Jared's Technology Podcast Network

Welcome to the security box, podcast 144. This show is an open forum. We had no particular topic in mind, but we talk about books, the landscape and more. The show may contain some adult themes, but it is very light at all. This may contain language or other situations. Please be aware of it. Thanks for participating and make it a great day!

Welcome to the security box, podcast 143. Today, we're going to have a very interesting discussion about the Relationship between Ransomware and Phishing. We know of at least one moron of the podcast, and there is possibly going to be one more. Of course, we'll have news, notes and any questions from the Clubhouse audience. Morons of the Podcast First Moron, a Russian on the Run There are two different articles out there about this one. One from Krebs and the other from Cyberscoop. $10M Is Yours If You Can Get This Guy to Leave Russia Krebs on Security Russian national charged for role in stolen credit card verification scheme Cyberscoop How Not! to notify people of a databreach I saw a boost on Saturday about a breach with a company named Western Digital. That's nice, we have covered many breaches before. What I found was disturbing from Western Digital according to the boost. While they sent email out, the email was not accessible for those of us who use access technology; namely screen reading technology. I don't know about you, but I would expect the info not in graphical form, I would expect it in text just like you and I communicate already. Here is my blog post from May 6th that mentions this. As of show note creation time, we do not have any official articles from the tech press, but when we do, we'll be sure to pass it along. Don't put breach notifications in picture form! It doesn't do anyone with disabilities any good. Our main Topic The main topic comes from Phishlabs. The article is titled What is the Relationship Between Ransomware and Phishing? and was written at the end of March, 2023. This is going to get interesting. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

This show has sections of strong language, but not a lot. The disclaimer is in there just in case, but it is not much in the wake of strong language. Welcome to the Security box. This is program number 142 of the series and this time, we've got a topic which hasn't been covered before at least on our podcast. The topic covers a very interesting endeavor by the government to deal with Cybersecurity. Besides this, we'll see who gets a moron, we'll cover the landscape, and we'll see what else is of value. Hope you enjoy the program! Morons of the podcast One may not completely be a moron, but it qualifies as a group not just what the first item covers. The second, however, you'll just have to read to believe. 1. I'll put this one as a moron, but I really don't understand what seems to be going on over at schools lately. Its ok to keep information on children that have nothing to do with you giving them an education, and that information may include behavioral issues, SSN's and more. blog post Brian Krebs boosted (retweeted) the following to his followers. Note that my blog post has the linked article, so I'm not going to link it within this section. It says: Doug Levin: NBC: Students’ psychological reports, abuse allegations leaked by ransomware hackers https://www.nbcnews.com/tech/security/students-psychological-reports-abuse-allegations-leaked-ransomware-hac-rcna79414 #edtech #databreach @brett via @kevincollier 2. Our second moron is more of the moron than the first, but here's a blog post titled T-Mobile, do you still want me as a customer? I don’t think so! which has the latest on what they have been up to. It links to yet another article, talking about yet another breach. Should we be surprised in this industry? Topic: Highlights from the New U.S. Strategy This is a Krebs on Security article that we're taking from. He was tooting (tweeting) about this on Mastodon. The article is titled Highlights from the New U.S. Cybersecurity Strategy and it was interesting. I wonder what will eventually happen with this? Haven't seen anything since this article was written, but maybe they're working on it and we'll see something soon. Only time will tell. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

This is an episode that affiliates can run, and the program is under an hour. We'd like to thank the BBC for doing this research. Its definitely eye opening. The show notes, which include a link to the video on YouTube follows. Welcome to the security box, podcast 141A. On this podcast, we're going to provide you with a video. This video comes from the BBC, and it does leave some very interesting questions. Contact info is given at the end. What sparked this? This toot from Brian Krebs is what sparked this. It says: https://www.youtube.com/watch?v=w6JXZ3GzSCQBrianKrebs: Simona Weinglass of The Times of Israel is my new hero. Her video reporting on crypto investment scams is well worth watching. Tl;dw, it appears the biggest crypto investment scams targeting people in the UK were promoted by at least a half dozen of England's premiere football (soccer) leagues. These scammers managed to rake in at least a billion dollars, and could afford lucrative sponsorships that got their brand everywhere. As the former scammers explained, there's nothing real about the investment "earnings" shown to people who get roped into these scams: It's all just a digital mirage, and any money invested is gone. Her video series on the BBC zeroes in on who's responsible. Involves ride-alongs with German police as they worked w/ investigators in the country of Georgia to raid call centers working the phones for these fraudsters. https://www.youtube.com/watch?v=w6JXZ3GzSCQ If you're just here for the video, this is the youtube link to the video we give in audio. Thanks Brian for posting this! I found it very eye opening, and it even made me mad, but that's probably what we'd expect with what you'll hear. I don't blame them though, but you should hear or watch this and make up your own mind. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

