Talkin' Bout [Infosec] News

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories. Brought to you by: /// (00:00) - PreShow Banter™ — Messed With Your Head (05:25) - Story # 1: Chinese Malware Could Cut Power To U.S. Military Bases, Businesses And Homes, Report Claims (18:14) - Story # 2: US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ (18:39) - Story # 2b: US senator victim-blames Microsoft for Chinese hack (19:08) - Story # 2c: https://www.wyden.senate.gov/imo/media/doc/ (27:27) - Story # 3: Russian court jails cyber security executive for 14 years in treason case (33:47) - Story # 4: Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws (47:29) - Story # 5: SEC now requires companies to disclose cyberattacks in 4 days (48:19) - Story # 5b: SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies (57:55) - Take Joe's Class https://www.theosintion.com/courses/

The post Talkin’ About Infosec News – 6/9/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Pick Your Crap (02:01) - BHIS - Talkin' Bout [infosec] News 2023-06-05 (02:35) - Story # 1: International Underwear Model and Insurrectionist Was Just Sentenced to 32 Months in Prison (05:39) - Story # 2: Mass exploitation of critical MOVEit flaw is ransacking orgs big and small (07:46) - Story # 2b: https://github.com/AhmetPayaslioglu/YaraRules (14:11) - Story # 2c: Critical Vulnerability in Progress MOVEit Transfer: Technical Analysis and Recommendations (42:31) - Story # 3: Millions of PC Motherboards Were Sold With a Firmware Backdoor (44:01) - Story # 3b: Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards (46:31) - Story # 4: Cyberweapon manufacturers plot to stay on the right side of US (54:16) - Story # 5: Hackers steal around $170,000 after compromising Steve Aoki's Twitter account

The post Talkin’ About Infosec News – 5/26/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — The Power of PreShow Banter™ (02:19) - BHIS - Talkin' Bout [infosec] News 2023-05-22 (04:40) - Story # 1: Meta slapped with record $1.3 billion EU fine over data privacy (09:23) - Story # 2: Toyota Discloses Decade-Long Data Leak Exposing 2.15M Customers' Data (11:58) - Story # 3: Microsoft is scanning the inside of password-protected zip files for malware (21:53) - Story # 4: ChatGPT chief says artificial intelligence should be regulated by a US or global agency (28:38) - Story # 5: 15million Bug Bounty - LayerZero Labs (33:38) - Story # 6: Dish Network likely paid ransom after recent ransomware attack (38:13) - Story # 7: New ZIP domains spark debate among cybersecurity experts (41:09) - Story # 7b: https://twitter.com/_JohnHammond/status/1657427727425626113 (43:56) - Story # 8: Apple Bans Employees From Using ChatGPT Amid Its Own AI Efforts (52:21) - Story # 9: TikTok sues Montana over controversial state ban

The post Talkin’ About Infosec News – 5/17/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Hardcore Mountain J-Biking (02:37) - BHIS - Talkin' Bout [infosec] News 2023-05-15 (03:37) - Story # 1: Discord discloses data breach after support agent got hacked (12:12) - Story # 2: Cybersecurity firm Dragos discloses cybersecurity incident, extortion attempt (13:02) - Story # 2b: Deconstructing a Cybersecurity Event (29:02) - Story # 3: How Apple catches leakers: From color changes to comma placement (31:32) - Story # 3b: The ingenious way ‘Star Trek Beyond’ is making sure its script doesn’t leak online (34:34) - Story # 3c: Genius hid a Morse code message in song lyrics to prove Google was copying them (40:17) - Story # 4: How one of Vladimir Putin’s most prized hacking units got pwned by the FBI (43:03) - Story # 4b: Hunting Russian Intelligence “Snake” Malware (51:26) - Story # 4c: Microsoft recommended driver block rules (55:50) - Story # 4d: Bypassing PatchGuard 3 (58:15) - Story # 5: The Team of Sleuths Quietly Hunting Cyberattack-for-Hire Services

