

42:07 - Story # 6: LastPass goes independent over a year after serious breaches

50:16 - Cyber Security Basics for Muggles & Minions with Ashley and Chris

50:40 - Story # 7: Ukrainian REvil Hacker Sentenced to 13 Years and Ordered to Pay $16 Million

54:12 - Story # 8: Lockbit’s seized site comes alive to tease new police announcements

56:27 - Story # 9: Systemd v256 Introduces run0: A Safer Alternative to sudo

(00:00) - PreShow Banter™ — RSA Power Moves
(08:14) - BHIS - Talkin' Bout [infosec] News 2024-05-06
(09:49) - Story # 1: Shortridge Makes Sense of the 2024 Verizon DBIR
(15:04) - Story # 2: A recent security incident involving Dropbox Sign
(20:30) - Story # 3: Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover
(28:40) - Story # 4: Millions of Docker repos found pushing malware, phishing sites
(32:53) - Story # 5: 1,400 GitLab Servers Impacted by Exploited Vulnerability
(42:07) - Story # 6: LastPass goes independent over a year after serious breaches
(50:16) - Cyber Security Basics for Muggles & Minions with Ashley and Chris
(50:40) - Story # 7: Ukrainian REvil Hacker Sentenced to 13 Years and Ordered to Pay $16 Million
(54:12) - Story # 8: Lockbit's seized site comes alive to tease new police announcements
(56:27) - Story # 9: Systemd v256 Introduces run0: A Safer Alternative to sudo

2024-04-29 - Hack All The Things!

Black Hills Information Security — Wed, 01 May 2024 12:00:00 -0400

00:00 - BHIS - Talkin’ Bout [infosec] News 2024-04-29

02:33 - Story # 1: Cyber Hygiene Helps Organizations Mitigate Ransomware-Related Vulnerabilities

10:38 - Story # 2: ‘Admin’ and ‘12345’ banned from being used as passwords in UK crackdown on cyber attacks

16:34 - Story # 3: Maximum severity Flowmon bug has a public exploit, patch now

21:06 - Story # 3b: CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon

22:45 - Story # 4:GitHub comments abused to push malware via Microsoft repo URLs

30:52 - Story # 5: Security bugs in popular phone-tracking app iSharing exposed users’ precise locations

36:47 - Story # 6: Biden signs bill criticized as “major expansion of warrantless surveillance”

49:38 - Story # 7: ChatGPT’s hallucinations draw EU privacy complaint

57:46 - Story # 8: Sweden’s liquor shelves to run empty this week due to ransomware attack

(00:00) - BHIS - Talkin' Bout [infosec] News 2024-04-29
(02:33) - Story # 1: Cyber Hygiene Helps Organizations Mitigate Ransomware-Related Vulnerabilities
(10:38) - Story # 2: 'Admin' and '12345' banned from being used as passwords in UK crackdown on cyber attacks
(16:34) - Story # 3: Maximum severity Flowmon bug has a public exploit, patch now
(21:06) - Story # 3b: CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon
(22:45) - Story # 4:GitHub comments abused to push malware via Microsoft repo URLs
(30:52) - Story # 5: Security bugs in popular phone-tracking app iSharing exposed users’ precise locations
(36:47) - Story # 6: Biden signs bill criticized as “major expansion of warrantless surveillance”
(49:38) - Story # 7: ChatGPT’s hallucinations draw EU privacy complaint
(57:46) - Story # 8: Sweden's liquor shelves to run empty this week due to ransomware attack

2024-04-24 - Exploits, Breaches and, Lawsuits!

Black Hills Information Security — Wed, 24 Apr 2024 11:30:35 -0400

00:00 - PreShow Banter™ — A Parent Process

03:01 - BHIS - Talkin’ Bout [infosec] News 2024-04-22

04:13 - Story # 1: Exploit code for Palo Alto Networks zero-day now public

07:44 - Story # 1b: (Timeline) Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)

23:22 - Story # 2: MGM says FTC can’t possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time

31:37 - Story # 3: MITRE was breached through Ivanti zero-day vulnerabilities

32:27 - Story # 4: Cisco Integrated Management Controller CLI Command Injection Vulnerability

41:20 - Story # 5: Cisco Duo’s Multifactor Authentication Service Breached

46:01 - Story # 6: DevSecOps security practices are doggone disastrous

54:57 - Story # 7: FYI: This site claims to have harvested 4B+ Discord chats, today all yours for a price

(00:00) - PreShow Banter™ — A Parent Process
(03:01) - BHIS - Talkin' Bout [infosec] News 2024-04-22
(04:13) - Story # 1: Exploit code for Palo Alto Networks zero-day now public
(07:44) - Story # 1b: (Timeline) Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)
(23:22) - Story # 2: MGM says FTC can't possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time
(31:37) - Story # 3: MITRE was breached through Ivanti zero-day vulnerabilities
(32:27) - Story # 4: Cisco Integrated Management Controller CLI Command Injection Vulnerability
(41:20) - Story # 5: Cisco Duo's Multifactor Authentication Service Breached
(46:01) - Story # 6: DevSecOps security practices are doggone disastrous
(54:57) - Story # 7: FYI: This site claims to have harvested 4B+ Discord chats, today all yours for a price

2024-04-17 - SoCal Man Arrested, EPA Leaks, Net Neutrality returns?

Black Hills Information Security — Wed, 17 Apr 2024 11:56:19 -0400

00:00 - PreShow Banter™ — Retro Actions

04:48 - BHIS - Talkin’ Bout [infosec] News 2024-04-15

07:05 - Story # 1: FCC to vote on net neutrality rules on April 25

18:52 - Story # 2: “All Your Secrets Are Belong To Us” — A Delinea Secret Server AuthN/AuthZ Bypass

23:40 - Story # 2b: Delinea has cloud security incident in Thycotic Secret Server gaff

28:23 - Story # 3: CISA Releases Malware Next-Gen Analysis System for Public Use

40:36 - Story # 4: Hacker Leaks 8.5M U.S. Environmental Protection Agency (EPA) Contact Data

45:55 - Story # 5: SoCal Man Arrested on Federal Charges Alleging He Schemed to Advertise and Sell ‘Hive’ Computer Intrusion Malware

(00:00) - PreShow Banter™ — Retro Actions
(04:48) - BHIS - Talkin' Bout [infosec] News 2024-04-15
(07:05) - Story # 1: FCC to vote on net neutrality rules on April 25
(18:52) - Story # 2: “All Your Secrets Are Belong To Us” — A Delinea Secret Server AuthN/AuthZ Bypass
(23:40) - Story # 2b: Delinea has cloud security incident in Thycotic Secret Server gaff
(28:23) - Story # 3: CISA Releases Malware Next-Gen Analysis System for Public Use
(40:36) - Story # 4: Hacker Leaks 8.5M U.S. Environmental Protection Agency (EPA) Contact Data
(45:55) - Story # 5: SoCal Man Arrested on Federal Charges Alleging He Schemed to Advertise and Sell ‘Hive’ Computer Intrusion Malware

2024-04-10 - Vigilante Hackers, Data Sharing, Cybersecurity Taken Over by Computers?

Black Hills Information Security — Wed, 10 Apr 2024 10:52:58 -0400

00:00 - PreShow Banter™ — BHIS Bees Corp®

04:08 - The FUTURE IS…… Kickstarter

05:29 - BHIS - Talkin’ Bout [infosec] News 2024-04-08

06:03 - Story # 1: New draft bipartisan US federal privacy bill unveiled

11:03 - Story # 2: How To Opt Out Of GM Sharing Your Driving Data With Insurance Companies

13:04 - Story # 2b: Request a Consumer Disclosure Report

14:25 - Story # 3: Hackers Hijacked Notepad++ Plugin To Execute Malicious Code

29:19 - Story # 4: A Vigilante Hacker Took Down North Korea’s Internet. Now He’s Taking Off His Mask

46:15 - Story # 5: It’s Time to Hand Cybersecurity Over to the Computers

(00:00) - PreShow Banter™ — BHIS Bees Corp®
(04:08) - The FUTURE IS...... Kickstarter
(05:29) - BHIS - Talkin' Bout [infosec] News 2024-04-08
(06:03) - Story # 1: New draft bipartisan US federal privacy bill unveiled
(11:03) - Story # 2: How To Opt Out Of GM Sharing Your Driving Data With Insurance Companies
(13:04) - Story # 2b: Request a Consumer Disclosure Report
(14:25) - Story # 3: Hackers Hijacked Notepad++ Plugin To Execute Malicious Code
(29:19) - Story # 4: A Vigilante Hacker Took Down North Korea’s Internet. Now He’s Taking Off His Mask
(46:15) - Story # 5: It’s Time to Hand Cybersecurity Over to the Computers

2024-04-03 - Zippers, Jokes & Data Breaches

Black Hills Information Security — Wed, 03 Apr 2024 12:09:06 -0400

00:00 - PreShow Banter™ — Zippers, Jokes, & Lawyers (Not to be confused with the song "Lawyers, Guns and Money")

02:59 - BHIS - Talkin’ Bout [infosec] News 2024-04-01

03:57 - Story # 1: New Darcula phishing service targets iPhone users via iMessage

11:57 - Story # 2: Recent ‘MFA Bombing’ Attacks Targeting Apple Users

17:22 - Story # 3: Thousands of phones and routers swept into proxy service, unbeknownst to users

22:11 - Story # 4: Digital signs around Brookline are collecting data from your phone as you walk by

26:57 - Story # 5: Backdoor found in widely used Linux utility targets encrypted SSH connections

28:22 - Story # 5b: XZ Outbreak diagram

37:32 - Story # 6: Vans warns customers of data breach

40:00 - Story # 7: Worldwide Agenda Ransomware Wave Targets VMware ESXi Servers

50:32 - Story # 8: Criminals Are Weaponizing Child Abuse Imagery to Ban Discord Servers

56:41 - Story # 9: International car theft tool seized in Australia, sparking police warning

58:14 - Story # 9b: Investigation into electronic device at Utah high school raises larger concerns for police

(00:00) - PreShow Banter™ — Zippers, Jokes & Lawyers
(02:59) - BHIS - Talkin' Bout [infosec] News 2024-04-01
(03:57) - Story # 1: New Darcula phishing service targets iPhone users via iMessage
(11:57) - Story # 2: Recent ‘MFA Bombing’ Attacks Targeting Apple Users
(17:22) - Story # 3: Thousands of phones and routers swept into proxy service, unbeknownst to users
(22:11) - Story # 4: Digital signs around Brookline are collecting data from your phone as you walk by
(26:57) - Story # 5: Backdoor found in widely used Linux utility targets encrypted SSH connections
(28:22) - Story # 5b: XZ Outbreak diagram
(37:32) - Story # 6: Vans warns customers of data breach
(40:00) - Story # 7: Worldwide Agenda Ransomware Wave Targets VMware ESXi Servers
(50:32) - Story # 8: Criminals Are Weaponizing Child Abuse Imagery to Ban Discord Servers
(56:41) - Story # 9: International car theft tool seized in Australia, sparking police warning
(58:14) - Story # 9b: Investigation into electronic device at Utah high school raises larger concerns for police

2024-5-03-27 - Social Media Ban, Sold Data and Splunk w/ Graham Helton

Black Hills Information Security — Wed, 27 Mar 2024 13:54:00 -0400

00:00 - PreShow Banter™ — “Allegedly”

03:18 - BHIS - Talkin’ Bout [infosec] News 2024-03-25

08:00 - Story # 1: Cisco Completes Acquisition of Splunk

10:47 - Story # 2: General Motors Quits Sharing Driving Behavior With Data Brokers

15:27 - Story # 3: Ron DeSantis signs bill requiring parental consent for kids under 16 to hold social media accounts

24:34 - Story # 4: House passes bill to prevent the sale of personal data to foreign adversaries

28:19 - Story # 5: Unsaflok - vulnerability impacts over 3 million hotel doors

33:57 - Story # 6: Canada revisits decision to ban Flipper Zero

36:57 - Story # 7: Truck-to-truck worm could infect – and disrupt – entire US commercial fleet

42:59 - Story # 8: Cybercriminals Beta Test New Attack to Bypass AI Security

46:31 - Story # 9: Russians will no longer be able to access Microsoft cloud services, business intelligence tools

50:36 - Story # 10: New ‘Loop DoS’ Attack Impacts Hundreds of Thousands of Systems

55:05 - Story # 11: New surveillance video of man catching a flight without ticket

(00:00) - PreShow Banter™ — "Allegedly"
(03:18) - BHIS - Talkin' Bout [infosec] News 2024-03-25
(08:00) - Story # 1: Cisco Completes Acquisition of Splunk
(10:47) - Story # 2: General Motors Quits Sharing Driving Behavior With Data Brokers
(15:27) - Story # 3: Ron DeSantis signs bill requiring parental consent for kids under 16 to hold social media accounts
(24:34) - Story # 4: House passes bill to prevent the sale of personal data to foreign adversaries
(28:19) - Story # 5: Unsaflok - vulnerability impacts over 3 million hotel doors
(33:57) - Story # 6: Canada revisits decision to ban Flipper Zero
(36:57) - Story # 7: Truck-to-truck worm could infect – and disrupt – entire US commercial fleet
(42:59) - Story # 8: Cybercriminals Beta Test New Attack to Bypass AI Security
(46:31) - Story # 9: Russians will no longer be able to access Microsoft cloud services, business intelligence tools
(50:36) - Story # 10: New 'Loop DoS' Attack Impacts Hundreds of Thousands of Systems
(55:05) - Story # 11: New surveillance video of man catching a flight without ticket

2024-03-20 - New Arms Again w/ Jay Beale of InGuardians

Black Hills Information Security — Wed, 20 Mar 2024 15:16:00 -0400

Brought to you by Antisyphon Training — https://www.antisyphontraining.com

00:00:00 - PreShow Banter™ — New Arms Again

00:03:24 - BHIS - Talkin’ Bout [infosec] News 2024-03-18

00:04:54 - Story # 1: NIST Releases Version 2.0 of Landmark Cybersecurity Framework

00:10:50 - Story # 2: The FCC has finally decreed that 25Mbps and 3Mbps are not ‘broadband’ speed

00:14:33 - Story # 3: Welcome to the 2024 Threat Detection Report

00:33:40 - Story # 4: NSA Releases Top Ten Cloud Security Mitigation Strategies

00:47:33 - Story # 5: US government agencies demand fixable ice cream machines

00:53:14 - Story # 6: Homeland Security is testing AI to help with immigration, trafficking investigations, and disaster relief

01:03:19 - Story # 7: Feds seize $1.4 million of tech support scam proceeds with the help of crypto firm

(00:00) - PreShow Banter™ — New Arms Again
(03:24) - BHIS - Talkin' Bout [infosec] News 2024-03-18
(04:54) - Story # 1: NIST Releases Version 2.0 of Landmark Cybersecurity Framework
(10:50) - Story # 2: The FCC has finally decreed that 25Mbps and 3Mbps are not ‘broadband’ speed
(14:33) - Story # 3: Welcome to the 2024 Threat Detection Report
(33:40) - Story # 4: NSA Releases Top Ten Cloud Security Mitigation Strategies
(47:33) - Story # 5: US government agencies demand fixable ice cream machines
(53:14) - Story # 6: Homeland Security is testing AI to help with immigration, trafficking investigations, and disaster relief
(01:03:19) - Story # 7: Feds seize $1.4 million of tech support scam proceeds with the help of crypto firm

2024-03-13 - International Hacking Co. Featuring: Josh Mason

Black Hills Information Security — Wed, 13 Mar 2024 12:29:00 -0400

00:00 - PreShow Banter™ — Death to Clippy

05:18 - BHIS - Talkin’ Bout [infosec] News 2024-03-11 – Featuring Josh Mason

06:58 - Story # 1: Behind the doors of a Chinese hacking company, a sordid culture fueled by influence, alcohol, and sex

13:43 - Story # 2: Top US cybersecurity agency hacked and forced to take some systems offline

23:39 - Story # 3: Microsoft admits Russian state hack still not contained. ‘This has tremendous national security implications’

30:27 - Story # 4: FBI’s 2023 Internet Crime Report

38:18 - Story # 5: QNAP warns of critical auth bypass flaw in its NAS devices

50:42 - Story # 6: Automakers Are Sharing Consumers’ Driving Behavior With Insurance Companies

(00:00) - PreShow Banter™ — Death to Clippy
(05:18) - BHIS - Talkin' Bout [infosec] News 2024-03-11 – Featuring Josh Mason
(06:58) - Story # 1: Behind the doors of a Chinese hacking company, a sordid culture fueled by influence, alcohol and sex
(13:43) - Story # 2: Top US cybersecurity agency hacked and forced to take some systems offline
(23:39) - Story # 3: Microsoft admits Russian state hack still not contained. ‘This has tremendous national security implications’
(30:27) - Story # 4: FBI's 2023 Internet Crime Report
(38:18) - Story # 5: QNAP warns of critical auth bypass flaw in its NAS devices
(50:42) - Story # 6: Automakers Are Sharing Consumers’ Driving Behavior With Insurance Companies

2024-03-06 - No Logs No Breach, I'm Good

Black Hills Information Security — Wed, 06 Mar 2024 11:17:00 -0500

A weekly Podcast with BHIS and Friends. stories. We discuss notable Infosec, and infosec-adjacent news stories.

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com/

Antisyphon Training

https://www.antisyphontraining.com/

Story # 1: Executive Order on Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern

https://www.whitehouse.gov/briefing-r...

Story # 2: A leaky database spilled 2FA codes for the world’s tech giants

https://techcrunch.com/2024/02/29/lea...

Story # 3: eBay, VMware, McAfee Sites Hijacked in Sprawling Phishing Operation

https://www.darkreading.com/applicati...

23:36 - LokiHakanin's related Post

/ sean-reilly-techopssec_8000-domains-of-tru...

Story # 4: Ivanti Connect Secure hackers hide in plain sight, evading protections

https://www.cybersecuritydive.com/new...

Story # 5: Over 100,000 Infected Repos Found on GitHub

https://apiiro.com/blog/malicious-cod...

Story # 6: Hackers backed by Russia and China are infecting SOHO routers like yours, FBI warns

https://arstechnica.com/security/2024...

(00:00) - PreShow Banter™ — Adopting Cats
(00:43) - BHIS - Talkin' Bout [infosec] News 2024-03-04
(01:40) - Story # 1: Executive Order on Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern
(08:56) - Story # 2: A leaky database spilled 2FA codes for the world’s tech giants
(20:14) - Story # 3: eBay, VMware, McAfee Sites Hijacked in Sprawling Phishing Operation
(22:37) - LokiHakanin's related Post
(31:37) - Story # 4: Ivanti Connect Secure hackers hide in plain sight, evading protections
(39:44) - Story # 5: Over 100,000 Infected Repos Found on GitHub
(48:44) - Story # 6: Hackers backed by Russia and China are infecting SOHO routers like yours, FBI warns

2024-03-01 - All of our base belong to China w/ Mike Poor

Black Hills Information Security — Fri, 01 Mar 2024 13:25:00 -0500

Story #1: Mr. Cooper leak exposes over two million customers

Story #2: ConnectWise ScreenConnect attacks deliver malware

Story #3: LockBit Infrastructure Seized by US, UK Police

Story #4: US health tech giant Change Healthcare hit by cyberattack

Story #5: The reported leak of Chinese hacking documents supports experts’ warnings about how compromised the US could be

(00:00) - PreShow Banter™ — It's a Wii Match
(05:22) - BHIS - Talkin' Bout [infosec] News 2024-02-26
(07:10) - Story # 1: Mr. Cooper leak exposes over two million customers
(17:42) - Story # 2: ConnectWise ScreenConnect attacks deliver malware
(27:49) - Story # 3: LockBit Infrastructure Seized by US, UK Police
(34:17) - Story # 4: US health tech giant Change Healthcare hit by cyberattack
(39:43) - Story # 5: The reported leak of Chinese hacking documents supports experts' warnings about how compromised the US could be
(53:24) - Story # 6: Vending machine error reveals secret face image database of college students

Talkin’ About Infosec News – 2/20/24

Black Hills Information Security — Tue, 20 Feb 2024 17:57:03 -0500

The post Talkin’ About Infosec News – 2/20/24 appeared first on Black Hills Information Security.

Talkin’ About Infosec News – 2/14/2024

Black Hills Information Security — Wed, 14 Feb 2024 12:49:59 -0500

The post Talkin’ About Infosec News – 2/14/2024 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Fashion in Oregon
(01:51) - BHIS - Talkin' Bout [infosec] News 2024-02-12
(08:54) - Story # 1: Ivanti devices hit by wave of exploits for latest security hole
(31:53) - Story # 2: Hackers Exploit Job Boards, Stealing Millions of Resumes and Personal Data
(43:15) - Story # 3: Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux Distros
(54:13) - Story # 4: Feds Want to Ban the World’s Cutest Hacking Device. Experts Say It's a ‘Scapegoat’

Talkin’ About Infosec News – 2/6/24

Black Hills Information Security — Tue, 06 Feb 2024 14:57:52 -0500

The post Talkin’ About Infosec News – 2/6/24 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — 5 Min Webcasts
(04:29) - BHIS - Talkin' Bout [infosec] News 2024-02-05
(09:06) - Story # 1: Thanksgiving 2023 security incident
(22:09) - Story # 2: AnyDesk Incident Response 5-2-2024
(34:14) - Story # 3: Finance worker pays out $25 million after video call with deepfake ‘chief financial officer’
(50:13) - Story # 4: All federal civilian agencies ordered to disconnect at-risk Ivanti products by Friday

Talkin’ About Infosec News – 1/31/2024

Black Hills Information Security — Wed, 31 Jan 2024 13:37:11 -0500

The post Talkin’ About Infosec News – 1/31/2024 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — No Hacking on Fridays
(04:33) - BHIS - Talkin' Bout [infosec] News 2024-01-29
(09:48) - Story # 1: SEC confirms X account was hacked in SIM swapping attack
(17:45) - Story # 2: MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries
(23:03) - Story # 3: Fortra warns of new critical GoAnywhere MFT auth bypass, patch now
(26:35) - Story # 4: Tesla hacked, 24 zero-days demoed at Pwn2Own Automotive 2024
(35:38) - Story # 5: Election cybersecurity director was a victim of a ‘swatting’ attack in her home
(39:44) - Story # 6: Ring will no longer allow police to request users' doorbell camera footage
(44:25) - Story # 7: Group permission misconfiguration exposes Google Kubernetes Engine clusters
(47:03) - REPRISE STORY: Mega-Breach Database Exposes 26 Billion Records
(47:50) - Story # 8: The NSA buys Americans’ internet data, newly released documents show
(56:03) - Story # 9: Privacy predictions for 2024

Talkin’ About Infosec News – 1/24/2024

Black Hills Information Security — Wed, 24 Jan 2024 10:10:03 -0500

The post Talkin’ About Infosec News – 1/24/2024 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — There's More Than Swim Meets
(01:21) - BHIS - Talkin' Bout [infosec] News 2024-01-22
(05:21) - Story # 1 : Florida bill banning youth from social media moves forward
(14:19) - Story # 2 : Microsoft network breached through password-spraying by Russia-state hackers
(21:38) - Story # 3 : This new data poisoning tool lets artists fight back against generative AI
(28:50) - Story # 4: Top 3 Priorities for CISOs in 2024
(41:37) - Story # 5 : Inside the Massive Naz.API Credential Stuffing List
(48:09) - Story # 6 : Jamf discovers new malware disguised as popular macOS apps

Talkin’ About Infosec News – 1/16/2024

Black Hills Information Security — Tue, 16 Jan 2024 14:48:40 -0500

The post Talkin’ About Infosec News – 1/16/2024 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Book-It Steak Dinners
(05:25) - BHIS - Talkin' Bout [infosec] News 2024-01-15
(08:01) - Most Offensive Con -
(08:16) - Story # 1: Linux devices are under attack by a never-before-seen worm
(21:09) - Story # 2: Hacker spins up 1 million virtual servers to illegally mine crypto
(25:47) - Story # 3: Actively exploited 0-days in Ivanti VPN are letting hackers backdoor networks
(29:33) - Podcast Self-Awareness
(32:14) - Story # 4: Hospital IT help desks targeted by sophisticated social engineering schemes

Talkin’ About Infosec News – 1/10/24

Black Hills Information Security — Wed, 10 Jan 2024 16:23:54 -0500

The post Talkin’ About Infosec News – 1/10/24 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Welcome to 2025
(03:36) - BHIS - Talkin' Bout [infosec] News 2024-01-08
(05:30) - Story # 1: Law firm that handles data breaches was hit by data breach
(10:36) - Story # 2: Fred Hutch patients get blackmail emails after cyberattack
(17:55) - Story # 3: Bitwarden Heist - How to Break Into Password Vaults Without Using Passwords
(19:56) - Story # 3b: Privacy Harms – Daniel Solove
(21:20) - Story # 4: 23andMe tells victims it’s their fault that their data was breached
(33:12) - Story # 5: Hacked Mandiant X Account Abused for Cryptocurrency Theft
(37:38) - Story # 6: Merck $1.4 Billion Cyberhack Settlement Ends ‘Warlike’ Act Claim
(45:27) - Story # 7: Volkswagen is adding ChatGPT to its infotainment system
(51:02) - Story # 8: US nuke reactor lab hit by 'gay furry hackers' demanding cat-human mutants

Talkin’ About Infosec News – 12/21/2023

Black Hills Information Security — Thu, 21 Dec 2023 15:14:34 -0500

The post Talkin’ About Infosec News – 12/21/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Talking Bout Fabric
(07:16) - BHIS - Talkin' Bout [infosec] News 2023-12-18
(10:06) - Story # 1: Cartels Are Using a Police Database to Track and Target Their Enemies
(23:15) - Story # 2: CVS, Rite Aid, Walgreens hand out medical records to cops without warrants
(37:18) - Story # 3: Cloud engineer gets 2 years for wiping ex-employer’s code repos
(45:11) - Story # 4: Ukraine’s intelligence claims cyberattack on Russia’s state tax service
(49:06) - Story # 5: A suspected cyberattack paralyzes the majority of gas stations across Iran
(51:18) - Story # 6: Discord adds Security Key support for all users to enhance security
(54:32) - Story # 7: Kraft Heinz reviewing claims of cyberattack but internal systems ‘operating normally’
(56:49) - Breach Season Speed Run
(58:19) - Story # 8: Ten Years Later, New Clues in the Target Breach
(01:00:38) - Story # 9: Oops, wrong number! The real story behind NORAD's Santa tracker
(01:02:59) - Story # 9b: NORAD Santa Tracker

Talkin’ About Infosec News – 12/15/2023

Black Hills Information Security — Fri, 15 Dec 2023 13:41:40 -0500

https://youtu.be/MaThvw_VWJ8 Brought to you by Antisyphon Training https://www.antisyphontraining.com

(00:00) - PreShow Banter™ — Fine McDonalds Drinkware
(04:36) - BHIS - Talkin' Bout [infosec] News 2023-12-11
(07:04) - Story # 1: America’s Water Infrastructure Act of 2018 (AWIA)
(08:55) - Story # 1b: Dragos Launches Program to Provide Water, Electric Utilities With Free Cybersecurity Tools
(09:42) - Story # 1c: Dragos Community Defense Program
(11:38) - Story # 2: BlackCat ransomware crims threaten to directly extort victim's customers
(20:17) - Story # 3: Fancy Bear goes phishing in US, European high-value networks
(21:06) - Story # 3b: Guidance for investigating attacks using CVE-2023-23397
(24:16) - Story # 4: New AeroBlade hackers target aerospace sector in the U.S.
(26:27) - Story # 5: Reuters Takes Down Blockbuster Hacker-for-Hire Investigation After Indian Court Order
(27:51) - Story # 5b: How an Indian startup hacked the world
(32:28) - Story # 6: Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack
(39:28) - Story # 7: 23andMe confirms hackers stole ancestry data on 6.9 million users
(51:02) - Story # 7b: 23andMe updates user agreement to prevent data breach lawsuits
(55:12) - Story # 8: Facebook Messenger Rolls Out End-to-End Encryption by Default
(57:31) - Story # 9: Police Arrest Hundreds of Human Traffickers Linked to Cyber Fraud
(01:06:57) - Signal For Help

Talkin’ About Infosec News – 12/06/2023

Black Hills Information Security — Wed, 06 Dec 2023 12:23:56 -0500

The post Talkin’ About Infosec News – 12/06/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Chaos Agency
(08:16) - BHIS - Talkin' Bout [infosec] News 2023-12-04
(11:03) - Story # 1: 2 municipal water facilities report falling to hackers in separate breaches
(30:49) - Story # 2: PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214)
(37:16) - Story # 3: ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitation
(39:44) - Story # 4: Zyxel warns of multiple critical vulnerabilities in NAS devices
(43:09) - Story # 5: Russian developer of Trickbot malware pleads guilty, faces 35-year sentence
(46:55) - Story # 6: Hackers spent 2+ years looting secrets of chipmaker NXP before being detected
(52:24) - Story # 7: Okta hackers stole data on all customer support users in major breach
(53:30) - Story # 7b: November 29, 2023 - October Customer Support Security Incident - Update and Recommended Actions
(01:01:55) - Story # 8: Dollar Tree hit by third-party data breach impacting 2 million people
(01:04:07) - Hal's 20,000 - Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks

Talkin’ About Infosec News – 11/30/2023

Black Hills Information Security — Wed, 29 Nov 2023 08:53:15 -0500

The post Talkin’ About Infosec News – 11/30/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Glitch, Please
(01:54) - BHIS - Talkin' Bout [infosec] News 2023-11-27
(04:55) - Story # 1: General Electric investigates claims of cyber attack, data theft
(10:01) - Story # 2: CISA orders federal agencies to patch Looney Tunables Linux bug
(16:26) - Story # 3: Phishing attacks spike attributed to generative AI adoption
(18:49) - Story # 3b: SlashNext report uncovers 1,265% increase in phishing emails in a year
(19:09) - Story # 3c: Complete Generative AI Security for Email, Mobile, and Browser
(24:39) - Story # 4: Fidelity National Financial shuts down network in wake of cybersecurity incident
(25:56) - Story # 4b: BlackCat claims it is behind Fidelity National Financial ransomware shakedown
(38:08) - Story # 5: Chief Operating Officer of Network Security Company Charged with Cyberattack on Medical Center
(01:01:52) - Snake Oil? Summit 2023

Talkin’ About Infosec News – 11/22/2023

Black Hills Information Security — Wed, 22 Nov 2023 10:35:41 -0500

The post Talkin’ About Infosec News – 11/22/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — A clean-shaven galaxy, a long time away.
(07:50) - BHIS - Talkin' Bout [infosec] News 2023-11-20
(09:53) - Story # 1: Ransomware gang files complaint with SEC complaining victim didn’t promptly announce breach
(12:36) - Story # 1b: AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC (2)
(17:04) - Story # 1c : Services in North Carolina town unavailable after ransomware attack
(18:13) - Story # 1d: WHISTLEBLOWER AWARD PROCEEDING
(20:32) - Story # 2: Taylor Swift Fans Spring Into Action After Singer’s Hotel Location Leaks
(26:01) - Story # 3: Recognizing fake news now a required subject in California schools
(35:34) - Story # 4: Hackers breach healthcare orgs via ScreenConnect remote access
(37:07) - Story # 4b: Bitter Pill: Third-Party Pharmaceutical Vendor Linked to Pharmacy and Health Clinic Cyberattack
(42:59) - Story # 5: Russian hackers use Ngrok feature and WinRAR exploit to attack embassies
(47:19) - Story # 6: US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea
(50:32) - Story # 7: Ignite News: Augment your EDR with deception tactics to catch adversaries early
(59:54) - Snake Oil? Summit 2023

Talkin’ About Infosec News – 11/13/2023

Black Hills Information Security — Thu, 16 Nov 2023 16:50:27 -0500

The post Talkin’ About Infosec News – 11/13/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Tinder Skills Endorsements
(01:38) - BHIS - Talkin' Bout [infosec] News 2023-11-13
(02:42) - Story # 1: Boeing data published by Lockbit hacking gang
(03:57) - Story # 2: Google, Meta, Discord, and more team up to fight child abuse online
(28:06) - Story # 3: Data broker’s “staggering” sale of sensitive info exposed in unsealed FTC filing
(39:37) - Story # 4: Maine government says data breach affects 1.3 million people
(44:40) - Story # 1 REPRISE: Boeing data published by Lockbit hacking gang
(50:52) - Story # 5: Inside Denmark’s hell week as critical infrastructure orgs faced cyberattacks

Talkin’ About Infosec News – 11/10/2023

Black Hills Information Security — Fri, 10 Nov 2023 14:40:20 -0500

The post Talkin’ About Infosec News – 11/10/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — The Jerky Experience
(03:40) - BHIS - Talkin' Bout [infosec] News 2023-11-06
(04:34) - Story # 1: Okta hit by third-party data breach exposing employee information
(07:03) - Story # 1b: Okta Hack Blamed on Employee Using Personal Google Account on Company Laptop
(13:13) - Story # 2: Boeing confirms cyberattack, global services disrupted
(14:34) - Story # 3: Four dozen countries declare they won’t pay ransomware ransoms
(15:26) - Story # 4: https://www.healthcareinfosecurity.com/feds-levy-first-ever-hipaa-fine-for-ransomware-data-breach-a-23448
(27:08) - Story # 5: “This vulnerability is now under mass exploitation.” Citrix Bleed bug bites hard
(30:52) - Story # 6: 3,000 Apache ActiveMQ servers vulnerable to RCE attacks exposed online
(32:03) - Story # 7: Exploit released for critical Cisco IOS XE flaw, many hosts still hacked
(33:28) - Story # 7b: Cisco IOS XE CVE-2023-20198: Deep Dive and POC
(42:38) - Story # 8: SEC charges SolarWinds CISO with fraud for misleading investors before major cyberattack

Talkin’ About Infosec News – 11/09/2023

Black Hills Information Security — Thu, 09 Nov 2023 15:33:28 -0500

The post Talkin’ About Infosec News – 11/09/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Costume Party
(02:04) - BHIS - Talkin' Bout [infosec] News 2023-10-30
(03:24) - Story # 1: Okta cybersecurity breach wipes out more than $2 billion in market cap
(18:43) - Story # 2: Boeing assessing Lockbit hacking gang threat of sensitive data leak
(26:09) - Story # 3: The AI-Generated Child Abuse Nightmare Is Here
(41:37) - Story # 4: MGM Resorts hackers 'one of the most dangerous financial criminal groups’

Talkin’ About Infosec News – 11/4/2023

Black Hills Information Security — Sat, 04 Nov 2023 16:09:04 -0400

The post Talkin’ About Infosec News – 11/4/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Pre-Con-Crud
(01:49) - BHIS - Talkin' Bout [infosec] News 2023-10-23
(04:33) - WWHF 2023 recap
(12:20) - Story # 1: Mysterious APT compromises Asian government's secure USBs
(16:13) - Story # 2: CIA exposed to potential intelligence interception due to X's URL bug
(20:02) - Story # 3: EPA withdraws cyber audit requirement for water systems
(22:54) - Story # 3b: Florida Water Treatment Plant Hit With Cyber Attack
(27:00) - Story # 4: Thousands of remote IT workers sent wages to North Korea to help fund weapons program, FBI says
(33:10) - Story # 5: Okta says its support system was breached using stolen credentials
(37:13) - Story # 6: Casio discloses data breach impacting customers in 149 countries
(41:44) - Story # 7: Ragnar Locker ransomware’s dark web extortion sites seized by police
(44:02) - Story # 7b: Ragnar Locker ransomware developer arrested in France
(46:54) - Story # 8: Flipper Zero can be used to crash iPhones running iOS 17, but there's a way to foil the attack
(50:42) - Story # 9: U.S. Government Releases Popular Phishing Technique Used by Hackers
(53:39) - Story # 10: Selfie-scraper, Clearview AI, wins appeal against UK privacy sanction

Talkin’ About Infosec News – 10/10/23

Black Hills Information Security — Tue, 10 Oct 2023 13:11:21 -0400

The post Talkin’ About Infosec News – 10/10/23 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Canadian Bacon Day
(04:35) - BHIS - Talkin' Bout [infosec] News 2023-10-09
(06:19) - Story # 1: NSA and CISA reveal top 10 cybersecurity misconfigurations
(13:35) - Story # 1b: NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations
(21:21) - Story # 2: QR codes in emails? Watch out - it could be part of a 'Quishing' scam
(25:07) - Story # 2b: https://github.com/jocephus/QuellR
(28:16) - Story # 2c: https://twitter.com/vmyths/status/1212201412068818944
(30:47) - Story # 3: New Marvin attack revives 25-year-old decryption flaw in RSA
(35:59) - Story # 4: Bounty offered for secret NSA seeds behind NIST elliptic curves algo
(38:01) - Story # 5: Rules of engagement issued to hacktivists after chaos
(01:02:55) - PROGRAMMING NOTE – WWHF2023

Talkin’ About Infosec News – 10/9/2023

Black Hills Information Security — Mon, 09 Oct 2023 15:40:58 -0400

The post Talkin’ About Infosec News – 10/9/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — The Scented Podcast
(04:42) - BHIS - Talkin' Bout [infosec] News 2023-10-02
(07:24) - Story # 1: Google assigns new maximum rated CVE to libwebp bug exploited in attacks
(24:13) - Story # 2: Progress warns of maximum severity WS_FTP Server vulnerability
(31:16) - Story # 3: Sony PlayStation Hack: What We Know So Far About the LAPSUS$ Cyberattack
(36:10) - Story # 4: City of Fort Lauderdale loses $1.2 million in phishing scam, police in Florida say
(41:42) - Story # 5: FCC announces plans to reinstate net neutrality
(52:32) - Story # 6: [New research] Do longer passwords protect you from compromise?