Welcome to the Security box, podcast 141. On this podcast, Cyberscoop is along to help us diagnose yet another ransomware group. They actually start by attacking Israeli schools, but will it stop there? Besides that, we'll have the news, notes from around the landscape, possibly some morons, and of course your thoughts. Our topic today comes from this Cyberscoop article titled New cybercrime group calling itself DarkBit attacks Israeli university which we sent to the list in mind February. While we've not seen anything else on this, it isn't for us to keep our mind down as they could attack anything they want. We hope to see you on the show, thanks so much for listening! Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

This program may contain some infrequent occurences of strong language. Welcome to podcast 140 of the Security box. On this edition of the podcast, we've got two morons at least and a great topic that may still be relevant even though the SVB fiasco is now past us. We'll also have the landscape from people who found things of interest as well. We hope you enjoy the show! Morons of the podcast We have two morons of the podcast. Trial and error in Kuwait tells the story of a cyber security expert who almost went to jail for tweeting on something he found which is part of protecting everyone. The article itself is quite interesting, but what is more interesting is the fact that the bank didn't want this info out there to begin with. This came from Cyberscoop. Lawsuit Claims Mount Nittany Health Shared Private Patient Information with Facebook, Google (update1) comes to us from databreaches.net. The fact that you didn't even notify customers or anyone else about the issue is just mindblowing. This definitely doesn't make any sense. The FDIC and banks The FDIC did step up when it came to the SVB ordeal, but what about it and bank securituy? A watchdog says that they're not doing enough. The article Watchdog warns FDIC fails to test banks’ cyberdefenses effectively is one that you should read. We'll be taking this article apart as part of the discussion. Do you think they're doing enough? Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

This podcast may not mean much for some, but to others, it might. This app is still much in development and is called Metro Micro. Los Angeles Metro is also getting a copy of the cast for their review. Here are the full show notes. Hello folks, welcome to the technology podcast. On this podcast, you'll learn about an app called Metro Micro. It is a new project by Los Angeles Micro which they're trying out. You'll have to search for Metro Micro in your respective app store if you want to take a look. You may also go to the Metro Micro page on metro.net to learn more. While most people may not need this, I figured some might, and we reach a wide variety of people so I'm going to put it out there.

Hello folks, welcome to program 139 of the security box. On this episode, let us talk about email for a bit. Yes, the thing you use to receive announcements about this podcast, maybe other programs you are interested across the network and other places and a way for businesses to communicate with you. According to an article, this method is still the best way to get ransomware and other things on your device. Why is that? We're going to have news and notes as well, maybe we'll find out as we post things between now and show time if there are morons, and we'll also see what the landscape brings. Topic: Email as a vector Today, let's talk about email. Ransomware Attacks: Why Email Is Still THE Most Common Delivery Method comes from Phishlabs. We'll step through this article and see what people think. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

Find news through the blog. Welcome to program 137 of the Security box. We've got a very interesting musings piece which we've blogged as well as another threat we need to talk about. Musing I've started yet another musings post, and this one came from Mastodon. I am not going to put the older posts in this category but will put new ones in this category. A very interesting musing thought piece is the article. The boost is quoted with the links linked as numbers for you. Maybe a Moron or just a news item? No April fools joke, man arrested for making swatting calls, faces 10 felony counts was the only post posted on April 1st. This was no April fools joke. The gentleman in question used Discord to post and share these videos and luckily nobody got hurt. You'll want to check out this article to determine what you think, and we'll determine where it goes and do it appropriately. Mimic ransomware New Mimic Ransomware Abuses Everything APIs for its Encryption Process comes from Trend Micro. This may be just as bad as Sandworm, if not worse. We'll discuss this Trend Micro article. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

I know I tried to get more podcasts out and this time I've got one. We'll see how things go, and thanks for listening! Welcome to the technology blog and podcast. On this edition of the podcast, we have got two different items. Roger Grimes has written a bunch of books, and he's also taught for as long as I have if not longer. He has a webinar on Cyber Security, and yes, we could play it on TSB but TSB is more for you to communicate with us on what you have questions on and what things we see. Take a listen to this and see what might be of value to you. Los Angeles Metro and Transit App are ending their partnership. Is this a great move? I don't honestly know. Metro did have a pretty bad app which I hated to use. The data was the samem, but I really like Transit App's interface. Los Angeles Metro will be discontinuing partnership of Transit App as their official app is my blog post after reading the source's post on this. Contact info is given at the beginning and end, feel free to utalize any or all of it. Enjoy!