The post Talkin’ About Infosec News – 5/11/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Notes about Music (01:19) - BHIS - Talkin' Bout [infosec] News 2023-05-08 (01:59) - Story # 1: China’s hackers outnumber FBI cyber staff ‘at least 50 to 1,’ Wray tells Congress (06:57) - Story # 2: Drone goggles maker claims firmware sabotaged to ‘brick’ devices (12:27) - Story # 3: Twitter says a 'security incident' led to private Circle tweets becoming public (13:46) - Story # 4: Billy Corgan Paid Off Hacker to Prevent ATUM Leak (21:15) - Story # 5: New Atomic macOS info-stealing malware targets 50 crypto wallets (39:35) - Story # 5b ChatGPT maker OpenAI lost about $540 million last year (47:51) - Story # 6: QR codes used in fake parking tickets, surveys to steal your money

The post Talkin’ About Infosec News – 5/5/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Swords in San Francisco (01:32) - BHIS - Talkin' Bout [infosec] News 2023- 04-24 (04:00) - Story # 1: Pentagon Leaks: What's the Damage? (13:09) - Story # 2: Hacker Group Names Are Now Absurdly Out of Control (21:15) - Story # 3: 3CX Breach Was a Double Supply Chain Compromise (38:31) - Story # 4: What’s more prevalent than juice jacking? Fake public WiFi networks, says researcher (45:23) - Story # 5: Hundreds of Southwest Airlines flights are delayed after FAA lifts nationwide ground stop (49:06) - Story # 6: European air traffic control confirms website 'under attack' by pro-Russia hackers (50:56) - Story # 7: APC warns of critical unauthenticated RCE flaws in UPS software (53:16) - Story # 8: ‘AuKill’ EDR killer malware abuses Process Explorer driver

The post Talkin’ About Infosec News – 4/18/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Hardest to Handle (02:41) - BHIS - Talkin' Bout [infosec] News 2023-04-17 (04:22) - Story # 1: Actually, Charging Your Phone in a Public USB Port Is Fine (16:04) - Story # 2: Israeli Irrigation Water Controllers & Postal Service Breached (16:48) - Story # 2b: Did someone really hack into the Oldsmar, Florida, water treatment plant? New details suggest maybe not. (27:30) - Story # 2c: Ridley turns a horrific true story involving Hurricane Katrina into a scripted drama (29:13) - Story # 3: 3CX blames North Korea for supply chain mass-hack (35:09) - Story # 4: FBI arrests 21-year-old Air National Guardsman suspected of leaking classified documents (53:59) - Story # 5: Montana lawmakers vote to completely ban TikTok in the state

The post Talkin’ About Infosec News – 4/11/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Canada Man (03:49) - BHIS - Talkin' Bout [infosec] News 2023-04-10 (05:10) - Story # 1: IRS-authorized eFile.com tax return software caught serving JS malware (11:52) - Story # 2: Hackers using Log4j bug to profit from victim IP addresses through ‘proxyjacking’ scheme (19:45) - Story # 3: Two-Fifths of IT Pros Told to Keep Breaches Quiet (27:27) - Story # 4: Samsung reportedly leaked its own secrets through ChatGPT (30:16) - Story # 4b: Introducing Microsoft Security Copilot: Empowering defenders at the speed of AI (32:07) - Story # 5: Tesla workers shared images from car cameras, including “scenes of intimacy” (47:37) - HBS News Hour (52:01) - Story # 6: KFC, Pizza Hut owner discloses data breach after ransomware attack

The post Talkin’ About Infosec News – 4/5/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Jazzy Saxophone (01:13) - BHIS - Talkin' Bout [infosec] News 2023-04-03 (02:40) - Story # 1: He Would Still Be Here': Man Dies by Suicide After Talking with AI Chatbot, Widow Says (08:45) - Story # 1b: Elon Musk, Steve Wozniak Join AI Experts In Pushing To 'Pause Giant AI Experiments' (14:51) - Story # 2: S.686 - RESTRICT Act (26:01) - Story # 3: Leaked IT contractor files detail Kremlin's stockpile of cyber-weapons (29:27) - Story # 4: 3CX thought supply chain attack was a false positive (35:46) - Story # 5: Twitter takes its algorithm ‘open-source,’ as Elon Musk promised (39:40) - Story # 6: 20-Year-Old BreachForums Founder Faces Up to 5 Years in Prison (44:16) - Story # 7: Hacker Agrees to Return $197 Million Stolen from Euler Finance (47:46) - Story # 8: India-based cybergang busted for selling fake KFC franchises (51:50) - Story # 8b: https://twitter.com/cyberabadpolice (52:42) - Story # 8c: https://www.cyberabadpolice.gov.in (56:07) - Story # 9: Meta wants EU users to apply for permission to opt out of data collection