Special Segment – Cyber Security Career Advice – 9/28/2023

Black Hills Information Security — Thu, 28 Sep 2023 16:25:12 -0400

The post Special Segment – Cyber Security Career Advice – 9/28/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ Segment Special – Cyber Security Career Advice
(00:26) - Q :Entry Level Cybersecurity equals Mid-Level I.T. ?
(08:05) - Q: How do I get started, I'm new in the Cyber Security Industry?
(09:37) - Q: What Degree(s) do you recommend for Cyber Security / Infosec?
(16:07) - Q: How did Chris Traynor join Black Hills Information Security?
(18:58) - LINK– Pancake Con Chris Traynor Talk - https://youtube.com/watch?v=tMgDSb5_mKs
(20:13) - LINK - BHIS Discord - https://discord.gg/bhis
(23:35) - LINK - Chicago meetups : https://burbsec.com
(25:53) - LINK: YouTube– Acess Granted Webcast – https://youtube.com/live/oaTEK9Feo5s

Talkin’ About Infosec News – 9/25/2023

Black Hills Information Security — Wed, 27 Sep 2023 08:27:31 -0400

The post Talkin’ About Infosec News – 9/25/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Poop Shoots and Chocolate Bunnies
(02:33) - BHIS - Talkin' Bout [infosec] News 2023-09-25
(07:15) - Story # 1: Cisco to Acquire Splunk
(08:15) - CISCO RSA Plane https://assets-cdn.workingnotworking.com/a1w71r9as47v5iap49d6u2md0dfr
(09:21) - Jack Rhysider on Splunk https://twitter.com/JackRhysider/status/1704986407415038213
(18:09) - Story # 2: Youth hacking ring at the center of cybercrime spree
(26:45) - Story # 3: T-Mobile users say other people’s account information is appearing in their app
(30:11) - Story # 4: Okta: Caesars, MGM hacked in social engineering campaign
(35:40) - Story # 5: Data breach reveals distressing info: People who order pineapple on pizza
(39:28) - Story # 6: National Student Clearinghouse data breach impacts 890 schools
(46:16) - Story # 7: Kroll Suffers Data Breach: Employee Falls Victim to SIM Swapping Attack

Talkin’ About Infosec News – 9/18/2023

Black Hills Information Security — Fri, 22 Sep 2023 16:40:39 -0400

The post Talkin’ About Infosec News – 9/18/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Billionare Traps & Dump Lists
(05:11) - BHIS - Talkin' Bout [infosec] News 2023-09-18
(07:28) - Story # 1: Statement on MGM Resorts International
(12:06) - Story # 1b: Okta & MGM sitting in a tree
(14:53) - Story # 1c: Okta Agent Involved in MGM Resorts Breach, Attackers Claim
(20:26) - Story # 1d: Social Engineering: How It Works, Examples & Prevention
(26:49) - Story # 1e: Lina Khan Got Stuck in the Fallout of the MGM Hack at Las Vegas
(44:09) - Story # 2: F-35 goes missing near North Charleston; pilot hospitalized after ejecting
(48:38) - Story # 3: Pirated Software Likely Cause of Airbus Breach
(53:48) - (K)night (I)ndustries (T)esla (T)hree opens parking garage gate

Talkin’ About Infosec News – 9/11/2023

Black Hills Information Security — Wed, 13 Sep 2023 10:19:12 -0400

The post Talkin’ About Infosec News – 9/11/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Felling Trees 504
(02:03) - Talkin' Bout [infosec] News 2023-09-11
(05:51) - 22nd Anniversary of the 9-11 Tragedy
(10:35) - Story # 1: AT&T Customers Doxed Themselves En Masse In Reply-All Nightmare
(15:47) - Story # 1b: Senate email system crashes amid avalanche of reply-alls to security test
(18:09) - Story # 2: Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play
(23:47) - Story # 2b: BLASTPASS NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild
(29:16) - Story # 3: Apple finally admits the CSAM scanning flaw we all pointed out
(33:32) - Story # 4: Outlook Hack: Microsoft Reveals How a Crash Dump Led to a Major Security Breach
(38:57) - Story # 4b: Microsoft finally explains cause of Azure breach: An engineer’s account was hacked
(51:16) - Story # 5: FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown — FBI
(52:24) - Story # 5b: Data From The Qakbot Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI
(57:49) - https://github.com/alephdata/aleph

Talkin’ About Infosec News – 8/28/2023

Black Hills Information Security — Tue, 29 Aug 2023 20:53:27 -0400

Brought to you by Antisyphon Training — https://www.antisyphontraining.com

(00:00) - PreShow Banter™ — Deep Disruptions
(04:01) - BHIS - Talkin' Bout [infosec] News 2023-08-28
(05:43) - Story # 1: Exclusive: Cybersecurity firm SentinelOne explores sale -sources
(13:28) - Story # 2: WinRAR 0-day that uses poisoned JPG and TXT files under exploit since April
(20:17) - Story # 3: NIST Publishes Draft Post-Quantum Cryptography Standards
(23:29) - Story # 4: Mysterious Cyberattack Shuts Down Yet More Telescopes For Weeks
(29:31) - Story # 5: Danish cloud host says customers ‘lost all data’ after ransomware attack
(35:04) - Story # 6: Lapsus$: Court finds teenagers carried out hacking spree
(35:45) - Story # 6b: GTA 6 Hacker Found To Be Teen With Amazon Fire Stick In Small Town Hotel Room
(44:36) - Story # 7: New Juniper Junos OS Flaws Expose Devices to Remote Attacks - Patch Now

Talkin’ About Infosec News – 8/21/2023

Black Hills Information Security — Mon, 28 Aug 2023 10:57:15 -0400

Brought to you by Antisyphon Training — https://www.antisyphontraining.com

(00:00) - PreShow Banter™ — Overarching Hot Takes
(01:27) - BHIS - Talkin' Bout [infosec] News 2023-08-21
(04:30) - Story # 1: Hackers red-teaming A.I. are ‘breaking stuff left and right,’ but don’t expect quick fixes from DefCon: ‘There are no good guardrails’
(06:18) - Story # 1b: What happens when thousands of hackers try to break AI chatbots
(08:46) - Story # 2: US lawmaker says FBI notified him of email breach linked to Microsoft cloud hack
(11:18) - Story # 3: Elon Musk's army of inactive followers paints a bleak picture of X as a whole
(12:42) - Story # 3b: Elon Musk’s Shadow Rule
(18:45) - Story # 4: Haggling With Hackers: Surprising Lessons From 50 Negotiations With Ransomware Gangs
(23:42) - Story # 5: WinRAR flaw lets hackers run programs when you open RAR archives
(27:55) - Story # 6: CISA, experts warn of Citrix vulnerabilities being exploited by hackers
(29:44) - Story # 7: Ongoing Duo outage causes Azure Auth authentication errors
(30:38) - Story # 8: Phishing campaign steals accounts for Zimbra email servers worlwide
(35:48) - Story # 9: WD refused to answer our questions about its self-wiping SanDisk SSDs
(38:35) - Story # 9b: Backblaze Drive Stats for Q2 2023
(42:07) - Story # 10: NYC Bans TikTok on City Devices
(55:38) - Story # 11: IMAX Still Runs on PalmPilot Operating System
(57:25) - Story # 12: Major LinkedIn Account Takeover Campaign Underway

Talkin’ About Infosec News – 8/14/2023

Black Hills Information Security — Mon, 21 Aug 2023 14:43:08 -0400

Talkin’ About Infosec News – 8/7/2023

Black Hills Information Security — Tue, 15 Aug 2023 15:20:17 -0400

Talkin’ About Infosec News – 7/31/2023

Black Hills Information Security — Wed, 02 Aug 2023 09:22:37 -0400

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories. Brought to you by: ///

(00:00) - PreShow Banter™ — Messed With Your Head
(05:25) - Story # 1: Chinese Malware Could Cut Power To U.S. Military Bases, Businesses And Homes, Report Claims
(18:14) - Story # 2: US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’
(18:39) - Story # 2b: US senator victim-blames Microsoft for Chinese hack
(19:08) - Story # 2c: https://www.wyden.senate.gov/imo/media/doc/
(27:27) - Story # 3: Russian court jails cyber security executive for 14 years in treason case
(33:47) - Story # 4: Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws
(47:29) - Story # 5: SEC now requires companies to disclose cyberattacks in 4 days
(48:19) - Story # 5b: SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies
(57:55) - Take Joe's Class https://www.theosintion.com/courses/

Talkin’ About Infosec News – 7/26/2023

Black Hills Information Security — Wed, 26 Jul 2023 16:30:52 -0400

Talkin’ About Infosec News – 7/25/2023

Black Hills Information Security — Tue, 25 Jul 2023 07:57:46 -0400

Talkin’ About Infosec News – 7/21/2023

Black Hills Information Security — Fri, 21 Jul 2023 11:08:55 -0400

Talkin’ About Infosec News – 6/27/2023

Black Hills Information Security — Tue, 27 Jun 2023 16:17:43 -0400

Talkin’ About Infosec News – 6/21/2023

Black Hills Information Security — Wed, 21 Jun 2023 18:26:38 -0400

Talkin’ About Infosec News – 6/15/2023

Black Hills Information Security — Thu, 15 Jun 2023 11:32:35 -0400

Talkin’ About Infosec News – 6/9/2023

Black Hills Information Security — Thu, 08 Jun 2023 15:22:42 -0400

The post Talkin’ About Infosec News – 6/9/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Pick Your Crap
(02:01) - BHIS - Talkin' Bout [infosec] News 2023-06-05
(02:35) - Story # 1: International Underwear Model and Insurrectionist Was Just Sentenced to 32 Months in Prison
(05:39) - Story # 2: Mass exploitation of critical MOVEit flaw is ransacking orgs big and small
(07:46) - Story # 2b: https://github.com/AhmetPayaslioglu/YaraRules
(14:11) - Story # 2c: Critical Vulnerability in Progress MOVEit Transfer: Technical Analysis and Recommendations
(42:31) - Story # 3: Millions of PC Motherboards Were Sold With a Firmware Backdoor
(44:01) - Story # 3b: Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards
(46:31) - Story # 4: Cyberweapon manufacturers plot to stay on the right side of US
(54:16) - Story # 5: Hackers steal around $170,000 after compromising Steve Aoki's Twitter account

Talkin’ About Infosec News – 5/26/2023

Black Hills Information Security — Fri, 26 May 2023 15:13:04 -0400

The post Talkin’ About Infosec News – 5/26/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — The Power of PreShow Banter™
(02:19) - BHIS - Talkin' Bout [infosec] News 2023-05-22
(04:40) - Story # 1: Meta slapped with record $1.3 billion EU fine over data privacy
(09:23) - Story # 2: Toyota Discloses Decade-Long Data Leak Exposing 2.15M Customers' Data
(11:58) - Story # 3: Microsoft is scanning the inside of password-protected zip files for malware
(21:53) - Story # 4: ChatGPT chief says artificial intelligence should be regulated by a US or global agency
(28:38) - Story # 5: 15million Bug Bounty - LayerZero Labs
(33:38) - Story # 6: Dish Network likely paid ransom after recent ransomware attack
(38:13) - Story # 7: New ZIP domains spark debate among cybersecurity experts
(41:09) - Story # 7b: https://twitter.com/_JohnHammond/status/1657427727425626113
(43:56) - Story # 8: Apple Bans Employees From Using ChatGPT Amid Its Own AI Efforts
(52:21) - Story # 9: TikTok sues Montana over controversial state ban

Talkin’ About Infosec News – 5/17/2023

Black Hills Information Security — Wed, 17 May 2023 15:25:42 -0400

The post Talkin’ About Infosec News – 5/17/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Hardcore Mountain J-Biking
(02:37) - BHIS - Talkin' Bout [infosec] News 2023-05-15
(03:37) - Story # 1: Discord discloses data breach after support agent got hacked
(12:12) - Story # 2: Cybersecurity firm Dragos discloses cybersecurity incident, extortion attempt
(13:02) - Story # 2b: Deconstructing a Cybersecurity Event
(29:02) - Story # 3: How Apple catches leakers: From color changes to comma placement
(31:32) - Story # 3b: The ingenious way ‘Star Trek Beyond’ is making sure its script doesn’t leak online
(34:34) - Story # 3c: Genius hid a Morse code message in song lyrics to prove Google was copying them
(40:17) - Story # 4: How one of Vladimir Putin’s most prized hacking units got pwned by the FBI
(43:03) - Story # 4b: Hunting Russian Intelligence “Snake” Malware
(51:26) - Story # 4c: Microsoft recommended driver block rules
(55:50) - Story # 4d: Bypassing PatchGuard 3
(58:15) - Story # 5: The Team of Sleuths Quietly Hunting Cyberattack-for-Hire Services

Talkin’ About Infosec News – 5/11/2023

Black Hills Information Security — Thu, 11 May 2023 10:50:02 -0400

The post Talkin’ About Infosec News – 5/11/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Notes about Music
(01:19) - BHIS - Talkin' Bout [infosec] News 2023-05-08
(01:59) - Story # 1: China’s hackers outnumber FBI cyber staff ‘at least 50 to 1,’ Wray tells Congress
(06:57) - Story # 2: Drone goggles maker claims firmware sabotaged to ‘brick’ devices
(12:27) - Story # 3: Twitter says a 'security incident' led to private Circle tweets becoming public
(13:46) - Story # 4: Billy Corgan Paid Off Hacker to Prevent ATUM Leak
(21:15) - Story # 5: New Atomic macOS info-stealing malware targets 50 crypto wallets
(39:35) - Story # 5b ChatGPT maker OpenAI lost about $540 million last year
(47:51) - Story # 6: QR codes used in fake parking tickets, surveys to steal your money

Talkin’ About Infosec News – 5/5/2023

Black Hills Information Security — Fri, 05 May 2023 18:09:22 -0400

The post Talkin’ About Infosec News – 5/5/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Swords in San Francisco
(01:32) - BHIS - Talkin' Bout [infosec] News 2023- 04-24
(04:00) - Story # 1: Pentagon Leaks: What's the Damage?
(13:09) - Story # 2: Hacker Group Names Are Now Absurdly Out of Control
(21:15) - Story # 3: 3CX Breach Was a Double Supply Chain Compromise
(38:31) - Story # 4: What’s more prevalent than juice jacking? Fake public WiFi networks, says researcher
(45:23) - Story # 5: Hundreds of Southwest Airlines flights are delayed after FAA lifts nationwide ground stop
(49:06) - Story # 6: European air traffic control confirms website 'under attack' by pro-Russia hackers
(50:56) - Story # 7: APC warns of critical unauthenticated RCE flaws in UPS software
(53:16) - Story # 8: ‘AuKill’ EDR killer malware abuses Process Explorer driver

Talkin’ About Infosec News – 4/18/2023

Black Hills Information Security — Wed, 19 Apr 2023 14:11:10 -0400

The post Talkin’ About Infosec News – 4/18/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Hardest to Handle
(02:41) - BHIS - Talkin' Bout [infosec] News 2023-04-17
(04:22) - Story # 1: Actually, Charging Your Phone in a Public USB Port Is Fine
(16:04) - Story # 2: Israeli Irrigation Water Controllers & Postal Service Breached
(16:48) - Story # 2b: Did someone really hack into the Oldsmar, Florida, water treatment plant? New details suggest maybe not.
(27:30) - Story # 2c: Ridley turns a horrific true story involving Hurricane Katrina into a scripted drama
(29:13) - Story # 3: 3CX blames North Korea for supply chain mass-hack
(35:09) - Story # 4: FBI arrests 21-year-old Air National Guardsman suspected of leaking classified documents
(53:59) - Story # 5: Montana lawmakers vote to completely ban TikTok in the state

Talkin’ About Infosec News – 4/11/2023

Black Hills Information Security — Tue, 11 Apr 2023 17:15:21 -0400

The post Talkin’ About Infosec News – 4/11/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Canada Man
(03:49) - BHIS - Talkin' Bout [infosec] News 2023-04-10
(05:10) - Story # 1: IRS-authorized eFile.com tax return software caught serving JS malware
(11:52) - Story # 2: Hackers using Log4j bug to profit from victim IP addresses through ‘proxyjacking’ scheme
(19:45) - Story # 3: Two-Fifths of IT Pros Told to Keep Breaches Quiet
(27:27) - Story # 4: Samsung reportedly leaked its own secrets through ChatGPT
(30:16) - Story # 4b: Introducing Microsoft Security Copilot: Empowering defenders at the speed of AI
(32:07) - Story # 5: Tesla workers shared images from car cameras, including “scenes of intimacy”
(47:37) - HBS News Hour
(52:01) - Story # 6: KFC, Pizza Hut owner discloses data breach after ransomware attack

Talkin’ About Infosec News – 4/5/2023

Black Hills Information Security — Wed, 05 Apr 2023 10:22:03 -0400

The post Talkin’ About Infosec News – 4/5/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Jazzy Saxophone
(01:13) - BHIS - Talkin' Bout [infosec] News 2023-04-03
(02:40) - Story # 1: He Would Still Be Here': Man Dies by Suicide After Talking with AI Chatbot, Widow Says
(08:45) - Story # 1b: Elon Musk, Steve Wozniak Join AI Experts In Pushing To 'Pause Giant AI Experiments'
(14:51) - Story # 2: S.686 - RESTRICT Act
(26:01) - Story # 3: Leaked IT contractor files detail Kremlin's stockpile of cyber-weapons
(29:27) - Story # 4: 3CX thought supply chain attack was a false positive
(35:46) - Story # 5: Twitter takes its algorithm ‘open-source,’ as Elon Musk promised
(39:40) - Story # 6: 20-Year-Old BreachForums Founder Faces Up to 5 Years in Prison
(44:16) - Story # 7: Hacker Agrees to Return $197 Million Stolen from Euler Finance
(47:46) - Story # 8: India-based cybergang busted for selling fake KFC franchises
(51:50) - Story # 8b: https://twitter.com/cyberabadpolice
(52:42) - Story # 8c: https://www.cyberabadpolice.gov.in
(56:07) - Story # 9: Meta wants EU users to apply for permission to opt out of data collection

Talkin’ About Infosec News – 4/3/2023

Black Hills Information Security — Mon, 03 Apr 2023 10:02:09 -0400

The post Talkin’ About Infosec News – 4/3/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Always Checking For Leaks
(02:56) - BHIS - Talkin' Bout [infosec] News 2023-03-27
(04:31) - Story # 1: Data breach leak site BreachForums shuts down
(12:06) - Story # 2: Ralph's personal cybercrime story
(21:43) - Story # 3: North Korean hackers using Chrome extensions to steal Gmail emails
(31:13) - Story # 4: Gordon Moore, Intel Co-Founder, Dies at 94
(32:37) - Story # 4b: Beloved hacking veteran Kelly ‘Aloria’ Lum passes away at 41
(32:59) - Story # 5: Twitter Says Parts of Its Source Code Were Leaked Online
(37:00) - Story # 6: AI image of Pope Francis in a puffer jacket fooled the internet and experts fear there’s worse to come
(41:07) - Story # 6b: Samsung’s Moon Shots Force Us to Ask How Much AI Is Too Much
(44:00) - Story # 7:New MacStealer macOS malware steals passwords from iCloud Keychain
(45:22) - Story # 8: Windows 11, Tesla, Ubuntu, and macOS hacked at Pwn2Own 2023
(49:39) - Story # 9: Ferrari discloses data breach after receiving ransom demand
(52:03) - Story # 10: How hackers took over Linus Tech Tips

Talkin’ About Infosec News – 3/16/2023

Black Hills Information Security — Thu, 16 Mar 2023 14:21:11 -0400

00:00 – PreShow Banter™ — Tossing Money at Problems00:58 – BHIS – Talkin’ Bout [infosec] News 2023-03-1301:41 – Story # 1: Silicon Valley Bank collapse: Treasury, Fed, and FDIC announce […]

The post Talkin’ About Infosec News – 3/16/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Tossing Money at Problems
(00:58) - BHIS - Talkin' Bout [infosec] News 2023-03-13
(01:41) - Story # 1: Silicon Valley Bank collapse: Treasury, Fed and FDIC announce steps to ensure deposits will be paid in full
(17:23) - Story # 1b: Silicon Valley Bank exec was Lehman Brothers CFO prior to 2008 collapse
(21:21) - Story # 2: FBI investigates data breach impacting U.S. House members and staff
(30:33) - Story # 3: Acronis downplays intrusion after 12GB trove leaks online
(34:40) - Story # 4: Acer confirms breach after 160GB of data for sale on hacking forum
(51:26) - Story # 5: The privacy loophole in your doorbell
(57:28) - Spearfish General Store

Talkin’ About Infosec News – 3/8/2023 (v2)

Black Hills Information Security — Wed, 08 Mar 2023 17:18:55 -0500

THIS IS A TEST

The post Talkin’ About Infosec News – 3/8/2023 (v2) appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Lil NAS
(06:52) - BHIS - Talkin' Bout [infosec] News 2023-03-06
(08:13) - Story # 1: LastPass says employee’s home computer was hacked and corporate vault taken
(28:32) - Story # 2: An Uncomfortable Reality: Occupational Hazards Associated with Thought Leadership in CTI
(35:18) - Story # 3: FACT SHEET: Biden-⁠Harris Administration Announces National Cybersecurity Strategy
(45:17) - Story # 4: Roku Doesn’t Support IPv6 and It Might Be a Big Deal
(51:05) - Story # 5: Secret crawlspace cryptomine discovered in routine inspection of MA high school
(57:18) - Story # 6: ATM thieves use glue and 'tap' function to drain accounts at Chase Bank

Talkin’ About Infosec News – 3/8/2023

Black Hills Information Security — Wed, 08 Mar 2023 17:13:03 -0500

00:00 – PreShow Banter™ — Lil NAS06:52 – BHIS – Talkin’ Bout [infosec] News 2023-03-0608:13 – Story # 1: LastPass says employee’s home computer was hacked and corporate vault takenhttps://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/28:32 […]

The post Talkin’ About Infosec News – 3/8/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Lil NAS
(06:52) - BHIS - Talkin' Bout [infosec] News 2023-03-06
(08:13) - Story # 1: LastPass says employee’s home computer was hacked and corporate vault taken
(28:32) - Story # 2: An Uncomfortable Reality: Occupational Hazards Associated with Thought Leadership in CTI
(35:18) - Story # 3: FACT SHEET: Biden-⁠Harris Administration Announces National Cybersecurity Strategy
(45:17) - Story # 4: Roku Doesn’t Support IPv6 and It Might Be a Big Deal
(51:05) - Story # 5: Secret crawlspace cryptomine discovered in routine inspection of MA high school
(57:18) - Story # 6: ATM thieves use glue and 'tap' function to drain accounts at Chase Bank

Talkin’ About Infosec News – 3/3/2023

Black Hills Information Security — Fri, 03 Mar 2023 14:01:37 -0500

Story # 1: A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Lifehttps://www.wsj.com/articles/apple-iphone-security-theft-passcode-data-privacya-basic-iphone-feature-helps-criminals-steal-your-digital-life-cbf14b1a Story # 1b: Apple’s iPhone Passcode Problem: Thieves Can Ruin Your Entire Digital Life in Minutes […]

The post Talkin’ About Infosec News – 3/3/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Farm Raised Artificial Intelligence
(04:01) - BHIS - Talkin' Bout [infosec] News 2023-02-27
(05:09) - Story # 1: A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Life
(18:52) - Story # 2: Sensitive US military emails spill online
(27:55) - Story # 3: Fruit giant Dole suffers ransomware attack impacting operations
(33:01) - Story # 4: Well-hidden Mac cryptomining malware found in pirate copies of Final Cut Pro; expect more
(37:30) - Story # 5: AI Helps Crack NIST-Recommended Post-Quantum Encryption Algorithm
(40:38) - Story # 6: Snapchat launches ChatGPT integration, warns to not share your secrets
(43:28) - Story # 7: How I Broke Into a Bank Account With an AI-Generated Voice
(47:55) - Story # 8: Firms Who Pay Ransom Subsidise 10 New Attacks: Report
(53:51) - Story # 9: Valve set a trap to catch and ban 40,000 Dota 2 cheaters

Talkin’ About Infosec News – 2/22/2023

Black Hills Information Security — Wed, 22 Feb 2023 12:38:53 -0500

00:00 – PreShow Banter™ — Pop Tart Pizza04:15 – BHIS – Talkin’ Bout [infosec] News 2023-02-2005:39 – Story # 1: Employee data from a major cybersecurity firm posted for sale […]

The post Talkin’ About Infosec News – 2/22/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Pop Tart Pizza
(04:15) - BHIS - Talkin' Bout [infosec] News 2023-02-20
(05:39) - Story # 1: Employee data from a major cybersecurity firm posted for sale on a hacker forum
(13:43) - Story # 2: FBI is investigating a cybersecurity incident on its network
(16:44) - Story # 3: GoDaddy: Hackers stole source code, installed malware in multi-year breach
(21:44) - Story # 4: Hyundai, Kia pushing updates so you can’t just steal their cars with USB cables
(30:21) - Story # 5: Eurostar forces 'password resets' — then fails and locks users out
(33:37) - Story # 6: Hacker Uncovers How to Turn Traffic Lights Green With Flipper Zero
(39:30) - Story # 7: Namecheap denies system breach after email service used to spread phishing scams
(43:11) - Story # 8: Official: Twitter will now charge for SMS two-factor authentication
(48:24) - Story # 9: Software suite of Israeli security firm Cellebrite leaks online
(51:22) - Story # 10: The US Air Force may have shot down an Amateur Radio Pico Balloon over Canada
(55:48) - Story # 11: ChatGPT Is Ingesting Corporate Secrets

Talkin’ About Infosec News – 2/17/2023

Black Hills Information Security — Fri, 17 Feb 2023 14:05:08 -0500

00:00 – PreShow Banter™ — Scalping Valentine’s Day Reservations04:13 – BHIS – Talkin’ Bout [infosec] News 2023-06-2305:52 – Story # 1: 5 Chinese companies and a research institute blacklisted by […]

The post Talkin’ About Infosec News – 2/17/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Scalping Valentine's Day Reservations
(04:13) - BHIS - Talkin' Bout [infosec] News 2023-06-23
(05:52) - Story # 1: 5 Chinese companies and a research institute blacklisted by U.S. over spy balloon program
(12:00) - Story # 2: We had a security incident. Here’s what we know.
(15:19) - Ean Reports Live!
(21:44) - Story # 3: NameCheap's email hacked to send Metamask, DHL phishing emails
(26:49) - Story # 4: Top mobile finance app Money Lover has some worrying security flaws
(31:24) - Story # 5: Ukraine war: Elon Musk's SpaceX firm bars Kyiv from using Starlink tech for drone control
(36:58) - Story # 6: NATO websites hacked, including that of the Headquarters of Special Operations Forces
(38:58) - Story # 7: Khinshtein said that hackers acting in the interests of the Russian Federation should be released from liability
(40:52) - Story # 8 NIST Standardizes Ascon Cryptographic Algorithm for IoT and Other Lightweight Devices
(43:29) - Story # 9: Americans don't understand what companies can do with their personal data—and that's a problem
(45:15) - Story # 9b: AMERICANS CAN’T CONSENT TO COMPANIES’ USE OF THEIR DATA
(54:33) - Story # 10: Pentagon Staffers Found Installing Dating Apps, Games on Government Phones
(57:34) - Story # 10b: Management Advisory: The DoD’s Use of Mobile Applications (Report No. DODIG-2023-041)
(58:14) - Story # 11: When Facebook came for your battery, feudal security failed

Talkin’ About Infosec News – 2/13/2023

Black Hills Information Security — Mon, 13 Feb 2023 12:09:01 -0500

00:00 – PreShow Banter™ — We’ve got nothing to say03:07 – BHIS – Talkin’ Bout [infosec] News 2023-06-2305:56 – Story # 1: Cybercrime job ads on the dark web pay […]

The post Talkin’ About Infosec News – 2/13/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — We've got nothing to say
(03:07) - BHIS - Talkin' Bout [infosec] News 2023-06-23
(05:56) - Story # 1: Cybercrime job ads on the dark web pay up to $20k per month
(10:52) - Story # 2: Discrepancies Discovered in Vulnerability Severity Ratings
(25:27) - Story # 3: GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom
(28:48) - Story # 4: Ex-Ubiquiti worker pleads guilty to data theft, extortion, and smear plot
(34:47) - Story # 5: North Korean hackers stole research data in two-month-long breach
(42:19) - Story # 6: Hacker Group Releases 128GB Of Data Showing Russia's 'Wide-Ranging' Illegal Surveillance Of Citizens

Talkin’ About Infosec News – 2/3/2023

Black Hills Information Security — Fri, 03 Feb 2023 17:09:20 -0500

00:00 – PreShow Banter™ — Woke Up Like This03:20 – BHIS – Talkin’ Bout [infosec] News 2023-01-3005:04 – Story # 1: GoTo says hackers stole customers’ backups and encryption keyhttps://www.bleepingcomputer.com/news/security/goto-says-hackers-stole-customers-backups-and-encryption-key/09:48 […]

The post Talkin’ About Infosec News – 2/3/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Woke Up Like This
(03:20) - BHIS - Talkin' Bout [infosec] News 2023-01-30
(05:04) - Story # 1: GoTo says hackers stole customers' backups and encryption key
(09:48) - Story # 2: T-Mobile hacked to steal data of 37 million accounts in API data breach
(11:29) - Story # 3: Appliance makers sad that 50% of customers won’t connect smart appliances
(23:11) - Story # 4: More Ransomware Victims Are Refusing to Pay Hackers
(25:34) - Story # 5: DOJ, FBI hack Hive Network, save US$130 mln from crypto ransomware attacks
(27:27) - Story # 6: Ransomware gang steals data from KFC, Taco Bell, and Pizza Hut brand owner
(29:35) - Story # 7: Pet fish commits credit card fraud on owner using a Nintendo Switch
(34:15) - Story # 8: how to completely own an airline in 3 easy steps
(38:43) - Story # 9: Nearly 35,000 PayPal users had SSNs, tax info leaked during December cyberattack
(46:43) - Story # 10: The semiconductor monopoly: How one Dutch company has a stranglehold over the global chip industry
(55:59) - Story # 11: Swipe right on our new credit card tokens!

Talkin’ About Infosec News – 1/25/2023

Black Hills Information Security — Wed, 25 Jan 2023 14:16:41 -0500

00:00 – PreShow Banter™ — Wade’s Googly Eyes00:41 – BHIS – Talkin’ Bout [infosec] News 2023-01-2301:26 – Story # 1: BIG TECH LAYOFFS. LAYOFFS! DOOM! RECESSION!

The post Talkin’ About Infosec News – 1/25/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Wade's Googly Eyes
(00:41) - BHIS - Talkin' Bout [infosec] News 2023-01-23
(01:26) - Story # 1: BIG TECH LAYOFFS. LAYOFFS! DOOM! RECESSION!

Talkin’ About Infosec News – 1/17/2023

Black Hills Information Security — Tue, 17 Jan 2023 16:41:18 -0500

00:00 – PreShow Banter™ — Ralph’s Guide to Satellite Bands 04:33 – BHIS – Talkin’ Bout [infosec] News 2023-01-16 05:25 – Story # 1: Microsoft’s new AI can simulate anyone’s […]

The post Talkin’ About Infosec News – 1/17/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Ralph’s Guide to Satellite Bands
(04:33) - BHIS - Talkin' Bout [infosec] News 2023-01-16
(05:25) - Story # 1: Microsoft’s new AI can simulate anyone’s voice with 3 seconds of audio
(13:29) - Story # 2: Russian Hackers Tried to Break Into the U.S.'s Top Nuclear Labs: Report
(16:42) - Story # 3: CircleCI breach post-mortem: Attackers got in by stealing engineer’s session cookie
(26:59) - Story # 4: How a single developer dropped AWS costs by 90%, then disappeared
(36:46) - Story # 5: A Widespread Logic Controller Flaw Raises the Specter of Stuxnet
(48:38) - Story # 6: Meta sues “scraping-for-hire” service that sells user data to law enforcement

Talkin’ About Infosec News – 1/12/2023

Black Hills Information Security — Thu, 12 Jan 2023 08:17:23 -0500

00:00 – PreShow Banter™ — Twitch Airways International00:59 – BHIS – Talkin’ Bout [infosec] News 2023-01-1003:56 – Story # 1: How ChatGPT could become a hacker’s friendhttps://betanews.com/2023/01/05/how-chatgpt-could-become-a-hackers-friend/14:05 – Story # […]

The post Talkin’ About Infosec News – 1/12/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Twitch Airways International
(00:59) - BHIS - Talkin' Bout [infosec] News 2023-01-10
(03:56) - Story # 1: How ChatGPT could become a hacker's friend
(14:05) - Story # 2: Cybersecurity experts gaze into the 2023 crystal ball and see good, bad, ugly
(16:40) - Story # 3: Chick-Fil-A and other Breaches to snack on
(31:01) - Story # 4: Identity Thieves Bypassed Experian Security to View Credit Reports
(36:29) - Story # 5: CircleCI security alert: Rotate any secrets stored in CircleCI (Updated Jan 7)
(40:45) - Story # 6: Air France and KLM notify customers of account hacks
(43:27) - Story # 7: Guardian offices closed until 23 January due to ongoing fallout from suspected ransomware attack

Talkin’ About Infosec News – 1/3/2023

Black Hills Information Security — Tue, 03 Jan 2023 15:17:06 -0500

00:00 – PreShow Banter™ — Seven People00:51 – BHIS – Talkin’ Bout [infosec] News 2023-01-0201:37 – Story # 1: LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolenhttps://www.theverge.com/2022/12/28/23529547/lastpass-vault-breach-disclosure-encryption-cybersecurity-rebuttal32:22 – […]

The post Talkin’ About Infosec News – 1/3/2023 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Seven People
(00:51) - BHIS - Talkin' Bout [infosec] News 2023-01-02
(01:37) - Story # 1: LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolen
(32:22) - Story # 2: Southwest Airlines’ post-Christmas meltdown thanks to ‘outdated IT’ systems, poor scheduling
(42:18) - Story # 3: McGraw Hill's S3 buckets exposed 100,000 students' grades
(47:59) - Story # 4: Okta confirms another breach after hackers steal source code

Talkin’ About Infosec News – 12/21/2022

Black Hills Information Security — Wed, 21 Dec 2022 13:29:44 -0500

00:00 – PreShow Banter™ — Talkin’ Bout [Elon] News00:51 – BHIS – Talkin’ Bout [infosec] News 2022-12-1902:46 – Story # 1: Antivirus and EDR solutions tricked into acting as data […]

The post Talkin’ About Infosec News – 12/21/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Talkin' Bout [Elon] News
(00:51) - BHIS - Talkin' Bout [infosec] News 2022-12-19
(02:46) - Story # 1 : Antivirus and EDR solutions tricked into acting as data wipers
(12:11) - Story # 2: Twitter suspends @ElonJet after Musk promises not to ban it
(12:48) - Story # 2b: Elon Musk starts banning critical journalists from Twitter
(14:37) - Story # 2c: Twitter abruptly bans all links to Instagram, Mastodon, and other competitors
(15:08) - Story # 2d: Elon Musk should step down as head of Twitter, says poll
(16:18) - Story # 2e: Your Car is Trackable by Law
(22:41) - Story # 2f: AirNav RadarBox FlightStick - ADS-B USB Receiver with Integrated Filter, Amplifier and ESD Protection
(26:41) - Story # 3: FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked
(32:24) - Story # 4: Reno mayor sues after finding tracking device on vehicle
(36:43) - Story # 5: Email hijackers scam food out of businesses, not just money
(42:46) - Story # 6: Bugs in LEGO Resale Site Allowed Hackers to Hijack Accounts
(45:41) - Story # 7: CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks
(50:05) - Story # 8: CISA researchers: Russia's Fancy Bear infiltrated US satellite network

Talkin’ About Infosec News – 12/15/2022

Black Hills Information Security — Thu, 15 Dec 2022 10:49:39 -0500

00:00 – PreShow Banter™ — Scissors Vs Paper00:15 – BHIS – Talkin’ Bout [infosec] News 2022-12-1202:12 – Story # 1: Rackspace confirms ransomware attack behind days-long email meltdownhttps://www.theregister.com/2022/12/06/rackspace_confirms_ransomware/07:56 – Story […]

The post Talkin’ About Infosec News – 12/15/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Scissors Vs Paper
(00:15) - BHIS - Talkin' Bout [infosec] News 2022-12-12
(02:12) - Story # 1: Rackspace confirms ransomware attack behind days-long email meltdown
(07:56) - Story # 1b: Rackspace Hit With Lawsuits Over Ransomware Attack
(09:13) - Story # 2: Uber suffers new data breach after attack on vendor, info leaked online
(13:18) - Story # 3: Apple Plans New Encryption System to Ward Off Hackers and Protect iCloud Data
(14:20) - Story # 3b: Apple Newsroom: Apple advances user security with powerful new data protections
(16:46) - Story # 3c: FBI Calls End-to-End Encryption 'Deeply Concerning' as Privacy Groups Hail Apple's Advanced Data Protection as a Victory for Users
(21:17) - Story # 3d: Learn more about iCloud in China mainland
(22:53) - Story # 3e: Apple Kills Its Plan to Scan Your Photos for CSAM. Here’s What’s Next
(25:02) - Story # 4: Pet Dog Unmasks Drug Trafficker on Encrypted Chat
(28:34) - Story # 4b: Operation Venetic: Pet dog and accidental selfies help convict international drugs traffickers
(30:06) - Story # 5: ChatGPT
(45:43) - Story # 6: San Francisco decides killer police robots aren’t such a great idea

Talkin’ About Infosec News – 12/6/2022

Black Hills Information Security — Tue, 06 Dec 2022 15:48:33 -0500

00:00 – PreShow Banter™ — Florida Bobsledding Team01:29 – PreShow Banter™ — Open AI Phishing Campaign05:17 – BHIS – Talkin’ Bout [infosec] News 2022-12-0507:53 – Story # 1: There are […]