Welcome to the Security box. This is podcast 137 of the program and we're not slowing down. At least, not yet. On this edition of the program, we've got at least one moron of the podcast, we've got a very interesting update on Sandworm and of course we're going to have some great news items as well as anything else from the audience. Morons of the podcast This blog post titled Kroger has serious breach, affects 82,000 people of postal prescription issues should be spotted. While Kroger is well-known for their super market chains, they apparently have a pharmacy department and that is what we're talking about here. They have the capability of sending prescriptions through the mail, and 82,000 people were recently notified. This is going to get very interesting. Two U.S. Men Charged in 2022 Hacking of DEA Portal was sent to TSB. Hacking in to a DEA portal that many agencies use must be put in as the moron of the podcast for sure. Nick messaged while show notes were still being put together and this was mentioned via voice. Great one, guys! Some news items Some of the news items may include but not limited to: Opinion piece: article talks about how TikTok didn’t make a case for itself Move out of the way, 55 vulnerabilities tracked in 2022 and these are zero-days Another hacking forum shut down … this is the breach forums 306,000 plus out of 476,000 plus domains reported as phishing Some we may have talked about, but these may be some that people could be braught up. Feel free to check out the accompanying articles and let us know what interests you! I happened to pop on Facebook for my once in a while look. Someone I follow happened to like Q-Link Wireless. OK, that's cool, but we need to remind people that Q-Link may be good for free cell phone service, but what about your privacy and safety? TSB will not tell you what you should use, just putting news out there about the things we read. Why is there “no password required” when accessing accounts? What not to do when setting up accounts for services podcast 39's blog post NVDA is now released for 2023.1. This blog post talks about what's up with it with a link to the release. Topic: Sandworm Did you read Sandworm? This is the blog post about the book titled: Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers and here is the book review titled: Book review: Sandworm. We found a very interesting article which we may have blogged. The blog post is titled <a href="https://cyberscoop.com/sandworm-wiper-ukraine-russia-military-in

Hello everyone, welcome to podcast 136 of the security box. On this edition of the program, we're going to talk about a group that has quite a bit up its sleve. We also have a bunch of news from around the landscape, a familiar foe that could in theory get the moron of the podcast yet again and much more. We hope that you enjoy the program and thanks for listening! Possible moron I wrote a thought article on my blog with no accompanying article. Here is that blog post titled TikTok says: “We’re embedded” in to the operating system. I am not sure if this will be it, and if someone puts something else in, we'll add it to this list. We could in theory add this blog post about Bite Dance Surveiling journalists to this too. Topic: Vice Society This blog post titled Vice Society Ransomware Group Targets Manufacturing Companies is probably the beginning. This seems to be a new group and it seems pretty dangerous. While it hasn't targetted the United States yet, we know that anything is possible in this crazy world. Supporting our podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

Hello folks, welcome to podcast 135 of the security box. On this podcast, we're going to talk about the court system allowing the lawsuit to continue against one of the most proliferated companies who continue to claim they don't do anything wrong and their software that is used by law enforcement to solve crimes. Who is that group? The NSO group out of Israel. We'll also have news, notes, at least one moron of the podcast, but rumor has it that we have a few, and much more. Morons of the podcast George Santos has some revelations that has come out and an investigation has since been started. The blog post in question is right here, and is titled George Santos masterminded 2017 fraud case. It leads to a lengthy read about what the investigations entale although we don't know what will eventually happen. If you really want to talk about Morons, the FBI admitted to buying data which really should not be a surprise. We could possibly add Elon Musk apologizing for firing a disabled worker of twitter as well. This blog post about twitter news covers the fact that the root certificate has now expired and Elon Musk has since fired everyone of alue including the one who has delbt with the Root CA which was internal to the company, so now ... they're screwed. Don't forget the Freenom ordeal too. This blog post leads to Krebs on Security talking about this. I also put in some discussion about this too. Have any other possible morons? Do you disagree on some of these not being complete morons? I completely understand, but we do have at least two of them listed and others may just be complete stories within themselves. Musing I found this quite interesting in regards to Mastodon VS the rest of the Social Media universe such as Facebook, Twitter, Instagram and Tiktok. It says: Earle Zwicker: Boosting Ethan Schoonover (ethanschoonover): Stop thinking of Twitter, TikTok, IG, (et al) as social media sites. They are **Content Refineries.** Like processed food manufacturers they take user content & extract the most addicting/engaging content. Brains eat it up but in an unhealthy “devour the whole bag of chips” way. They make hyper-processed social media junk food. Mastodon is more like a potluck. We're all bringing dishes. It's a mess. Kids are running all over. But we are, at least, real people sharing real things. Our topic, the NSO group Supreme Court clears way for WhatsApp case against NSO Group, opening spyware firm to more lawsuits is the article that comes to us from Cyberscoop. Its going to be a very interesting discussion. We'll just have to see how it goes. Support our podcast. Let us know what you think or suggest topics. Thanks!