The post Talkin’ About Infosec News – 4/3/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Always Checking For Leaks (02:56) - BHIS - Talkin' Bout [infosec] News 2023-03-27 (04:31) - Story # 1: Data breach leak site BreachForums shuts down (12:06) - Story # 2: Ralph's personal cybercrime story (21:43) - Story # 3: North Korean hackers using Chrome extensions to steal Gmail emails (31:13) - Story # 4: Gordon Moore, Intel Co-Founder, Dies at 94 (32:37) - Story # 4b: Beloved hacking veteran Kelly ‘Aloria’ Lum passes away at 41 (32:59) - Story # 5: Twitter Says Parts of Its Source Code Were Leaked Online (37:00) - Story # 6: AI image of Pope Francis in a puffer jacket fooled the internet and experts fear there’s worse to come (41:07) - Story # 6b: Samsung’s Moon Shots Force Us to Ask How Much AI Is Too Much (44:00) - Story # 7:New MacStealer macOS malware steals passwords from iCloud Keychain (45:22) - Story # 8: Windows 11, Tesla, Ubuntu, and macOS hacked at Pwn2Own 2023 (49:39) - Story # 9: Ferrari discloses data breach after receiving ransom demand (52:03) - Story # 10: How hackers took over Linus Tech Tips

00:00 – PreShow Banter™ — Tossing Money at Problems00:58 – BHIS – Talkin’ Bout [infosec] News 2023-03-1301:41 – Story # 1: Silicon Valley Bank collapse: Treasury, Fed, and FDIC announce […] The post Talkin’ About Infosec News – 3/16/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Tossing Money at Problems (00:58) - BHIS - Talkin' Bout [infosec] News 2023-03-13 (01:41) - Story # 1: Silicon Valley Bank collapse: Treasury, Fed and FDIC announce steps to ensure deposits will be paid in full (17:23) - Story # 1b: Silicon Valley Bank exec was Lehman Brothers CFO prior to 2008 collapse (21:21) - Story # 2: FBI investigates data breach impacting U.S. House members and staff (30:33) - Story # 3: Acronis downplays intrusion after 12GB trove leaks online (34:40) - Story # 4: Acer confirms breach after 160GB of data for sale on hacking forum (51:26) - Story # 5: The privacy loophole in your doorbell (57:28) - Spearfish General Store

THIS IS A TEST The post Talkin’ About Infosec News – 3/8/2023 (v2) appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Lil NAS (06:52) - BHIS - Talkin' Bout [infosec] News 2023-03-06 (08:13) - Story # 1: LastPass says employee’s home computer was hacked and corporate vault taken (28:32) - Story # 2: An Uncomfortable Reality: Occupational Hazards Associated with Thought Leadership in CTI (35:18) - Story # 3: FACT SHEET: Biden-⁠Harris Administration Announces National Cybersecurity Strategy (45:17) - Story # 4: Roku Doesn’t Support IPv6 and It Might Be a Big Deal (51:05) - Story # 5: Secret crawlspace cryptomine discovered in routine inspection of MA high school (57:18) - Story # 6: ATM thieves use glue and 'tap' function to drain accounts at Chase Bank