The post Talkin’ About Infosec News – 12/6/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Florida Bobsleding Team
(01:29) - PreShow Banter™ — Open AI Phishing Campaign
(05:17) - BHIS - Talkin' Bout [infosec] News 2022-12-05
(07:53) - Story # 1: There are no episodes of Darknet Diaries scheduled Q1
(09:45) - Story # 2: Elon Musk Meets With Apple CEO Tim Cook Amid Claims of Twitter App Store Dispute
(14:46) - Story # 3: Anker's Eufy Cameras Caught Uploading Content to the Cloud Without User Consent
(23:20) - Story # 3b: Eufy caught lying about local-only security cameras with footage sent to cloud, accessible in unencrypted streams
(26:54) - Story # 4: FCC faces long road in stripping Chinese tech from US telecom networks
(34:19) - Story # 5: TikTok NSFW if you work for the South Dakota government
(37:40) - Story # 6: Never-before-seen malware is nuking data in Russia’s courts and mayors’ offices
(41:56) - Story # 7: Lessons from Russia’s cyber-war in Ukraine
(44:15) - Story # 8: DHS Cyber Safety Review Board to focus on Lapsus$ hackers
(49:49) - Story # 8b: Cyber Safety Review Board to Conduct Second Review on Lapsus$
(50:42) - Story # 9: Rackspace rocked by ‘security incident’ that has taken out hosted Exchange services
(57:05) - Story # 10: Red Alert: The SFPD Want the Power to Kill with Robots

Talkin’ About Infosec News – 11/30/2022

Black Hills Information Security — Wed, 30 Nov 2022 18:07:53 -0500

00:00 – PreShow Banter™ — Inflatable Turkey00:15 – BHIS – Talkin’ Bout [infosec] News 2022-11-2802:34 – Story # 1: Musk recruits engineers for “Twitter 2.0”https://arstechnica.com/tech-policy/2022/11/musk-recruits-engineers-for-twitter-2-0-after-mass-layoffs-and-resignations/06:28 – Story # 2: Security […]

The post Talkin’ About Infosec News – 11/30/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Inflatable Turkey
(00:15) - BHIS - Talkin' Bout [infosec] News 2022-11-28
(02:34) - Story # 1: Musk recruits engineers for “Twitter 2.0”
(06:28) - Story # 2: Security experts are laying Mastodon's flaws bare
(15:01) - Story # 3: 5.4 million Twitter users' stolen data leaked online — more shared privately
(18:23) - Story # 4: 34 Russian Cybercrime Groups Stole Over 50 Million Passwords with Stealer Malware
(19:48) - Story # 5: Sonder confirms data breach, documents and other PII potentially compromised
(27:49) - Story # 6: Why Medibank should have paid the hackers
(30:43) - Story # 7: Hackers are locking out Mars Stealer operators from their own servers
(33:42) - Story # 8: Ransomware gang says it won’t attack AirAsia again due to the “chaotic organisation” and sloppy security of hacked airline’s network
(40:09) - Story # 9: Over 1,600 Docker Hub Repositories Were Found to Hide Malware
(46:25) - Story # 10: New Windows Server updates cause domain controller freezes, restarts
(53:39) - Story # 11: Making Cobalt Strike harder for threat actors to abuse

Talkin’ About Infosec News – 11/16/2022

Black Hills Information Security — Wed, 16 Nov 2022 10:19:28 -0500

00:00 – BHIS – Talkin’ Bout [infosec] News 2022-11-1402:26 – Story # 1: Hackers Dump Australian Health Records Online After Insurer Refuses to Pay Ransom– https://gizmodo.com/hackers-health-info-online-medibank-pay-onion-dark-web-184976074210:04 – Story # 2: TransUnion […]

The post Talkin’ About Infosec News – 11/16/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-11-14
(02:26) - Story # 1: Hackers Dump Australian Health Records Online After Insurer Refuses to Pay Ransom
(10:04) - Story # 2: TransUnion LLC Confirms Recent Data Breach with State Attorney General’s Office
(18:08) - Story # 3: Russian LockBit ransomware operator arrested in Canada
(22:58) - Story # 4: The downfall of FTX's Sam Bankman-Fried sends shockwaves through the crypto world
(32:10) - Story # 4b: Coinsec Podcast. coinsecpodcast.com
(40:23) - Story # 5: Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero-Days
(42:12) - Story # 6: Elon Musk is putting Twitter at risk of billions in fines, warns company lawyer
(51:12) - Story # 7: https://infosec.exchange/explore
(55:04) - Story # 8: Microsoft Windows Sysmon Elevation of Privilege Vulnerability
(55:30) - Story # 8b: https://twitter.com/filip_dragovic/status/1590104354727436290

Talkin’ About Infosec News – 11/11/2022

Black Hills Information Security — Fri, 11 Nov 2022 14:36:09 -0500

00:00 – PreShow Banter™ — A is for All Team00:33 – BHIS – Talkin’ Bout [infosec] News 2022-11-0703:56 – Story # 1: Musk to cut half of Twitter jobs and […]

The post Talkin’ About Infosec News – 11/11/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — A is for All Team
(00:33) - BHIS - Talkin' Bout [infosec] News 2022-11-07
(03:56) - Story # 1: Musk to cut half of Twitter jobs and end remote work for the rest, report says
(18:56) - Story # 2: Dropbox Data Breach Another Multifactor Fail
(19:43) - Story # 2b: Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories
(24:24) - Story # 3: Hundreds of U.S. news sites push malware in supply-chain attack
(28:38) - Story # 4: New TikTok Privacy Policy Confirms Chinese Staff Can Access European Users' Data
(32:23) - Story # 5: A cyberattack blocked the trains in DenmarkSecurity Affairs
(40:52) - Story # 6: Facebook probably has your phone number, even if you never shared it. Now it has a secret tool to let you delete it.
(45:19) - Story # 7: China is likely stockpiling and deploying vulnerabilities, says Microsoft
(48:44) - Story # 8: Hackers selling access to 576 corporate networks for $4 million

Talkin’ About Infosec News – 11/1/2022

Black Hills Information Security — Tue, 01 Nov 2022 15:52:01 -0400

00:00 – PreShow Banter™ — Spook Show00:58 – BHIS – Talkin’ Bout [infosec] News 2022-10-3104:00 – Story # 1: OpenSSL warns of critical security vulnerability with upcoming patch– https://www.zdnet.com/article/openssl-warns-of-critical-security-vulnerability-with-upcoming-patch/04:42 – Story […]

The post Talkin’ About Infosec News – 11/1/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Spook Show
(00:58) - BHIS - Talkin' Bout [infosec] News 2022-10-31
(04:00) - Story # 1: OpenSSL warns of critical security vulnerability with upcoming patch
(04:42) - Story # 1b: Notes on OpenSSL remote memory corruption
(12:28) - Story # 2: GitHub Bug Exposed Repositories to Hijacking
(16:20) - Story # 3: Gartner Identifies the Top 10 Strategic Technology Trends for 2023
(25:54) - Story # 4: Former U.K. Prime Minister Liz Truss’ Phone Allegedly Hacked By Kremlin Spies: Report
(34:45) - Story # 5: New Azov data wiper tries to frame researchers and BleepingComputer

Talkin’ About Infosec News – 10/17/2022

Black Hills Information Security — Thu, 20 Oct 2022 14:11:16 -0400

00:00 – PreShow Banter™ — Best WWHF Ever!00:31 – BHIS – Talkin’ Bout [infosec] News 2022-10-1704:55 – Story # 1: The Verge: Cybersecurity Week 2022– https://www.theverge.com/23365380/cybersecurity-week-series-phishing-encryption-device-security07:02 – Story # 2: Google […]

The post Talkin’ About Infosec News – 10/17/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Best WWHF Ever!
(00:31) - BHIS - Talkin' Bout [infosec] News 2022-10-17
(04:55) - Story # 1: The Verge: Cybersecurity Week 2022
(07:02) - Story # 2: Google Cybersecurity Action Team Threat Horizons Report #4 Is Out!
(23:34) - Story # 3: Caffeine service lets anyone launch Microsoft 365 phishing attacks
(28:05) - Story # 4: AirTags in Checked Baggage
(31:55) - Story # 5: International crackdown on West-African financial crime rings
(36:50) - Story # 6: Indian Energy Company Tata Power's IT Infrastructure Hit By Cyber Attack
(38:17) - Story # 6b: This Is How They Tell Me the World Ends: The Cyberweapons Arms Race
(56:08) - Story # 6c: Brave New War: The Next Stage of Terrorism and the End of Globalization
(58:18) - Bear Vs Bear Breaking News

Talkin’ About Infosec News – 10/17/2022

Black Hills Information Security — Tue, 18 Oct 2022 14:37:09 -0400

00:00 – PreShow Banter™ — Dumpster Fire Friends03:07 – PreShow Banter™ — WHHF Deadwood – https://wildwesthackinfest.com/deadwood/ 03:48 – BHIS – Talkin’ Bout [infosec] News 2022-10-0307:37 – Story # 1: High-severity […]

The post Talkin’ About Infosec News – 10/17/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Dumpster Fire Friends
(03:07) - PreShow Banter™ — WHHF Deadwood
(03:48) - BHIS - Talkin’ Bout [infosec] News 2022-10-03
(07:37) - Story # 1: High-severity Microsoft Exchange 0-day under attack threatens 220,000 servers
(19:30) - Story # 2: Stealthy hackers target military and weapons contractors in recent attack
(25:52) - Story # 3: Putin grants Russian citizenship to Edward Snowden
(29:09) - Story # 4: What the Securing Open Source Software Act does and what it misses
(38:17) - Story # 4b: SecBSD Team
(40:43) - Story # 5: New Malware Campaign Targeting Job Seekers with Cobalt Strike Beacons

Talkin’ About Infosec News – 10/5/2022

Black Hills Information Security — Wed, 05 Oct 2022 17:21:14 -0400

02:28 – Story # 1: American Airlines Breach Exposes Customer and Staff Information– https://www.infosecurity-magazine.com/news/american-airlines-breach-customer/18:59 – Story # 2: London police arrest, charge teen hacking suspect but won’t confirm GTA 6, Uber […]

The post Talkin’ About Infosec News – 10/5/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-09-26
(02:28) - Story # 1: American Airlines Breach Exposes Customer and Staff Information
(18:59) - Story # 2: London police arrest, charge teen hacking suspect but won’t confirm GTA 6, Uber links
(25:32) - Story # 3: LockBit ransomware builder leaked online by “angry developer”
(30:11) - Story # 4: Malwarebytes blocks Google, YouTube as malware
(32:14) - Story # 5: AdGuard’s new ad blocker struggles with Google’s Manifest v3 rules
(37:29) - Story # 6: Adware on Google Play and Apple Store installed 13 million times
(41:18) - Story # 7: Revealed: US Military Bought Mass Monitoring Tool That Includes Internet Browsing, Email Data
(50:55) - Story # 8: SIM Swapper Abducted, Beaten, Held for $200k Ransom

Talkin’ About Infosec News – 9/22/2022

Black Hills Information Security — Thu, 22 Sep 2022 16:08:40 -0400

The post Talkin’ About Infosec News – 9/22/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Special Operations Gig
(00:28) - BHIS - Talkin' Bout [infosec] News 2022-09-19
(02:45) - Story # 1: Uber Security Update
(04:26) - Story # 1b: A teen hacked Uber and announced it in the company Slack. Employees thought it was a joke
(30:01) - Story # 2: White House Releases First-Ever Comprehensive Framework for Responsible Development of Digital Assets
(35:34) - Story # 3: GTA 6 source code and videos leaked after Rockstar Games hack
(44:40) - Story # 4: Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs
(47:47) - Story # 5: LockBit 3.0 Ransomware Victim: First bounty payout $50,000

Talkin’ About Infosec News – 9/13/2022

Black Hills Information Security — Tue, 13 Sep 2022 14:51:32 -0400

The post Talkin’ About Infosec News – 9/13/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Forbidden Snacks
(02:41) - BHIS - Talkin' Bout [infosec] News 2022-09-12
(04:54) - Story # 1: China Accuses US of 'Tens of Thousands' of Cyberattacks
(12:13) - Story # 2: Hackers Honeytrap Russian Troops Into Sharing Location, Base Bombed: Report
(18:33) - Story # 3: Inside Fog Data Science, the Secretive Company Selling Mass Surveillance to Local Police
(44:13) - Story # 4: Ireland fines Instagram a record $400 mln over children's data
(46:29) - Story # 5: FBI, Secret Service join Kentucky investigation into $4 million cybercrime theft
(50:12) - Story # 6: New Ransomware Group BianLian Activity Exploding
(51:41) - Story # 6b: https://canarytokens.org/generate#

Talkin’ About Infosec News – 9/9/2022

Black Hills Information Security — Fri, 09 Sep 2022 10:55:04 -0400

The post Talkin’ About Infosec News – 9/9/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Accidental Furry Hoodies
(02:19) - BHIS - Talkin' Bout [infosec] News 2022-08-29
(04:37) - Story # 1: Plex breach exposes usernames, emails, and encrypted passwords
(09:06) - Story # 2: LastPass Breach
(18:33) - Story # 3: DoorDash data breach exposes customer details
(22:47) - Story # 4: Greek gas operator refuses to negotiate with ransomware group after attack
(25:01) - Story # 5: Ex-Twitter exec blows the whistle, alleging reckless and negligent cybersecurity policies
(35:46) - Story # 6: Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers
(42:16) - Story # 7: Google opens up its experimental AI chatbot for public testing
(45:22) - Story # 8: Microsoft finds critical hole in operating system that for once isn't Windows
(46:56) - Story # 9: VMware confirms Carbon Black causes BSODs, boot loops on Windows
(56:01) - Story # 10: Nato investigates hacker sale of missile firm data

Talkin’ About Infosec News – 8/26/2022

Black Hills Information Security — Fri, 26 Aug 2022 13:35:14 -0400

ORIGINALLY AIRED ON AUGUST 22, 2022 00:00 – PreShow Banter™ — Ralph’s Birthday00:53 – BHIS – Talkin’ Bout [infosec] News 2022-08-2203:27 – Story # 1: PC store told it can’t […]

The post Talkin’ About Infosec News – 8/26/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Ralph's Birthday
(00:53) - BHIS - Talkin' Bout [infosec] News 2022-08-22
(03:27) - Story # 1: PC store told it can't claim full cyber-crime insurance after social-engineering attack
(13:48) - Story # 2: Lloyd’s to Exclude Catastrophic Nation-Backed Cyberattacks From Insurance Coverage
(15:33) - Story # 2b: LLOYD'S Market Bulletin
(24:53) - Story # 3: AirTag leads to arrest of airline worker accused of stealing at least $15,000 worth of items from luggage
(30:12) - Story # 4: Apple security updates fix 2 zero-days used to hack iPhones, Macs
(37:58) - Story # 5: Microsoft Sysmon can now block malicious EXEs from being created
(43:37) - Story # 6: Def Con hacker shows John Deere’s tractors can run Doom
(53:44) - Story # 7: Janet Jackson’s ‘Rhythm Nation’ apparently vibed too hard for some laptops

Talkin’ About Infosec News – 8/18/2022

Black Hills Information Security — Thu, 18 Aug 2022 15:17:30 -0400

ORIGINALLY AIRED ON AUGUST 15, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Sneaking Candy03:32 – BHIS – Talkin’ Bout [infosec] News 2022-08-1507:06 – Story # 1: […]

The post Talkin’ About Infosec News – 8/18/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Sneaking Candy
(03:32) - BHIS - Talkin' Bout [infosec] News 2022-08-15
(07:06) - Story # 1: Blackhat 2022 recap – Trends and highlights
(09:52) - Story # 2: The Zoom installer let a researcher hack his way to root access on macOS
(14:15) - Story # 3: Researchers Find Vulnerabilities in Software Underlying Discord, Microsoft Teams, and Other Apps
(16:18) - Story # 4: Starlink Successfully Hacked Using $25 Modchip
(21:47) - Story # 5: Anonymous poop gifting site hacked, customers exposed
(28:58) - Story # 6: Automotive supplier breached by 3 ransomware gangs in 2 weeks
(33:49) - Story # 7: Man who built ISP instead of paying Comcast $50K expands to hundreds of homes
(38:09) - Story # 8: Slack leaked hashed passwords from its servers for years
(40:33) - Story # 9: Cisco Talos shares insights related to recent cyber attack on Cisco
(48:07) - Story # 10: Incident Report: Employee and Customer Account Compromise
(50:54) - Story # 11: Hackers Behind Twilio Breach Also Targeted Cloudflare Employees

Talkin’ About Infosec News – 7/25/2022

Black Hills Information Security — Tue, 02 Aug 2022 12:17:32 -0400

ORIGINALLY AIRED ON JULY 25, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-07-25 03:59 – Story # 1: DOJ seized ransoms paid by […]

The post Talkin’ About Infosec News – 7/25/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-07-25
(03:59) - Story # 1: DOJ seized ransoms paid by health centers in Kansas, Colorado after 2021 attacks
(08:38) - Story # 1b: twitter.com/cryptowhale
(17:34) - Story # 2: How Conti ransomware hacked and encrypted the Costa Rican government
(22:29) - Story # 3: Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users
(36:49) - Story # 4: Google Play hides app permissions in favor of developer-written descriptions
(39:09) - Story # 4b: Google is reinstating app permissions list on Play Store
(41:31) - Story # 5: Hack the pump: Rising prices lead to more reports of gas theft
(46:04) - Story # 5b: Gas pump manipulators steal ‘millions of dollars’ in fuel
(50:40) - Story # 5c: Secret Service agents warn fleets about 'fuel skimming'
(53:13) - Story # 6: Atlassian fixes critical Confluence hardcoded credentials flaw
(53:33) - Story # 6b: Cisco fixes bug that lets attackers execute commands as root
(53:57) - Story # 7: New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals

Talkin’ About Infosec News – 7/18/2022

Black Hills Information Security — Wed, 20 Jul 2022 10:45:26 -0400

ORIGINALLY AIRED ON JULY 18, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Talkin’ Bout Audio 07:23 – BHIS – Talkin’ Bout [infosec] News 2022-07-18 09:28 – […]

The post Talkin’ About Infosec News – 7/18/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Talkin' Bout Audio
(07:23) - BHIS - Talkin' Bout [infosec] News 2022-07-18
(09:28) - Story # 1: Russian “hacktivists” are causing trouble far beyond Ukraine
(12:19) - Wade Into International Relations
(21:25) - Story # 2: UK Info Commissioner slams use of WhatsApp by health officials during pandemic
(26:11) - Story # 3: Microsoft warns of massive phishing campaign that can bypass MFA
(31:44) - Bud Patches Reporting
(37:08) - Story # 4: Today I learned Amazon has a form so police can get my data without permission or a warrant
(48:35) - Story # 4b: San Francisco cops want real-time access to private security cameras for surveillance
(56:59) - Story # 5: Man Arrested After Impersonating Disney Cast Member, Stealing $10,000 ‘Star Wars’ Droid
(59:06) - Story # 6: Disneyland social media accounts hacked, offensive messages posted

Talkin’ About Infosec News – 7/11/2022

Black Hills Information Security — Fri, 15 Jul 2022 10:14:50 -0400

ORIGINALLY AIRED ON JULY 11, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Cons, China, and Florida Man, oh my! 07:03 – Story # 1: North Korean […]

The post Talkin’ About Infosec News – 7/11/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Cons, China, and Florida Man, oh my!
(02:37) - BHIS - Talkin' Bout [infosec] News 2022-07-11
(07:03) - Story # 1: North Korean Hackers Target US Health Providers With 'Maui' Ransomware
(10:29) - Story # 2: Ransomware, hacking groups move from Cobalt Strike to Brute Ratel
(24:24) - Story # 3: DoD issues call for hackers to dig into networks
(29:21) - Story # 3b: Department of Justice Announces New Policy for Charging Cases under the Computer Fraud and Abuse Act
(33:15) - Story # 4: FCC Commissioner urges Google and Apple to ban TikTok
(41:41) - Story # 5: Microsoft rolls back decision to block Office macros by default
(42:01) - Story # 5b: Microsoft says decision to stop blocking Office VBA macros by default is ‘temporary’

Talkin’ About Infosec News – 6/27/2022

Black Hills Information Security — Thu, 30 Jun 2022 11:09:24 -0400

ORIGINALLY AIRED ON JUNE 27, 2022 Articles discussed in this episode: 02:13 – Story # 1: The #1 Period Tracker on the App Store Will Hand Over Data Without a […]

The post Talkin’ About Infosec News – 6/27/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-06-27
(02:13) - Story # 1: The #1 Period Tracker on the App Store Will Hand Over Data Without a Warrant
(20:56) - Story # 2: LockBit 3.0 introduces the first ransomware bug bounty program
(25:44) - Story # 3: Former AWS engineer convicted over hack that cost Capital One $270m
(28:52) - Story # 4: CISA experts propose ‘311’ cybersecurity emergency call line for small businesses
(38:25) - Story # 5: Clever phishing method bypasses MFA using Microsoft WebView2 apps
(40:00) - Story # 5b: mrd0x/WebView2-Cookie-Stealer
(43:28) - Story # 6: Game on! The 2022 Google CTF is here
(46:07) - Story # 7: Critical PHP flaw exposes QNAP NAS devices to RCE attacks
(50:03) - Story # 8: Japanese man loses USB stick with entire city's personal details
(54:51) - Story # 9: A Microsoft 365 feature can ransom files on SharePoint and OneDriveCould

Talkin’ About Infosec News – 6/20/2022

Black Hills Information Security — Fri, 24 Jun 2022 17:48:38 -0400

ORIGINALLY AIRED ON JUNE 20, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-06-20 01:31 – Story # 1: Internal TikTok Meetings Shows That […]

The post Talkin’ About Infosec News – 6/20/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-06-20
(01:31) - Story # 1: Internal TikTok Meetings Shows That US User Data Accessed From China
(05:14) - Story # 2: Mullvad VPN Removes Ability to Create New Subscriptions
(09:23) - Story # 3: Flagstar Bank discloses data breach impacting 1.5 million customers
(13:25) - Story # 4: Russia-linked APT targets Ukraine by exploiting the Follina RCE vulnerability
(17:39) - Story # 5: Tesla cars barred for 2 months in Beidaihe, site of China leadership meet
(20:18) - Story # 6: Microsoft 365 credentials targeted in new fake voicemail campaign
(22:27) - Bud Patches Reporting with Dancing John Strand.
(27:19) - Story # 7: FBI says fraud on LinkedIn a ‘significant threat’ to platform and consumers
(30:04) - Story # 8: Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second
(33:22) - Story # 9: Critical Code Execution Vulnerability Patched in Splunk Enterprise
(35:53) - Story # 10: Google AI Reprise
(37:43) - Story # 11: RSA was a Covid Superspreader event.
(42:03) - Story # 12: Facebook Is Receiving Sensitive Medical Information from Hospital Websites
(43:58) - Story # 12b: 18 HIPAA Identifiers

Talkin’ About Infosec News – 6/13/2022

Black Hills Information Security — Wed, 22 Jun 2022 12:13:00 -0400

ORIGINALLY AIRED ON JUNE 13, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-06-13 02:26 – Story # 1: Roblox Game Pass store used […]

The post Talkin’ About Infosec News – 6/13/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-06-13
(02:26) - Story # 1: Roblox Game Pass store used to sell ransomware decryptor
(07:35) - Story # 2: New Jersey school district forced to cancel final exams amid ransomware recovery effort
(10:31) - Story # 3: Security Fixes Won't Require Full iOS Update in iOS 16, Will Be Installed Automatically
(15:08) - Story # 4: Gone in 130 seconds: New Tesla hack gives thieves their own personal key
(20:07) - Story # 5: DuckDuckGo browser allows Microsoft trackers due to search agreement
(30:44) - Story # 6: Apple demos Safari’s ‘passkeys’ support in macOS Ventura that will help bring an end to passwords
(38:34) - Story # 6: Mass Account Takeover in the Yunmai smart scale API
(42:27) - Story # 7: Credentials for thousands of open source projects free for the taking—again!
(48:09) - Story # 8: Internet Explorer (almost) breathes its final byte on Wednesday
(55:28) - Story # 9: Google suspends engineer who claims its AI is sentient

Talkin’ About Infosec News – 6/6/2022

Black Hills Information Security — Tue, 21 Jun 2022 14:30:00 -0400

ORIGINALLY AIRED ON JUNE 6, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Boat Facts 01:38 – BHIS – Talkin’ Bout [infosec] News 2022-06-06 03:51 – Story […]

The post Talkin’ About Infosec News – 6/6/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Boat Facts
(01:38) - BHIS - Talkin' Bout [infosec] News 2022-06-06
(03:51) - Story # 1: Elon Musk threatens to scrap Twitter deal
(07:04) - Story # 2: Confluence Server and Data Center CVE
(13:55) - Story # 3: Mandiant: “No evidence” we were hacked by LockBit ransomware
(18:29) - Story # 4: Fake Windows exploits target infosec community with Cobalt Strike
(27:37) - Story # 5: Hacker Steals Database of Hundreds of Verizon Employees
(36:14) - Story # 6: India Flights grounded after SpiceJet hit with ransomware
(40:40) - Story # 7: Zero-Click Zoom Bug Allows Code Execution Just by Sending a Message
(42:15) - Story # 7b: Zoom's Bug Bounty Programs Soar to $1.8M
(45:29) - Story # 8: Twitter pays $150M fine for using two-factor login details to target ads
(49:27) - Story # 9: Microsoft finds severe bugs in Android apps from large mobile providers

Talkin’ About Infosec News – 5/23/2022

Black Hills Information Security — Mon, 20 Jun 2022 17:27:53 -0400

ORIGINALLY AIRED ON MAY 23, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-05-23 02:38 – Story # 1 – National bank trolls hackers […]

The post Talkin’ About Infosec News – 5/23/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-05-23
(02:38) - Story # 1 - National bank trolls hackers with dick pics
(06:59) - Story # 2 - Ransomware attack exposes data of 500,000 Chicago students
(14:09) - Story # 3 - Zola seems tight lipped on an unconfirmed breach
(21:57) - Weather With Bud Patches
(28:22) - Story # 4 - Snake Keylogger Spreads Through Malicious PDFs
(34:47) - Story # 5 - Bluetooth Hack - Remotely Unlock Smart Locks & Cars
(43:37) - Story # 6 - DOJ Changes CFAA Policy, Will No Longer Bring Criminal Charges Against Security Researchers

Talkin’ About Infosec News – 5/16/2022

Black Hills Information Security — Tue, 07 Jun 2022 11:36:18 -0400

ORIGINALLY AIRED ON MAY 16, 2022 Articles discussed in this episode: 00:56 – Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors – https://threatpost.com/microsofts-may-patch-tuesday-updates-cause-windows-ad-authentication-errors/179631/ 08:56 – Update rings for Windows 10 and later policy in Intune – https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings 09:06 – Infosec Weather Report With Bud Patches – 12:26 – FBI, CISA, and NSA warn […]

The post Talkin’ About Infosec News – 5/16/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-05-16
(01:02) - Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors
(09:17) - Update rings for Windows 10 and later policy in Intune
(09:31) - Infosec Weather Report With Bud Patches
(12:26) - FBI, CISA, and NSA warn of hackers increasingly targeting MSPs
(17:57) - Ransomware has gone down because sanctions against Russia are making life harder for attackers
(27:55) - Conti Ransomware Attack Spurs State of Emergency in Costa Rica
(31:19) - BPFDoor — an active Chinese global surveillance tool
(38:55) - Lincoln College to Close Permanently After Ransomware Attack
(43:47) - Certifried: Active Directory Domain Privilege Escalation (CVE-2022–26923)
(53:20) - Malware Can Be Loaded Even Onto Phones That Are Turned Off, Researchers Show

Talkin’ About Infosec News – 5/9/2022

Black Hills Information Security — Tue, 31 May 2022 11:49:59 -0400

ORIGINALLY AIRED ON MAY 9, 2022 Articles discussed in this episode: 00:00 – Bud Patches Reporting 02:27 – BHIS – Talkin’ Bout [infosec] News 2022-05-09 03:47 – Story # 1 […]

The post Talkin’ About Infosec News – 5/9/2022 appeared first on Black Hills Information Security.

(00:00) - Bud Patches Reporting
(02:27) - BHIS - Talkin' Bout [infosec] News 2022-05-09
(03:47) - Story # 1 - CISA Shields Up
(09:44) - Story # 2 - Critical BIG-IP Remote Code Execution Vulnerability
(29:25) - Story # 3 - Colonial Pipeline faces nearly $1m fine
(38:02) - Story # 4 - Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store
(45:15) - Story # 5 – FBI: Rise in Business Email-based Attacks is a $43B Headache

Talkin’ About Infosec News – 4/25/2022

Black Hills Information Security — Wed, 25 May 2022 14:53:51 -0400

ORIGINALLY AIRED ON APRIL 25, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Broken Twitter Finger 01:38 – ISO – Talkin’ Bout [infosec] News 2022-04-26 03:08 – […]

The post Talkin’ About Infosec News – 4/25/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Broken Twitter Finger
(01:57) - Talkin' Bout [infosec] News 2022-04-26
(03:23) - Elon Buys Twitter
(09:28) - Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code
(16:14) - Threat actors exploited more zero-day vulnerabilities in 2021
(27:12) - FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware
(41:18) - Atlassian Drops Patches for Critical Jira Authentication Bypass Vulnerability
(45:22) - New BotenaGo Malware Variant Targeting Lilin Security Camera DVR Devices
(51:52) - The War in Ukraine – Everyone Could Help. Volunteer centre “Palyanycia”, Zaporizhzhya
(53:24) - Antisyphon Training on Twitch

Talkin’ About Infosec News – 4/25/2022

Black Hills Information Security — Mon, 25 Apr 2022 17:15:52 -0400

ORIGINALLY AIRED ON APRIL 18, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-04-18 02:05 – Current Activity | CISA | https://www.cisa.gov/uscert/ncas/current-activity 02:58 – CISA orders agencies to fix actively exploited VMware, Chrome bugs | https://www.bleepingcomputer.com/news/security/cisa-orders-agencies-to-fix-actively-exploited-vmware-chrome-bugs/ 08:45 – Russian invasion of Ukraine exposes cybersecurity threat to commercial satellites | […]

The post Talkin’ About Infosec News – 4/25/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-04-18
(02:09) - Current Activity | CISA
(03:04) - CISA orders agencies to fix actively exploited VMware, Chrome bugs
(08:46) - Russian invasion of Ukraine exposes cybersecurity threat to commercial satellites
(11:06) - Leaked documents show notorious ransomware group has an HR department, performance reviews and an ‘employee of the month’
(15:48) - Hacking forum taken offline and UK suspect arrested
(19:35) - GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens
(23:55) - AWS API Keys Token - Canary Tokens
(25:36) - First Malware Targeting AWS Lambda Serverless Platform Discovered
(27:05) - Make phishing great again. VSTO office files are the new macro nightmare?
(33:49) - my university financial hardship PHISHING exercise...
(36:01) - 25% Of Workers Lost Their Jobs In The Past 12 Months After Making Cybersecurity Mistakes
(46:49) - Elon Musk Believes Twitter Algorithm Should Be Open-Source

Talkin’ About Infosec News – 4/12/2022

Black Hills Information Security — Tue, 12 Apr 2022 17:39:55 -0400

ORIGINALLY AIRED ON APRIL 11, 2022 Articles discussed in this episode: The US Navy had cybersecurity wrong. Expect change. – https://www.c4isrnet.com/digital-show-dailies/navy-league/2022/04/05/us-navy-had-cybersecurity-wrong-expect-change/ Hackers have found a clever new way to steal your Microsoft 365 credentials. – https://www.techradar.com/news/hackers-have-found-a-clever-new-way-to-steal-your-microsoft-365-credentials Exclusive: Senior EU officials were targeted with Israeli spyware. – https://www.reuters.com/technology/exclusive-senior-eu-officials-were-targeted-with-israeli-spyware-sources-2022-04-11/ Snap-on discloses data breach claimed by Conti ransomware […]

The post Talkin’ About Infosec News – 4/12/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-02-11
(02:21) - The US Navy had cybersecurity wrong. Expect change.
(17:23) - Hackers have found a clever new way to steal your Microsoft 365 credentials
(21:17) - Exclusive: Senior EU officials were targeted with Israeli spyware
(28:40) - Snap-on discloses data breach claimed by Conti ransomware gang
(37:26) - Bearded Barbie hackers catfish high ranking Israeli officials
(44:02) - Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU)
(47:47) - WatchGuard failed to explicitly disclose critical flaw exploited by Russian hackers
(55:09) - Ukrainians use 'Find My iPhone' to see where Russians took their stolen Apple devices

Talkin’ About Infosec News – 4/6/2022

Black Hills Information Security — Wed, 06 Apr 2022 10:22:14 -0400

ORIGINALLY AIRED ON APRIL 4, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Blame it on the Intern 06:24 – Spring Time for Java – https://www.darkreading.com/application-security/zero-day-vulnerability-discovered-in-java-spring-framework 09:10 – GitLab for Account Access – https://www.bleepingcomputer.com/news/security/critical-gitlab-vulnerability-lets-attackers-take-over-accounts/ 10:33 – No Passwords for Okta – https://www.bleepingcomputer.com/news/security/sitel-on-okta-breach-spreadsheet-did-not-contain-passwords/ 11:11 – Legacy Networks for Okta – https://therecord.media/sitel-blames-okta-breach-on-legacy-network-from-acquisition/ 12:40 – […]

The post Talkin’ About Infosec News – 4/6/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Blame it on the Intern
(06:24) - Spring Time for Java
(09:10) - GitLab for Account Access
(10:33) - No Passwords for Okta
(11:11) - Legacy Networks for OKta - https://therecord.media/sitel-blames-okta-breach-on-legacy-network-from-acquisition/
(12:40) - Lawsuit for Ubiquity
(17:01) - MITRE ATT&CK for EDMs
(21:17) - Breach for Mailchimp
(30:54) - 15 Characters for John
(40:17) - Data Requests for Apple
(46:52) - Drones for Ukraine

Talkin’ About Infosec News – 3/31/2022

Black Hills Information Security — Thu, 31 Mar 2022 16:06:37 -0400

ORIGINALLY AIRED ON MARCH 28, 2022 Articles discussed in this episode: 01:42 – Suspected Okta hackers arrested by British police – https://www.reuters.com/world/uk/british-police-say-seven-people-arrested-after-okta-hack-2022-03-24/ 11:16 – A Closer Look at the LAPSUS$ Data Extortion Group – https://krebsonsecurity.com/2022/03/a-closer-look-at-the-lapsus-data-extortion-group/ 14:04 – Anonymous Starts ‘Huge’ Data Dump That Will ‘Blow Russia Away,’ Leaks Rostproekt Emails – https://www.ibtimes.com/anonymous-starts-huge-data-dump-will-blow-russia-away-leaks-rostproekt-emails-3452789 22:28 – Most […]

The post Talkin’ About Infosec News – 3/31/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-03-28
(01:42) - Suspected Okta hackers arrested by British police
(11:16) - A Closer Look at the LAPSUS$ Data Extortion Group
(14:04) - Anonymous Starts 'Huge' Data Dump That Will 'Blow Russia Away,' Leaks Rostproekt Emails
(22:28) - Most Severe’ Cyberattack Since Russian Invasion Crashes Ukraine Internet Provider
(27:53) - Man linked to multi-million dollar ransomware attacks gets 66 months in prison for online fraud
(34:17) - Greece’s national postal service restoring systems after ransomware attack
(37:02) - FCC puts Kaspersky on security threat list, says it poses “unacceptable risk”
(42:07) - We blocked North Korea's Chrome exploit, says Google
(43:43) - North Korean hackers unleashed Chrome 0-day exploit on hundreds of US targets
(47:08) - New Variant of Chinese Gimmick Malware Targeting macOS Users
(49:57) - Hackers remotely start, unlock Honda Civics with $300 tech
(55:08) - https://flipperzero.one/

Talkin’ About Infosec News – 3/30/2022

Black Hills Information Security — Wed, 30 Mar 2022 14:31:24 -0400

ORIGINALLY AIRED ON MARCH 22, 2022 Articles discussed in this episode: 00:00 – BHIS – 2022-03-22 Special Newscast –Okta and Microsoft — Everything’s not burning down 10:27 – https://github.com/SigmaHQ/sigma/tree/master/rules/cloud/okta 13:29 – https://github.com/elastic/detection-rules/tree/main/rules/integrations/okta 18:20 – https://www.dsolutionsgroup.com/pci-dss-password-requirements/ 27:44 – https://twitter.com/BushidoToken/status/1506338850557337603

The post Talkin’ About Infosec News – 3/30/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - 2022-03-22 Special Newscast –Okta and Microsoft — Everything's not burning down
(10:27) - https://github.com/SigmaHQ/sigma/tree/master/rules/cloud/okta
(13:29) - https://github.com/elastic/detection-rules/tree/main/rules/integrations/okta
(18:20) - https://www.dsolutionsgroup.com/pci-dss-password-requirements/#:~:text=According%20to%20PCI%20DSS%2C%20employees,bare%20minimum%20for%20password%20security
(27:44) - https://twitter.com/BushidoToken/status/1506338850557337603

Talkin’ About Infosec News – 3/29/2022

Black Hills Information Security — Tue, 29 Mar 2022 13:36:41 -0400

ORIGINALLY AIRED ON MARCH 21, 2022 Articles discussed in this episode: 03:27 – Netflix to clamp down on password sharing – https://about.netflix.com/en/news/paying-to-share-netflix-outside-your-household 10:15 – Ransomeware is still a thing 12:31 – Ransomeware Tell-All – https://www.zdnet.com/article/hit-by-ransomware-or-paid-a-ransom-now-some-companies-will-have-to-tell-the-government/ 24:01 – Microsoft Defender tags Office Updates as ransomware – https://www.bleepingcomputer.com/news/security/microsoft-defender-tags-office-updates-as-ransomware-activity/ 31:01 – Microsft Double Patch Tuesday – https://www.bleepingcomputer.com/news/microsoft/windows-zero-day-flaw-giving-admin-rights-gets-unofficial-patch-again/ 32:28 […]

The post Talkin’ About Infosec News – 3/29/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-03-21
(03:27) - Netflix to clamp down on password sharing
(10:15) - Ransomeware is still a thing
(12:31) - Ransomeware Tell-All
(24:01) - Microsoft Defender tags Office Updates as ransomware
(31:01) - Microsft Double Patch Tuesday
(32:28) - BitB attack
(39:44) - Women make up just 24% of the cyber workforce

Talkin’ About Infosec News – Special Ukraine Edition – 3/10/2022

Black Hills Information Security — Thu, 10 Mar 2022 10:45:51 -0500

ORIGINALLY AIRED ON MARCH 7, 2022 Articles discussed in this episode: 00:08:57 – Hacker Group Anonymous and Others Targeting Russian Data – https://www.websiteplanet.com/blog/cyberwarfare-ukraine-anonymous/

The post Talkin’ About Infosec News – Special Ukraine Edition – 3/10/2022 appeared first on Black Hills Information Security.