Hello folks, welcome to the Security box, podcast 134. This podcast is going to talk about PBKDF2, an encryption algorithm that is used in certain situations. We'll also have a moron of the week, maybe two, maybe more! We'll also dip our toes in the landscape and see what is on other folks minds. Morons of the podcast This first one is quite dumb. In fact, when I saw the boost which saw it, I had to title this the way I did. You Stupid F**k … its not going to look good for you now when you get picked up is my blog post on an article coming from a site called news24.com. Not only is this guy found guilty, you're going to read that he just chose not to even show up! How dumb can you be? This second one comes from this blog post about TikTok's newest challenge. There is some strong language with this post, and from at least two people, it is well warranted. I try not to use strong language in my posts, but this one is definitely beyond repair. The short of this, for those who may be offended by strong language, is that scammers will stop at nothing to either get their wares out or to cause as much harm as possible. In this latest twist, we have someone going aroudn claiming they can turn loved one's ashes to a sculpture or even a painting. They claim its free ... but it isn't. The article leads to this Kim Komando article talking about the TikTok Scam. If it isn't mentioned as part of this segment, which it just may, please feel free to weigh in on this one. Our topic, PBKDF2 PBKdf2 is one of many encryption types for passwords and the like. Here's the Wikipedia article on it as we take from the first two sections for now. There are replacements for it and its covered within this article, but we'll let you look this up later. Book Selection: Tracers in the dark I chose my next book. Tracers in the Dark by Andy Greenberg. During the podcast, we'll check in with folks to see where they are in this ... or other books that are on our list. This is my blog post talking about Tracers in the dark if you need it. I finally got my book review up for If it's smart, its vulnerable by Mikko Hypponnen. Here's that blog post if you're interested to see what I have to say about it. Supporting our podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

We have a round table today on the security box. Domains, schemes, scams, tiktok, the landscape and much much more on this open forum of the program. Hope you all enjoy the program!

Welcome to the security box, podcast 132. On this edition of the program, we're going to talk about a newcomer I think, one that might be and up and comer. We have a rumor that we might have at least one moron, but who knows how many. We'll have news, notes and other commentary as well. Rumor has it, we've got a surprise while making a phone call before last Saturday's security hour that someone who I thought wouldn't read books is reading the same book several of us are reading. Find out as you listen to the podcast edition of the program. Moron of the podcast Nick, our normal staple now a day, mentioned this story in passing. Turns out that do have a moron as you'll see in the accompanying blog post. As it turns out, other articles about this 90 million dollar takeover can be found, but my blog post This was mentioned as our possible moron of the podcast … a suspect found guilty but attorney will appeal has the details and some very interesting questions I think we need to talk about as this gentleman, Vladislav Klyushin, is our moron of the podcast. You should've stayed with cybersecurity and you would have been OK. Enjoy your award, the hammer is down on you this time. Dark Pink This week, we learn about a new group out there called Dark Pink. Dark Pink, a newly discovered hacking campaign, threatens Southeast Asian military, government organizations is the article and it comes from Cyberscoop. Come with us as we take this malware apart and talk about what its up to. It comes from a group as you've probably read if you found the article through our list or even blog. This is going to get very interesting. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

One sware word within the first hour and 15 minutes. A note has been placed in the audio for folks who need to be aware of it. Full notes below. Hello everyone. Welcome to program 131 of the Security box. I hope you'll enjoy what we have to offer you today. On this podcast, we have a rumor that indicates that we'll definitely have at least one moron of the podcast, maybe more. We'll also have the topic of the Q4 threat trends Report from Phishlabs as well as questions, comments and more. We hope you'll enjoy the program and thanks for listening! Here's a moron set for you There were two articles in which broke this, and it definitely fits our Moron of the podcast. This blog post from February 10th has links to each of the articles and initial thoughts. Also, I'm not too sure about this one, but we could probly fit this IRS update from February 10th as well as this blog post talking about an article by Andy Greenberg and a guy who thinks that he won't be caught as he apparently got a mixer going on and he's supposedly taken the right precautions. If you have anything in this category, feel free to mention it by sending us an email, an imessage, find me on Mastodon and even text or whats app me. Our topic Seems like QBot is back in the news as the top threat in this last quarters report from Phishlabs and Fortra. The article is titled QBot Campaigns Overwhelmingly Lead Reported Payloads in Q4 is the article we'll be taking from. It was posted to TSB's list last December, and of course, I do try and cover it. The threat may still be there, and with all of what we'll be talking about here, all of these threats have not gone away. Supporting our podcast and work If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

Hello everyone. Welcome to podcast 130A. We're going to rebroadcast a podcast from Cyber Crime Magazine about the book Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency which is also linked on our resources page. I found the program of interest, and this could in theory be my next book. I hope that everyone enjoys this interview about the book!

Welcome to the security box, podcast 130. On this show, we're going to talk about a very interesting article that covers the fact that Coppa is out of date and congress hasn't done anything about it. We'll have news, notes, commentary and more. Who knows, will we have a bonehead award of the podcast? We'll have to see. Topic: Coppa and Congress I blogged this one, and on this podcast, we're going to discuss State legislators aren't waiting for Congress to regulate children's online privacy. It was quite interesting to see that Coppa is needing to be changed yet companies aren't really following it like they should. Adult disclaimer This program may contain some strong language. Parental desgression is advised. This means its an infrequent occurrence, but there.

There is one spot where some strong language is used within the following podcast. We want people to be aware of that. Its only one word, but due to rules and regs, we must bring this up to the listener. Hello folks, welcome to the security box podcast 129. Last week, we talked about the government, but there's more to the story in which people may not be aware of. Apparently, there has been a watch dog group out there taking reports on what the government has or has not done. The article is titled Government watchdog: Feds fail to implement vast majority of cybersecurity recommendations and was covered by Cyberscoop. This is a very interesting article which we'll be stepping through. Besides that, my hunch may indicate that we'll have a moron of the podcast, people may have questions, and we'll see what the show has in store.