00:00 – PreShow Banter™ — Lil NAS06:52 – BHIS – Talkin’ Bout [infosec] News 2023-03-0608:13 – Story # 1: LastPass says employee’s home computer was hacked and corporate vault takenhttps://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/28:32 […] The post Talkin’ About Infosec News – 3/8/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Lil NAS (06:52) - BHIS - Talkin' Bout [infosec] News 2023-03-06 (08:13) - Story # 1: LastPass says employee’s home computer was hacked and corporate vault taken (28:32) - Story # 2: An Uncomfortable Reality: Occupational Hazards Associated with Thought Leadership in CTI (35:18) - Story # 3: FACT SHEET: Biden-⁠Harris Administration Announces National Cybersecurity Strategy (45:17) - Story # 4: Roku Doesn’t Support IPv6 and It Might Be a Big Deal (51:05) - Story # 5: Secret crawlspace cryptomine discovered in routine inspection of MA high school (57:18) - Story # 6: ATM thieves use glue and 'tap' function to drain accounts at Chase Bank

Story # 1: A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Lifehttps://www.wsj.com/articles/apple-iphone-security-theft-passcode-data-privacya-basic-iphone-feature-helps-criminals-steal-your-digital-life-cbf14b1a Story # 1b: Apple’s iPhone Passcode Problem: Thieves Can Ruin Your Entire Digital Life in Minutes […] The post Talkin’ About Infosec News – 3/3/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Farm Raised Artificial Intelligence (04:01) - BHIS - Talkin' Bout [infosec] News 2023-02-27 (05:09) - Story # 1: A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Life (18:52) - Story # 2: Sensitive US military emails spill online (27:55) - Story # 3: Fruit giant Dole suffers ransomware attack impacting operations (33:01) - Story # 4: Well-hidden Mac cryptomining malware found in pirate copies of Final Cut Pro; expect more (37:30) - Story # 5: AI Helps Crack NIST-Recommended Post-Quantum Encryption Algorithm (40:38) - Story # 6: Snapchat launches ChatGPT integration, warns to not share your secrets (43:28) - Story # 7: How I Broke Into a Bank Account With an AI-Generated Voice (47:55) - Story # 8: Firms Who Pay Ransom Subsidise 10 New Attacks: Report (53:51) - Story # 9: Valve set a trap to catch and ban 40,000 Dota 2 cheaters

00:00 – PreShow Banter™ — Pop Tart Pizza04:15 – BHIS – Talkin’ Bout [infosec] News 2023-02-2005:39 – Story # 1: Employee data from a major cybersecurity firm posted for sale […] The post Talkin’ About Infosec News – 2/22/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Pop Tart Pizza (04:15) - BHIS - Talkin' Bout [infosec] News 2023-02-20 (05:39) - Story # 1: Employee data from a major cybersecurity firm posted for sale on a hacker forum (13:43) - Story # 2: FBI is investigating a cybersecurity incident on its network (16:44) - Story # 3: GoDaddy: Hackers stole source code, installed malware in multi-year breach (21:44) - Story # 4: Hyundai, Kia pushing updates so you can’t just steal their cars with USB cables (30:21) - Story # 5: Eurostar forces 'password resets' — then fails and locks users out (33:37) - Story # 6: Hacker Uncovers How to Turn Traffic Lights Green With Flipper Zero (39:30) - Story # 7: Namecheap denies system breach after email service used to spread phishing scams (43:11) - Story # 8: Official: Twitter will now charge for SMS two-factor authentication (48:24) - Story # 9: Software suite of Israeli security firm Cellebrite leaks online (51:22) - Story # 10: The US Air Force may have shot down an Amateur Radio Pico Balloon over Canada (55:48) - Story # 11: ChatGPT Is Ingesting Corporate Secrets