(00:00) - Start
(08:57) - Hacker Group Anonymous and Others Targeting Russian Data

Talkin’ About Infosec News – 3/4/2022

Black Hills Information Security — Fri, 04 Mar 2022 12:49:47 -0500

ORIGINALLY AIRED ON FEBRUARY 28, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Off-Brand Trickx 00:43 – BHIS – Talkin’ Bout [infosec] News 2022-02-28 02:40 – BHIS Anti-Vigilante PSA 04:17 – Biden has been presented with options for massive cyberattacks against Russia – https://www.nbcnews.com/politics/national-security/biden-presented-options-massive-cyberattacks-russia-rcna17558?mc_cid=e57638ad42 09:46 – Russia has been preparing to have […]

The post Talkin’ About Infosec News – 3/4/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Off-Brand Trickx
(00:43) - BHIS - Talkin' Bout [infosec] News 2022-02-28
(02:40) - BHIS Anti-Vigilante PSA
(04:17) - Biden has been presented with options for massive cyberattacks against Russia
(09:46) - Russia has been preparing to have its internet cut off
(12:45) - Conti ransomware gang chats leaked by pro-Ukraine member
(14:43) - 'Hundreds of computers' in Ukraine hit with wiper malware as conflict continues
(18:04) - NVIDIA Hit By Major Cyberattack That May Have ‘Completely Compromised’ Parts of Its Business
(22:28) - A SWIFT discussion ( no article )
(28:59) - Russia started blocking Tor
(32:28) - Elon Musk pledges to send Starlink terminals to Ukraine
(36:10) - Insurance giant AON hit by a cyberattack over the weekend
(46:02) - People & orgs providing FREE cyber services to Ukrainians
(52:39) - Threatbutt Internet Hacking Attack Attribution Map

Talkin’ About Infosec News – 3/1/2022

Black Hills Information Security — Tue, 01 Mar 2022 15:02:13 -0500

ORIGINALLY AIRED ON FEBRUARY 21, 2022 Articles discussed in this episode: 02:36 – Story # 1: Massive cyberattack takes Ukraine military, big bank websites offline – https://www.theregister.com/2022/02/15/ukraine_cyberattack/ 04:26 – Story # 2: The Elite Hackers of the FSB – https://interaktiv.br.de/elite-hacker-fsb/en/index.html 07:47 – Story # 3: Exclusive: FBI Braces for Russian Cyber Attacks in US as […]

The post Talkin’ About Infosec News – 3/1/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-02-21
(02:36) - Story # 1: Massive cyberattack takes Ukraine military, big bank websites offline
(04:26) - Story # 2: The Elite Hackers of the FSB
(07:47) - Story # 3: Exclusive: FBI Braces for Russian Cyber Attacks in US as Ukraine Tensions Rise
(18:22) - Story # 4: Microsoft Defender will soon block Windows password theft
(22:28) - Story # 5: Dad takes down town's internet by mistake to get his kids offline
(28:50) - Story # 6: Akamai acquires Linode for $900M
(34:49) - Story # 7: Microsoft eyeing deal to buy cybersecurity firm Mandiant -Bloomberg
(40:00) - Story # 8: If the Cloud Is More Secure, Then Why Is Everything Still Broken?
(44:40) - Story # 9: Never, Ever, Ever Use Pixelation for Redacting Text

Talkin’ About Infosec News – 2/11/2022

Black Hills Information Security — Fri, 11 Feb 2022 12:57:02 -0500

ORIGINALLY AIRED ON FEBRUARY 7, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — I’m a Rocket Mail 01:21 – BHIS – Talkin’ Bout [infosec] News 2022-02-07 02:18 – Story # 1: Be Careful When Sharing Data in Photos – https://twitter.com/amateuradam/status/1490394034900197388 03:44 – Story # 2: China-Linked Group Attacked Taiwanese Financial Firms for […]

The post Talkin’ About Infosec News – 2/11/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — I'm a Rocket Mail
(01:21) - BHIS - Talkin' Bout [infosec] News 2022-02-07
(02:18) - Story # 1: Be Careful When Sharing Data in Photos
(03:44) - Story # 2: China-Linked Group Attacked Taiwanese Financial Firms for 18 Months
(20:56) - Story # 3: Microsoft to block internet macros by default in five Office applications
(28:11) - Story # 4: Apple's Privacy Measures to Cost Facebook $10 Billion in 2022
(47:27) - Noisy browser plugin
(51:15) - Cool Leather Jackets

Talkin’ About Infosec News – 2/4/2022

Black Hills Information Security — Fri, 04 Feb 2022 11:49:59 -0500

ORIGINALLY AIRED ON JANUARY 31, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Legions of the Undead 01:26 – BHIS – Talkin’ Bout [infosec] News 2022-01-31 04:06 – Story # 1: Hacktivists say they hacked Belarus rail system to stop Russian military buildup – https://arstechnica.com/information-technology/2022/01/hactivists-say-they-hacked-belarus-rail-system-to-stop-russian-military-buildup/ 08:46 – Story # 2: Ukrainian government […]

The post Talkin’ About Infosec News – 2/4/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Legions of the Undead
(01:26) - BHIS - Talkin' Bout [infosec] News 2022-01-31
(04:06) - Story # 1: Hactivists say they hacked Belarus rail system to stop Russian military buildup
(08:46) - Story # 2: Ukrainian government calls out false flag operation in recent data wiping attack
(11:18) - Story # 3: Ukrainian cyber defense in need of upgrades as tensions rise
(17:32) - Story # 4: DoD weapons testers to assess cybersecurity of GPS satellites, ground system and user equipment
(24:50) - Story # 5: FBI Reportedly Considered Buying NSO Spyware
(28:02) - Story # 6: Hacking the Apple Webcam (again)
(30:36) - Story # 7: Microsoft Teams users can now chat with any Teams user outside their organization
(34:11) - Story # 7b: https://twitter.com/rucam365/status/1487861808081915906
(38:15) - Story # 8: Lazarus hackers use Windows Update to deploy malware
(41:38) - Story # 9: Elon Musk Tried To Pay A Teen Thousands Of Dollars To Stop Tracking His Plane
(45:36) - Story # 10: 1.5M US bank cards have been hacked: NordVPN
(51:15) - Story # 11: 2FA app with 10,000 Google Play downloads loaded well-known banking trojan
(54:50) - Story # 12: Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets

Talkin’ About Infosec News – 1/27/2022

Black Hills Information Security — Thu, 27 Jan 2022 13:29:52 -0500

ORIGINALLY AIRED ON JANUARY 24, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — The Monkey Dance 00:25 – BHIS – Talkin’ Bout [infosec] News 2022-01-24 01:49 – Story # 1: New Log4j attacks target SolarWinds, ZyXEL devices – https://therecord.media/new-log4j-attacks-target-solarwinds-zyxel-devices/ 08:18 – Story # 2: New MoonBounce UEFI bootkit can’t be removed by […]

The post Talkin’ About Infosec News – 1/27/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — The Monkey Dance
(00:25) - BHIS - Talkin' Bout [infosec] News 2022-01-24
(01:49) - Story # 1: New Log4j attacks target SolarWinds, ZyXEL devices
(08:18) - Story # 2: New MoonBounce UEFI bootkit can’t be removed by replacing the hard drive
(13:18) - Story # 3: Crypto.com finally confirms major hack, says it lost $34 million
(15:53) - Story # 3b: Coinbase Hack
(21:47) - Story # 4: Hackers From North Korea Stole Millions Of Dollars From Cryptocurrency Startups All Across The World
(26:42) - Story # 5: Mixed Messages: Busting Box’s MFA Methods
(35:06) - Story # 6: School District reports a 334% hike in cybersecurity insurance costs
(38:42) - Story # 7: Europol takes down VPNLab, a service used by ransomware gangs
(42:12) - Story # 8: Why this threat intelligence expert believes cyberattacks aren’t Ukraine’s biggest concern

Talkin’ About Infosec News – 1/21/2022

Black Hills Information Security — Fri, 21 Jan 2022 10:15:56 -0500

ORIGINALLY AIRED ON JANUARY 17, 2022 Articles discussed in this episode: 0:00:00 – PreShow Banter™ — Whose Ears Are Buring? 0:01:06 – BHIS – Talkin’ Bout [infosec] News 2022-01-17 0:02:27 – Story # 1: Russia takes down REvil hacking group at U.S. request – https://www.reuters.com/technology/russia-arrests-dismantles-revil-hacking-group-us-request-report-2022-01-14/ 0:07:00 – Story # 2: White House: Arrested Russian hacker […]

The post Talkin’ About Infosec News – 1/21/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Who's Ears Are Buring?
(01:06) - BHIS - Talkin' Bout [infosec] News 2022-01-17
(02:27) - Story # 1: Russia takes down REvil hacking group at U.S. request
(07:00) - Story # 2: White House: Arrested Russian hacker was behind Colonial Pipeline attack
(09:29) - Story # 3: Hotel chain switches to Chrome OS to recover from ransomware attack
(15:22) - Story # 4: QNAP issues ransomware warning to users
(19:56) - Story # 5: Backdoor RAT for Windows, macOS, and Linux went undetected until now
(24:50) - Story # 6: Safari Bug Allows Websites to Track Your Recent Browsing Activity in Real Time
(30:02) - Story # 7: New macOS vulnerability, “powerdir,” could lead to unauthorized user data access
(35:26) - Story # 8: Revealed: UK Gov’t Plans Publicity Blitz to Undermine Privacy of Your Chats
(36:52) - Story # 9: Apple under fire for iPhone encryption technology – Telegraph.co.uk
(44:14) - Story # 10: Scammers put fake QR codes on parking meters to intercept parkers’ payments
(50:38) - Story # 11: Chrome will limit access to private networks, citing security reasons
(54:57) - Story # 12: Cyberattack causes Albuquerque Public Schools to cancel classes Thursday
(01:03:15) - Talkin Bout Keyboards

Talkin’ About Infosec News – 1/14/2022

Black Hills Information Security — Fri, 14 Jan 2022 13:33:51 -0500

ORIGINALLY AIRED ON JANUARY 10, 2022 Articles discussed in this episode: 01:58 – Story # 1: WordPress Core Vulnerabilities – https://www.searchenginejournal.com/wordpress-core-vulnerabilities/432042/#close 11:32 – Story # 2: Card-stealing code on over 100 Sotheby’s luxury real estate sites – https://therecord.media/card-stealing-code-found-on-more-than-100-sothebys-luxury-real-estate-sites/ 14:55 – Story # 3: France hits Facebook & Google with $210 million in fines – https://www.bleepingcomputer.com/news/legal/france-hits-facebook-and-google-with-210-million-in-fines/ […]

The post Talkin’ About Infosec News – 1/14/2022 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2022-01-10
(01:58) - Story # 1: WordPress Core Vulnerabilities
(11:32) - Story # 2: Card-stealing code on over 100 Sotheby’s luxury real estate sites
(14:55) - Story # 3: France hits Facebook & Google with $210 million in fines
(22:14) - Story # 4: Pwn2Own, ShmooCon security conferences postponed due to COVID-19 surge
(24:48) - Story # 5: BREAKING! Cyber Threat Map
(27:21) - Story # 6: Open source developer corrupts widely-used libraries
(34:38) - Story # 7: FTC warns companies to remediate Log4j security vulnerability
(39:58) - Story # 8: Trojanized dnSpy app drops malware cocktail
(45:33) - Story # 9: Norton 360 Cryptominer
(55:56) - Hot Takes and Sadness

Talkin’ About Infosec News – 1/7/2022

Black Hills Information Security — Fri, 07 Jan 2022 13:01:47 -0500

ORIGINALLY AIRED ON JANUARY 4, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Who’s Job Is It Anyway? 00:20 – BHIS – Talkin’ Bout [infosec] News 2022-01-04 01:58 – Story # 1: iLOBleed Rootkit – https://thehackernews.com/2021/12/new-ilobleed-rootkit-targeting-hp.html 08:39 – Story # 2: Firmware attack can drop persistent malware in hidden SSD area – https://www.bleepingcomputer.com/news/security/firmware-attack-can-drop-persistent-malware-in-hidden-ssd-area/ […]

The post Talkin’ About Infosec News – 1/7/2022 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Who's Job Is It Anyway?
(00:20) - BHIS - Talkin' Bout [infosec] News 2022-01-04
(01:58) - Story # 1: iLOBleed Rootkit
(08:39) - Story # 2: Firmware attack can drop persistent malware in hidden SSD area
(17:35) - Story # 3: OverWatch Exposes AQUATIC PANDA
(21:38) - Story # 4: Experts warn against storing passwords in Chrome
(42:16) - –Official Report: Not Responsible for the Information Super Highway

Webcast: New Wave of Ransomware Attacks: How did this happen?

Black Hills Information Security — Thu, 23 Dec 2021 09:39:54 -0500

This is a special joint webcast from the teams of Black Hills Information Security, Wild West Hackin’ Fest, and Active Countermeasures, presented by John Strand. In this webcast, we cover the recent wave of attacks we are seeing, and we cover some of the history that got us to where we are. Consider this to […]

The post Webcast: New Wave of Ransomware Attacks: How did this happen? appeared first on Black Hills Information Security.

Talkin’ About Infosec News – 12/22/2021

Black Hills Information Security — Wed, 22 Dec 2021 11:21:59 -0500

ORIGINALLY AIRED ON DECEMBER 20, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — Getting Nerdy With It 04:18 – BHIS – Talkin’ Bout [infosec] News 2021-12-20 – The Final Broadcast … of 2021 05:34 – Story # 1: Apple releases Android app to find rogue AirTags – https://therecord.media/apple-releases-android-app-to-find-malicious-airtags/ 18:24 – Story # […]

The post Talkin’ About Infosec News – 12/22/2021 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Getting Nerdy With It
(04:18) - BHIS - Talkin' Bout [infosec] News 2021-12-20 – The Final Broadcast ... of 2021
(05:34) - Story # 1: Apple releases Android app to find rogue AirTags - https://therecord.media/apple-releases-android-app-to-find-malicious-airtags/
(18:24) - Story # 2: A Summary of Sorts - The Tale of 2021
(21:40) - Story # 3: Kronos hit with ransomware - https://www.zdnet.com/article/hr-platform-kronos-brought-down-by-ransomware-attack-ukg-warns-of-data-breach/
(22:19) - Story # 4: 300,000 MikroTik Devices Found Vulnerable - https://thehackernews.com/2021/12/over-300000-mikrotik-devices-found.html
(26:51) - Story # 5: WordPress Sites Under Cyberattack - https://thehackernews.com/2021/12/16-million-wordpress-sites-under.html
(28:45) - Story # 6: Firefox password leak via Windows Cloud Clipboard - https://therecord.media/firefox-fixes-password-leak-via-windows-cloud-clipboard-feature/
(36:33) - Story # 7: Android Application Testing Using Windows 11 - https://sensepost.com/blog/2021/android-application-testing-using-windows-11-and-windows-subsystem-for-android/
(37:43) - Story # 8: Verizon overrides users’ opt-out - https://arstechnica.com/information-technology/2021/12/verizon-ignored-users-previous-opt-outs-in-latest-push-to-scan-web-browsing/
(43:15) - Story # 9: Volvo cyber security breach - https://www.media.volvocars.com/global/en-gb/media/pressreleases/292817/notice-of-cyber-security-breach-by-third-party-1

Webcast: Intro to Ransomware and Industrial Control Systems (ICS)

Black Hills Information Security — Tue, 21 Dec 2021 15:42:15 -0500

Ransomware attacks have been growing in popularity, especially in critical infrastructure. Due to the importance of critical infrastructure, the need to secure the environments is an impending issue. The technology used in ICS environments is sensitive and often based on older protocols. The desire for connectivity has created an opportune target for malicious actors. Join […]

The post Webcast: Intro to Ransomware and Industrial Control Systems (ICS) appeared first on Black Hills Information Security.

Webcast: Hack for Show, Report For Dough: Part 2

Black Hills Information Security — Tue, 21 Dec 2021 14:38:38 -0500

At Black Hills Information Security (BHIS), we make our living doing pentesting, but we’ve never once been paid for a pentest. Penetration Testers get paid for their reports. For their explanations. For their story of the environment as it appears to an attacker. The scanning and testing and exploiting (and failing at those things) is […]

The post Webcast: Hack for Show, Report For Dough: Part 2 appeared first on Black Hills Information Security.

Talkin’ About Infosec News – The Floor is Java – 12/15/2021

Black Hills Information Security — Wed, 15 Dec 2021 11:40:22 -0500

ORIGINALLY AIRED ON DECEMBER 13, 2021 00:00 – PreShow Banter™ 09:41 – FEATURE PRESENTATION: The Floor is Java – Log4Shell / Log4J 10:26 – Lets Jump In 11:31 – Oh No… 12:28 – None of This is New 15:36 – How Does This Work? 19:48 – Mitigations 21:48 – Find it on Hosts 23:54 – Hal […]

The post Talkin’ About Infosec News – The Floor is Java – 12/15/2021 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™
(09:41) - FEATURE PRESENTATION: The Floor is Java – Log4Shell / Log4J
(10:26) - Lets Jump In
(11:31) - Oh No...
(12:28) - None of This is New
(15:36) - How Does This Work?
(19:48) - Mitigations
(21:48) - Find it on Hosts
(23:54) - Hal Translator
(25:25) - Find it on the Network
(26:53) - Miners Beacon
(28:24) - Great Write-Ups!
(31:47) - Conversation with Q & A

Talkin’ About Infosec News – 12/09/2021

Black Hills Information Security — Thu, 09 Dec 2021 13:27:42 -0500

ORIGINALLY AIRED ON DECEMBER 6, 2021 Articles discussed in this episode: 00:18 – BHIS – Talkin’ Bout [infosec] News 2021-12-06 02:57 – Story # 1: Apple AirTag Car Thefts – https://www.macrumors.com/2021/12/03/airtag-linked-to-car-thefts/ 11:04 – Story # 2: Ubiquiti dev charged for extortion – https://www.bleepingcomputer.com/news/security/former-ubiquiti-dev-charged-for-trying-to-extort-his-employer/ 17:09 – Plug: Pay What You Can SOC Training – https://www.antisyphontraining.com/soc-core-skills-w-john-strand/ 18:24 – […]

The post Talkin’ About Infosec News – 12/09/2021 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™
(00:18) - BHIS - Talkin' Bout [infosec] News 2021-12-06
(02:57) - Story # 1: Apple AirTag Car Thefts - https://www.macrumors.com/2021/12/03/airtag-linked-to-car-thefts/
(11:04) - Story # 2: Ubiquiti dev charged for extortion - https://www.bleepingcomputer.com/news/security/former-ubiquiti-dev-charged-for-trying-to-extort-his-employer/
(17:09) - Plug: Pay What You Can SOC Training – https://www.antisyphontraining.com/soc-core-skills-w-john-strand/
(18:24) - Story # 3: U.S. State Department hacked with NSO spyware - https://www.reuters.com/technology/exclusive-us-state-department-phones-hacked-with-israeli-company-spyware-sources-2021-12-03/
(24:15) - Story # 4: The rise of dark web design - https://theconversation.com/the-rise-of-dark-web-design-how-sites-manipulate-you-into-clicking-168347
(33:46) - Story # 5: Researcher Found Way to Brute Force Verizon Customer PINs Online - https://www.vice.com/en/article/93bbpy/brute-force-verizon-pins-researcher-video
(39:43) - Story # 6: Russia and China attacking US satellites with lasers and jammers - https://www.independent.co.uk/space/russia-china-attack-us-satellites-lasers-b1967516.html?utm_source=reddit.com
(44:25) - Story # 7: Ransomware Takeaways: Q3 2021 - https://www.backblaze.com/blog/ransomware-takeaways-q3-2021/
(49:36) - Story # 8: Microsoft prompts try to stop people downloading Chrome - https://www.theverge.com/2021/12/2/22813733/microsoft-windows-edge-download-chrome-prompts
(50:36) - Story # 8b: Microsoft Edge will warn users about downloading Google Chrome - https://arstechnica.com/gadgets/2021/12/microsoft-edge-will-now-warn-users-about-the-dangers-of-downloading-google-chrome/

Fixing Content-Security-Policies with Cloudflare Workers

Black Hills Information Security — Fri, 03 Dec 2021 13:31:18 -0500

Kent Ickler // Background Over four years ago now, I wrote a blog post on fixing missing Content-Security-Policy by updating configuration on webservers: https://www.blackhillsinfosec.com/fix-missing-content-security-policy-website/. Content-Security-Policies instruct a user’s web browser how it should behave on certain security considerations. Oh, how times have changed. Here at Black Hills Information Security (BHIS), we’ve actually migrated webservers, hosting […]

The post Fixing Content-Security-Policies with Cloudflare Workers appeared first on Black Hills Information Security.

Talkin’ About Infosec News – 11/26/2021

Black Hills Information Security — Fri, 26 Nov 2021 10:55:08 -0500

ORIGINALLY AIRED ON NOVEMBER 22, 2021 Articles discussed in this episode: Story # 1: Chinese Team Up With Russia To Launch US Cybersecurity Assault – https://hothardware.com/news/chinese-hackers-team-up-with-russian-ransomware-gang Story # 2: The FBI Got Hacked Over a Beef With a Guy Named Vinny? – https://www.thedailybeast.com/was-fbi-email-hack-just-an-elaborate-troll-of-a-guy-named-vinny-troia Story # 3: Insurers run from ransomware cover as losses mount – https://www.reuters.com/markets/europe/insurers-run-ransomware-cover-losses-mount-2021-11-19/ Story # […]

The post Talkin’ About Infosec News – 11/26/2021 appeared first on Black Hills Information Security.

(00:00) - PreShow Banter™ — Fixing Compressors
(02:13) - BHIS - Talkin' Bout [infosec] News 2021-11-22
(05:31) - Story # 1: Chinese Team Up With Russia To Launch US Cybersecurity Assault – https://hothardware.com/news/chinese-hackers-team-up-with-russian-ransomware-gang
(12:23) - Story # 2: The FBI Got Hacked Over a Beef With a Guy Named Vinny? – https://www.thedailybeast.com/was-fbi-email-hack-just-an-elaborate-troll-of-a-guy-named-vinny-troia
(18:32) - Story # 3: Insurers run from ransomware cover as losses mount – https://www.reuters.com/markets/europe/insurers-run-ransomware-cover-losses-mount-2021-11-19/
(23:27) - Story # 4: Ransomware gangs rich enough to buy zero-days – https://www.zdnet.com/article/ransomware-gangs-are-now-rich-enough-to-buy-zero-day-flaws-say-researchers/
(35:06) - Story # 5: FBI Alert on FatPipe VPN Zero-Day - https://thehackernews.com/2021/11/fbi-issues-flash-alert-on-actively.html
(45:31) - Story # 6: Debunking worthless “security” practices – https://arstechnica.com/information-technology/2021/11/securing-your-digital-life-part-4/

Talkin’ About Infosec News – 11/17/2021

Black Hills Information Security — Wed, 17 Nov 2021 13:44:18 -0500

ORIGINALLY AIRED ON NOVEMBER 15, 2021 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2021-11-15 02:22 – Story # 1: Robinhood data breach – https://www.bleepingcomputer.com/news/security/robinhood-discloses-data-breach-impacting-7-million-customers/ 07:27 – Story # 2: Trojanized IDA Pro – https://thehackernews.com/2021/11/north-korean-hackers-target.html 09:48 – Story # 3: stealing data today, quantum computers tomorrow – https://www.technologyreview.com/2021/11/03/1039171/hackers-quantum-computers-us-homeland-security-cryptography/ 18:42 – Story # 4: DDR4 […]

The post Talkin’ About Infosec News – 11/17/2021 appeared first on Black Hills Information Security.

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-11-15
(02:22) - Story # 1: Robinhood data breach – https://www.bleepingcomputer.com/news/security/robinhood-discloses-data-breach-impacting-7-million-customers/
(07:27) - Story # 2: Trojanized IDA Pro – https://thehackernews.com/2021/11/north-korean-hackers-target.html
(09:48) - Story # 3: stealing data today, quantum computers tomorrow – https://www.technologyreview.com/2021/11/03/1039171/hackers-quantum-computers-us-homeland-security-cryptography/
(18:42) - Story # 4: DDR4 Rowhammer technique – https://arstechnica.com/gadgets/2021/11/ddr4-memory-is-even-more-susceptible-to-rowhammer-attacks-than-anyone-thought/
(26:58) - Story # 5: Secure software supply chain – https://sysdig.com/blog/software-supply-chain-security/
(33:26) - Story # 6: New Android Spyware – https://threatpost.com/new-android-spyware-poses-pegasus-like-threat/176155/
(43:46) - Story # 7: Hoax Email Abused Coding in FBI Website – https://krebsonsecurity.com/2021/11/hoax-email-blast-abused-poor-coding-in-fbi-website/
(55:23) - Story # 8: DomainTools Acquires Farsight Security – https://www.infosecurity-magazine.com/news/domaintools-acquires-farsight/

Talkin’ About Infosec News – 11/12/2021

Black Hills Information Security — Fri, 12 Nov 2021 08:38:26 -0500

ORIGINALLY AIRED ON November 08, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — God’s Waiting Room 03:08 – BHIS – Talkin’ Bout [infosec] News 2021-11-08 04:50 – Story # 1: JavaScript in Excel – https://techcrunch.com/2021/11/02/microsoft-brings-javascript-to-excel/ 09:12 – Story # 2: Bots That Steal 2FA Codes – https://www.vice.com/en/article/y3vz5k/booming-underground-market-bots-2fa-otp-paypal-amazon-bank-apple-venmo 13:00 – Story # 3: US bans trade with NSO Group – https://www.engadget.com/us-trade-ban-nso-group-145347522.html 22:34 – Story # 4: US House Passes Acts to Help SMBs with Cybersecurity – https://www.infosecurity-magazine.com/news/house-helps-smbs-cybersecurity/ 33:34 – Story # 5: Hackers Apologize to Arab Royal Families – https://www.vice.com/en/article/n7nw8m/conti-ransomware-hackers-apologize-to-arab-royal-families-for-leaking-their-data We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain: Infosec articles Challenging puzzles Comic book based on real-life hacking adventures Coloring contests Bonus Backdoors & Breaches Consultant Cards (print version only) Other stuffs You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/

(00:00) - PreShow Banter™ — Gods Waiting Room
(03:08) - BHIS - Talkin' Bout [infosec] News 2021-11-08
(04:50) - Story # 1: JavaScript in Excel - https://techcrunch.com/2021/11/02/microsoft-brings-javascript-to-excel/
(09:12) - Story # 2: Bots That Steal 2FA Codes - https://www.vice.com/en/article/y3vz5k/booming-underground-market-bots-2fa-otp-paypal-amazon-bank-apple-venmo
(13:00) - Story # 3: US bans trade with NSO Group - https://www.engadget.com/us-trade-ban-nso-group-145347522.html
(22:34) - Story # 4: US House Passes Acts to Help SMBs with Cybersecurity - https://www.infosecurity-magazine.com/news/house-helps-smbs-cybersecurity/
(33:34) - Story # 5: Hackers Apologize to Arab Royal Families - https://www.vice.com/en/article/n7nw8m/conti-ransomware-hackers-apologize-to-arab-royal-families-for-leaking-their-data

Webcast: How to Share Your Knowledge with Others

Black Hills Information Security — Tue, 02 Nov 2021 13:22:16 -0400

Have you ever seen a call for papers for a conference and thought to yourself that you’d like to submit a talk and then immediately thought, oh never mind? Have you ever been asked to present internally at your organization and immediately recommended someone else to do it? Was it because you didn’t know how to give a presentation, or because you were afraid of speaking in front of an audience, or because you didn’t know where to start? This Black Hills Information Security (BHIS) presentation on giving presentations the way people like to hear presentations is based on Jason’s background as a video editor, storyteller, comedian, and content creator. We dive into structure, delivery, and how your audience perceives every single word and image you share. By the end of this most meta-presentation on presentations using science and stuff, you’ll be equipped with getting started sharing your knowledge with others in a way they will want to hear it. Recorded•2021-08-26 Join the BHIS Community Discord: https://discord.gg/bhis 00:00 – FEATURE PRESENTATION: How to Share Your Knowledge With Others 55:28 – Q & A We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain: Infosec articles Challenging puzzles Comic book based on real-life hacking adventures Coloring contests Bonus Backdoors & Breaches Consultant Cards (print version only) Other stuffs You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/

(00:00) - FEATURE PRESENTATION: How to Share Your Knowledge With Others
(55:28) - Q & A

Talkin’ About Infosec News – 10/28/2021

Black Hills Information Security — Thu, 28 Oct 2021 13:53:09 -0400

ORIGINALLY AIRED ON OCTOBER 25, 2021 Articles discussed in this episode: 01:42 – Story # 1: https://www.bleepingcomputer.com/news/security/fired-it-admin-revenge-hacks-school-by-wiping-data-changing-passwords/ 06:34 – Story # 2: https://krebsonsecurity.com/2021/10/missouri-governor-vows-to-prosecute-st-louis-post-dispatch-for-reporting-security-vulnerability/ 11:50 – Story # 3: https://www.pcgamer.com/hackers-drain-cryptocurrency-accounts-of-thousands-of-coinbase-users/ 23:47 – Story # 4: https://threatpost.com/vmware-esxi-encrypted-python-script-ransomware/175374/ 35:30 – Story # 5: https://thehackernews.com/2021/10/chinese-hackers-used-new-rootkit-to-spy.html 45:56 – Story # 6: https://cyberworkx.in/2021/10/08/a-new-uefi-bootkit-that-targets-windows-computers/ 51:45 – Story # 7: https://www.washingtonpost.com/national-security/rail-cybersecurity-dhs-regulations/2021/10/06/b3db07da-2620-11ec-8831-a31e7b3de188_story.html 54:14 – Story # 8: https://www.nbcnews.com/tech/security/ransomware-hits-us-candymaker-ahead-halloween-rcna3391 We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain: Infosec articles Challenging puzzles Comic book based on real-life hacking adventures Coloring contests Bonus Backdoors & Breaches Consultant Cards (print version only) Other stuffs You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-10-25
(01:42) - Story # 1: https://www.bleepingcomputer.com/news/security/fired-it-admin-revenge-hacks-school-by-wiping-data-changing-passwords/
(06:34) - Story # 2: https://krebsonsecurity.com/2021/10/missouri-governor-vows-to-prosecute-st-louis-post-dispatch-for-reporting-security-vulnerability/
(11:50) - Story # 3: https://www.pcgamer.com/hackers-drain-cryptocurrency-accounts-of-thousands-of-coinbase-users/
(23:47) - Story # 4: https://threatpost.com/vmware-esxi-encrypted-python-script-ransomware/175374/
(35:30) - Story # 5: https://thehackernews.com/2021/10/chinese-hackers-used-new-rootkit-to-spy.html
(45:56) - Story # 6: https://cyberworkx.in/2021/10/08/a-new-uefi-bootkit-that-targets-windows-computers/
(51:45) - Story # 7: https://www.washingtonpost.com/national-security/rail-cybersecurity-dhs-regulations/2021/10/06/b3db07da-2620-11ec-8831-a31e7b3de188_story.html
(54:14) - Story # 8: https://www.nbcnews.com/tech/security/ransomware-hits-us-candymaker-ahead-halloween-rcna3391

Talkin’ About Infosec News – 10/19/2021

Black Hills Information Security — Tue, 19 Oct 2021 14:43:00 -0400

ORIGINALLY AIRED ON OCTOBER 11, 2021 Articles discussed in this episode: 00:21 – Story # 1: Facebook Aftermath | https://engineering.fb.com/2021/10/05/networking-traffic/outage-details/ 09:17 – Story # 2: Twitch Source Code | https://www.theregister.com/2021/10/06/twitch_data_leak/ 25:31 – Story # 3: SMS Hacked; 5 Years | https://arstechnica.com/information-technology/2021/10/company-that-routes-sms-for-all-major-us-carriers-was-hacked-for-five-years/ 31:40 – Story # 4: K-12 Cybersecurity Bill | https://thehill.com/policy/cybersecurity/575957-biden-signs-bill-into-law-to-strengthen-k-12-school-cybersecurity?rl=1 36:39 – Story # 5: Forced Disclosure? | https://www.newsweek.com/businesses-could-soon-have-disclose-ransomware-payouts-1635838 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-10-11
(00:21) - Story # 1: Facebook Aftermath | https://engineering.fb.com/2021/10/05/networking-traffic/outage-details/
(09:17) - Story # 2: Twitch Source Code | https://www.theregister.com/2021/10/06/twitch_data_leak/
(25:31) - Story # 3: SMS Hacked; 5 Years | https://arstechnica.com/information-technology/2021/10/company-that-routes-sms-for-all-major-us-carriers-was-hacked-for-five-years/
(31:40) - Story # 4: K-12 Cybersecurity Bill | https://thehill.com/policy/cybersecurity/575957-biden-signs-bill-into-law-to-strengthen-k-12-school-cybersecurity?rl=1
(36:39) - Story # 5: Forced Disclosure? | https://www.newsweek.com/businesses-could-soon-have-disclose-ransomware-payouts-1635838

Talkin’ About Infosec News – 10/13/2021

Black Hills Information Security — Wed, 13 Oct 2021 08:35:28 -0400

ORIGINALLY AIRED ON OCTOBER 4, 2021 Articles discussed in this episode: 00:57 – Story # 1: Facebook is Burning 22:09 – Story # 2: https://www.bleepingcomputer.com/news/security/voipms-phone-services-disrupted-by-ddos-extortion-attack/ 25:38 – Story # 3: https://krebsonsecurity.com/2021/10/fcc-proposal-targets-sim-swapping-port-out-fraud/ 33:02 – Story # 4: https://cyberworkx.in/2021/10/03/hackers-spreading-malware-by-misusing-trust-of-amnesty-international/ 36:55 – Story # 5: https://threatpost.com/finspy-surveillance-kit/175068/ 39:04 – Story # 6: https://thehackernews.com/2021/10/a-new-apt-hacking-group-targeting-fuel.html https://www.blackhillsinfosec.com/services/cyber-range/

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-10-04
(00:57) - Story # 1: Facebook is Burning
(22:09) - Story # 2: https://www.bleepingcomputer.com/news/security/voipms-phone-services-disrupted-by-ddos-extortion-attack/
(25:38) - Story # 3: https://krebsonsecurity.com/2021/10/fcc-proposal-targets-sim-swapping-port-out-fraud/
(33:02) - Story # 4: https://cyberworkx.in/2021/10/03/hackers-spreading-malware-by-misusing-trust-of-amnesty-international/
(36:55) - Story # 5: https://threatpost.com/finspy-surveillance-kit/175068/
(39:04) - Story # 6: https://thehackernews.com/2021/10/a-new-apt-hacking-group-targeting-fuel.html

Talkin’ About Infosec News – 9/29/2021

Black Hills Information Security — Wed, 29 Sep 2021 11:33:22 -0400

ORIGINALLY AIRED ON SEPTEMBER 27, 2021 Articles discussed in this episode: 01:20 – Story # 1: https://habr.com/en/post/579714/ 02:14 – Story # 1b: https://therecord.media/researcher-discloses-iphone-lock-screen-bypass-on-ios-15-launch-day/ 02:54 – Story # 1c: https://www.bleepingcomputer.com/news/apple/new-macos-zero-day-bug-lets-attackers-run-commands-remotely/ 04:03 – Story #1d: https://habr.com/en/post/580272/ 09:42 – A Wild Noah Has Joined the Chat 13:24 – The Wildest, Grayson & Tenille, Have Joined the Chat 13:45 – A Wild Jeff Has Joined the Chat 14:45 – Story #2: https://www.bbc.com/news/technology-58678907 22:03 – Story #3: https://arstechnica.com/information-technology/2021/09/ransomware-victims-panicked-while-fbi-secretly-held-revil-decryption-key/ 29:47 – Story #4: https://thehackernews.com/2021/09/new-nagios-software-bugs-could-let.html 34:34 – Story #5: https://thehackernews.com/2021/09/a-new-bug-in-microsoft-windows-could.html 37:15 – Story #5b: https://github.com/Jamesits/dropWPBT 42:29 – Story #5c: https://github.com/chipsec/chipsec Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,834 other subscribers Email Address

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-09-27
(01:20) - Story # 1: https://habr.com/en/post/579714/
(02:14) - Story # 1b: https://therecord.media/researcher-discloses-iphone-lock-screen-bypass-on-ios-15-launch-day/
(02:54) - Story # 1c: https://www.bleepingcomputer.com/news/apple/new-macos-zero-day-bug-lets-attackers-run-commands-remotely/
(04:03) - Story # 1d: https://habr.com/en/post/580272/
(09:42) - A Wild Noah Has Joined the Chat
(13:24) - The Wildest, Grayson & Tenille, Have Joined the Chat
(13:45) - A Wild Jeff Has Joined the Chat
(14:45) - Story # 2: https://www.bbc.com/news/technology-58678907
(22:03) - Story # 3: https://arstechnica.com/information-technology/2021/09/ransomware-victims-panicked-while-fbi-secretly-held-revil-decryption-key/
(29:47) - Story # 4: https://thehackernews.com/2021/09/new-nagios-software-bugs-could-let.html
(34:34) - Story # 5: https://thehackernews.com/2021/09/a-new-bug-in-microsoft-windows-could.html
(37:15) - Story # 5b: https://github.com/Jamesits/dropWPBT
(42:29) - Story # 5c: https://github.com/chipsec/chipsec