Welcome to the Security box, podcast 128. On this podcast, we probably have two morons of the podcast, one of which should've gotten it before we came up with the idea. We also ask the question, What's going on over at CISA? This acronuym stands for Cybersecurity and Infrastructure Security Agency. Seems as though they don't know what's going on, or at least might be confused. Moron of the podcast We have listed both morons of the podcast by listing the basics of the story and links to the stories themselves. 1. It seems as though T-Mobile has had yet another breach with at least another estimated 37 million consumers, whether prepaid or postpaid. New T-Mobile Breach Affects 37 Million Accounts Krebs on Security T-Mobile investigates yet another data breach, this one affecting 37 million accounts Cyberscoop 2. The second moron goes to a guy in Russia that thought it would be fun to launder crypto currency. Not only was he funneling Crypto, but he was the founder of a crypto currency exchange. Russian founder of a cryptocurrency exchange known for funneling ransomware profits arrested comes to us from Cyberscoop and hasn't been blogged as of yet, but will be. Topic: What's going on at CISA? CISA has been known to send notifications via an email list that people can subscribe to. How I got on it, I don't remember, but it has since changed the way things are sent. Regardless, the article Insiders worry CISA is too distracted from critical cyber mission is our article that will help us with our discussion. It also comes from Cyberscoop. Other stuff I know that Nick missed last week's program so we'll give him an opportunity to get on the program and talk about anything from last week. We'll go through news, notes and other things too. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

On this podcast, a video voice mail update and why didn't Lastpass let us know what's really going on with their breach? here is the blog post that I wrote with the accompanying article that I talked about during the second segment. Contact info is at the beginning and end of the program.

Welcome to the security box, podcast 127. This time, we're going to talk about something I don't think any podcast has ever covered. What that might be? That would be Bullet Proof Hosting. What is it? Why is it such a problem? How can you stay away from companies that allow such a thing? We'll take from Wikipedia's write up on Bullet proof hosting but we aren't taking the entire thing. This term (written as bulletproof hosting) will be also included in this week's EMHS updates. The podcast will also have any news and notes, updates on the particulars of screen readers and what they have to help us deal with the ongoing threats for looking at links, and much more. If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

We like innovation. &nbsp;Philmore Productions has now released Video Voicemail to the public. &nbsp;He first showed it at CES, the Consumer Electronics Show. &nbsp;Feel free to check it out, look it up and see if it is something you want to use. &nbsp;Commentary on what a caller experienced is given and thoughts on this as well.

This program does not contain any strong language or adult content. Hello folks, welcome to the security box. On this edition of the program, we're going to talk about your security posture. We've got two bonehead of the day awards and plenty of discussion both in news and our main topic! Stay tuned for our next podcast, we'll be here again soon!

On this podcast, learn about the domain registry, a company who basicly lied to me and told me something I couldn't even do to begin with. Turns out this company is a liar, possibly a scammer and no, they won't be linked as their web site is not all that accessible as I asked.

Welcome to podcast 125 of the Security Box series. On this edition, let's talk about a new book we found during the break, one in which might be of interest since we're going to talk about security posture later. The book is titled The Ransomware Hunting Team: A Band of Misfits' Improbable Crusade to Save the World from Cybercrime by Renee Dudley and Daniel Golden. While it doesn't cover your posture per say, it does cover a team who is behind you in the fight and understands the struggles. You see, its not all your fault, we understand that. You could even do everything right, including having the right training. Next, we're going to cover two articles that cover the year end review and what is coming up in predictions for 2023. Financials See Increase in Phishing Attacks, Compromised Sites Lead Staging Methods in Q3 Phishlabs Financials and Card Data Top Q3 Targets on the Dark Web Phishlabs We may have blogged these, but if we haven't, they'll be blogged as part of the podcast show notes which these are. Besides that, we'll have plenty of things in news if we can remember it all, and of course, we'll have lots of discussion on things that might not be in the roundup. We hope you enjoy this edtion of the podcast, and thanks for listening!

Hello everyone. Welcome to podcast 368 of the technology podcast series. On this podcast, we're going to put out the file that talks abot Tiktok being used for financial advice. TikTok is at it again, now we have fintok was blogged on December 30, 2022 with an article talking about this by our digital goddess Kim Komando. While Social Media is not knew, TikTok has been treading on thin waters. You can search Tiktok for all of the news coverage we have on our blog. We've decided to put out this and other things for discussion and to keep this podcast going. I hope that this will be of interest, and we'll see how it goes. Contact information is available on the blog and within the podcast itself. Thanks for listening, and make it a great day!

On this edition, we talk about utech's update to version 2. We also have thoughts on how we might be able to keep this podcast going. This is the last podcast of the year from the network. Enjoy!