00:00 – PreShow Banter™ — Scalping Valentine’s Day Reservations04:13 – BHIS – Talkin’ Bout [infosec] News 2023-06-2305:52 – Story # 1: 5 Chinese companies and a research institute blacklisted by […] The post Talkin’ About Infosec News – 2/17/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Scalping Valentine's Day Reservations (04:13) - BHIS - Talkin' Bout [infosec] News 2023-06-23 (05:52) - Story # 1: 5 Chinese companies and a research institute blacklisted by U.S. over spy balloon program (12:00) - Story # 2: We had a security incident. Here’s what we know. (15:19) - Ean Reports Live! (21:44) - Story # 3: NameCheap's email hacked to send Metamask, DHL phishing emails (26:49) - Story # 4: Top mobile finance app Money Lover has some worrying security flaws (31:24) - Story # 5: Ukraine war: Elon Musk's SpaceX firm bars Kyiv from using Starlink tech for drone control (36:58) - Story # 6: NATO websites hacked, including that of the Headquarters of Special Operations Forces (38:58) - Story # 7: Khinshtein said that hackers acting in the interests of the Russian Federation should be released from liability (40:52) - Story # 8 NIST Standardizes Ascon Cryptographic Algorithm for IoT and Other Lightweight Devices (43:29) - Story # 9: Americans don't understand what companies can do with their personal data—and that's a problem (45:15) - Story # 9b: AMERICANS CAN’T CONSENT TO COMPANIES’ USE OF THEIR DATA (54:33) - Story # 10: Pentagon Staffers Found Installing Dating Apps, Games on Government Phones (57:34) - Story # 10b: Management Advisory: The DoD’s Use of Mobile Applications (Report No. DODIG-2023-041) (58:14) - Story # 11: When Facebook came for your battery, feudal security failed

00:00 – PreShow Banter™ — We’ve got nothing to say03:07 – BHIS – Talkin’ Bout [infosec] News 2023-06-2305:56 – Story # 1: Cybercrime job ads on the dark web pay […] The post Talkin’ About Infosec News – 2/13/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — We've got nothing to say (03:07) - BHIS - Talkin' Bout [infosec] News 2023-06-23 (05:56) - Story # 1: Cybercrime job ads on the dark web pay up to $20k per month (10:52) - Story # 2: Discrepancies Discovered in Vulnerability Severity Ratings (25:27) - Story # 3: GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom (28:48) - Story # 4: Ex-Ubiquiti worker pleads guilty to data theft, extortion, and smear plot (34:47) - Story # 5: North Korean hackers stole research data in two-month-long breach (42:19) - Story # 6: Hacker Group Releases 128GB Of Data Showing Russia's 'Wide-Ranging' Illegal Surveillance Of Citizens

00:00 – PreShow Banter™ — Woke Up Like This03:20 – BHIS – Talkin’ Bout [infosec] News 2023-01-3005:04 – Story # 1: GoTo says hackers stole customers’ backups and encryption keyhttps://www.bleepingcomputer.com/news/security/goto-says-hackers-stole-customers-backups-and-encryption-key/09:48 […] The post Talkin’ About Infosec News – 2/3/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Woke Up Like This (03:20) - BHIS - Talkin' Bout [infosec] News 2023-01-30 (05:04) - Story # 1: GoTo says hackers stole customers' backups and encryption key (09:48) - Story # 2: T-Mobile hacked to steal data of 37 million accounts in API data breach (11:29) - Story # 3: Appliance makers sad that 50% of customers won’t connect smart appliances (23:11) - Story # 4: More Ransomware Victims Are Refusing to Pay Hackers (25:34) - Story # 5: DOJ, FBI hack Hive Network, save US$130 mln from crypto ransomware attacks (27:27) - Story # 6: Ransomware gang steals data from KFC, Taco Bell, and Pizza Hut brand owner (29:35) - Story # 7: Pet fish commits credit card fraud on owner using a Nintendo Switch (34:15) - Story # 8: how to completely own an airline in 3 easy steps (38:43) - Story # 9: Nearly 35,000 PayPal users had SSNs, tax info leaked during December cyberattack (46:43) - Story # 10: The semiconductor monopoly: How one Dutch company has a stranglehold over the global chip industry (55:59) - Story # 11: Swipe right on our new credit card tokens!

00:00 – PreShow Banter™ — Wade’s Googly Eyes00:41 – BHIS – Talkin’ Bout [infosec] News 2023-01-2301:26 – Story # 1: BIG TECH LAYOFFS. LAYOFFS! DOOM! RECESSION! The post Talkin’ About Infosec News – 1/25/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Wade's Googly Eyes (00:41) - BHIS - Talkin' Bout [infosec] News 2023-01-23 (01:26) - Story # 1: BIG TECH LAYOFFS. LAYOFFS! DOOM! RECESSION!