Webcast: Shellcode Execution with GoLang

Black Hills Information Security — Tue, 28 Sep 2021 11:29:42 -0400

In this Black Hills Information Security (BHIS) webcast, we explore using GoLang to author malware with embedded shellcode. GoLang is a Google-authored modern successor language to C/C++. It is multi-platform, high performance, multi-threaded, and unlike C/C++ includes garbage collection! It has the advantage of compiling to native machine code, unlike .NET C# which is dependent on the common language runtime, and easily reversible. We explore how to execute Windows shellcode with GoLang in the same process thread space, and then also explore one process injection method. If you are a penetration tester looking to expand your malware authoring skills, a little Go(lang) will take you far! Recorded • 2021-05-20 Join the BHIS Community Discord: https://discord.gg/bhis 00:00 – FEATURE PRESENTATION BEGINS: Shellcode Execution with GoLang 01:39 – Meet Joff Thyer 02:16 – What is GoLang? 04:14 – Aspects of GoLang 07:43 – C# or Go? 09:24 – Go Command Line 10:57 – Golang Type Safety 11:31 – What is Shellcode? 12:51 – Sources of Shellcode 14:50 – Executing Shellcode on Windows 16:08 – GoLang “unsafe” Package 16:55 – Go “syscall” package is becoming per platform 17:50 – GoLang “windows” Package 18:22 – “x/sys/windows” package 20:29 – Looking deeper into Syscall 22:26 – Calling Functions out of Kernel32.dll

(00:00) - FEATURE PRESENTATION BEGINS: Shellcode Execution with GoLang
(01:38) - Meet Joff Thyer
(02:15) - What is GoLang?
(04:12) - Aspects of GoLang
(07:40) - C# or Go?
(09:19) - Go Command Line
(10:52) - Golang Type Safety
(11:25) - What is Shellcode?
(12:44) - Sources of Shellcode
(14:43) - Executing Shellcode on Windows
(15:59) - GoLang "unsafe" Package
(16:46) - Go "syscall" package is becoming per platform
(17:42) - GoLang "windows" Package
(18:13) - "x/sys/windows" package
(20:20) - Looking deeper into Syscall
(22:13) - Calling Functions out of Kernel32.dll
(22:59) - GoLang: Byte Array for Shellcode
(24:18) - Method 1: Direct Syscall
(29:07) - Tangent: The A/V and EDR evasion paradox
(32:04) - Single byte XOR function in GoLang
(33:27) - Method 2: Creating Thread in Same Process
(35:13) - GoLang Windows Native DLL
(36:19) - Steps to build a native DLL
(40:38) - Living off the Land with Native DLL
(43:22) - DEMO : Run shell code
(45:55) - Method 3: Process Injection
(48:20) - DEMO - Remote Process Injection
(49:19) - Additional Resources
(49:59) - DEMO - Remote Process Injection cont.
(52:01) - QnA
(53:46) - LINK: Attacker Emulation and C2 - https://www.antisyphontraining.com/enterprise-attacker-emulation-and-c2-implant-development-w-joff-thyer/

Talkin’ About Infosec News – 9/23/2021

Black Hills Information Security — Thu, 23 Sep 2021 11:15:09 -0400

ORIGINALLY AIRED ON SEPTEMBER 20, 2021 Articles discussed in this episode: 00:55 – Story # 1: https://techcrunch.com/2021/09/13/apple-zero-day-nso-pegasus/ 19:45 – Story # 2: https://www.tomshardware.com/news/researchers-find-windows-subsystem-linux-malware 27:45 – Story # 3: https://www.wsj.com/articles/u-s-to-target-crypto-ransomware-payments-with-sanctions-11631885336 41:19 – Story # 4: https://apnews.com/article/technology-business-pakistan-seattle-washington-c6122e936e0fcc7c077becdd2559886b 46:55 – Story # 5: https://therecord.media/us-fines-former-nsa-employees-who-provided-hacker-for-hire-services-to-uae/ Join the BHIS Community Discord: https://discord.gg/bhis Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,829 other subscribers Email Address Subscribe

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-09-20
(00:55) - Story # 1: https://techcrunch.com/2021/09/13/apple-zero-day-nso-pegasus/
(19:45) - Story # 2: https://www.tomshardware.com/news/researchers-find-windows-subsystem-linux-malware
(27:45) - Story # 3: https://www.wsj.com/articles/u-s-to-target-crypto-ransomware-payments-with-sanctions-11631885336
(41:19) - Story # 4: https://apnews.com/article/technology-business-pakistan-seattle-washington-c6122e936e0fcc7c077becdd2559886b
(46:55) - Story # 5: https://therecord.media/us-fines-former-nsa-employees-who-provided-hacker-for-hire-services-to-uae/

Webcast: The Quest for the Kill Chain Killer Continues

Black Hills Information Security — Wed, 22 Sep 2021 14:59:36 -0400

Jordan and Kent have heard from a lot of people that the past Black Hills Information Security (BHIS) webcasts: “Group Policies That Kill Kill Chains” and “Active Directory Best Practices to Frustrate Attackers” have changed their business models for the better. And since they’ve been offered the BHIS soapbox again, they thought it was time to update this material and combine it. Security can sometimes move slow and other times blazingly fast. They’ll discuss what they’ve seen in the past year and how it impacts their view on baseline defensive configurations you shouldn’t be operating without. At the end of the day, we are in this game to make things difficult for attackers, adversaries, and red teamers. We want to reduce mean time to detection. And we really want to help you make your networks and domains more secure. So… why not update our favorite webcasts with everything we’ve learned since giving them? Join the BLACK HILLS INFOSEC Discord Server — https://discord.gg/bhis The Kill Chains Material: https://www.blackhillsinfosec.com/webcast-group-policies-that-kill-kill-chains/ How to Frustrate Attackers Material: https://www.blackhillsinfosec.com/webcast-group-policies-that-kill-kill-chains/ Recorded•2021-05-13 00:00 – FEATURE PRESENTATION BEGINS – The Quest for the Kill Chain Killer Continues 02:15 – What Changed in the Last Year? 06:31 – The Kill Chain 07:47 – Active Directory Best Practices to Frustrate Attackers 09:22 – Pre-Reqs 13:31 – Active Directory

(00:00) - FEATURE PRESENTATION BEGINS - The Quest for the Kill Chain Killer Continues
(02:14) - What Changed in the Last Year?
(06:26) - The Kill Chain
(07:40) - Active Directory Best Practices to Frustrate Attackers
(09:13) - Pre-Reqs
(13:21) - Active Directory
(16:04) - Organizational Units ^^ Policies
(17:35) - Layer Two Protocols
(20:41) - Addressing LLMNR (NBNS and WPAD too)
(22:50) - Unaddressing of LLMNR
(34:12) - Addressing NBNS
(34:55) - Addressing WPAD
(36:41) - File Shares
(39:24) - SMB Signing
(41:02) - IPv6
(41:53) - LDAP Channel Binding
(42:57) - Microsoft Store
(43:55) - Too Many GPOs to Cover
(44:40) - Dealing with Local Admins
(45:24) - Network Logons
(46:50) - Managed Service Accounts
(48:32) - Application Controls
(49:18) - Speaking of Ransomware...
(50:21) - Firewalls
(52:01) - Canary Accounts
(52:51) - Network Analysis
(54:17) - Credentials
(56:40) - Wrap-Up and Questions

Talkin’ About Infosec News – 9/17/2021

Black Hills Information Security — Fri, 17 Sep 2021 14:09:26 -0400

ORIGINALLY AIRED ON SEPTEMBER 13, 2021 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2021-09-13 02:59 – Story # 1: https://cyberworkx.in/2021/08/31/authentication-bypass-vulnerability-in-exchange-server/ 04:43 – Story # 1b: https://techcommunity.microsoft.com/t5/exchange-team-blog/how-to-update-ad-schema-to-address-cve-2021-34470-if-exchange-is/ba-p/2617083 07:22 – Story # 2: https://cyberworkx.in/2021/09/08/microsoft-warns-of-new-zeroday-vulnerability-hunting-down-windows-users/ 13:16 – Story # 3: https://therecord.media/ghostscript-zero-day-allows-full-server-compromises/ 17:28 – Story # 3b: https://xkcd.com/2347/ 22:03 – Story # 4: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/ 30:15 – Story # 5: https://venturebeat.com/2021/09/11/8-orgs-with-web-apps-for-file-uploads-have-adequate-cybersecurity/ 33:21 – Story # 5b: https://stackoverflow.com/questions/1732348/regex-match-open-tags-except-xhtml-self-contained-tags/1732454#1732454 34:15 – Story # 6: https://www.bleepingcomputer.com/news/security/hackers-leak-passwords-for-500-000-fortinet-vpn-accounts/ 39:32 – Story # 7: https://www.bleepingcomputer.com/news/security/revil-ransomwares-servers-mysteriously-come-back-online/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-09-13
(02:59) - Story # 1: https://cyberworkx.in/2021/08/31/authentication-bypass-vulnerability-in-exchange-server/
(04:43) - Story # 1b: https://techcommunity.microsoft.com/t5/exchange-team-blog/how-to-update-ad-schema-to-address-cve-2021-34470-if-exchange-is/ba-p/2617083
(07:22) - Story # 2: https://cyberworkx.in/2021/09/08/microsoft-warns-of-new-zeroday-vulnerability-hunting-down-windows-users/
(13:16) - Story # 3: https://therecord.media/ghostscript-zero-day-allows-full-server-compromises/
(17:28) - Story # 3b: https://xkcd.com/2347/
(22:03) - Story # 4: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
(30:15) - Story # 5: https://venturebeat.com/2021/09/11/8-orgs-with-web-apps-for-file-uploads-have-adequate-cybersecurity/
(33:21) - Story # 5b: https://stackoverflow.com/questions/1732348/regex-match-open-tags-except-xhtml-self-contained-tags/1732454#1732454
(34:15) - Story # 6: https://www.bleepingcomputer.com/news/security/hackers-leak-passwords-for-500-000-fortinet-vpn-accounts/
(39:32) - Story # 7: https://www.bleepingcomputer.com/news/security/revil-ransomwares-servers-mysteriously-come-back-online/

Webcast: Getting Started in Blockchain Security and Smart Contract Auditing

Black Hills Information Security — Thu, 16 Sep 2021 08:37:11 -0400

Why is blockchain security important? Blockchain usage has exploded since the Bitcoin whitepaper was first published in 2008. Many applications rely on this technology for increased trust and privacy, where they would otherwise be absent from a centralized system. The ecosystem surrounding blockchain technology is large, complex, and has many moving pieces. Exchanges exist where users can transact various cryptocurrencies, NFTs, and tokens. Smart contracts can be written to programmatically apply behavior to blockchain transactions. Decentralized Finance (DeFi) markets exist where users can swap tokens without needing to sign up for an account. All of these pieces are prone to vulnerabilities, and with blockchain being at the forefront of emerging technology, new issues are being found daily. In this Black Hills Information Security (BHIS) webcast, we’ll use case studies about recent blockchain hacks to introduce the underlying issues that occur in writing/engineering smart contracts that have ultimately lead to the loss of millions of dollars to attackers. Join us on the BLACK HILLS INFOSEC Discord channel for discussion and interaction with the community — https://discord.gg/bhis 0:00:00 – PreShow Banter™ — Beau Has a Fan Club 0:32:39 – FEATURE PRESENTATION: Getting Started in Blockchain Security and Smart Contract Auditing 0:36:39 – Roadmap 0:37:51 – Why Blockchain Security 0:39:21 – Growing Use Cases for Blockchain 0:43:23 – Blockchain Elements That Need Securing 0:49:00 – What Are Smart Contracts 0:51:22 – EVM : Ethereum Virtual Machine 0:54:00 – Solidity 0:59:55 – Smart Contract Vulns 1:04:00 – Reentrancy 1:05:54 – Front-Running 1:07:41 – Inter Overflow and Underflow

(00:00) - PreShow Banter™ — Beau Has a Fan Club
(32:39) - FEATURE PRESENTATION: Getting Started in Blockchain Security and Smart Contract Auditing
(36:39) - Roadmap
(37:51) - Why Blockchain Security
(39:21) - Growing Use Cases for Blockchain
(43:23) - Blockchain Elements That Need Securing
(49:00) - What Are Smart Contracts
(51:22) - EVM : Ethereum Virtual Machine
(54:00) - Solidity
(59:53) - Smart Contract Vulns
(01:03:59) - – Reentrancy
(01:05:52) - – Front-Running
(01:07:39) - – Inter Overflow and Underflow
(01:09:10) - – Denial-of-Service
(01:10:38) - – Access Control
(01:12:41) - – Timestamp Dependence
(01:15:17) - Case Studies – Uranium Finance Hack
(01:17:21) - – Poly Network Hack
(01:21:02) - – Cream Finance Hack
(01:24:37) - DEMO: Live Exploit
(01:35:10) - Exploit Recap
(01:35:40) - Security Tools – VS Code + Solidity Visual Developer
(01:36:35) - – Slither
(01:36:53) - – Mythril & MythX
(01:37:23) - Get-Started Resources
(01:38:30) - Bug Bounties
(01:38:46) - Key Takeaways
(01:39:56) - This is the End – Q & A

Talkin’ About Infosec News – 9/9/2021

Black Hills Information Security — Thu, 09 Sep 2021 15:04:17 -0400

ORIGINALLY AIRED ON SEPTEMBER 7, 2021 Articles discussed in this episode: 02:14 – Story # 1: https://therecord.media/chinese-hackers-behind-july-2021-solarwinds-zero-day-attacks 06:17 – Story # 2: https://www.secureworld.io/industry-news/ciso-lawsuit-solarwinds 08:30 – Story # 3: https://taskandpurpose.com/news/air-force-cybersecurity-nicolas-chaillan/ 10:29 – Story # 3b: https://www.linkedin.com/pulse/time-say-goodbye-nicolas-m-chaillan/ 13:20 – Story # 4: https://venturebeat.com/2021/09/02/the-cybersecurity-industry-is-burning-and-vcs-dont-care/ 18:03 – Story # 5: https://www.theregister.com/2021/09/03/how_to_be_a_ransomware/ 24:38 – Story # 6: https://www.bleepingcomputer.com/news/security/over-60-000-parked-domains-were-vulnerable-to-aws-hijacking/ 28:30 – Story # 7: https://www.zdnet.com/article/fbi-warns-of-ransomware-attacks-targeting-food-and-agriculture-sector-as-white-house-pushes-for-proactive-measures/ 33:20 – Story # 7b: https://twitter.com/vxunderground/status/1435306913038745612 34:16 – Story # 7c: https://twitter.com/vxunderground/status/1433758742244478982 37:29 – Story # 8: https://cyberworkx.in/2021/09/06/russian-mobile-comes-with-preinstalled-malware/ 38:26 – Story # 9: https://krebsonsecurity.com/2021/09/gift-card-gang-extracts-cash-from-100k-inboxes-daily/ 45:31 – Story # 10: https://www.bleepingcomputer.com/news/security/mcdonalds-leaks-password-for-monopoly-vip-database-to-winners/

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-09-07
(02:14) - Story # 1: https://therecord.media/chinese-hackers-behind-july-2021-solarwinds-zero-day-attacks/
(06:17) - Story # 2: https://www.secureworld.io/industry-news/ciso-lawsuit-solarwinds
(08:30) - Story # 3: https://taskandpurpose.com/news/air-force-cybersecurity-nicolas-chaillan/
(10:29) - Story # 3b: https://www.linkedin.com/pulse/time-say-goodbye-nicolas-m-chaillan/
(13:20) - Story # 4: https://venturebeat.com/2021/09/02/the-cybersecurity-industry-is-burning-and-vcs-dont-care/
(18:03) - Story # 5: https://www.theregister.com/2021/09/03/how_to_be_a_ransomware/
(24:38) - Story # 6: https://www.bleepingcomputer.com/news/security/over-60-000-parked-domains-were-vulnerable-to-aws-hijacking/
(28:30) - Story # 7: https://www.zdnet.com/article/fbi-warns-of-ransomware-attacks-targeting-food-and-agriculture-sector-as-white-house-pushes-for-proactive-measures/
(33:20) - Story # 7b: https://twitter.com/vxunderground/status/1435306913038745612
(34:16) - Story # 7c: https://twitter.com/vxunderground/status/1433758742244478982
(37:29) - Story # 8: https://cyberworkx.in/2021/09/06/russian-mobile-comes-with-preinstalled-malware/
(38:26) - Story # 9: https://krebsonsecurity.com/2021/09/gift-card-gang-extracts-cash-from-100k-inboxes-daily/
(45:31) - Story # 10: https://www.bleepingcomputer.com/news/security/mcdonalds-leaks-password-for-monopoly-vip-database-to-winners/

Talkin’ About Infosec News – 9/3/2021

Black Hills Information Security — Fri, 03 Sep 2021 13:38:57 -0400

ORIGINALLY AIRED ON AUGUST 30, 2021 Articles discussed in this episode: 01:38 – Story # 1: https://carbuzz.com/news/tom-cruise-couldnt-stop-thieves-stealing-his-bmw-7-series 14:45 – Story # 2: https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru 23:24 – Story # 3: https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26/ 27:37 – Story # 4: https://cyberworkx.in/2021/08/28/five-different-malware-families-targeting-pulse-secure-devices/ 33:08 – Story # 5: https://www.techradar.com/news/microsoft-warns-of-elaborate-new-cybercrime-scheme-to-steal-your-login-details 36:36 – Story # 6: https://twitter.com/EdClowes/status/1430083273015840776?s=19 39:43 – Story # 7: https://www.theregister.com/2021/08/26/qurium_bright_data_philippines_ddos/ 46:18 – Story # 8: https://www.foxbusiness.com/technology/florida-woman-fired-rampage-company-computer-system 50:22 – Story # 9: https://www.nextgov.com/cybersecurity/2021/08/white-house-tasks-nist-producing-another-cybersecurity-framework/184868/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,809 other subscribers Email Address

(00:00) - BHIS - Talkin' Bout [infosec] News 2021-08-30
(01:38) - Story # 1: https://carbuzz.com/news/tom-cruise-couldnt-stop-thieves-stealing-his-bmw-7-series
(14:45) - Story # 2: https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru
(23:24) - Story # 3: https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26/
(27:37) - Story # 4: https://cyberworkx.in/2021/08/28/five-different-malware-families-targeting-pulse-secure-devices/](https://cyberworkx.in/2021/08/28/five-different-malware-families-targeting-pulse-secure-devices/)
(33:08) - Story # 5: https://www.techradar.com/news/microsoft-warns-of-elaborate-new-cybercrime-scheme-to-steal-your-login-details
(36:36) - Story # 6: https://twitter.com/EdClowes/status/1430083273015840776?s=19
(39:43) - Story # 7: https://www.theregister.com/2021/08/26/qurium_bright_data_philippines_ddos/
(46:18) - Story # 8: https://www.foxbusiness.com/technology/florida-woman-fired-rampage-company-computer-system
(50:22) - Story # 9: https://www.nextgov.com/cybersecurity/2021/08/white-house-tasks-nist-producing-another-cybersecurity-framework/184868/

Talkin’ About Infosec News – 8/25/2021

Black Hills Information Security — Wed, 25 Aug 2021 08:36:00 -0400

ORIGINALLY AIRED ON AUGUST 23, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — A Case of the Mondays 04:14 – Talkin’ Bout [InfoSec] News 2021-08-23 05:24 – Story # 1: https://www.scmagazine.com/analysis/vulnerability-management/as-fortinet-spars-with-rapid7-what-can-everyone-else-learn-about-disclosure 09:03 – Story # 2: https://www.bleepingcomputer.com/news/security/atandt-denies-data-breach-after-hacker-auctions-70-million-user-database/ 14:50 – Story # 3: https://www.nytimes.com/2021/08/20/world/asia/afghanistan-facebook.html 21:01 – Story # 4: https://wgme.com/news/local/rural-sewage-plants-hit-by-ransomware-attacks-in-maine 31:23 – Story # 5: https://thehackernews.com/2021/08/cybercrime-group-asking-insiders-for.html 41:39 – Story # 6: https://cyberworkx.in/2021/08/22/mozi-botnet-uses-web-traffic-for-infecting-victims/ 42:10 – Story # 6b: https://www.bleepingcomputer.com/news/security/cisco-won-t-fix-zero-day-rce-vulnerability-in-end-of-life-vpn-routers/ 51:27 – Story # 7: https://twitter.com/j0nh4t/status/1429049506021138437 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,795 other subscribers Email Address

(00:00) - PreShow Banter™ — A Case of the Mondays
(04:14) - Talkin' Bout [InfoSec] News 2021-08-23
(05:24) - Story # 1: https://www.scmagazine.com/analysis/vulnerability-management/as-fortinet-spars-with-rapid7-what-can-everyone-else-learn-about-disclosure
(09:03) - Story # 2: https://www.bleepingcomputer.com/news/security/atandt-denies-data-breach-after-hacker-auctions-70-million-user-database/
(14:50) - Story # 3: https://www.nytimes.com/2021/08/20/world/asia/afghanistan-facebook.html
(21:01) - Story # 4: https://wgme.com/news/local/rural-sewage-plants-hit-by-ransomware-attacks-in-maine
(31:23) - Story # 5: https://thehackernews.com/2021/08/cybercrime-group-asking-insiders-for.html
(41:39) - Story # 6: https://cyberworkx.in/2021/08/22/mozi-botnet-uses-web-traffic-for-infecting-victims/
(42:09) - Story # 6b: https://www.bleepingcomputer.com/news/security/cisco-won-t-fix-zero-day-rce-vulnerability-in-end-of-life-vpn-routers/
(51:27) - Story # 7: https://twitter.com/j0nh4t/status/1429049506021138437

Talkin’ About Infosec News – 8/18/2021

Black Hills Information Security — Wed, 18 Aug 2021 12:12:32 -0400

ORIGINALLY AIRED ON AUGUST 16, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-08-16 01:34 – Story # 1: https://youtu.be/WqD-ATqw3js 05:50 – Story # 2: https://cyberworkx.in/2021/08/11/accenture-data-is-on-darkweb-ransomware-group-threatens-to-release-it-for-public/ 09:54 – Story # 3: https://www.vice.com/en/article/akg8wg/tmobile-investigating-customer-data-breach-100-million 13:37 – Story # 4: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/announcing-the-general-availability-of-windows-365/ba-p/2595481 17:00 – Story # 4b: https://www.theverge.com/2021/8/4/22609090/microsoft-365-free-trials-cloud-pcs-demand-trials 19:56 – Story # 5: https://cyberworkx.in/2021/08/09/hacker-exploiting-authentication-bypass-bug-on-millions-of-routers/ 33:19 – Story # 6: https://techcrunch.com/2021/08/02/amazon-credit-palm-biometrics/ 40:52 – Story # 7: https://www.pcgamer.com/discord-malware-persistence-sophos-report/ 44:09 – Story # 8: https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-servers-scanned-for-proxyshell-vulnerability-patch-now/ 46:48 – Story # 9: https://portswigger.net/daily-swig/black-hat-usa-http-2-flaws-expose-organizations-to-fresh-wave-of-request-smuggling-attacks Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts,

(00:00) - BHIS | Talkin' Bout News 2021-08-16
(01:34) - Story # 1: https://youtu.be/WqD-ATqw3js
(05:50) - Story # 2: https://cyberworkx.in/2021/08/11/accenture-data-is-on-darkweb-ransomware-group-threatens-to-release-it-for-public/
(09:54) - Story # 4 https://www.vice.com/en/article/akg8wg/tmobile-investigating-customer-data-breach-100-million
(13:37) - Story # 5: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/announcing-the-general-availability-of-windows-365/ba-p/2595481
(17:00) - Story # 5b: https://www.theverge.com/2021/8/4/22609090/microsoft-365-free-trials-cloud-pcs-demand-trials
(19:56) - Story # 6: https://cyberworkx.in/2021/08/09/hacker-exploiting-authentication-bypass-bug-on-millions-of-routers/
(33:19) - Story # 7: https://techcrunch.com/2021/08/02/amazon-credit-palm-biometrics/
(40:52) - Story # 8: https://www.pcgamer.com/discord-malware-persistence-sophos-report/
(44:09) - Story # 9: https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-servers-scanned-for-proxyshell-vulnerability-patch-now/
(46:48) - Story # 10: https://portswigger.net/daily-swig/black-hat-usa-http-2-flaws-expose-organizations-to-fresh-wave-of-request-smuggling-attacks

Talkin’ About Infosec News – 8/13/2021

Black Hills Information Security — Fri, 13 Aug 2021 09:23:53 -0400

Originally Aired on August 10, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-08-10 — The Ransomware Intro 03:18 – Story # 1: https://www.eff.org/deeplinks/2021/08/apples-plan-think-different-about-encryption-opens-backdoor-your-private-life 15:58 – Story # 2: https://www.securityweek.com/details-emerge-iranian-railroad-cyberattack 32:34 – Story # 3: https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2021-patch-tuesday-fixes-3-zero-days-44-flaws/ 36:19 – Story # 4: https://www.raccoonvalleyradio.com/2021/08/02/men-file-lawsuit-against-dallas-county-sheriff/ 44:22 – Story # 5: https://therecord.media/disgruntled-ransomware-affiliate-leaks-the-conti-gangs-technical-manuals/ 52:20 – Story # 6: https://therecord.media/motherboard-vendor-gigabyte-hit-by-ransomexx-ransomware-gang/ Awareness Con Playlist * https://www.youtube.com/playlist?list=PLqz80p7f6dFuuqMCqdhCKCmhCtg88BPz6 The Ransomeware Song – Forrest Brazeal – Used With Permission * https://youtu.be/d2dsI8NvdCU (Thanks to BHIS Discord user @toekneewhyknot for the recommendation) Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,768 other subscribers Email Address

Talkin' About Infosec News - 8/13/2021

Black Hills Information Security — Fri, 13 Aug 2021 08:30:52 -0400

Originally Aired on August 10, 2021

Articles discussed in this episode:

https://youtu.be/JTPa1rGq7qk

00:00 - BHIS | Talkin’ Bout News 2021-08-10 — The Ransomware Intro

03:18 - Story # 1: https://www.eff.org/deeplinks/2021/08/apples-plan-think-different-about-encryption-opens-backdoor-your-private-life

15:58 - Story # 2: https://www.securityweek.com/details-emerge-iranian-railroad-cyberattack

32:34 - Story # 3: https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2021-patch-tuesday-fixes-3-zero-days-44-flaws/

36:19 - Story # 4: https://www.raccoonvalleyradio.com/2021/08/02/men-file-lawsuit-against-dallas-county-sheriff/

44:22 - Story # 5: https://therecord.media/disgruntled-ransomware-affiliate-leaks-the-conti-gangs-technical-manuals/

52:20 - Story # 6: https://therecord.media/motherboard-vendor-gigabyte-hit-by-ransomexx-ransomware-gang/

Awareness Con Playlist

https://www.youtube.com/playlist?list=PLqz80p7f6dFuuqMCqdhCKCmhCtg88BPz6

The Ransomeware Song - Forrest Brazeal - Used With Permission

https://youtu.be/d2dsI8NvdCU

(Thanks to BHIS Discord user @toekneewhyknot for the recommendation)

Talkin’ About Infosec News – 8/4/2021

Black Hills Information Security — Wed, 04 Aug 2021 14:32:09 -0400

Originally Aired on August 2, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-08-02 — Gold Foil Hats 05:18 – Story # 1: https://hothardware.com/news/microsoft-printnightmare-hack-grants-windows-admin-privileges 10:40 – Story # 2: https://www.wsj.com/articles/amazon-hit-with-record-eu-privacy-fine-11627646144 28:43 – LINK : Social Zombies – https://vimeo.com/6307559 31:54 – LINK: The Great Hack – https://youtu.be/iX8GxLP1FHo 32:24 – Story # 3: https://thehackernews.com/2021/08/solarmarker-infostealer-malware-once.html 43:58 – Story # 4: https://www.nytimes.com/2021/07/31/opinion/sunday/russia-ransomware-hacking.html 54:33 – [Post]Show Banter™ – Goldfoil Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,719 other subscribers Email Address Subscribe

(00:00) - BHIS | Talkin' Bout News 2021-08-03 — Gold Foil Hats
(05:18) - Story # 1: https://hothardware.com/news/microsoft-printnightmare-hack-grants-windows-admin-privileges
(10:40) - Story # 2: https://www.wsj.com/articles/amazon-hit-with-record-eu-privacy-fine-11627646144
(28:43) - LINK : Social Zombies - https://vimeo.com/6307559
(31:54) - LINK: The Great Hack – https://youtu.be/iX8GxLP1FHo
(32:24) - Story # 3: https://thehackernews.com/2021/08/solarmarker-infostealer-malware-once.html
(43:58) - Story # 4: https://www.nytimes.com/2021/07/31/opinion/sunday/russia-ransomware-hacking.html
(54:33) - [Post]Show Banter™ - Goldfoil

Talkin' About Infosec News - 7/28/2021

Black Hills Information Security — Wed, 28 Jul 2021 12:57:16 -0400

ORIGINALLY AIRED ON JULY 26, 2021

Articles discussed in this episode:

00:00 – BHIS | Talkin’ Bout News 2021-07-26

03:54 – Story # 1: https://cyberworkx.in/2021/07/24/new-windows-attack-petitpotam-forces-windows-hosts-to-share-ntlm-hashes/

18:53 – Story # 2: https://thehackernews.com/2021/07/how-to-mitigate-microsoft-windows-10-11.html

30:26 – Story # 3: https://cyberworkx.in/2021/07/23/kaseya-received-the-universal-decryptor-for-revil-ransomware-attack/

51:48 – Random Crap

Talkin’ About Infosec News – 7/28/2021

Black Hills Information Security — Wed, 28 Jul 2021 12:12:20 -0400

Originally Aired on July 26, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-07-26 03:54 – Story # 1: https://cyberworkx.in/2021/07/24/new-windows-attack-petitpotam-forces-windows-hosts-to-share-ntlm-hashes/ 18:53 – Story # 2: https://thehackernews.com/2021/07/how-to-mitigate-microsoft-windows-10-11.html 30:26 – Story # 3: https://cyberworkx.in/2021/07/23/kaseya-received-the-universal-decryptor-for-revil-ransomware-attack/ 51:48 – Random Crap Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,696 other subscribers Email Address Subscribe

Webcast: No SPAN Port? No Tap? No Problem!

Black Hills Information Security — Fri, 23 Jul 2021 11:50:42 -0400

We’ve been having a problem with people that want to play with Security Onion or RITA at home. If a home router does not have a mirror port it can be difficult to try cool/free network monitoring tools. Sure, one could buy another router that has those features. But it is far easier to not do that. So, people don’t. Time goes on and they never get to play with the free enterprise-level cool tools at work or at home. However, there are a couple of ways to set up full network monitoring at home. No taps, no mirrored ports, no expensive/obscure devices to buy. In fact, the more basic and crappy the wireless router/switch is, the better these techniques work. So, in this Black Hills Information Security (BHIS) webcast, we will give you a super easy and hacky way to get open-source enterprise network monitoring up and running at home in no time flat. Recorded • 2021-04-15 Join the BHIS Community Discord: https://discord.gg/bhis 00:00 – FEATURE PRESENTATION: No SPAN Port? No Tap? No Problem! 06:00 – Mental Blocks 10:52 – Solution to Mental Blocks 16:26 – ARP Cache Poisoning 33:26 – Step One: Ubuntu 34:36 – Step Two: RITA/Zeek/Mongo 36:45 – Step Three: Install Bettercap 38:09 – Step Four: Start Bettercap 39:52 – Step Five: Advanced – arp-spoof 45:46 – Success! 47:08 – RITA: Import & Analyze 49:42 – RITA: Beacons 52:35 – What Now? 58:29 – QnA [Post]Show Job Hunting – https://youtu.

(00:00) - FEATURE PRESENTATION: No SPAN Port? No Tap? No Problem!
(06:00) - Mental Blocks
(09:41) - LINK : https://wildwesthackinfest.com/antisyphon//soc-core-skills-john-strand/
(10:49) - Solution to Mental Blocks
(16:13) - ARP Cache Poisoning
(33:06) - Step One: Ubuntu
(34:15) - Step Two: RITA/Zeek/Mongo
(36:19) - Step Three: Install Bettercap
(37:42) - Step Four: Start Bettercap
(39:25) - Step Five: Advanced > arp-spoof
(45:16) - Success!
(46:38) - RITA: Import & Analyze
(49:09) - RITA: Beacons
(52:01) - What Now?
(57:47) - QnA

Talkin’ About Infosec News – 7/21/2021

Black Hills Information Security — Wed, 21 Jul 2021 16:00:48 -0400

Originally Aired on July 19, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-07-19 02:18 – Story # 1: https://github.com/fail2ban/fail2ban/security/advisories/GHSA-m985-3f3v-cwmm 13:15 – Story # 2: https://threatpost.com/attackers-target-florida-condo-collapse-victims/167917/ 16:00 – Story # 3: https://citizenlab.ca/2021/07/hooking-candiru-another-mercenary-spyware-vendor-comes-into-focus/ 34:41 – Story # 4: https://thehackernews.com/2021/07/turns-out-that-low-risk-ios-wi-fi.html 42:36 – Story # 5: https://thehackernews.com/2021/07/chinas-new-law-requires-researchers-to.html 53:13 – [Post]Show Banter™ — Can’t Get Lumber Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,639 other subscribers Email Address Subscribe

(00:00) - BHIS | Talkin' Bout News 2021-07-20
(02:18) - Story # 1: https://github.com/fail2ban/fail2ban/security/advisories/GHSA-m985-3f3v-cwmm
(13:15) - Story # 2: https://threatpost.com/attackers-target-florida-condo-collapse-victims/167917/
(16:00) - Story # 3: https://citizenlab.ca/2021/07/hooking-candiru-another-mercenary-spyware-vendor-comes-into-focus/
(34:41) - Story # 4: https://thehackernews.com/2021/07/turns-out-that-low-risk-ios-wi-fi.html
(42:36) - Story # 5: https://thehackernews.com/2021/07/chinas-new-law-requires-researchers-to.html
(53:13) - [Post]Show Banter™ — Can't Get Lumber

Talkin’ About Infosec News – 7/12/2021

Black Hills Information Security — Fri, 16 Jul 2021 16:44:07 -0400

Originally Aired on July 12, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-07-12 01:56 – Story # 1: https://www.bleepingcomputer.com/news/security/biden-asks-putin-to-crack-down-on-russian-based-ransomware-gangs/ 03:09 – Russia’s R.A.R.E. Program 03:54 – Story # 2: https://www.securityweek.com/solarwinds-confirms-new-zero-day-flaw-under-attack 05:33 – Story # 3: https://thehackernews.com/2021/07/hackers-spread-biopass-malware-via.html 08:44 – Story # 4: https://thehackernews.com/2021/07/magecart-hackers-hide-stolen-credit.html 11:53 – Story # 5: https://www.bleepingcomputer.com/news/security/mint-mobile-hit-by-a-data-breach-after-numbers-ported-data-accessed/ 15:31 – Story # 6: https://www.microsoft.com/security/blog/2021/07/12/microsoft-to-acquire-riskiq-to-strengthen-cybersecurity-of-digital-transformation-and-hybrid-work/ 18:42 – Story # 7: https://threatpost.com/lazarus-engineers-malicious-docs/167647/ 29:02 – Story # 8: https://www.bleepingcomputer.com/news/security/insurance-giant-cna-reports-data-breach-after-ransomware-attack/ 35:21 – Story # 9: https://thehackernews.com/2021/07/critical-flaws-reported-in-philips-vue.html 46:19 – Story # 10: https://www.bleepingcomputer.com/news/security/fashion-retailer-guess-discloses-data-breach-after-ransomware-attack/ 48:16 – Story # 11: https://www.securityweek.com/morgan-stanley-hit-accellion-hack-through-third-party-vendor 49:37 – PDF Doc Details: https://www.doj.nh.