Welcome to the Security box, podcast 124. On this podcast, we've got news coming out of Security Now about another root Certificate company that is no more. We've got news and notes from around the landscape, and Ransomware payments have hit at least a billion dollars. All this, including questions, comments and other miscellanious activity on today's show. Trust Core Security Now podcast 900 is full of questions. One of which for this podcast talks about another trust certificate authority that isn't. The apparent company is called Trust Core. This reminds me of the Hong Kong post office and why they were a trusted certificate authority. We've never covered certificate authorities and maybe we need to. Let's just say that they intercepted traffic and installed malware. EUFY not telling the truth I don't have any articles, but SN 900 covered this and I saw a notice from Malware Bytes. They say that footage from their cameras are not send to the cloud, but an Ars Technica article mentioned by Stieve indicates otherwise. The company Anker (not to be confused with Anchor) says this is not the case. Ransomware costing a billion dollars Ransomware costs top $1 billion as White House inks new threat-sharing initiative is a Cyberscoop article and our main topic. If we can share intelligence, maybe we can better defend against these problems and maybe Ransomware can be slowed down. We'll see how it goes.

I'd personally like to thank Herbie Allen for his time running the stream during our internet outage today. Thanks friend! Below, please find the show notes for today's program. I hope to see you all next week! Welcome to the security box, podcast 123. Today, we're going to cover the psychology of passwords 2022 report. We'll also have the news from around the landscape, maybe an asshole award of the podcast if one is warranted and much more. I hope you enjoy the program as much as I enjoy bringing it to you. The Psychology of Passwords report The article we're going to take from this time is New Report: 2022 Psychology of Passwords from Lastpass. Wile most people receiving some cyber security training during the pandemic probably learn a few things, 62 percent still reuse passwords. The article links to the full report but we'll only talk about what is in the article itself. Maybe we can apply it to this community and give our thoughts on how this community should shift its thinking.

Hello everyone, welcome to the Security Box. We did get a callin that we didn't know wanted to call in to let us know some things, but we got it all working out. This may affect may different people and we hope that this is a learning experience for you. Please stay safe. Welcome to the Security Box, podcast 122. On this podcast, we will be covering some news that came out of Freshbooks on Wednesday, November 23, 2022. We'll also be covering Card Skimming and how it disproportionately is a disadvantage to people who use EBT cards. We'll also have plenty of news and notes from around the landscape and we'll also see what else people want to talk about as we return from our Thanksgiving break. Freshbooks As we blogged on November 23, 2022, Freshbooks became victim to Phishing. The company itself did not get phished, but people who are customers and non-customers were hitting Freshbooks's Twitter asking if emails were real or not. Freshbooks reports that these emails are fake, and said that emails come from freshbooks.com or any of its properties and not from anywhere else. The technology blog and podcast's coverage of this event On November 29, 2022, they indicated to the JRN that while there was no incident, the phishing uses other domains that is outside of Freshbooks itself. They linked to an FAQ titled What Emails Are Sent Out of My Account? Please read this FAQ if you're a freshbooks customer or get email from them as a customer of someone who pays to send invoices. EBT cards are now a target In our main topic, we're going to talk about EBT cards and what is happening with them. We also learn that there's a lawsuit to get states to actually do something if something goes wrong. You'll understand why as the discussion is done. Here are the articles: How Card Skimming Disproportionally Affects Those Most In Need Krebs on Security Lawsuit Seeks Food Benefits Stolen By Skimmers Krebs on Security We thank each and every one of you for listening, participating and most of all, reading the blog. Without your participation and listenership, this program wouldn't be what I'm trying to make it. Remember to check out email host security which is a site that'll help you navigate the Phishing landscape. This site is sponsored by the Jared Rimer Network and I hope people will learn what it is about, check out the companies and resources and of course the terms. Starting with this podcast, the podcast is commercial free thanks to a donor through the JRN. If you'd like to donate, go over to our donations page where there is a Paypal button and links available to use to donate one time. If you want to make a monthly donation using a credit card, let me know and we can make that work. We thank you!

On TSB 121, we're going to talk about whether it is a good idea to be using various services like 4sqare, facebook and other check in services to check in to places and post to social media. This started after someone complained on Facebook about how the auto checkin broke, and how they wanted to have it work so their friends on the other side of the world can be confident he made it OK. We'll also have news, notes and conversation about other things that people want to talk about as well. Thanks so much for listening! Asshole of the podcast We haven't blogged about this yet, but the article is titled LockBit ransomware suspect arrested in Canada, faces charges in US which comes from Cyberscoop. We'll be sure to blog this one. Other things I went through the blog and we discussed some of the things that have been posted. Make sure you check out the blog for other stuff including this linked article and feel free to comment.