(00:00) - BHIS | Talkin' Bout News 2021-07-12
(01:56) - Story # 1: https://www.bleepingcomputer.com/news/security/biden-asks-putin-to-crack-down-on-russian-based-ransomware-gangs/
(03:09) - Russia's R.A.R.E. Program (Fan Graphic)
(03:54) - Story # 2: https://www.securityweek.com/solarwinds-confirms-new-zero-day-flaw-under-attack
(05:33) - Story # 3: https://thehackernews.com/2021/07/hackers-spread-biopass-malware-via.html
(08:44) - Story # 4: https://thehackernews.com/2021/07/magecart-hackers-hide-stolen-credit.html
(11:53) - Story # 5: https://www.bleepingcomputer.com/news/security/mint-mobile-hit-by-a-data-breach-after-numbers-ported-data-accessed/
(15:31) - Story # 6: https://www.microsoft.com/security/blog/2021/07/12/microsoft-to-acquire-riskiq-to-strengthen-cybersecurity-of-digital-transformation-and-hybrid-work/
(18:42) - Story # 7: https://threatpost.com/lazarus-engineers-malicious-docs/167647/
(29:02) - Story # 8: https://www.bleepingcomputer.com/news/security/insurance-giant-cna-reports-data-breach-after-ransomware-attack/
(35:21) - Story # 9: https://thehackernews.com/2021/07/critical-flaws-reported-in-philips-vue.html
(46:19) - Story # 10: https://www.bleepingcomputer.com/news/security/fashion-retailer-guess-discloses-data-breach-after-ransomware-attack/
(48:16) - Story # 11: https://www.securityweek.com/morgan-stanley-hit-accellion-hack-through-third-party-vendor
(49:37) - PDF Doc Details: https://www.doj.nh.gov/consumer/security-breaches/documents/morgan-stanley-20210702.pdf

Webcast: How to Build a Phishing Engagement - Coding TTP's

Black Hills Information Security — Wed, 14 Jul 2021 08:20:00 -0400

Building a phishing engagement is hard. While the concept is straightforward, real-world execution is tricky. Being successful takes enormous amounts of up-front setup and knowledge in quickly evolving phishing tactics. While there is always a need to craft a custom email, the most considerable amount of work is setting up an infrastructure to make it all work. Wouldn’t it be nice if you had a playbook of how to set everything up to save time and prevent mistakes? What if we coded this playbook so we could share this with others and modify our tactics when things change? In this Black Hills Information Security (BHIS) webcast, we’re going to do just that. We will take a top-down look at how a phishing engagement is designed. Then we will work through coding this design, so we don’t have to keep building a phish. Lastly, we will touch on how to fly under the radar and how coding TTP’s help save time and guarantee accuracy. Join the BHIS Community Discord: https://discord.gg/bhis Music By Beau: https://www.nobandwidth.io 00:00 – FEATURE PRESENTATION: How to Build a Phishing Engagement – Coding TTP’s 01:06 – About Ralph May 01:58 – Disclaimers 03:19 – Overview 03:56 – Phishing is Hard 06:33 – Infrastructure 07:12 – Operational Security 08:39 – Designing a Phish 13:18 – Phishing Emails 15:48 – 1st Tool: EVILGINX2 17:30 – EVILGINX IOC’s 18:20 – 2nd Tool: GoPhish 19:08 – GoPhish IOC’s 20:52 – 3rd Tool: NGINX

(00:00) - FEATURE PRESENTATION: How to Build a Phishing Engagement - Coding TTP's
(01:02) - About Ralph May
(01:51) - Disclaimers
(03:06) - Overview
(03:43) - Phishing is Hard
(06:20) - Infrastructure
(06:59) - Operational Security
(08:26) - Designing a Phish
(13:01) - Phishing Emails
(15:29) - 1st Tool: EVILGINX2
(17:10) - EVILGINX IOC's
(18:00) - 2nd Tool: GoPhish
(18:48) - GoPhish IOC's
(20:31) - 3rd Tool: NGINX
(21:45) - 4th Tool: Digital Ocean Cloud Provider
(22:10) - 5th Tool: Mailgun Email Service
(22:52) - 6th Tool: CDN-Azure
(23:33) - Coding a Phish – 1st Tool: Ansible
(26:09) - 2nd Tool: Terraform
(28:36) - 3rd Tool: Docker
(30:22) - Combining Ansible and Terraform
(32:14) - Ansible Secrets
(34:04) - DEMO: Executing a Phishing Engagement
(41:57) - What's Next
(43:19) - QnA
(56:03) - PostShow Banter™ — Ohs and Ahs

The Birth of PreShowBanterCon-A-Thon 2021!™

Black Hills Information Security — Tue, 13 Jul 2021 08:24:32 -0400

Join the BHIS Community Discord: https://discord.gg/bhis Music By Beau: https://www.nobandwidth.io 00:00 – 2021-04-01 – PreShow Banter™ — Intro Sec Con & The Birth of PreShowBanterCon-A-Thon 2021!™ 05:29 – You’re So Vanity 08:39 – Let’s Talk About Florida Man 11:27 – Kellon is here – Intro Sec Con Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,588 other subscribers Email Address Subscribe

(00:00) - 2021-04-01 - PreShow Banter™ — Intro Sec Con & The Birth of PreShowBanterCon-A-Thon 2021!™
(08:28) - Let's Talk About Florida Man
(11:12) - Kellon is here - Intro Sec Con

Talkin’ About Infosec News – 7/6/2021

Black Hills Information Security — Mon, 12 Jul 2021 10:44:35 -0400

Originally Aired on July 6, 2021 Articles discussed in this episode: 00:00 – BHIS | Talkin’ Bout News 2021-07-06 02:32 – Story # 1 – CISA self-assessment audit tool – https://www.bleepingcomputer.com/news/security/cisa-releases-new-ransomware-self-assessment-security-audit-tool/amp/ 08:24 – Story # 2 – Insurance rates up 32% – https://www.theregister.com/2021/07/05/cyber_insurance_report/ 20:48 – Story # 3 – 0 Day for Windows OS PrintNightmare – https://doublepulsar.com/zero-day-for-every-supported-windows-os-version-in-the-wild-printnightmare-b3fdb82f840c 31:32 – Story # 4 – Kaseya Indicators of Compromises – https://cyberworkx.in/2021/07/06/kaseya-says-its-not-a-supply-chain-attack-and-releases-indicators-of-compromises/ 41:16 – Story # 5 – Dotnet Core for PowerShell – https://cyberworkx.in/2021/07/04/critical-remote-code-execution-vulnerability-in-dotnet-core-for-powershell/ 42:54 – Story # 6 – Intuit shares data with Equifax – https://krebsonsecurity.com/2021/07/intuit-to-share-payroll-data-from-1-4m-small-businesses-with-equifax/ 48:33 – Alissa Torres’ Shout Outs (see description for links) 52:00 – Story # 7 – The Audacity of Spyware – https://mashable.com/article/audacity-spyware-privacy-policy Alissa Torres’ Shout Outs: * https://www.dianainitiative.org/event-schedule/* https://dfrws.org/conferences/dfrws-usa-2021/* https://www.activecountermeasures.com/event/hacking-packet-captures-the-foundations-of-network-security/* https://wildwesthackinfest.com/antisyphon//advanced-endpoint-investigations/ Check out our Cyber Range, not just a place to work through challenges and play,

Talkin' About Infosec News - 7/6/2021

Black Hills Information Security — Mon, 12 Jul 2021 08:37:54 -0400

Articles discussed in this episode:

00:00 - BHIS | Talkin’ Bout News 2021-07-06

02:32 - Story # 1 - CISA self-assessment audit tool - https://www.bleepingcomputer.com/news/security/cisa-releases-new-ransomware-self-assessment-security-audit-tool/amp/

08:24 - Story # 2 - Insurance rates up 32% - https://www.theregister.com/2021/07/05/cyber_insurance_report/

20:48 - Story # 3 - 0 Day for Windows OS PrintNightmare - https://doublepulsar.com/zero-day-for-every-supported-windows-os-version-in-the-wild-printnightmare-b3fdb82f840c

31:32 - Story # 4 - Kaseya Indicators of Compromises - https://cyberworkx.in/2021/07/06/kaseya-says-its-not-a-supply-chain-attack-and-releases-indicators-of-compromises/

41:16 - Story # 5 - Dotnet Core for PowerShell - https://cyberworkx.in/2021/07/04/critical-remote-code-execution-vulnerability-in-dotnet-core-for-powershell/

42:54 - Story # 6 - Intuit shares data with Equifax - https://krebsonsecurity.com/2021/07/intuit-to-share-payroll-data-from-1-4m-small-businesses-with-equifax/

48:33 - Alissa Torres’ Shout Outs ( see description for links )

52:00 - Story # 7 - The Audacity of Spyware - https://mashable.com/article/audacity-spyware-privacy-policy

Alissa Torres’ Shout Outs:

Talkin’ About Infosec News – 6/28/2021

Black Hills Information Security — Wed, 30 Jun 2021 18:01:18 -0400

Originally Aired on June 28, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — Way West Recap06:38 – Story 1 : https://www.bleepingcomputer.com/news/security/wd-my-book-nas-devices-are-being-remotely-wiped-clean-worldwide/12:58 – Story 2 : https://www.vice.com/en/article/bvzd8v/hackers-use-fake-call-center-to-trick-victims-into-installing-ransomware19:41 – Story 3 : https://thehackernews.com/2021/06/bios-disconnect-new-high-severity-flaws.html29:27 – Story 4 : https://venturebeat.com/2021/06/16/cybereason-80-of-orgs-that-paid-the-ransom-were-hit-again/44:27 – Story 5 : https://nypost.com/2021/06/23/john-mcafee-dies-by-suicide-inside-prison-in-barcelona/45:43 – Story 6 : https://www.marketplace.org/2021/06/23/texas-homeowners-startled-by-hijacked-thermostats/52:56 – Story 7 : https://www.bleepingcomputer.com/news/security/mercedes-benz-data-breach-exposes-ssns-credit-card-numbers/55:38 – Story 8 : https://securelist.com/ferocious-kitten-6-years-of-covert-surveillance-in-iran/102806/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,555 other subscribers Email Address Subscribe

Talkin' About Infosec News - 6/28/2021

Black Hills Information Security — Wed, 30 Jun 2021 11:41:47 -0400

00:00 - PreShow Banter™ — Way West Recap
06:38 - Story 1 : https://www.bleepingcomputer.com/news/security/wd-my-book-nas-devices-are-being-remotely-wiped-clean-worldwide/
12:58 - Story 2 : https://www.vice.com/en/article/bvzd8v/hackers-use-fake-call-center-to-trick-victims-into-installing-ransomware
19:41 - Story 3 : https://thehackernews.com/2021/06/bios-disconnect-new-high-severity-flaws.html
29:27 - Story 4 : https://venturebeat.com/2021/06/16/cybereason-80-of-orgs-that-paid-the-ransom-were-hit-again/
44:27 - Story 5 : https://nypost.com/2021/06/23/john-mcafee-dies-by-suicide-inside-prison-in-barcelona/
45:43 - Story 6 : https://www.marketplace.org/2021/06/23/texas-homeowners-startled-by-hijacked-thermostats/
52:56 - Story 7 : https://www.bleepingcomputer.com/news/security/mercedes-benz-data-breach-exposes-ssns-credit-card-numbers/
55:38 - Story 8 : https://securelist.com/ferocious-kitten-6-years-of-covert-surveillance-in-iran/102806/

Talkin' About Infosec News - 6/7/2021

Black Hills Information Security — Mon, 14 Jun 2021 11:01:00 -0400

https://youtu.be/ZXNzG8ilfiw

00:00 - Talkin’ Bout Ransomware 01:26 - Story 1: https://nypost.com/2021/06/06/texas-mom-arrested-after-posing-as-her-13-year-old-daughter-at-middle-school/ 06:26 - Story 2: https://cyberworkx.in/2021/06/07/worlds-first-known-malware-targeting-windows-containers-to-compromise-cloud-environments/ 10:42 - Story 3: https://threatpost.com/revil-spill-details-us-attacks/166669/ 22:27 - Story 4: https://www.eff.org/deeplinks/2021/06/van-buren-victory-against-overbroad-interpretations-cfaa-protects-security 24:43 - Story 5: https://cyberworkx.in/2021/06/05/microsoft-teams-is-getting-better-security-end-to-end-encryption-for-voice-calls-from-july/ 30:33 - Story 6: https://lock.cmpxchg8b.com/passmgrs.html Join the BHIS Community Discord: https://discord.gg/bhis

Talkin’ About Infosec News – 6/1/2021

Black Hills Information Security — Fri, 04 Jun 2021 09:04:21 -0400

Originally Aired on June 1, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — Fishing Attacks 02:40 – Story 1: https://m1racles.com/ 05:33 – Story 2: https://arstechnica.com/gadgets/2021/05/vulnerability-in-vmware-product-has-severity-rating-of-9-8-out-of-10/ 11:26 – Story 3: https://www.securityweek.com/nuclear-flash-cards-us-secrets-exposed-learning-apps 15:29 – Story 4: https://www.darkreading.com/risk/cyber-insurance-firms-start-tapping-out-as-ransomware-continues-to-rise/d/d-id/1341109 23:44 – Story 5: https://www.zdnet.com/article/various-japanese-government-entities-had-data-stolen-in-cyber-attack-report/ 26:26 – Story 6: https://www.microsoft.com/security/blog/2021/05/27/new-sophisticated-email-based-attack-from-nobelium/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,444 other subscribers Email Address Subscribe

(00:00) - PreShow Banter™ — Fishing Attacks
(02:40) - Story 1 : https://m1racles.com/
(05:33) - Story 2 : https://arstechnica.com/gadgets/2021/05/vulnerability-in-vmware-product-has-severity-rating-of-9-8-out-of-10/
(11:26) - Story 3 : https://www.securityweek.com/nuclear-flash-cards-us-secrets-exposed-learning-apps
(15:29) - Story 4 : https://www.darkreading.com/risk/cyber-insurance-firms-start-tapping-out-as-ransomware-continues-to-rise/d/d-id/1341109
(23:44) - Story 5 : https://www.zdnet.com/article/various-japanese-government-entities-had-data-stolen-in-cyber-attack-report/
(26:26) - Story 7 : https://www.microsoft.com/security/blog/2021/05/27/new-sophisticated-email-based-attack-from-nobelium/

Webcast: Getting Started in Pentesting The Cloud: Azure

Black Hills Information Security — Thu, 03 Jun 2021 13:57:41 -0400

In this Black Hills Information Security (BHIS) webcast, you will learn tools and techniques for performing penetration tests against Microsoft Azure environments. Increasingly, more organizations are migrating resources to being hosted in the cloud. With this comes a greater potential for misconfiguration if there isn’t a solid understanding of the attack surface. While there are many similarities between traditional on-premises pentesting and cloud-based pentesting, the latter is an animal of its own. This webcast attempts to clear up some of the fogginess around cloud-based pentesting, specific to Microsoft Azure environments, including Microsoft 365. In order to adequately determine the attack surface, the appropriate coverage areas are highlighted. Differences between Azure resources and Microsoft 365 can oftentimes be confusing but knowing these differences is key to helping you pivot and escalate privileges. Conditional access policies are great for defining different scenarios for how users can authenticate securely but can also be misconfigured. There are security protections for stopping certain password attacks but some of these can be bypassed. Ultimately, a methodology for testing Azure environments along with tools and techniques are presented in this talk. 36:31 – Webcast officially starts Join us on the BLACK HILLS INFOSEC Discord server for interaction with Beau and your fellow attendees: https://discord.gg/bhis Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,437 other subscribers Email Address Subscribe

(00:00) - FEATURE PRESENTATION: Getting Started in Pentesting the Cloud – Azure
(02:32) - WHOAMI
(03:20) - Talk Roadmap
(05:33) - Why Azure?
(08:06) - Identifying Attack Surface
(12:50) - Recon & External Attacks
(19:31) - Password Attacks
(21:37) - Password Protection & Smart Lockout
(23:05) - Authentication
(26:52) - Conditional Access Policies & MFA
(34:11) - Post Compromise
(36:46) - Command Line Access
(37:40) - LINK: CloundPentest Cheatsheets: https://github.com/dafthack/CloudPentestCheatsheets
(37:53) - Azure Subscription Hierarchy
(41:31) - Resource Specific Issues
(41:55) - Serverless Environment Variables
(48:59) - Leveraging Scanning Tools
(51:11) - Key Takeaways
(52:37) - PostShow Banter™ — They Got Questions, Beau

Backdoors & Breaches LIVE - 5/19/2021

Black Hills Information Security — Fri, 28 May 2021 08:54:18 -0400

Join our Incident Master Ean Meyer as we play another round of Backdoors & Breaches (B&B) session using our new Tabletop Simulator (TTS) version! If you have STEAM / TABLETOP SIMULATOR / BACKDOORS & BREACHES WORKSHOP, you can play using the same version of the game. https:/steamcommunity.com/sharedfiles/filedetails/?id=2401033477 Incident Master: Ean | EanMeyer Defenders: Qasim | hashtaginfosec Kaitlyn | Kadawi Blake | zer0cool Vee | Po1Zon_P1x13 Ralph | ralphte1 Game Play Master: Jason | BanjoCrashland Our good friend Edward Miro wrote an extensive guide on how to install and use B&B on TTS. Check it out below! https://www.blackhillsinfosec.com/backdoors-breaches-tabletop-simulator-guide/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,408 other subscribers Email Address Subscribe

Backdoors & Breaches Live! 05/19/2021

Black Hills Information Security — Fri, 21 May 2021 09:15:00 -0400

Join Incident Master Ean Meyer as we play another round of Backdoors & Breaches.

Webcast: Your Free and Open Source EDR Options!

Black Hills Information Security — Wed, 19 May 2021 08:45:00 -0400

There has been a huge explosion of different free and open-source options for EDR in the security space. Which is nice because the commercial offerings are stupid expensive. In this Black Hills Information Security (BHIS) webcast, we look at OpenEDR, Elastic, and Velociraptor. With all these great options, there is no reason your organization should not have one of these offerings. Further, they are essential for any IR gig you may do. You may be a shop that is looking at commercial offerings, however, you should always look at the free offerings first. Remember, you are not paying for what the commercial product offers, you are paying for what it does versus what the free offerings do not. Join the BHIS Community Discord: https://discord.gg/bhis 0:00:00 – FEATURE PRESENTATION: Your Free & Open EDR Options! 0:02:03 – Why We here? 0:04:46 – EDR? Like that there electronic music? 0:11:48 – Vendors 0:14:21 – MITRE Evaluations 0:19:17 – So, Why EDR? 0:23:05 – Free and Open Source? 0:28:48 – OSSEC 0:31:12 – So, WAZUH 0:38:28 – Velociraptor 0:41:09 – DEMO: Velociraptor 0:48:35 – Vendors and Free/OS 0:49:57 – Elastic (Formerly Endgame) 0:55:09 – OPEN EDR – From Comodo 0:58:41 – Conclusions 1:01:53 – Backdoors & Breaches Virtual Slides for this webcast can be found here:

(00:00) - FEATURE PRESENTATION: Your Free & Open EDR Options!
(02:03) - Why We here?
(04:46) - EDR? Like that there electronic music?
(11:48) - Vendors
(14:21) - MITRE Evaluations
(19:17) - So, Why EDR?
(23:05) - Free and Open Source?
(28:48) - OSSEC
(31:12) - So, WAZUH
(38:28) - Velociraptor
(41:09) - DEMO: Velociraptor
(48:35) - Vendors and Free/OS
(49:57) - Elastic (Formerly Endgame)
(55:09) - OPEN EDR - From Comodo
(58:41) - Conclusions
(01:01:53) - Backdoors and Breaches Virtual
(01:07:05) - John Pitches BHIS SOC

Talkin’ About Infosec News – 5/10/2021

Black Hills Information Security — Fri, 14 May 2021 11:43:18 -0400

Originally Aired on May 10, 2021 Articles discussed in this episode: * https://whyy.org/segments/the-greatest-hoax-on-earth/ * https://www.fbi.gov/news/pressrel/press-releases/fbi-statement-on-network-disruption-at-colonial-pipeline * https://arstechnica.com/gadgets/2021/05/peloton-takes-3-months-to-fix-flaw-that-exposed-users-private-information/ * https://threatpost.com/critical-cisco-sd-wan-hyperflex-bugs/165923/ * https://www.macrumors.com/2021/05/10/hacked-airtag-links-to-custom-url-lost-mode/ * https://jalopnik.com/security-researchers-hack-a-tesla-from-a-drone-1846833249 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,362 other subscribers Email Address Subscribe

Webcast: Ok, Let's Talk About Ransomware

Black Hills Information Security — Wed, 12 May 2021 13:11:52 -0400

This is a joint emergency webcast from the teams of Black Hills Information Security, Wild West Hackin’ Fest, and Active Countermeasures, presented by John Strand. There have been a couple of very scary ransomware stories in the news over the past few weeks. We figured it would be a good idea to throw a quick emergency webcast together to cover some of these new developments and hit on some very real and very easy things to mitigate against some of these attacks. We say “some” because these attacks are evolving. Traditionally, there are two classes of ransomware, but we are seeing a third start to develop which is harder to deal with. But not impossible. Yes, we will be talking about deception and attribution. Yes, we will be talking about beacon analysis. Because they are kind of our things. But, we will also discuss some new open-source technologies. And… something you can just turn on. The point is these attacks are rapidly evolving. The attack on Colonial shows just a glimpse of how bad these attacks are going to get. Also, we are seeing how we cannot view Operation Technology (OT) as a completely different security creature. Everything is interconnected. We need to start treating security more holistically and stop saying things like, “we just want to focus on the OT/SCADA/PCI/HIPAA enclave.” Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2021/05/SLIDES_LetsTalkAboutRansomware.pdf Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,344 other subscribers Email Address Subscribe

(00:00) - PreShow Banter™ — John Strand Has Windows Updates
(25:39) - FEATURE PRESENTATION: OK, Let’s Talk About Ransomware
(01:25:34) - Wrap-up Questions

Talkin’ About Infosec News – 5/5/2021

Black Hills Information Security — Fri, 07 May 2021 08:53:00 -0400

Originally Aired on May 5, 2021 Articles discussed in this episode: * https://thehackernews.com/images/-V6c2_ZHgMzI/YJFAaQl5RjI/AAAAAAAAA_8/wNs6d4zWc1MHLJ5VPaSpzHvXkFIIcwfZQCLcBGAsYHQ/s0/reset-passsword.jpg * https://threatpost.com/dell-kernel-privilege-bugs/165843/ * https://www.bleepingcomputer.com/news/security/new-windows-pingback-malware-uses-icmp-for-covert-communication/ * https://signal.org/blog/the-instagram-ads-you-will-never-see/ * https://nakedsecurity.sophos.com/2021/05/04/apple-products-hit-by-fourfecta-of-zero-day-exploits-patch-now/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,321 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 5/3/2021

Black Hills Information Security — Wed, 05 May 2021 13:04:52 -0400

Originally Aired on May 3, 2021 Articles discussed in this episode: * https://threatpost.com/deepfake-attacks-surge-experts-warn/165798/ * https://threatpost.com/linux-kernel-bug-wider-cyberattacks/165640/* https://www.reddit.com/r/netsec/comments/n36x7h/arbitrary_code_execution_in_exiftool/* https://krebsonsecurity.com/2021/04/experians-credit-freeze-security-is-still-a-joke/* https://github.com/alievk/avatarify-python * https://media.ccc.de/v/29c3-5327-en-writing_a_thumbdrive_from_scratch_h264 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,306 other subscribers Email Address Subscribe

Backdoors & Breaches LIVE - 4/28/2021

Black Hills Information Security — Fri, 30 Apr 2021 12:00:43 -0400

Join our Incident Master BanjoCrashland as we play another round of Backdoors & Breaches (B&B) session using our new Tabletop Simulator (TTS) version! If you have STEAM / TABLETOP SIMULATOR / BACKDOORS & BREACHES WORKSHOP, you can play using the same version of the game. https:/steamcommunity.com/sharedfiles/filedetails/?id=2401033477 Incident Master: Jason Blanchard | BanjoCrashland Defenders: Matt Thomas | slegna Richard Phung | p3hndrx Maril Vernon | SheWhoHacks Kaitlyn Wimberley | kadawi Blake Regan | zer0cool Ralph May | ralphte1 John Strand | strandjs Our good friend Edward Miro wrote an extensive guide on how to install and use B&B on TTS. Check it out below! https://www.blackhillsinfosec.com/backdoors-breaches-tabletop-simulator-guide/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,295 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 4/26/2021

Black Hills Information Security — Wed, 28 Apr 2021 10:11:04 -0400

Originally Aired on April 26, 2021 Articles discussed in this episode: * https://usdaynews.com/celebrities/celebrity-death/dan-kaminsky-death-cause/* https://signal.org/blog/cellebrite-vulnerabilities/* https://arstechnica.com/gadgets/2021/04/hackers-backdoor-corporate-password-manager-and-steal-customer-data/* https://youtu.be/G0gOAvpGoJg Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,281 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 4/19/2021

Black Hills Information Security — Wed, 21 Apr 2021 11:19:59 -0400

Originally Aired on April 19, 2021 Articles discussed in this episode: * https://www.theverge.com/2021/4/13/22382821/fbi-doj-hafnium-remote-access-removal-hack* https://apnews.com/article/russia-safe-harbor-ransomeware-hacking-c9dab7eb3841be45dff2d93ed3102999* https://threatpost.com/critical-cloud-bug-vmware-carbon-black/165278/* https://www.theverge.com/2021/4/18/22390379/federal-investigators-breach-software-codecov-solarwinds* https://threatpost.com/google-project-zero-cuts-bug-disclosure-timeline-to-a-30-day-grace-period/165432/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,264 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 4/12/2021

Black Hills Information Security — Wed, 14 Apr 2021 09:15:00 -0400

Originally Aired on April 12, 2021 Articles discussed in this episode: * https://threatpost.com/azure-functions-privilege-escalation/165307/* https://www.theverge.com/2021/4/8/22374464/linkedin-data-leak-500-million-accounts-scraped-microsoft* https://news.linkedin.com/2021/april/an-update-from-linkedin* https://www.bbc.com/news/world-middle-east-56708778* https://www.tenable.com/blog/cve-2018-13379-cve-2019-5591-cve-2020-12812-fortinet-vulnerabilities-targeted-by-apt-actors Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,241 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 4/7/2021

Black Hills Information Security — Thu, 08 Apr 2021 12:30:48 -0400

Originally Aired on April 7, 2021 Articles discussed in this episode: * https://www.scmagazine.com/home/security-news/phishing/array-of-recent-phishing-schemes-use-personalized-job-lures-voice-manipulation/* https://www.coindesk.com/hackers-mined-crypto-on-githubs-servers-report* https://www.securityweek.com/white-hats-earn-440000-hacking-microsoft-products-first-day-pwn2own-2021* https://www.infosecurity-magazine.com/news/consulting-firm-data-breach/* https://github.com/Neo23x0/Raccine* https://github.com/ralphte/build_a_phish* https://support.microsoft.com/en-us/windows/protect-your-pc-from-ransomware-08ed68a7-939f-726c-7e84-a72ba92c01c3* https://www.infosecurity-magazine.com/news/florida-school-district-40m-ransom/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,208 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 4/5/2021

Black Hills Information Security — Tue, 06 Apr 2021 14:17:49 -0400

Originally Aired on April 5, 2021 Articles discussed in this episode: * https://www.bleepingcomputer.com/news/security/533-million-facebook-users-phone-numbers-leaked-on-hacker-forum/* https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/* https://threatpost.com/call-of-duty-cheats-gamers-malware/165209/* https://outflank.nl/services/outflank-security-tooling/* https://thehackernews.com/2021/04/22-year-old-charged-with-hacking-water.html* https://www.paulosyibelo.com/2021/04/this-man-thought-opening-txt-file-is.html Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,198 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 3/29/2021

Black Hills Information Security — Wed, 31 Mar 2021 08:24:52 -0400

Originally Aired on March 29, 2021 Articles discussed in this episode: * https://www.bleepingcomputer.com/news/security/engineer-reports-data-leak-to-nonprofit-hears-from-the-police/* https://thehackernews.com/2021/03/solarwinds-orion-vulnerability.html* https://thehackernews.com/2021/03/apple-issues-urgent-patch-update-for.html* https://unit42.paloaltonetworks.com/malicious-cryptojacking-images/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,178 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 3/24/2021

Black Hills Information Security — Mon, 29 Mar 2021 10:31:59 -0400

Originally Aired on March 24, 2021 Articles discussed in this episode: * https://www.theverge.com/2021/3/22/22345792/microsoft-discord-acquisition-report-10-billion* https://krebsonsecurity.com/2021/03/weleakinfo-leaked-customer-payment-info/* https://grahamcluley.com/police-raid-apartment-alleged-verkada-hacker/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,176 other subscribers Email Address Subscribe

Webcast: OPSEC Fundamentals for Remote Red Teams

Black Hills Information Security — Thu, 25 Mar 2021 08:29:00 -0400

During remote red team exercises, it can be difficult to keep from leaking information to the target organization’s security team. Every interaction with the target’s website, every email sent, and every network service probed leaves some trace that the red team was there. Mature blue teams can correlate those pieces of information to identify red team actions and infrastructure, and use that information to either block the red team outright or execute deception operations to frustrate further attacks. In this Black Hills Information Security (BHIS) webcast, Michael will discuss common sources of data leakage during remote red team exercises and steps red teamers can take to eliminate or disguise the leakage outright, or to compartmentalize their actions and keep the blue team from connecting the dots. He’ll also discuss how red teamers can see the attack from the defender’s point of view so that these concepts can be applied to new tools and technologies in the future. Join the BHIS Community Discord: https://discord.gg/bhis 0:00:00 – PreShow Banter™ — It’s Not Delivery, Its Frozen 0:09:36 – PreShow Banter™ — One Rural to Rule Them All 0:11:51 – PreShow Banter™ — Proudly Sucking at Charity 0:13:08 – PreShow Banter™ — SPECIAL GUEST: Rural Tech Fund 0:20:39 – PreShow Banter™ — Meth Lab For Computers 0:25:41 – FEATURE PRESENTATION: OPSEC Fundamentals for Remote Red Teams 0:27:00 – WHOAMI 0:30:42 – Why OPSEC is Important For Red Teams 0:34:01 – Possible Countermeasures 0:36:37 – Other Red Team Threats 0:38:06 – Assessing Red Team Actions

(00:00) - PreShow Banter™ — It's Not Delivery, Its Frozen
(09:36) - PreShow Banter™ — One Rural to Rule Them All
(11:51) - PreShow Banter™ — Proudly Sucking at Charity
(13:08) - PreShow Banter™ — SPECIAL GUEST: Rural Tech Fund
(20:39) - PreShow Banter™ — Meth Lab For Computies
(25:41) - FEATURE PRESENTATION: OPSEC Fundamentals for Remote Red Teams
(26:59) - WHOAMI
(30:42) - Why OPSEC is Important For Red Teams
(34:01) - Possible Countermeasures
(36:37) - Other Red Team Threats
(38:06) - Assessing Red Team Actions
(39:26) - Building OPSEC Standard Procedures
(40:42) - Local Workstation Setup
(45:01) - OS Modifications
(49:44) - TOOL Configurations
(56:35) - Source IP Addresses
(01:01:36) - Fail-Safe VPN
(01:02:57) - Other Third-Party Services
(01:10:05) - Network Services
(01:15:19) - Testing New Tools
(01:21:42) - Got Questions
(01:27:03) - PostShow Banter™ — Access Granted

Talkin’ About Infosec News – 3/22/2021

Black Hills Information Security — Tue, 23 Mar 2021 15:26:23 -0400

Originally Aired on March 22, 2021 Articles discussed in this episode: * https://threatpost.com/google-spectre-poc-exploit-chrome/164787/* https://threatpost.com/office-365-phishing-attack-financial-execs/164925/* https://krebsonsecurity.com/2021/03/weleakinfo-leaked-customer-payment-info/* https://arstechnica.com/gadgets/2021/03/critics-fume-after-github-removes-exploit-code-for-exchange-vulnerabilities/* https://arstechnica.com/information-technology/2021/03/expert-hackers-used-11-zerodays-to-infect-windows-ios-and-android-users/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,168 other subscribers Email Address Subscribe

(00:00) - Intro
(01:00) - Critics fume after Github removes exploit code for Exchange vulnerabilities
(17:44) - Google Releases Spectre PoC Exploit For Chrome
(28:40) - “Expert” hackers used 11 0-days to infect Windows, iOS, and Android users

Talkin’ About Infosec News – 3/17/2021

Black Hills Information Security — Fri, 19 Mar 2021 08:29:00 -0400

Originally Aired on March 17, 2021 Articles discussed in this episode: * https://www.bloomberg.com/news/articles/2021-03-09/hackers-expose-tesla-jails-in-breach-of-150-000-security-cams* https://media.cert.europa.eu/static/SecurityAdvisories/2021/CERT-EU-SA2021-014.pdf* https://security.googleblog.com/2021/03/introducing-sigstore-easy-code-signing.html* https://krebsonsecurity.com/2021/03/weleakinfo-leaked-customer-payment-info/* https://twitter.com/PythonResponder/status/1372023079719817218?s=20 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,163 other subscribers Email Address Subscribe

Backdoors & Breaches LIVE - 3/10/2021

Black Hills Information Security — Thu, 18 Mar 2021 08:18:00 -0400

The Livestream of our first Backdoors & Breaches (B&B) session using our new Tabletop Simulator (TTS) version of the game was a success! If you have STEAM / TABLETOP SIMULATOR / BACKDOORS & BREACHES WORKSHOP, you can play using the same version of the game. 11:05 – Backdoors & Breaches Session Begins! Our good friend Edward Miro wrote an extensive guide on how to install and use B&B on TTS. Check it out below! https://www.blackhillsinfosec.com/backdoors-breaches-tabletop-simulator-guide/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,144 other subscribers Email Address Subscribe

Webcast: Sacred Cash Cow Tipping 2021

Black Hills Information Security — Wed, 10 Mar 2021 11:12:55 -0500

It is another year for the Sacred Cash Cow Tipping Webcast. For those of you who are new to our email list within the past year, this is a webcast where we cover the various tools and techniques that Black Hills Information Security (BHIS) uses to bypass endpoint security protections. The point of this webcast is not so much to teach people how to bypass these products, but rather to show that they can be bypassed. Hopefully, this leads to some conversations about defense-in-depth and how many vendors exaggerate their capabilities. We also discuss how simply writing signatures for specific strains of malware is a waste of time. Well, I mean, it has its place. But it is not something that should be the primary cornerstone of your security support structure. There is a lot to unpack in this webcast, one of the main things to unpack is why we are still doing it. We are still doing this because it is still necessary. We still have vendors and CISOs perpetuating the myth that a security product can protect you from all attacks. This is an oversimplification, and it needs to be exterminated like a termite or a cockroach. In past years we have had vendors threaten to sue… and some cooler vendors send us beer. Hopefully, this year ends in beer. Join the BHIS Community Discord: https://discord.gg/bhis 0:00:00 – PreShow Banter™ — We Love You 3000 0:02:56 – PreShow Banter™ — SolarWinds Forever 0:07:26 – PreShow Banter™ — Watching Bitcoins Being Mined 0:08:53 – PreShow Banter™ — TeacherCoin™ 0:11:12 – PreShow Banter™ — Babies’ Toys For Your Hands 0:15:45 – FEATURE PRESENTATION: Sacred Cash Cow Tipping 2021 0:21:28 – Ralph May: Due Diligence 0:25:42 – Ralph May: ScareCrow 0:32:56 – Ralph May: RDP 0:35:51 – Marcello: Sentinel One

(00:00) - PreShow Banter™ — We Love You 3000
(02:56) - PreShow Banter™ — SolarWinds Forever
(07:26) - PreShow Banter™ — Watching Bitcoins Being Mined
(08:53) - PreShow Banter™ — TeacherCoin™
(11:12) - PreShow Banter™ — Babies' Toys For Your Hands
(14:06) - PreShow Banter™ — This is Huge
(15:45) - FEATURE PRESENTATION: Sacred Cash Cow Tipping 2021
(21:28) - Ralph May: Due Dilligence
(25:42) - Ralph May: ScareCrow
(32:55) - Ralph May: RDP
(35:50) - Marcello: Sentinel One
(44:52) - Jordan Drysdale: Windows Subsystem for Linux
(53:31) - Rob (mubix) Fuller: Initial Access
(01:05:15) - Rob (mubix) Fuller: Post Exploitation
(01:10:58) - Joff Thyer: Strip PowerShell Script Comments
(01:17:49) - Joff Thyer: Build a .NET Assembly to Execute Shellcode
(01:20:57) - Joff Thyer: Load/Run DLL/Assembly in PowerShell
(01:23:27) - PostShow Banter™

Talkin’ About Infosec News – 3/8/2021

Black Hills Information Security — Tue, 09 Mar 2021 08:45:00 -0500

Originally Aired on March 8, 2021 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,118 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 3/3/2021

Black Hills Information Security — Fri, 05 Mar 2021 14:19:31 -0500

Originally Aired on March 3, 2021 Articles discussed in this episode: * https://www.msn.com/en-us/money/other/microsoft-these-exchange-server-zero-day-flaws-are-being-used-by-hackers-so-update-now/ar-BB1ec0In Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,093 other subscribers Email Address Subscribe

Talkin' About Infosec News - 3/1/2021

Black Hills Information Security — Wed, 03 Mar 2021 08:14:00 -0500

Originally Aired on March 1, 2021 Articles discussed in this episode: * https://threatpost.com/yeezy-sneaker-bots-boost-sun/164312/* https://www.darknet.org.uk/2021/02/gitlab-watchman-audit-gitlab-for-sensitive-data-credentials/* https://www.wired.com/story/gab-hack-data-breach-ddosecrets/* https://www.cyberark.com/resources/threat-research-blog/hunting-azure-blobs-exposes-millions-of-sensitive-files* https://github.com/cyberark/blobhunter Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,084 other subscribers Email Address Subscribe

Talkin' About Infosec News - 2/24/2021

Black Hills Information Security — Fri, 26 Feb 2021 11:37:14 -0500

Originally Aired on February 24, 2021 Articles discussed in this episode: * https://www.scmagazine.com/home/security-news/government-and-defense/fireeye-and-microsoft-execs-senators-dissect-mandatory-breach-disclosure-in-wake-of-solarwinds/* https://www.wired.com/story/russia-gru-hackers-us-grid/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,080 other subscribers Email Address Subscribe

Talkin' About Infosec News - 2/22/2021

Black Hills Information Security — Tue, 23 Feb 2021 09:37:44 -0500

Originally Aired on February 22, 2021 Articles discussed in this episode: * https://www.reuters.com/article/us-northkorea-cybercrime-pfizer-idUKKBN2AG0NI* https://threatpost.com/silver-sparrow-malware-30k-macs/164121/* https://www.securityweek.com/chinese-hackers-cloned-equation-group-exploit-years-shadow-brokers-leak Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,071 other subscribers Email Address Subscribe

Talkin' About Infosec News - 2/17/2021

Black Hills Information Security — Thu, 18 Feb 2021 12:48:20 -0500

Originally Aired on February 17, 2021 Articles discussed in this episode: * https://www.scmagazine.com/home/security-news/everyones-half-asleep-and-bosses-dont-want-trouble-the-struggle-to-secure-utilities/* https://attack.mitre.org/matrices/enterprise/* https://www.scmagazine.com/home/security-news/network-security/siem-rules-ignore-bulk-of-mitre-attck-framework-placing-risk-burden-on-users/* https://www.securityweek.com/cybercriminals-leak-files-allegedly-stolen-law-firm-jones-day Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,063 other subscribers Email Address Subscribe