The Security box, podcast 120 has plenty in this program which is over 3 hours in length. We have at least one asshole of the podcast, possibly two, you judge. This podcast talks about the landscape and your money, talking about tools and techniques that you might be able to use to make sure you're as safe as possible. We talk about the podcast scheduling, what's coming up, and the scheduled breaks. Asshole award of the podcast and related content This blog post I title Hacker charged, hacked psychotherapy center, demanded ransome and went after patients to pay leads to an article with a very interesting story. This guy has been charged with ransoming and later bankruptring a psychotherapy center. Apparently, the suspect named has been convicted with over 50k of various cybercrimes since the age of 17. There's more, read the linked blog post and article for complete details. Also in a related asshole of the podcast this blog post tilted We’ve got an update on the raccoon developer talks about an article where the developer of the latest piece of malware got in trouble because his girlfriend decided to post their whereabouts on the all too famous "Instagram." Shoudlv'e thought about this possibly? There are other news things we cover, so visit the blog for complete details.

On this podcast, we cover the launch of my newest project, then get in to social media and the intricacies of it. Hope you enjoy the show! I enjoyed doing this show, and this is one of those that may go over like this one did. Its not common, but it does happen. This is program 119 of this series. Thanks again for listening!

On this podcast, Armando from the Mix and I talk about technology and independence. In no way are we saying to be independent on everything, but research and contacting support when you need it is key. Enjoy the show!

Welcome to podcast 118 of the Security Box. On this show, we're going to talk about books. Not all books may be covered due to time constraints, but we'll list all of the ones here. Question is, what kind of books? These books are dealing with security in one way or another. The list may contain multiple books, and are split up in to authors. We'll have this in a multi-list format where the main list is in author, and sublist will have the books. Books may be available via other sources that the blind and disabled can access including Bookshare, the NLS, and apple books. The NLS Bard page can only be accessed by eligible patrons and will not be linked here. All linked books come from Amazon or its affiliates, but you can search the book titles separately to find the price that fits your budget unless bard has it already. From this list, we do know that BARD only has one book, but that could change. Check Bard often, you never know what will be posted there. Besides that, we'll have news, notes and more. Now, here are the books and thanks for listening! Mark Russinovich Zero Day: A Jeff Aiken Novel (Jeff Aiken Series Book 1) Trojan Horse: A Jeff Aiken Novel (Jeff Aiken Series Book 2) Rogue Code: A Jeff Aiken Novel Scott Schober Hacked Again Cybersecurity Is Everybody's Business: Solve the Security Puzzle for Your Small Business and Home Senior Cyber: Best Security Practices for Your Golden Years Kim Zetter Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon Mikko Hyponnen <a href="https://www.amazon.com/If-Its-Smart-Vulnerable-ebook/dp/B0B544M8N4/ref=sr_1_1?crid=3R0A5K9O4M6HL&keyword

Hello folks, welcome to the Security Box. On today's program, besides talking about the beta of EMHS which is still in development, we finally touch on something I tried to cover in earlier podcasts. What is that, you say? That's DomainKeys Identified Mail otherwise known as DKIM. We've been needing to cover this for quite awhile, but I'm not familiar if whether we did, and while other topics we've covered on NCSAM this year we've covered in the past, this one I don't think we did. We also cover the news from the blog and other things on participents minds. I hope that you enjoy the program as much as I have bringing it together for you, and thanks so much for listening! We can't do the show without you.

On this program, I'm alone today talking about SMS and its very interesting issues. I'm not saying its a bad thing, but there are things about it that can be of interest. The linked article may need work, but can be used to gain knowledge. Knowledge is power, and we don't cover it word for word. I hope you all enjoy the program as much as I have bringing it to you, and we'll be back next week. The podcast today is sponsored comercial free by The Jared Rimer Network. Visit me on the web to learn more about me and maybe you'll find something of interest.

Welcome to program 115 of the Security box. Today, we talk about domains and SSL and plenty of news stuff too. The first hour and a half of the over 3 hour program is news related, check the blog for complete details on things or subscribe to the TSB list itself. Some of the stuff we talk about is already on the blog, others are not, but plan to be. As far as domains go, when we talked about Phishing we mentioned the fact that I published several resources on checking whether a domain exists and when it was registered and possibly by who. This was in reference to an article talking about Ian Phishing scams that might be out there now. Please be safe! Here are two resources: ICANN Lookup Who Is Lookup from Network Solutions There are other tools to look up domains, and we can't forget about the ICANN web site and their work to keep domains at least here in the states in good working order. Another thing we talked about but not in great detail is Transport Layer Security which SSL is now known as. We're providing the Wikipedia page as a reference since I didn't go in to a lot of detail on it. If people want me to, I can do that. If we've forgotten something that we should mention as part of this discussion, please send a note and let me know about it. There is always something to talk about in this space, and I can't think of everything, or think it may be too technical. You can always contact me through my web site and I thank each and every one of you for participating this week. See you next week!

Welcome everyone to the Security box, podcast number 114 on the technology podcast series. On this podcast, we cover some of the news from around the landscape, and then we start NCSAM. What is NCSAM you ask? It stands for National Cyber Security Awareness month, and various countries call it something different, and may cover different things. On week 1, which officially starts on October 1, we talk about passwords. Besides learning about 10 passwords that you should probably not use, the artivle we take from takes this in to aidifferent demention, covering different categories like food and drink, curse words, sports and more. The article is titled Most common passwords: latest 2022 statistics and it comes from Cybernews. Looks like they did a great job with it! We hope you enjoy the program, and thanks so much for listening!