Talkin' About Infosec News - 2/8/2021

Black Hills Information Security — Tue, 09 Feb 2021 10:18:43 -0500

Originally Aired on February 8, 2021 Articles discussed in this episode: * https://threatpost.com/500-malicious-chrome-extensions-millions/152918/* https://threatpost.com/fake-forcepoint-google-chrome-extension-hacks/163728/* https://threatpost.com/industrial-networks-hackable-security-holes/163708/* https://www.reuters.com/article/us-usa-cyber-florida/hackers-broke-into-florida-towns-water-treatment-plant-attempted-poisoning-sheriff-says-idUSKBN2A82FV* https://twitter.com/SkelSec/status/1346553596855390212 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,027 other subscribers Email Address Subscribe

Talkin' About Infosec News - 2/1/2021

Black Hills Information Security — Tue, 02 Feb 2021 12:42:27 -0500

Originally Aired on February 1, 2021 Articles discussed in this episode: * https://threatpost.com/microsoft-365-bec-innovation/163508/* https://threatpost.com/critical-libgcrypt-crypto-bug-arbitrary-code/163546/* https://www.newyorker.com/magazine/2021/02/08/the-next-cyberattack-is-already-under-way?&web_view=true Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 3,008 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 1/25/2021

Black Hills Information Security — Tue, 26 Jan 2021 10:58:48 -0500

ORIGINALLY AIRED ON JANUARY 25, 2021 Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,989 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 1/20/2021

Black Hills Information Security — Fri, 22 Jan 2021 14:20:00 -0500

ORIGINALLY AIRED ON JANUARY 20, 2021 Articles discussed in this episode: * https://www.theregister.com/2021/01/20/malwarebytes_solarwinds_hack_latest/* https://threatpost.com/solarwinds-malware-arsenal-raindrop/163153/* https://threatpost.com/dnspooq-flaws-allow-dns-hijacking-of-millions-of-devices/163163/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,982 other subscribers Email Address Subscribe

Webcast: Move Aside Script Kiddies - Malware Execution in the Age of Advanced Defenses

Black Hills Information Security — Mon, 18 Jan 2021 08:34:00 -0500

A few short years ago, penetration testers did not have to work too hard for their malware command channels to execute. Fast forward to today in the age of Endpoint Detection and Response, User Behavior Analytics, and advanced built-in O/S defenses, your standard toolkit for malware generation/execution does not work anymore. All is not lost! Using some relatively simple programming techniques, and tactical changes, we can still gain malware execution to establish our C2 channels. With some additional tactical changes post-exploitation, we can still move around below the radar but we need to move with greater care and stealth than ever before. Join the BHIS Discord Community– https://discord.gg/aHHh3u5 00:00 – The Soundboard Has Too Many Buttons 04:10 – FEATURE PRESENTATION: Malware Execution in the Age of Advanced Defenses 05:36 – Attacker / Threat Actor Emulation 09:41 – That Matrix 10:34 – Endpoint Defense Maturity 13:25 – C2 Implant Execution 19:41 – Metasploit: Why Is My Network Traffic Caught? 23:09 – C2 – Customize and LOL 41:13 – The More You Know… 44:11 – Recon/Discovery Artifacts 46:15 – Amusement with AMSI 47:33 – Simple! 48:10 – AMSI Bypass 50:27 – Event Tracing Bypass 51:34 – Attack Combo! 52:24 – Conclusion

(00:00) - The Soundboard Has Too Many Buttons
(04:10) - FEATURE PRESENTATION: Malware Execution in the Agge of Advanced Defenses
(05:36) - Attacker / Threat Actor Emulation
(09:41) - That Matrix
(10:34) - Endpoint Defense Maturity
(13:25) - C2 Implant Execution
(19:41) - Metasploit: Why Is My Network Traffic Caught?
(23:09) - C2 - Customize and LOL
(41:13) - The More You Know...
(44:11) - Recon/Discovery Artifacts
(46:15) - Amusement with AMSI
(47:33) - Simple!
(48:10) - AMSI Bypass
(50:27) - Event Tracing Bypass
(51:34) - Attack Combo!
(52:24) - Conclusion

Talkin' About Infosec News - 1/13/2021

Black Hills Information Security — Thu, 14 Jan 2021 08:37:13 -0500

Originally aired on January 13, 2021 Articles discussed in this episode: * https://www.theregister.com/2021/01/13/darkmarket_europol_shutdown/* https://www.theregister.com/2021/01/12/microsoft_linux_edr/* https://threatpost.com/mimecast-certificate-microsoft-supply-chain-attack/162965/* https://threatpost.com/hackers-leak-pfizer-covid-19-vaccine-data/163008/* https://krebsonsecurity.com/2021/01/ubiquiti-change-your-password-enable-2fa/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,975 other subscribers Email Address Subscribe

Webcast: Discussing Implications of the SolarWinds Breach(es)

Black Hills Information Security — Thu, 31 Dec 2020 08:18:00 -0500

Does the news on SUNBURST and SUPERNOVA have you feeling like you’re flapping in the (Solar)Wind? Join John Strand, Jonathan Ham, and Jake Williams as they discuss the implications of the breaches in this no-FUD webcast. No, we won’t be discussing “cyber Pearl Harbor” – because lets be honest, that’s just hyperbole. Join us to learn why this is bad, but also why we assess that the sky isn’t falling. Join these three amigos to discuss breach details and actionable steps you can take in your own networks. Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,956 other subscribers Email Address Subscribe

Talkin’ About Infosec News – 12/21/2020

Black Hills Information Security — Tue, 22 Dec 2020 11:41:42 -0500

Originally aired on December 21, 2020 Articles discussed in this episode: * https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hacked-with-suspected-nso-group-imessage-zero-click-exploit/ * https://theintercept.com/2020/12/17/russia-hack-austin-texas/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,925 other subscribers Email Address Subscribe

Talkin' About Infosec News - 12/14/2020

Black Hills Information Security — Wed, 16 Dec 2020 08:05:00 -0500

Originally aired on December 14, 2020 Articles discussed in this episode: * https://www.theverge.com/2020/12/14/22173803/gmail-youtube-google-assistant-docs-down-outage* https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html* https://krebsonsecurity.com/2020/12/u-s-treasury-commerce-depts-hacked-through-solarwinds-compromise/* https://www.darkreading.com/threat-intelligence/fireeye-breach-fallout-yet-to-be-felt/d/d-id/1339680* https://www.solarwinds.com/solutions/orion Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,921 other subscribers Email Address Subscribe

Talkin' About Infosec News - 12/11/2020

Black Hills Information Security — Tue, 15 Dec 2020 08:00:00 -0500

Originally aired on December 11, 2020 Articles discussed in this episode: * https://www.nobandwidth.io/* https://www.nytimes.com/2020/12/08/technology/fireeye-hacked-russians.html* https://www.picussecurity.com/resource/blog/techniques-tactics-procedures-utilized-by-fireeye-red-team-tools* https://blog.netspi.com/cve-2020-17049-kerberos-bronze-bit-attack/* https://www.bleepingcomputer.com/news/security/microsoft-fixes-new-windows-kerberos-security-bug-in-staged-rollout/* https://capricocave.wordpress.com/2020/12/10/docker-botnets/* https://www.trustedsec.com/blog/4-free-easy-wins-that-make-red-teams-harder/* https://arstechnica.com/tech-policy/2020/12/florida-posted-the-password-to-a-key-disaster-system-on-its-website/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,902 other subscribers Email Address Subscribe

Webcast: Getting Started with Burp Suite & Webapp Pentesting

Black Hills Information Security — Mon, 07 Dec 2020 11:48:45 -0500

Are you responsible for the security of webapps? Are you curious about how penetration testers are able to find vulnerabilities in them? Burp Suite is the preferred tool for many webapp pentesters and bug bounty hunters. It’s easy to get started in Burp, but not all of its features are easy to find or simple to configure. If you’ve ever watched someone else use Burp, you’ve no doubt picked up something useful from them: everyone seems to have their own tricks for getting more out of it. In this live one-hour Black Hills Information Security (BHIS) webcast, BB King will walk through how he sets up Burp for his own webapp and Web API pentests. Then he’ll show the settings, tools, and BApp Store Extensions that help him perform better tests. If you have any responsibility related to webapps – even if it’s not pentesting them – you may find that Burp Suite can help you. If you already use Burp Suite, come see how one of our testers does it and we bet you’ll find a thing or two you can take back and use on your next security assessment. Join the BHIS Discord Community– https://discord.gg/aHHh3u5 0:00:00 – PreShow Banter™ — Special Guests: The Innocent Lives Foundation 0:29:12 – FEATURE PRESENTATION: Getting Started With Burp Suite 0:32:33 – Initial Setup After install 0:45:25 – A Quick Run-Through Burp Suite 1:22:08 – We Has Questions? Outline for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/12/SLIDES_GettingStartedWithBurpSuiteOutline.pdf Show Notes: * BHIS SWAG STORE! https://spearphish-general-store.myshopify.com/* https://wildwesthackinfest.com/training/ * https://github.com/snoopysecurity/awesome-burp-extensions* https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/* https://bitbucket.org/mrbbking/quieter-firefox/src* https://portswigger.net/ *

(00:00) - PreShow Banter™ — Special Guests: The Innocent Lives Foundation
(29:12) - FEATURE PRESENTATION: Getting Started With Burb Suite
(32:33) - Initial Setup After install
(45:25) - A Quick Run-Through Burp Suite
(01:22:08) - We Has Questions?

Webcast: Pretty Little Python Secrets - Episode 2 - Python Development & Packaging as Beautiful as a Poem

Black Hills Information Security — Fri, 04 Dec 2020 08:05:00 -0500

Have you ever tried packaging a Python library/app in order to upload it to the Python Package repository (Pypi)? Not so straight forward is it? There’s a gazillion files you need (setup.py, Manifiest.ini, etc..) which all do different things. On top of that, there’s a decent amount of overhead to configure the necessary settings in order to expose any command line interface (CLI) tools your packaging. Additionally, you also need to manage dependencies, keep them in sync with your requirements.txt files and install third-party applications in order to upload them to Pypi. That’s after you even manage to setup a proper development environment and necessary virtual environments for your dependencies. Ever wonder if there’s a simpler solution that takes care of everything for you? In this Black Hills Information Security (BHIS) webcast, Marcello will show you how to make the entire Python development & packaging process as short and simple as a Haiku (https://python-poetry.org/). He’ll also show you the setup/workflow that he uses for all of his Python projects and throw in some pro tips along the way. Missed the first episode? Check out Pretty Little Python Secrets—EP 1—Installing Python Tools/ Libraries the Right Way- Marcello Salvati — https://youtu.be/ieyRV9zQd2U Join the Black Hills Information Security Discord Community — https://discord.gg/aHHh3u5 0:00:00 – PreShow Banter™ — Everybody Leaves West Virginia 0:12:15 – FEATURE PRESENTATION: Making Python Packaging Haiku Simple 0:16:56 – Why and How to Package Python? 0:23:26 – What Are All These Files? 0:31:28 – How to Upload the Dang Thing 0:37:01 – Setup a Development Environment? 0:42:44 – Pipenv! 0:46:52 – Pipenb Solves, but Also Creates Problems 0:49:21 – Poetry Corner 0:58:11 – Cookiecutter Automation

(00:00) - PreShow Banter™ — Everybody Leaves West Virginia
(12:15) - FEATURE PRESENTATION: Making Python Packaging Haiku Simple
(16:56) - Why and How to Package Python?
(23:26) - What Are All These Files?
(31:28) - How to Upload the Dang Thing
(37:01) - Setup a Development Environment?
(42:44) - Pipenv!
(46:52) - Pipenb Solves, but Also Creates Problems
(49:21) - Poetry Corner
(58:11) - Cookiecutter Automation
(01:01:53) - Questions!
(01:08:00) - Porchetta

Talkin' About Infosec News - 11/30/2020

Black Hills Information Security — Tue, 01 Dec 2020 12:21:32 -0500

Originally aired on November 30, 2020 Articles discussed in this episode: * https://www.computerweekly.com/news/252491324/Surge-in-Ryuk-ransomware-attacks-has-hospitals-on-alert* https://www.baltimoresun.com/maryland/baltimore-county/bs-md-co-what-to-know-schools-ransomware-attack-20201130-2j3ws6yffzcrrkfzzf3m43zxma-story.html* https://www.darknet.org.uk/2020/10/fuzzilli-javascript-engine-fuzzing-library Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,879 other subscribers Email Address Subscribe

(00:00) - An Intro That Flaps
(01:19) - Surge in Ryuk ransomware
(03:57) - Baltimore County schools ransomware attack
(11:36) - Fuzzy Wuzzy Javascript

Talkin' About Infosec News - 11/19/2020

Black Hills Information Security — Wed, 25 Nov 2020 08:35:00 -0500

Originally aired on November 19, 2020 Articles discussed in this episode: * https://duo.com/blog/the-great-dns-vulnerability-of-2008-by-dan-kaminsky* https://blog.cloudflare.com/sad-dns-explained Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,880 other subscribers Email Address Subscribe

Talkin' About Infosec News - 11/11/2020

Black Hills Information Security — Fri, 13 Nov 2020 08:10:00 -0500

Originally aired on November 11, 2020 Articles discussed in this episode: * https://www.darkreading.com/attacks-breaches/malware-hidden-in-encrypted-traffic-surges-amid-pandemic/d/d-id/1339420* https://threatpost.com/millions-hotel-guests-worldwide-data-leak/161044/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,837 other subscribers Email Address Subscribe

Talkin' About Infosec News - 11/09/2020

Black Hills Information Security — Thu, 12 Nov 2020 08:15:00 -0500

Originally aired on 11/09/2020 Articles discussed in this episode: * https://www.darkreading.com/threat-intelligence/6-ways-passwords-fail-basic-security-tests/d/d-id/1339299* https://www.infosecurity-magazine.com/news/national-guard-uvm-health-network/* https://www.zdnet.com/article/toy-maker-mattel-discloses-ransomware-attack/ Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,843 other subscribers Email Address Subscribe

Talkin' About Infosec News - 10/26/2020

Black Hills Information Security — Wed, 11 Nov 2020 09:57:44 -0500

Originally aired on October 26, 2020. Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,845 other subscribers Email Address Subscribe

Talkin' About Infosec News - 10/21/2020

Black Hills Information Security — Mon, 02 Nov 2020 15:43:23 -0500

Originally aired on October 21, 2020. Check out our Cyber Range, not just a place to work through challenges and play, but also an open direct/hands-on training environment. https://www.blackhillsinfosec.com/services/cyber-range/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,828 other subscribers Email Address Subscribe

Webcast: The SOC Age Or, A Young SOC Analyst's Illustrated Primer

Black Hills Information Security — Mon, 26 Oct 2020 08:25:00 -0400

Many people get started in security as a Security Operations Center (SOC) analyst. In this Black Hills Information Security (BHIS) webcast we discuss the core skills that a SOC analyst needs in order to be successful. Trust us, these skills are more than just watching the SIEM and letting the SOAR platform handle everything through a AI powered single pane of glass. Security has been and will continue to be, hard. This webcast will help people who are getting started be more successful and hopefully happier in their jobs. I mean, we can’t make people happy. But, being good at one’s job is a good step in that direction. The rest is on you. We also cover some techniques that can be used to help stop SOC burnout. Because that is a real thing….. It is a real thing that many SOC analysts go through. When they do, they often entertain dreams of getting out of security and buying a food truck. Let’s help stop that. The world does not need another mediocre falafel truck powered by the crushed hopes and dreams of another infosec burnout. Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/10/SLIDES_TheSOCAge.pdf Join the BHIS Discord Community — https://discord.gg/aHHh3u5 “Pay What You Can” SOC Core Skills 16-Hour Training Course: https://wildwesthackinfest.com/online-training/soc-core-skills-john-strand/ 0:00:00 – PreShow Banter™ – A Weird Flex 0:12:24 – FEATURE PRESENTATION: SOC Analyst Key Skills 0:16:53 – Server Analysis 0:20:13 – There’s A Guide For That 0:26:54 – Memory Forensics 0:34:16 – Egress Traffic Analysis 0:43:39 – Logs Are Better Than Bad, They’re a Train Wreck 0:48:40 – “False Positives”

Webcast: Infosec Mentoring | How to Find and Be a Mentor & Mentee

Black Hills Information Security — Mon, 19 Oct 2020 13:10:04 -0400

They say it “takes a village” to help raise a child… well, it also takes a village to help raise an infosec professional. With so many technologies, techniques, and tools and the need for soft-skills and the ability to navigate different types of relationships, we all need help. That’s where a formal mentor can be your guide into the unknown. We ALL can benefit from being mentored and being a mentor. In this live Black Hills Information Security (BHIS) webcast, we’ll discuss:– How to know if you need a mentor– How to find a mentor– How to be a mentor– How to be a mentee– How to ask someone to be a mentor– Multiple mentors– Difference between mentors, friends, tutors, career counselors, etc.– What to discuss during a mentoring session– How to make the best use of everyone’s time– When to end a mentoring relationship Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/10/SLIDES_InfoSecMentoring_HowtoFindandBe.pdf Join Our BHIS Discord Community – https://discord.gg/aHHh3u5 0:00:00 – PreShow Banter™ – We’re There, Trust Us 0:07:33 – PreShow Banter™ – Trace Labs CTF 0:24:47 – FEATURE PRESENTATION: InfoSec Mentoring 0:28:23 – Mentors, the Fresh Maker™ 0:30:27 – How To Find a Cult Leader, I Mean Mentor. 0:34:37 – B-Sides Orlando DEMO 0:42:17 – How To Be a Mentor 0:56:12 – How to Be A Mentee 1:03:42 – Your Moment of Self-Doubt 1:05:34 – Will You Be My Mentor? 1:11:56 – Reach Out 1:14:41 – Multiple Mentors 1:16:36 ...

(00:00) - PreShow Banter™ – We're There, Trust Us
(06:46) - PreShow Banter™ – Trace Labs CTF
(23:21) - FEATURE PRESENTATION: Info Sec Mentoring
(26:54) - Mentors, the Fresh Maker™
(28:55) - How To Find a Cult Leader, I Mean Mentor.
(32:59) - B-Sides Orlando DEMO
(40:29) - How To Be a Mentor
(53:56) - How to Be A Mentee
(01:01:17) - Your Moment of Self-Doubt
(01:03:06) - Will You Be My Mentor?
(01:09:22) - Reach Out
(01:11:57) - Multiple Mentors
(01:13:50) - Mentors, Friends, & Counselors
(01:16:14) - You Discuss Me
(01:17:28) - Time is Valuable
(01:17:46) - This is the End
(01:19:24) - End of Show Banter

Webcast: When Worlds Collide: OSS Hunting & Adversarial Simulation

Black Hills Information Security — Wed, 09 Sep 2020 11:27:35 -0400

Worlds collide as Black Hills Information Security (BHIS) brings together legendary developers in open source software (OSS) hunting and adversarial emulation projects for a discussion on the current state of the landscape and what’s coming next. As our panel hosts, Jordan and Kent (Atomic Purple Team, PlumHound), continue to focus on advocating and evangelizing for Purple Teaming in the information security community, they have invited Roberto Rodriguez & Nate Guagenti (HELK Project, Mordor) and Marcello Salvati (CrackMapExec, SILENTTRINITY) to discuss the collision of OSS Hunting and Adversarial Emulation platforms, with additional commentary from John Strand. The group will discuss Roberto Rodriguez (@Cyb3rWard0g) and Nate Guagenti’s (@neu5ron) development and maintenance of the HELK project while focusing on the ongoing development of Mordor, Datasets, and Azure Resource Manager templates. Joining the world-class hunters is Marcello Salvati (Byt3bl33d3r), developer of CrackMapExec and SILENTTRINITY to continue the discussion of OSS adversarial simulation. John Strand will add commentary on the history of adversarial simulation, hunting, and where the industry may be headed. Webcast Hosts: * Jordan Drysdale @rev10d * Kent Ickler @krelkci Special Guests: * Roberto Rodriguez @cyb3rward0g * Nate Guagenti @neu5ron * Marcello Salvatti @byt3bl33d3r * John Strand @strandjs Join the BHIS Community Discord https://discord.gg/aHHh3u5 Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_WhenWorldsCollide.pdf 00:00:00 – PreShow Banter™ — We’ve Lost Control 00:10:47 – FEATURE PRESENTATION: When Worlds Collide 00:14:26 – Threat Intelligence Sharing 00:25:57 – Won’t Stop Can’t Stop 00:32:06 – A Tired Community 00:38:54 – Re-Investing Open Source Projects

(00:00) - PreShow Banter™ — We've Lost Control
(09:40) - FEATURE PRESENTATION: When Worlds Collide
(13:13) - Threat Intelligence Sharing
(24:03) - Won't Stop Can't Stop
(29:38) - A Tired Community
(35:59) - Re-Investing Open Source Projects
(42:08) - Open Threat Research
(47:18) - Understand Adversary Tradecraft
(49:04) - Mordor Labs
(01:05:43) - Mordor Datasets
(01:08:17) - HELK
(01:14:14) - Threat Hunter Playbook
(01:30:42) - PostShow Banter

Webcast: How to Present: Secrets of a Retired SANS Instructor

Black Hills Information Security — Fri, 04 Sep 2020 08:10:00 -0400

John Strand // Ok, that was a bit of a dramatic title. But, it works. In this Black Hills Information Security (BHIS) webcast, John covers the tips and tricks on how to effectively present technical topics to large and small groups. This presentation includes, but is not limited to: crotch sniffing dogs, heart attacks, how to effectively deal with chafing, don’t drink the water, choosing the right shoes, presenting to management, seriously, chafing is a problem, chickens, getting over impostor syndrome, becoming a PowerPoint ninja, every piece of presenting advice you have ever heard is wrong, using your podium as a weapon, shutting down trolls and tips for presenting in the dark, with no heat/AC and very little water… to over 100 people, and keeping them all happy. BHIS Discord Community https://discord.gg/aHHh3u5 Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_HowToPresent.pdf 00:00:00 – PreShow Banter™ — War Stories 00:12:33 – PreShow Banter™ — WWHF 09-2020 Preview 00:15:52 – FEATURE PRESENTATION: How To Present 00:26:25 – Lessons! 00:43:42 – Don’t Drink the Water 00:46:34 – Imposter 00:59:02 – Keynote Presentations 01:07:30 – Projections 01:17:32 – The Boss Level 01:20:15 – Conversations That Matter 01:26:54 – End of Show Questions

Webcast: Pretty Little Python Secrets - Episode 1 - Installing Python Tools and Libraries the Right Way

Black Hills Information Security — Mon, 24 Aug 2020 08:14:00 -0400

Have you ever installed a Python tool / library only to then find out other Python based tools you’ve installed previously are now completely broken? Running Kali? Ever try installing a Python tool with apt-get and another with pip?

(00:00) - PreShow Banter™ – Jokes Not Safe For Work
(11:31) - PreShow Banter™ – SponsorWare for GitHub
(20:13) - Feature Presentation: Pretty Little Python Secrets
(25:19) - 1st Circle of Hell: Managing Python Versions
(30:58) - 2nd Circle of Hell: Python Dependencies
(33:25) - Installing Python Tools/Libraries
(39:18) - Isolate, Isolate, Isolate
(46:29) - Pipx – The Easy Button
(51:15) - Making Python Apps Semi-Portable
(53:09) - ZipApps!
(01:03:32) - Shiv!
(01:11:26) - If all else fails.. Docker !
(01:17:12) - Conclusion

Webcast: What to Expect When You're Expecting a Penetration Test

Black Hills Information Security — Fri, 21 Aug 2020 10:17:00 -0400

CJ and Bryan will share the knowledge they’ve accumulated, by helping 1,000’s of organizations determine what they need and don’t need when it comes to penetration tests and security assessments, over the years. Topics Covered: * Selecting the type of test * Selecting the company to test * When to test * Issues around conducting a test This webcast is for penetration testers and offensive security professionals to see behind-the-scenes of how scoping, Rules of Engagement, and client relations are established. For the defenders and Blue Team professionals, this webcast will help you understand what to expect when deciding if and when you want to test the defenses you’ve put in place. What to Expect When You Are Expecting…a Penetration Test by Larry Pesce and Suzanne Pereira: https://youtu.be/aJatJZI__V4 Join the Black Hills Information Security Discord Community: https://discord.gg/aHHh3u5 Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/08/SLIDES_WhatToExpect.pdf 00:00 – PreShow Banter™ – Look What I Can Do! 05:17 – And Now For The Expected Presentation 15:21 – What Kind of Test is Right for Me 27:04 – How Big Will It Get? 36:34 – How Much Will it Cost? 45:25 – What Are the Risks? 50:55 – The Big Day 54:00 – Post-Testum Depression 1:00:40 – May I Have Another? 1:05:12 –...

(00:00) - PreShow Banter™ – Look What I Can Do!
(05:17) - And Now For The Expected Presentation
(15:22) - What Kind of Test is Right for Me
(27:05) - How Big Will It Get?
(36:36) - How Much Will it Cost?
(45:28) - What Are the Risks?
(50:58) - The Big Day
(54:03) - Post-Testum Depression
(01:00:44) - May I Have Another?
(01:05:16) - Post-Show Rapid Fire Questions

Webcast: Atomic Purple Team Framework and Life Cycle

Black Hills Information Security — Thu, 30 Jul 2020 08:03:00 -0400

Jordan Drysdale & Kent Ickler // Jordan and Kent are back again to continue strengthening organizations’ information security human capital (That’s all you folks!). Organization Leadership and Security Practitioners can gain understanding on the potential designed-to-fail Purple Teams initiatives never reached their full potential. The Duo reviews how systemic organizational career pathing created an insoluble Red vs Blue dichotomy. MORE IMPORTANTLY: The team is announcing a recipe for Purple Team Wins: The Atomic Purple Team (Lifecycle) Framework Organizations struggling to efficiently leverage the skillsets of all information security staff will benefit from considering the Atomic Purple Team Lifecycle Framework’s business-driven workflow. The workflow takes its roots from tested continuous improvement frameworks like ISO9001, ISO27001, Six Sigma, and the like. Watch how a methodical balance of risk analysis, attack, hunt and defend methodologies, and business considerations can effectively and continually improve an organizations’ security posture. As an added bonus, the framework incorporates concepts of Human Capital Management and knowledge-flow methodologies to encourage tacit knowledge exchange to further organic growth of the skillsets of all those involved in the Atomic Purple Team framework. But wait, there’s more! Budget headaches? Learn how the Atomic Purple Team framework’s methodical flow also aligns to natural business operations management and reporting. The framework provides a clear path to cabinet-approved Purple Team budget appropriations to ensure long term security posture improvement. Lastly, Jordan and Kent will demonstrate the Atomic Purple Team Lifecycle in action by running complete live Attack and Hunt/Defend lifecycle(s), all the way to risk management and budgetary thoughts. Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5 Need slides and much more — https://github.com/DefensiveOrigins/A… 0:00 – Family Stories 1:07 – Atomic Purple Team Framework

(00:00) - Family Stories
(01:07) - Atomic Purple Team Framework
(03:28) - Executive Problem Statement
(04:41) - Red Team, Blue Team, Purple Team
(07:18) - Who / What is APT?
(09:22) - Atomic Purple Team Lifecycle
(18:18) - 1. Threat / Risk Assessment (Ingest) Types
(19:59) - 2. Planning — What are the Tools
(20:50) - 3. Attack / Execute / Engage
(21:37) - 4. Hunt and Defend
(22:01) - 5. Adjust & Harden
(23:14) - 6. Reporting and Request for Deployment
(27:07) - Lifecycles Start in Development
(28:15) - Lifecycles End in Production
(28:43) - APT Lab INfrastructure
(29:48) - Off-Roading: Lab Demo
(33:21) - Lifecycle Walkthrough — Goal Setting
(34:50) - Purple Team Lifecycle Walkthrough
(44:02) - Hunt and Defend Methodology
(45:02) - Adjusting to Threat
(47:21) - APTLC Playbook
(48:49) - The Report
(53:15) - Lessons Learned

Webcast: What About Ransomware?

Black Hills Information Security — Mon, 13 Jul 2020 14:57:08 -0400

This is a joint webcast between Black Hills Information Security and the Wild West Hackin’ Fest conference. We hate ransomware. Like a lot. This is because we feel this is the future of cyber attacks. If you look at the recent cases and the newish versions that involve extortion, there is nothing to like. Well, almost nothing. In this webcast, we cover what you can do to prepare (trust us, we have a newish twist on this) and what you can do to mitigate the damage. We also talk about working with brokers. There will be lots of memes to help this topic go down better. Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5 0:00 – Half-Witty Theme Music 0:53 – Welcome to the New Ransomware 9:44 – User Training 15:14 – ATT&CK Matrix 17:07 – We Should Be Emulating 21:36 – Open Source Tools 24:33 – (did we lose john?) 33:52 – Threat Emulation Warning 35:52 – Commercial Offerings 40:01 – PlumHound 45:33 – Don’t Focus On One Product 48:08 – Paying a Ransom? 49:26 – Key Takeaways 52:16 – Got Questions?

(00:00) - Half-Witty Theme Music
(00:53) - Welcome to the New Ransomeware
(09:44) - User Training
(15:14) - ATT&CK Matrix
(17:07) - We Should Be Emulating
(21:36) - Open Source Tools
(24:33) - (did we loose john?)
(33:52) - Threat Emulation Warning
(35:52) - Commercial Offerings
(40:01) - PlumHound
(45:33) - Don't Focus On One Product
(48:08) - Paying a Ransom?
(49:26) - Key Takeaways
(52:16) - Got Questions?
(59:41) - SPONSOR BONUS: PlexTrac
(01:15:30) - (did we loose john again?)
(01:29:21) - Strings & Memory

Webcast: Modern Webapp Pentesting: How to Attack a JWT

Black Hills Information Security — Mon, 29 Jun 2020 08:05:00 -0400

So much information about testing webapps for security problems is old. Don’t get me wrong, the old stuff still works way more often than we’d like, but there’s more to webapp vulnerabilities than cross-site scripting and SQL injection. Take JWTs – JSON Web Tokens – for example. These are base64 encoded tokens that sometimes get written to your browser’s localStorage or sessionStorage and passed around in cookies or HTTP headers. They’re pretty common in authentication and authorization logic for web APIs. Because they’re encoded, they look like gibberish and it’s easy to skip over them during a test. For the same reason, they’re more complicated to attack. First, you have to notice them. Then you have to decode them. Then you need to interpret the decoded data inside them. THEN, you have to decide what to attack! Once you’ve done that, you still have to create your payload, make valid JSON out of it and rebuild the JWT before you can send it. It’s kind of a lot. In this Black Hills Information Security webcast – an excerpt from his upcoming 16-hour Modern Webapp Pentesting course – BB King talks about what JSON Web Tokens are, why they’re so controversial, and how to test for their major weaknesses. Then, using OWSAP’s Juice Shop as a target, he shows you a straightforward method for exploiting them that you can use on your own next webapp pentest. Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5 0:00 – Good Morning! 1:50 – What Are JSON Web Tokens? 4:43 – Base64 Vs Base64 URL Encoding 7:58 – The Construction of a JSON Token 10:07 – Use Cases 13:03 – RFCs of Interest 13:26 – Encoded, Not Encrypted 19:58 – The Red Slide 20:39 – OWASP Top Ten Issues

(00:00) - Good Morning!
(01:47) - What Are JSON Web Tokens?
(04:36) - Base64 Vs Base64 URL Encoding
(07:46) - The Construction of a JSON Token
(09:50) - Use Cases
(12:38) - RFCs of Interest
(13:00) - Encoded, Not Encrypted
(19:10) - The Red Slide
(19:50) - OWASP Top Ten Issues
(20:10) - Signature Al Gore Rhythms
(24:30) - Stanced On Privacy
(25:48) - Stanced On Security
(27:45) - Craking
(29:04) - Where To Practice
(33:27) - Decoding the Payload – (Visual DEMO)
(42:52) - Snooping ( Stealing Poorly-Protected Secrets )
(48:27) - For Further Study

Webcast: IPv6: How to Securely Start Deploying

Black Hills Information Security — Wed, 24 Jun 2020 10:54:41 -0400

Joff Thyer has dove into everything that is IPv6 and has so much to share about it. He gets really technical but in a way you’ll be able to understand. Google reports that over 30% of their systems access comes via the IPv6 protocol coming into 2020. Many Internet Service Providers have no remaining choice but to deploy IPv6 for simple lack of v4 address resources. The global Internet can already be thought of as balkanized into a split IPv4/IPv6 world based on historical v4 allocation. There will soon come a time whereby accessing IPv4 deployed resources will be considered legacy. Join Joff and the BHIS team to discuss security principles surrounding an Internet facing IPv6 deployment. Learn about fundamentals, known security issues, and appropriate infrastructure defenses which must be implemented. Enjoy a spirited discussion on how the v4 life support mechanisms of classless interdomain routing and network address translation are not required in a v6 world. It’s past time for IPv6 to become the norm. Fear not as we can do this! Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5 0:00 – Inaudible, But Good Looking Banter 0:18 – Here We Are Now. Educate Us 0:56 – IPv4 And After 5:45 – What’s the Address For IPv6? 7:40 – What About IPv5? 8:31 – IPv6 Allocation 9:27 – IPv6 Packets 10:28 – IPv6 Address Types 13:26 – IPv6 Address Typecasting 14:55 – IPv6 Address Assignment 16:21 – IPv6 Multiple Interface Addresses 18:25 – IPv6 EUI-64

(00:01) - Inaudible, But Good Looking Banter
(00:06) - PenTest Puppy Mill (Commercial)
(00:37) - Here We Are Now. Educate Us
(01:14) - IPv4 And After
(05:42) - What’s the Address For IPv6?
(07:32) - What About IPv5?
(08:20) - IPv6 Allocation
(09:16) - IPv6 Packets
(10:16) - IPv6 Address Typecasting
(13:09) - IPv6 Address Assignment
(14:35) - IPv6 Multiple Interface Addresses
(15:59) - IPv6 EUI-64
(18:00) - ICMPv6
(23:27) - ICMPv6 Neighbor Discovery
(27:07) - Securing the v6
(27:58) - IPv6 Address Filtering
(30:07) - ICMPv6 Perimeter Filtering
(31:21) - ICMPv6 Transit Traffic
(32:42) - ICMPv6 Non-Transit
(35:29) - IPv6 Multicast Filtering
(37:47) - IPv6 Protocol Normalization
(38:45) - IPv6 Extension Headers
(39:30) - IPv6 Enforcing EH Rules
(40:27) - IPv6 Header Normalization
(41:57) - IPv6 Protocol Normalization Reprise
(43:22) - Address Privacy / Obscuity
(45:58) - RFC4941 Privacy Extensions
(46:34) - Endpoint Route Table
(47:50) - Summary Recomdendations
(49:35) - To Be Continued...

Webcast: Durable vs. Ephemeral Threat Intel

Black Hills Information Security — Mon, 22 Jun 2020 14:39:19 -0400

Join us in the Black Hills InfoSec Discord server to keep the security conversation going!
https://discord.gg/bhis

Reach out to Black Hills Infosec if you need pentesting, threat hunting, ACTIVE SOC, incident response, or blue team services:
https://www.blackhillsinfosec.com

In this Black Hills Information Security webcast John breakdowns why he hates threat intelligence... Again...

But, he breaks down some of the cool new projects that are focusing on durable threat intelligence. This is key, because many intel feeds are nothing more than domains, hashes and IP addresses. However, with durable threat intel we see attack techniques that are highly effective, yet are not as easy to block.

For example, application allow listing abuse, connection profiles (RITA!), PowerShell encoding are all examples of detects you can use that are not specific to a point in time attack methodology.

John also shares some very cool open source projects that are approaching attacks in this way using ELK.

Slides for this webcast can be found here:
https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/SLIDES_Durable_Ephemeral_Threat_Intel_Strand.pdf

(00:00) - Intro
(00:47) - Threat Intel: A Useless Rant
(07:20) - Pyramid of Pain
(10:37) - You Got Another String Coming
(14:34) - Conversation With a Pompous John
(18:42) - Hacking Ain't Easy
(21:51) - ATT&CK Bingo™
(24:02) - Emulation for Iteration
(27:00) - Some Open Source Tools
(31:28) - Threat Emulation Warning
(32:03) - Commercial Tools
(36:03) - MITRE Scorecard
(44:47) - A Bit of Perspective
(47:00) - DeTT&CT
(47:46) - Sigma
(51:24) - Atomic Threat Coverage
(53:58) - PlumHound
(54:35) - RITA
(55:46) - Honeypots
(57:16) - Question Time
(01:06:04) - Breaking Down the Gates

Webcast: A Blue Team's Perspective on Red Team Hack Tools

Black Hills Information Security — Mon, 08 Jun 2020 08:28:00 -0400

Kent and Jordan are back to continue their journey to make the world a better place. This time around, they will be reviewing a series of tools commonly used on pentests to identify flaws in Active Directory and general network design and implementation. You’ve probably heard of most of them, like BloodHound, ADExplorer, mimikatz…, wait, Mimikatz as a Blue Team? Yeah, it might be a bit of a stretch, but they’ll get there. Even better, with an introduction to various adversarial simulation frameworks, you can start your own journey of constant improvement. Nmap, CrackMap, BingMaps, and Domain Password Spray. (Re: BingMaps — just checking to see if you’re actually reading these, at this point, our response rate records keep getting shattered, and we just want someone to call us out – the BingMaps API is really cool though). In a world seemingly gone mad, come find some solace with these two as they share new discoveries, a tool drop from Kent (which will potentially change the BloodHound game), and more. Let’s help the world detect attacks at a higher rate! Let’s skew the Verizon DBR’s reported numbers! Let’s get better together! Thanks, as always, and we look forward to spending time with those of you who can join us 0:00 – Big Fish 0:28 – Question & Enhance 2:51 – Executive Summary 3:58 – Executive Problem Statement 8:48 – Red Team Tools are Red Team Tools 13:39 – Optics(3) 16:22 – SIGMA and SIGMAC 22:13 – Red Team Tool : Responder 25:35 – Red Team Tool : CrackMapExec 29:57 – Red Team Tool : DomainPasswordSpray 38:48 – Red Team Tool : Mimikatz 46:41 – Red Team Tool : BloodHound

(00:00) - Big Fish
(00:28) - Question & Enhance
(02:51) - Executive Summary
(03:58) - Executive Problem Statement
(08:48) - Red Team Tools are Red Team Tools
(13:39) - Optics(3)
(16:22) - SIGMA and SIGMAC
(22:13) - Red Team Tool : Responder
(25:35) - Red Team Tool : CrackMapExec
(29:57) - Red Team Tool : DomainPasswordSpray
(38:48) - Red Team Tool : Mimikatz
(46:41) - Red Team Tool : BloodHound
(50:59) - Blue Team Tool : Plumbhoud
(58:38) - Final Thoughts

Webcast: How to Hunt for Jobs like a Hacker

Black Hills Information Security — Wed, 03 Jun 2020 08:11:00 -0400

Job hunting? Looking for a career change? Still in college and want to know how to get started now in your career? If you answered yes to any of these questions, this might be the BHIS webcast for you. This webcast is an update to Jason’s popular recorded DerbyCon 2016 talk — How to Social Engineer Your Way Into Your Dream Job. If you don’t want to wait, you can watch that now. https://youtu.be/__lvS2pjuSg What is covered? * How to combine OSINT, marketing technology, and a hacker/social engineer mindset to job hunting * How to be a hunter of jobs… not just a seeker of jobs * How to write your resume during the job hunt * You might already have your dream job The hope of this webcast is that you’ll look at job hunting differently and apply the skills and techniques in an effective way to help you get the career of your dreams… or at least a job for now that will help you get to the career of your dreams in the next 5 years. Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5 0:00 – Infosec Sad Plant’s Last Day 0:30 – Pandemic Prologue 2:34 – Time to Meet the Bobs 4:20 – Be Prepared 5:50 – Climbing the Walls of Awful 8:35 – Another Crack In The Wall 9:49 – whoami? 11:58 – Pitch Perfect 12:53 – Step 1: I Mean Set Your Requirements 15:10 – Engineering Reverse 15:44 – “Enough” is Enough, or is it? 17:30 – Step 2: Top Ten Companies 18:45...

(00:00) - Infosec Sad Plant's Last Day
(00:30) - Pandemic Prologue
(02:34) - Time to Meet the Bobs
(04:20) - Be Prepared: Kings and Succession
(05:50) - Climbing the Walls of Awful
(08:35) - Another Crack In The Wall
(09:49) - whoami?
(11:58) - Pitch Perfect
(12:53) - Step 1: Cut a hole in the bo... I Mean Set Your Requirements
(15:10) - Engineering Reverse
(15:44) - Enough is Enough, or is it?
(17:30) - Step 2: Top Ten Companies
(18:45) - Hunt V1, Hunt V2, Hunt V3
(20:17) - Document For the People
(24:43) - Step 3: HUNT! - TOP TEN
(39:20) - Jobs Don't Hire People, People Hire People
(39:58) - Step 3: HUNT! - Discovery
(48:23) - Step 3: HUNT! - Internal
(50:22) - Step 4: Make Contact
(53:29) - Step 5: Interview
(54:21) - I'm Sorry, But Your Princess Is In Another Castle
(55:23) - Step 6: Decide
(57:16) - Be Prepared! (reprise)
(59:54) - A Bunch of Requestions

Webcast: Kerberos & Attacks 101

Black Hills Information Security — Tue, 26 May 2020 10:02:30 -0400

Join the BHIS Discord discussion server: https://discord.gg/aHHh3u5 We’re really excited to have a close member of our BHIS extended family, Tim Medin from Red Siege InfoSec, here for a webcast on Kerberos & Attacks 101. Tim is the creator of Kerberoasting. Want to understand how Kerberos works? Would you like to understand modern Kerberos attacks? If so, then join Tim Medin as he walks you through how to attack Kerberos with ticket attacks and Kerberoasting. We’ll cover the basics of Kerberos authentication and then show you how the trust model can be exploited for persistence, pivoting, and privilege escalation. 0:00 – 45 Seconds of Banter 0:45 – The Creator Of Kerberosting 1:48 – What Is Kerberos? 4:49 – How It Works 9:23 – PAC: Privilege Attribute Certificate 12:27 – Service Ticket 14:12 – SPN : Service Principal Name 16:22 – Three Long Term Keys 23:39 – I Got A Golden Ticket 24:57 – Ticket Flow 27:49 – Skeleton Key 30:42 – Kerberoasting On an Open Firewall 33:23 – Extract and Crack

(00:00) - 45 Seconds of Banter
(01:16) - The Creator Of Kerberosting
(02:19) - What Is Kerberos?
(05:21) - How It Works
(09:54) - PAC: Privilege Attribute Certificate
(12:58) - Service Ticket
(14:43) - SPN : Service Principal Name
(16:53) - Three Long Term Keys
(24:10) - I Got A Golden Ticket
(25:28) - Ticket Flow
(28:20) - Skeleton Key
(31:13) - Kerberoasting On an Open Firewall
(33:54) - Extract and Crack
(34:35) - Silver Ticket
(35:56) - Insert Demo Here
(37:55) - Cracking Tickets To Get You Out Of Server Jail
(44:23) - Trollmode Engaged
(45:56) - Pass-The-Ticket
(46:36) - Over-Pass-The-Hash
(47:08) - Wrap-Up
(53:07) - We Have Some Questions
(59:56) - 45 More Seconds of Banter

Webcast: Free Tools! How to Use Developer Tools and Javascript in Webapp Pentests

Black Hills Information Security — Wed, 06 May 2020 08:36:00 -0400

I like webapps, don’t you? Webapps have got to be the best way to learn about security. Why? Because they’re self-contained and so very transparent. You don’t need a big ol’ lab before you can play with them. You can run them in a single tiny VM or even tiny-er Docker image on your laptop. And so long as you’re attacking your own stuff, it’s easy to stay out of trouble. You’re up and running in the time it takes for a single download. And the transparent part? Ever since “view source” in the earliest web browsers, it’s been easy to see exactly what’s going on in a webapp and in the browser. Every webapp you ever use has no choice but to give you the (client-side) source code! It’s almost like there’s no such thing as a “black box” webapp pentest if you think about it… Anyhow – the Developer Tools in Firefox (and Chrome) are what happens when you take “view source” and add 25 years or so of creativity and power. We’ll look at the Developer Tools in the latest Firefox with a pentester’s eye. Inspect and change the DOM (Document Object Model), take screenshots, find and extract key bits of data, use the console to run Javascript in the site’s origin context, and even pause script execution in the debugger if things go too fast… Maybe we’ll convince you that you can realistically do a big chunk of a webapp pentest without ever leaving the browser. Join the BHIS Discord channel — https://discord.gg/aHHh3u5 Download the slides: https://www.activecountermeasures.com/presentations/ (BHIS_Webcasts) 0:00 – A Shady-White Slideshow with “FREE TOOLS!” On the Sign 0:38 – The Way Back Machine 11:00 – Always Be Learning 18:01 – The Path to the Developer Tools 24:37 – Console Separately From a Window 30:40 – The Network Tab 36:23 – Storage Tab

(00:00) - A Shady-White Slideshow with "FREE TOOLS!" On the Sign
(00:35) - The Way Back Machine
(10:16) - Always Be Learning
(16:55) - The Path to the Developer Tools
(23:14) - Console Separately From a Window
(28:44) - The Network Tab
(33:57) - Storage Tab
(35:45) - All The Cookies
(37:42) - The Inspector Gadget Thingy
(41:46) - Debugger
(42:08) - Customize the Tools
(42:18) - Console Tricks

Webcast: How to Build a Home Lab

Black Hills Information Security — Mon, 27 Apr 2020 09:35:00 -0400

This is a joint webcast from Black Hills Information Security and Active Countermeasures. How many of us have tried some new configuration option, utility, or hardware on a production environment, only to crash a critical piece of the business? (me raising hand…) It’s amazing how quickly we learn not to do that! Now we have to decide – do we stop trying out new things because we’re scared of causing problems, or do we come up with a safe way to play and learn? We’re going to cover how to set up a Home Lab – an isolated environment where you can test new hardware, programs, and applications. By keeping this totally separate from everything else, you get free rein to play without risk to your other systems – and without risk of breaking any company policies! We’ll cover how to set this up, the equipment needed, and how to configure these. Best of all, you can use throwaway hardware to do it! Join the new Threat Hunting Community Discord discussion server: https://discord.gg/JmXpQFD Download slides: www.activecountermeasures.com/presentations 0:00 – You’re In Charge 2:06 – Ok. But Why? 7:18 – The Network Layout 9:43 – (John’s Spaghetti) 20:38 – Project Hardware 26:06 – Firewall 29:21 – Switch 30:53 – Wireless AP 36:49 – Sentinel

(00:00) - You're In Charge
(02:06) - Ok. But Why?
(07:18) - The Network Layout
(09:43) - (John's Spaghetti)
(20:38) - Project Hardware
(26:06) - Firewall
(29:21) - Switch
(30:53) - Wireless AP
(36:49) - Sentinel
(38:33) - File and Drive Image Transfer
(41:04) - Laberv
(43:41) - Guinea Pigs
(44:46) - John's Setup Porn
(46:44) - HELK
(47:35) - Beaker
(48:13) - Creating Evil
(49:48) - Recording
(50:14) - Incrementally Opening Up the Firewall
(51:50) - Software
(53:31) - Packet Capture
(54:25) - Network Monitoring
(55:09) - Scanning
(56:12) - Disk Imaging
(56:43) - On a Budget – What's Critical
(57:04) - Closing Notes
(58:05) - Questions
(01:01:28) - See Something Cool

Webcast: Pandemic Paradigm Shift: Remote Working is the New Normal

Black Hills Information Security — Wed, 01 Apr 2020 08:12:00 -0400

What does it mean to work from home across your corporate VPN? What exactly is VPN? Is your home office prepared? How can you improve and better secure your home network? Is your corporate network ready for the change in IT environment network access? Join us to explore these topics, and describe some potential actions you can take to improve your home office and network environment. And join the BHIS Discord to discuss all of this — https://discord.gg/ST5NdFu Download slides: https://www.activecountermeasures.com/presentations 0:00 – We’re Not In Normal Anymore 2:04 – Viral Pandemic Networking (VPN) 7:34 – Home Office Runner 11:16 – What’s Your Frequency, Kenneth? 17:17 – It’s Always DNS 19:12 – Secure The Perimeter 23:34 – Game Recognizes Game 27:55 – Master of Your Domain 43:36 – Solutions, Solutions, Solutions 47:20 – Remote Workers Unite! Individually In Your Own Homes!

(00:00) - We're Not In Normal Anymore.
(02:35) - Viral Pandemic Networking (VPN)
(08:05) - Home Office Runner
(11:47) - What's Your Frequency, Kennith?
(17:48) - It's Always DNS
(19:43) - Secure The Permitter
(24:05) - Game Recognizes Game
(28:26) - Master of Your Domain
(44:08) - Solutions, Solutions, Solutions
(47:51) - Remote Workers Unite! Individually In Your Own Homes.
(51:41) - Questions and Answers

Webcast: How (we) Run a Virtual Conference and How You Can, Too

Black Hills Information Security — Wed, 25 Mar 2020 08:05:00 -0400

The team at Black Hills Information Security and Wild West Hackin’ Fest had to pivot from doing an in-person information security conference in San Diego to a 100% virtual conference with 6 days of notice. We had a little bit of experience doing a hybrid in-person/virtual conference in November 2019 (with 10 days’ notice). The response from the 400+ attendees about the virtual conference was overwhelmingly positive. We did it and you can do it, too. In this webcast, we discuss how it all happened, including how we ended our agreement with our venue. We talk about all the things we learned and what we’d do differently next time. 0:00 – Trust Us, We’re Not Experts 0:40 – Suddenly Virtual 3:15 – Venue Vámonos 11:58 – What Now? 18:58 – Let’s All Go To The Lobby (and have ourselves a chat) -LobbyCon/Discord 32:24 – A Stream of Logistics 43:29 – The Calm 46:07 – The Storm 51:48 – The End Credits Scene 56:40 – Any Questions? Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,087 other subscribers Email Address Subscribe

(00:01) - Trust Us, We're Not Experts
(01:11) - Suddenly Virtual
(03:46) - Venue Vámonos
(12:29) - What Now?
(19:29) - Let's All Go To The Lobby (and have ourselves a chat)
(32:55) - A Stream of Logistics
(44:00) - The Calm
(46:38) - The Storm
(52:19) - The End Credits Scene
(57:12) - Any Questions?

Webcast: Think You're Compromised? What Do We Do Next?

Black Hills Information Security — Wed, 11 Mar 2020 11:46:23 -0400

In this webcast, we will cover what we can do if we think there is a breach on our network. We will cover live forensics, cool PowerShell scripts, network, and event log analysis, cool IR spreadsheets, and checklists. We will also be covering the status of our ELK project for reviewing Event ID 3 from Sysmon. So, a lot… Yep… A crazy amount. Download slides: https://www.activecountermeasures.com/presentations 00:00 – Intro 00:47 – “Ok, But Why” 02:17 – Have It The Wrong Way 04:35 – Have It The Right Way 06:58 – Lego My Incident Response 08:25 – Monologging On Mute 11:57 – Wouldn’t Be Prudent 14:29 – “Better Than Bad, It’s Good” 21:33 – A Van Full of Free Tools 44:10 – CSI: Memory 45:01 – We Got Cheat Sheets if You Want Some Cheat Sheets 47:20 – Overlapping Venn Diagrams 49:46 – Questions in the Wild 59:15 – Sucking at Capitalism Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 2,052 other subscribers

(00:00) - Intro
(01:18) - Ok, But Why
(02:49) - Have It The Wrong Way
(05:07) - Have It The Right Way
(07:30) - Lego My Incident Response
(08:56) - Monologging On Mute
(12:28) - Wouldn't Be Prudent
(15:00) - Better Than Bad, It's Good
(22:04) - A Van Full of Free Tools
(44:41) - CSI: Memory
(45:32) - We Got Cheat Sheets if You Want Some Cheat Sheets
(47:51) - Overlapping Venn Diagrams
(50:17) - Questions in the Wild
(59:46) - Sucking at Capitalism

Webcast: Enterprise Recon For Purple Teams

Black Hills Information Security — Wed, 19 Feb 2020 08:06:00 -0500

Do you know what your attackers know? There’s a good chance you know, but you might not be aware of just how much information can be found historically and in real-time about your business operations and organization. Join Jordan Drysdale and Kent Ickler as they discuss and demonstrate Purple Team Enterprise Reconnaissance methods that increase operational network awareness and overall security posture. Download slides: https://activecountermeasures.com/presentations 00:00 – Intro 00:42 – Executive Problem Statement 02:25 – Recon You Say? 06:11 – Your Internal Friends… Sometimes 09:01 – What Does Purple Team Do, Exactly? 10:13 – There Are A Ton Of Sources Out Here 49:55 – And Now For Some Crappy Code Learn how to monitor cloud services for your organizations’ data being dumped on the web, account compromises, and source code disclosure. Use external services to keep an eye on your external landscape to alert on unexpected changes. See configurations of operational awareness uncover potential attacker’s methodology and infrastructure to provide you an upper-hand in stopping threats before they escalate. See how an attacker utilizes common internet sources to gather intelligence about your technology stack, your perimeter security, your wireless networks, and plan attacks against your organization. Know what your attacker knows. Wild West Hackin’ Fest – Most Hands-On Infosec Con! Join us at the new Way West Wild West Hackin’ Fest in San Diego — March 11-13th, 2020. Learn more: https://www.wildwesthackinfest.com/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 1,

(00:00) - Intro
(00:42) - Executive Problem Statement
(02:25) - Recon You Say?
(06:11) - Your Internal Friends... Sometimes
(09:01) - What Does Purple Team Do, Exactly?
(10:13) - There Are A Ton Of Sources Out Here
(49:55) - And Now For Some Crappy Code

Webcast: Linux Command Line Dojo with Hal Pomeranz

Black Hills Information Security — Mon, 17 Feb 2020 08:05:00 -0500

In this webcast, we have our friend Hal Pomeranz sharing his massive knowledge on Linux. If you’re new to Linux, or if you know it and just want to hear from Hal’s years of using and teaching all things Linux, then this is the webcast for you. Download slides: http://www.deer-run.com/~hal/CLDojo.pdf 0:00 – Intro to Hal 9000 4:05 – It’s A UNIX System 7:34 – Who’s Trying Naughty URLS? 27:07 – Care About the Environment 48:24 – Questions & Answers From Hal: The Linux command-line is an amazingly powerful programming environment. Mastering its functionality can make you enormously more productive. Sensei Hal gives you critical insights into tackling difficult command-line challenges in this fast-paced and entertaining presentation. Who is Hal? Hal Pomeranz is the Founder and Technical Lead of Deer Run Associates, a consulting company focusing on Computer Forensic Investigations and Information Security. He has spent more than twenty years providing pragmatic Information Technology and Security solutions for some of the world’s largest commercial, government, and academic institutions. An expert in the investigation of Linux/Unix systems, Hal has provided Computer Forensic investigative support for several high-profile cases to both law enforcement and commercial clients. Wild West Hackin’ Fest – Most Hands-On Infosec Con! Join us at the new Way West Wild West Hackin’ Fest in San Diego — March 11-13th, 2020. Learn more: https://www.wildwesthackinfest.com/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 1,975 other subscribers Email Address

(00:00) - Intro to Hal 9000
(04:05) - It's A UNIX System
(07:34) - Who's Trying Naughty URLS?
(27:07) - Care About the Environment
(48:24) - Questions & Answers

Webcast: Introducing Competitive Backdoors & Breaches and More!

Black Hills Information Security — Wed, 12 Feb 2020 08:11:00 -0500

Backdoors & Breaches kind of took off. In case you don’t know, Backdoors & Breaches is an Incident Response Card Game to help people better understand the various attacks and defenses used in security today. We have sold out twice on Amazon, given out thousands of copies for free at conferences, and sent 2,000+ free decks to infosec educators (with a few thousand more decks to go). As a standalone game, with an Incident Master driving the narrative, it works really well. However, we have something else that we have been working on… Competitive Backdoors & Breaches. Yes, you can play this game against your co-workers. It just takes at least two decks. In this live webcast, we will be covering: advice for being an Incident Master; playing the regular game with remote teammates; answering many of your questions about gameplay; and introducing the rules on how to play this game competitively against another player. Download slides: https://www.activecountermeasures.com/presentations 4:38 – Ok, But Why? 5:55 – State of Play 9:27 – Initial Compromise Card 10:31 – Persistence Card 11:53 – C2 and EXFIL Card 14:01 – Pivot and Escalate Card 14:36 – Procedures Card 16:27 – State of Play 17:51 – Initial Setup 20:13 – Resource Points (RP) 25:41 – Building the Kill Chain

(00:00) - Kinda Goofy
(04:38) - Ok, But Why?
(05:55) - State of Play
(09:27) - Initial Compromise Card
(10:31) - Persistence Card
(11:53) - C2 and EXFIL Card
(14:01) - Pivot and Escalate Card
(14:36) - Procedures Card
(16:27) - State of Play
(17:51) - Initial Setup
(20:13) - Resource Points (RP)
(25:41) - Building the Kill Chain
(28:20) - Attack in Depth
(29:20) - Completing the Kill Chain
(31:31) - Defend Rolls
(34:33) - For Example
(37:29) - Let's Play a Game
(47:39) - Any Questions?

Webcast: Getting Started in Cyber Deception

Black Hills Information Security — Mon, 10 Feb 2020 08:07:00 -0500

Ever wanted to get started in cyber deception? Ever wanted to do it for free? In this BHIS webcast, we will cover some basic, legal, and easy tools/techniques to get you started in working with low interaction honeypots to serve as an early warning of attacks. We will also be sharing a recipe for making wine out of pentester tears. Because attacker tears make the best wine. Download slides: https://www.activecountermeasures.com/presentations/ 1:00 – A Few Cool Things 6:00 – Beginnings of Cyber Deception 9:08 – Conversations 16:34 – Canarytokens 18:42 – Scenario: Recon 23:02 – .exe 36:13 – Cloned Websites! 39:07 – Word Docs!!! 47:41 – One Step Forward 51:58 – Honeybadger Update 53:56 – Back To Threat Intel; How BHIS Uses It 56:03 – Questions This webcast was originally recorded live on January 23, 2020 with John Strand. Wild West Hackin’ Fest – Most Hands-On Infosec Con!

(00:00) - Introduction
(01:00) - A Few Cool Things
(06:00) - Beginnings of Cyber Deception
(09:08) - Conversations
(16:34) - Canarytokens
(18:42) - Scenario: Recon
(23:02) - .exe
(36:13) - Cloned Websites!
(39:07) - Word Docs!!!
(47:41) - One Step Forward
(51:58) - Honeybadger Update
(53:56) - Back To Threat Intel
(55:21) - How We Use It
(56:03) - Questions

Webcast: Passwords: You Are the Weakest Link

Black Hills Information Security — Fri, 17 Jan 2020 08:38:51 -0500

https://media.blubrry.com/bhis/content.blubrry.com/bhis/BHIS_Podcast_Passwords_Youaretheweakestlink.mp3 Why are companies still recommending an 8-character password minimum? Passwords are some of the easiest targets for attackers, yet companies still allow weak passwords in their environment. Multiple service providers recommend 8-character minimum passwords based on outdated data. Download Slides: https://www.activecountermeasures.com/presentations Originally recorded as a live webcast on December 5th, 2019 Presented by: Darin Roberts & CJ Cox Because of newer attack methods and increased computing power, password minimums need to be increased to 15 characters to keep networks safe. On this BHIS Webcast, Darin & CJ discuss: * Current password policies: BHIS recommendations, Microsoft, Google, Apple, NIST * Why do we recommend 15 characters – brute force, password crack, LM Hash * Passphrase vs. password * Recommended password policy summary Wild West Hackin’ Fest – Most Hands-On Infosec Con! Join us at the new Way West Wild West Hackin’ Fest in San Diego — March 11-13th, 2020. Learn more: https://www.wildwesthackinfest.com/ Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts. Join 1,896 other subscribers Email Address Subscribe

(00:00) - Start
(01:04) - Introduction
(03:26) - In The Beginning
(04:23) - What The Experts Say : PCI
(05:55) - What The Experts Say : Microsoft
(09:29) - What The Experts Say : NIST
(16:01) - What The Experts Say : Google
(16:28) - What The Experts Say : Apple
(16:42) - Still More Experts
(17:49) - Why 15 Characters
(18:06) - Brute Force
(18:44) - Password Spray
(22:48) - Password Cracking
(23:25) - A Hashing Algorithm
(24:07) - More About Hashes
(25:49) - So What Is Password Cracking
(27:16) - Windows Hashes
(27:42) - The LM Hashing Algorithm
(29:46) - LM Hash Is "Weak"
(30:55) - LM Vs. NTLM Cracking
(31:14) - Why 15 Character Passwords – Answer
(32:06) - CJ's Response to the Problem
(36:32) - Let's See the Mathm
(37:09) - Math Examples
(40:30) - From the Field
(42:47) - Would You Like To Play A Game?
(45:03) - Take Aways
(46:46) - Are You Really Going To Let This Guy Decide
(48:33) - Audience Questions & Comments

Webcast: Sacred Cash Cow Tipping 2020

Black Hills Information Security — Tue, 14 Jan 2020 12:36:43 -0500

Want to learn how attackers bypass endpoint products? Download slides: https://www.activecountermeasures.com/presentations/ 3:41 – Alternate Interpreters 9:19 – Carbon Black Config Issue 15:07 – Cisco AMP EDR – Quick and Easy Bypass 18:24 – PowerShell AMSI Bypass – Rhino 19:07 – CylancePROTECT Bypass 24:14 – Windows Defender and Carbon Black Bypass 30:36 – Windows Subsystem for Linux 39:59 – PowerShell HTTP Web Cradle for Downloads Last year we came to the conclusion that we are going to keep going with the Sacred Cash Cow Tipping Webcast series. Why? Because many in the industry still believe that security is something that can be achieved through the purchase of a single product. To that end, we feel there is still a need to deconstruct certain parts of security (like AV) and show that there are always structural weaknesses in every security product that is implemented. This is becoming even more important now that many of the advanced endpoint products are not just fire-and-forget but have an endless array of different configurations that enable a company to shoot themselves in the foot by reducing the overall effectiveness of these products. So, yes, Sacred Cash Cow Tipping is more important than ever. To that end, our next webcast will be on bypassing endpoint security products. The goal of this webcast is to help show people that there is still no silver bullet in security. We also desperately want to show that configuration and monitoring still matters. This is our first webcast of the year. It may run longer than 60 minutes. It will be recorded. We will have a team of Black Hills Testers answering questions throughout the webcast. We have room for 3,000 attendees, so you will be able to attend live if you want. Wild West Hackin’ Fest – Most Hands-On Infosec Con! Join us at the new Way West Wild West Hackin’ Fest in San Diego — March 11-13th, 2020. Learn more: https://www.

(00:00) - Intro
(03:41) - Alternate Interpreters
(09:19) - Carbon Black Config Issue
(15:07) - Cisco AMP EDR - Quick and Easy Bypass
(18:24) - PowerShell AMSI Bypass – Rhino
(19:07) - CylancePROTECT Bypass
(24:14) - WIndows Defender and Carbon Black Bypass
(30:36) - Windows Subsystem for Linux
(39:59) - PowerShell HTTP Web Cradle for Donwloads

Webcast: Let’s Talk About ELK Baby, Let’s Talk About You and AD

Black Hills Information Security — Tue, 07 Jan 2020 08:03:55 -0500

BHIS’ Defensery Driven Duo Delivers Another Delectable Transmission! We know you are worried about your networks. After hours of discussion, we’ve come to the realization that some of our dedicated followers seem to be much more interested in catching malware than learning how to be (please forgive this next statement) “l33t hax0rs.” Download slides: https://www.activecountermeasures.com/presentations/ 2:47 – Why Are We Doing This? 5:07 – AT7: The Logs You Are Looking For 7:41 – AD Best Practices to Frustrate Attackers 9:37 – AT 5 – Complete Takedown & AT 6 – IOCs 12:04 – Blue Team-A-Palooza 14:22 – Windows Logging, Sysmon, and ELK – Part 1 16:45 – Implementing Sysmon and Applocker 21:45 – …And Group Policies That Kill Kill-Chains 22:31 – Here Are Some Important Blogs 23:35 – Summary Complete 25:28 – Introducing the Atomic Red Team 27:50 – Installing the Atomic Framework 29:29 – Squibbly Doo; The Results; Let’s Take A Step Back: The Atomic Tests; Another Step Back: WEF / Winlogbeat Config 33:41 – Executing T1015; Catching Executables; Executin...

(00:00) - Intro
(02:47) - Why Are We Doing This?
(05:07) - AT7: The Logs You Are Looking For
(07:41) - AD Best Practices to Frustrate Attackers
(09:37) - AT 5 – Complete Takedown & AT 6 – IOCs
(12:04) - Blue Team-Apalooza
(14:22) - WIndows Logging, Sysmon and ELK – Part 1
(16:45) - Implementing Sysmon and Applocker
(21:45) - ...And Group Policies That Kill Kill-Chains
(22:31) - Here Are Some Important Blogs
(23:35) - Summary Complete
(25:28) - Introducing the Atomic Red Team
(27:50) - Installing the Atomic Framework
(29:29) - Squibbly Doo
(30:46) - The Results
(31:29) - Let's Take A Step Back: The Atomic Tests
(32:18) - Another Step Back: WEF / Winlogbeat Config
(33:41) - Executing T1015
(34:26) - Catching Executables
(41:05) - Executing T1003
(42:02) - ElastAlert
(43:21) - Now, On the ATT&CK
(44:20) - Not Sure If That's a Wrap Yet. (It's Not)
(47:11) - Check Out Our Dashboard

BHIS Podcast: Py2K20 - Transitioning from Python2 to Python3

Black Hills Information Security — Fri, 31 May 2019 09:19:50 -0400

In this podcast (originally recored as a live webcast), we talk about the 2020 End of Life for Python2. We address what the short, and medium term impacts will likely be. Key language differences will be highlighted with techniques to modify your code to be forward compatible.

As a SANS instructor teaching SEC573: Automating Information Security with Python, over the past three years, I have steadily moved my teaching materials, examples, demonstrations and personal coding to Python3. In this process, I have had to break habits and learn new habits to write Python3 compatible scripts. I also spend considerable effort showing people how to write Python2 scripts which are forward compatible with Python3 in order to ease the transition.

The largest barrier that most people struggle with is the idea that Python3 has changed the default string encoding to UTF-8 rather than simple byte encoding. Once you learn how to manage your string objects, the remaining transition issues are mostly modern improvements to the language which most people consider advantageous to adopt.

Since Python2 will no longer have active releases after 2020, it is important to embrace the change and move forward with the Python scripting community.

Podcast: Attack Tactics 6! Return of the Blue Team

Black Hills Information Security — Thu, 30 May 2019 14:08:33 -0400

Download slides: https://www.activecountermeasures.com/presentations In this webcast we walk through the step-by-step defenses to stop the attackers in every step of the way we showed in Attack Tactics Part 5!!!

Podcast: Weaponizing Corporate Intel. This Time, It’s Personal!

Black Hills Information Security — Sat, 11 May 2019 11:26:46 -0400

Beau Bullock & Mike Felch// Strategically targeting a corporation requires deep knowledge of their technologies and employees. Successfully compromising an organization can depend on the quality of reconnaissance a tester performs up front.

BHIS Podcast: Weaponizing Corporate Intel: This Time, It’s Personal!

Black Hills Information Security — Fri, 10 May 2019 14:40:59 -0400

Lately, it seems like recon is just not getting as much love as it should. Well, time to change that. In this podcast, we discuss some new tips and tricks... And!!!! We released a new tool -- FireProx

Strategically targeting a corporation requires deep knowledge of their technologies and employees. Successfully compromising an organization can depend on the quality of reconnaissance a tester performs up front. Often times testers only resort to using publicly available tools which can overlook critical assets.

In this one-hour BHIS podcast, we begin by examining some commonly overlooked methods to discover external resources. Next, we show how to discover employees of a target organization and quickly locate their social media accounts. Finally, we strategically identify and weaponize personal information about the employees to target the organization directly using new attack techniques.

Listeners will learn an external defense evasion method, a new process to gain credentialed access, and we'll give a demo on a newly released tool — FireProx!

While the approach is designed to assist offensive security professionals, the webcast will be informative for technical and non-technical audiences; demonstrating the importance of security-awareness for everyone

- BHIS

BHIS PODCAST: Tracking attackers. Why attribution matters and how to do it.

Black Hills Information Security — Mon, 18 Mar 2019 11:54:27 -0400

In this BHIS podcast, originally recorded as a live webcast, we cover some new techniques and tactics on how to track attackers via various honey tokens. We cover how to track with Word Web Bugs in ADHD, and cover the awesome toolkit from Thinkst.

BHIS PODCAST: Endpoint Security Got You Down? No PowerShell? No Problem.

Black Hills Information Security — Wed, 06 Mar 2019 10:16:19 -0500

Do your PowerShell scripts keep getting caught? Tired of dealing with EDRs & Windows Defender every time you need to pop a box?

In this one-hour podcast, originally recorded as a live webcast, we introduce a somewhat new Red Team approach that we call BYOI (Bring Your Own Interpreter).

Turns out, by harnessing the powah of C# and the .NET framework you can embed entire interpreters inside of a C# binary. This allows you to dynamically access all of the .NET API from a scripting language of your choosing without going through Powershell in any way!

We also cover some basic .NET & C# concepts in order to understand why this is possible and all the hype surrounding offensive C# tradecraft.

Additionally, we demo SILENTTRINITY, a post-exploitation tool we have developed that attempts to weaponize the BYOI concept *AND* dropped a pretty huge update for it live during the webcast!

This podcast was originally recorded on 2/14/2019 as a live webcast with our very own Marcello Salvati.

P.S — You can get SILENTTRINITY here:

https://github.com/byt3bl33d3r/SILENTTRINITY

Also, you can now register for our Cyber Deception class at Black Hat 2019 here: https://www.blackhat.com/us-19/training/schedule/index.html#a-guide-to-active-defense-cyber-deception-and-hacking-back-14124

BHIS PODCAST: Endpoint Security Got You Down? No PowerShell? No Problem.

Black Hills Information Security — Wed, 06 Mar 2019 10:08:32 -0500

Do your PowerShell scripts keep getting caught? Tired of dealing with EDRs & Windows Defender every time you need to pop a box? In this one-hour podcast, originally recorded as a live webcast, we introduce a somewhat new Red Team approach that we call...

BHIS PODCAST: Network Threat Hunting Runbook

Black Hills Information Security — Thu, 28 Feb 2019 11:13:03 -0500

We all know what threat hunting is in general terms; it's when we actively search our network for compromised systems. But what does that mean exactly and what process should we be following? Can I simply check network traffic to see if the evil bit is set, or is there a bit more to it than that?

In this podcast, originally recorded as a live webcast, we walk you through the methodology of doing a network threat hunt. We talk about what steps to perform and in what order. We also look at some of the tools and online resources you can leverage to expedite the process. In short, this podcast is be a runbook you can leverage for validating the integrity of each of your internal endpoints.

BHIS Podcast: Blockchain and You! InfoSec Edition

Black Hills Information Security — Wed, 27 Feb 2019 16:41:16 -0500

http://media.blubrry.com/bhis/content.blubrry.com/bhis/BHIS_Blockchain_and_You_Feb2019.mp3 Take a good look at Bitcoin right now… these are the unlucky ones. These are the unfortunate souls who jumped on another overinflated balloon. But, does this Bitcoin crash completely undermine all blockchain technologies? Since Bitcoin is crashing and burning we figured it would be a good time to have a webcast on blockchain security issues and why blockchain still matters. Is it all hype? Is it all just a slow-motion train wreck? Why, exactly, should a security practitioner care? There are so many cool applications, and more than a few crazy, stupid applications. With the crazy applications comes crazy security issues… beyond the 51% attack. This podcast was recorded as a live webcast on 2/3/2019 We were joined by Beau Bullock, BHIS Tester, and host the Coinsec Podcast. And no… we did not give investment advice. Please, please do not ask us what coin is the best to get a 1,000% return on investment in 12 months. We all got enough of that crap over the holidays. That and fixing printers and fax machines. For Penetration Testing, Security Assessments, Red Team Engagements, and Threat Hunting: Contact Us! Join the BHIS Blog Mailing List – get notified when we post new blogs, webcasts, and podcasts.

PODCAST: Sacred Cash Cow Tipping 2019

Black Hills Information Security — Tue, 15 Jan 2019 12:17:04 -0500

Yet again it is time for another edition of Sacred Cash Cow Tipping! Or, “Why do these endpoint security bypass techniques still work? Why?” The goal of this is to share just some of the ways Black Hills Information Security bypassed endpoint security ...

PODCAST: RDP Logging Bypass and Azure Active Directory Recon

Black Hills Information Security — Fri, 28 Dec 2018 13:52:53 -0500

For this podcast we cover a couple of different topics. First, we talk about how to password spray in a non-attributable sort of way. Beau found a way to obfuscate what RDP logs record with launching password spraying attacks.

PODCAST: BHIS Sorta Top Used Tools of 2018

Black Hills Information Security — Mon, 17 Dec 2018 12:33:41 -0500

In this webcast we cover some of the core tools we use all the time at Black Hills Information Security. However, there’s a twist. We don’t talk about Nessus, Nmap, or Metasploit. Why? Because there are a ton of new (and older) tools we use that fall o...

PODCAST: Raising Hacker Kids

Black Hills Information Security — Tue, 04 Dec 2018 12:32:34 -0500

Yes.. Ethical Hacker Kids. The holidays are coming up! Here John & Jordan cover the different games, tools and gifts we can give kids that help teach them the trade. There is nothing, nothing like sitting around with family picking locks,

PODCAST: Blue Team-Apalooza

Black Hills Information Security — Thu, 15 Nov 2018 11:57:52 -0500

Over the past few months, we have discovered a couple trends that organizations seem to be missing. No silver bullets, just some general vulnerability issues we are seeing again and again. In this podcast, Jordan & Kent give a few pointers and some new...

PODCAST: Creating & Keeping a Malware Zoo

Black Hills Information Security — Tue, 09 Oct 2018 10:45:21 -0400

Creating and Keeping a Malware Zoo with John Strand

PODCAST: John Strand’s 5 Year Plan into InfoSec Part 2

Black Hills Information Security — Mon, 24 Sep 2018 13:50:34 -0400

John Strand shares some of his own journey into information security and also his ideas and tips for those wanting to get into the industry from the start, or those looking to change career paths mid stream.

PODCAST: Beacon Analysis

Black Hills Information Security — Mon, 17 Sep 2018 12:21:30 -0400

Beacon Analysis with Active Countermeasures COO, Chris Brenton

PODCAST: What Is a Red Team, Anyway?

Black Hills Information Security — Mon, 10 Sep 2018 11:01:30 -0400

Dakota Nelson explains the different kinds of penetration tests (including red teams) in this industry and how they can help your team.

PODCAST: From Active Countermeasures – Attack Tactics 4

Black Hills Information Security — Tue, 28 Aug 2018 12:52:17 -0400

A special guest episode from Active Countermeasures with John Strand and Chris Brenton

PODCAST: Active Directory Best Practices that Frustrate Pentesters

Black Hills Information Security — Mon, 13 Aug 2018 11:56:22 -0400

Jordan and Kent discuss how to set up Active Directory to best frustrate pentesters - take care of that low hanging fruit!

PODCAST: Security Policy: Fact Fiction or Implement the Marquis de Management

Black Hills Information Security — Mon, 30 Jul 2018 12:12:27 -0400

CJ Cox talks about the highs, lows, hows and why's of security policy.

PODCAST: Highly Caffeinated InfoSec

Black Hills Information Security — Mon, 16 Jul 2018 10:20:26 -0400

Join Beau Bullock and Mike Felch as they talk about ways to learn more, network and wake up your inner hacker. See the full episode here and look at the slides here.