Hello folks, welcome to the security box. &nbsp;We had 10 people in our room today, and we hope you enjoy the program. &nbsp;Here are the show notes of today's program, and we'll see you next week! Welcome to the Security box, podcast 113. &nbsp;On this episode of the program, the biggest topic is "Violence as a service" as it is being talked about on multiple podcasts. Have you read the article by Brian Krebs titled Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire and if you did, what did you think about it? Seems as though this is going to get very interesting as actors as they're known in the industry will be changing their tactics to something like this. Besides this, I hope that you'll come join us and comment as we'll have some news from around the landscape, thoughts on other things of interest and of course questions and comments from the audience. &nbsp; Thanks for listening and participating and we'll see you on another edition of the program!

Who Knew! Podcast 112 is going to talk about one time passcodes being a corporate liability to business, as actors or cybercriminals can take advantage of the common user to give up these codes so they can log in and take control of one account. How 1-Time Passcodes Became a Corporate Liability is the article we'll be referencing, and there is no wrong answer when giving your opinion on this one. This article comes from Brian Krebs, shortly after the fiasco that we didn't talk about last podcast which the article that finally got published covered, his blundering mistake which wasn't IMHO. With that said, we'll have news from around the landscape and we'll see what others within the club have to say about this or anything else on their mind.

110 is what it is going to be if not hotter this week, so podcast 110 is hot! Hello folks, welcome to the security box, podcast 110. On this edition of the podcast, we're going to cover news, notes and other things around the landscape. Besides that, it seems like Paypal may be in some big time scam problems as their invoicing system is being abused. Learn about it as we talk about the article PayPal Phishing Scam Uses Invoices Sent Via PayPal which was written by Brian Krebs. Besides all that, the news as mentioned above, and this topic, we'll see what other topics might come up as the show progresses. I hope you enjoy the program as much as I am bringing it to you! Thanks for listening!

Welcome to podcast 365 of the technology blog and podcast series. On podcast 365, we talk about U-Tech and the recent new lock I got. Its probably not the best demo I did, and there are some accessibility issues and crashes but I thought I'd put it out anyway. I hope that you will enjoy the program as much as I am putting it together, and make it a great day!

On this podcast, learn about what threats we face as part of the q2 report from Phishlabs. Go over to the blog for complete details in articles and ways to download the report. Enjoy!

Welcome to the Security Box, podcast 109. On this podcast, besides doing a recap of the news because of our tech problems, we're going to cover some court news that probably doesn't surprise some of us. The article is titled Federal courts left Americans' data exposed, senator tells Supreme Court chief justice and it comes from Cyberscoop. We'll also see who may be in clubhouse, brings up any questions to ask, and we'll see what else the program has to offer. Find something you'd like to have us talk about? Why not subscribe to our discussion list through the mix, or find a link on the blogroll for the security box email list. We would love to have you. Feel free to say hey!

The show got off to a rocky start, but what show doesn't have tech problems? We cover the news, and we cover two topics and we're comercial free. On podcast 103 of the Security box, we talked about some proxy services that could have been deemed bad proxies. Now, in another two-part section, we learn that all of these proxies are now down. What happened to these proxies? 911 Proxy Service Implodes After Disclosing Breach No SOCKS, No Shoes, No Malware Proxy Services! Both of these articles are by Krebs on Security and both were very interesting to read. Besides this, we're going to cover the news, we'll see what people have decided to bring up, and we'll see what else we can find for this program. Hope you will enjoy the show, and thanks for listening!

Welcome to program 107 of the Security box series. On this edtion, we're going to talk about something not too many people know about. Its called Gootkit Loader’s and they can be very dangerous. These can contain something called fileless malware which makes detecting them harder. Trend Micro has talked about fileless malware before, and you can put in fileless malware plus adding trend micro to find postings covering this topic. The article we're going to cover on podcast 107 is titled Gootkit Loader’s Updated Tactics and Fileless Delivery of Cobalt Strike and it does come from Trend Micro. I hope that you enjoy this discussion, because it can affect you if you don't know the signs of what to look for as it can come in many forms including email. Besides this, we'll see what people in clubhouse or the list want to talk about, and we'll go through news and other things posted as well. Thanks for listening and make it a great day!

Welcome to podcast 106 of the Security Box. No, we're not covering animals, but there is a new term called Pig Butchering that is now out there. According to the article, it seems to be covering a lot of varying scams which may include Crypto, romance, and investment just to name a few. Don't let me tell you about it in the show notes, the article is titled Massive Losses Define Epidemic of ‘Pig Butchering’ and it comes from our buddy Brian Krebs. Besides that, we'll go through the blog, we'll see what other things participents want covered, and maybe we'll answer any questions that might come across. Thanks so much for listening and make it a great day!