00:00 – PreShow Banter™ — Ralph’s Guide to Satellite Bands 04:33 – BHIS – Talkin’ Bout [infosec] News 2023-01-16 05:25 – Story # 1: Microsoft’s new AI can simulate anyone’s […] The post Talkin’ About Infosec News – 1/17/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Ralph’s Guide to Satellite Bands (04:33) - BHIS - Talkin' Bout [infosec] News 2023-01-16 (05:25) - Story # 1: Microsoft’s new AI can simulate anyone’s voice with 3 seconds of audio (13:29) - Story # 2: Russian Hackers Tried to Break Into the U.S.'s Top Nuclear Labs: Report (16:42) - Story # 3: CircleCI breach post-mortem: Attackers got in by stealing engineer’s session cookie (26:59) - Story # 4: How a single developer dropped AWS costs by 90%, then disappeared (36:46) - Story # 5: A Widespread Logic Controller Flaw Raises the Specter of Stuxnet (48:38) - Story # 6: Meta sues “scraping-for-hire” service that sells user data to law enforcement

00:00 – PreShow Banter™ — Twitch Airways International00:59 – BHIS – Talkin’ Bout [infosec] News 2023-01-1003:56 – Story # 1: How ChatGPT could become a hacker’s friendhttps://betanews.com/2023/01/05/how-chatgpt-could-become-a-hackers-friend/14:05 – Story # […] The post Talkin’ About Infosec News – 1/12/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Twitch Airways International (00:59) - BHIS - Talkin' Bout [infosec] News 2023-01-10 (03:56) - Story # 1: How ChatGPT could become a hacker's friend (14:05) - Story # 2: Cybersecurity experts gaze into the 2023 crystal ball and see good, bad, ugly (16:40) - Story # 3: Chick-Fil-A and other Breaches to snack on (31:01) - Story # 4: Identity Thieves Bypassed Experian Security to View Credit Reports (36:29) - Story # 5: CircleCI security alert: Rotate any secrets stored in CircleCI (Updated Jan 7) (40:45) - Story # 6: Air France and KLM notify customers of account hacks (43:27) - Story # 7: Guardian offices closed until 23 January due to ongoing fallout from suspected ransomware attack

00:00 – PreShow Banter™ — Seven People00:51 – BHIS – Talkin’ Bout [infosec] News 2023-01-0201:37 – Story # 1: LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolenhttps://www.theverge.com/2022/12/28/23529547/lastpass-vault-breach-disclosure-encryption-cybersecurity-rebuttal32:22 – […] The post Talkin’ About Infosec News – 1/3/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Seven People (00:51) - BHIS - Talkin' Bout [infosec] News 2023-01-02 (01:37) - Story # 1: LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolen (32:22) - Story # 2: Southwest Airlines’ post-Christmas meltdown thanks to ‘outdated IT’ systems, poor scheduling (42:18) - Story # 3: McGraw Hill's S3 buckets exposed 100,000 students' grades (47:59) - Story # 4: Okta confirms another breach after hackers steal source code

00:00 – PreShow Banter™ — Talkin’ Bout [Elon] News00:51 – BHIS – Talkin’ Bout [infosec] News 2022-12-1902:46 – Story # 1: Antivirus and EDR solutions tricked into acting as data […] The post Talkin’ About Infosec News – 12/21/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Talkin' Bout [Elon] News (00:51) - BHIS - Talkin' Bout [infosec] News 2022-12-19 (02:46) - Story # 1 : Antivirus and EDR solutions tricked into acting as data wipers (12:11) - Story # 2: Twitter suspends @ElonJet after Musk promises not to ban it (12:48) - Story # 2b: Elon Musk starts banning critical journalists from Twitter (14:37) - Story # 2c: Twitter abruptly bans all links to Instagram, Mastodon, and other competitors (15:08) - Story # 2d: Elon Musk should step down as head of Twitter, says poll (16:18) - Story # 2e: Your Car is Trackable by Law (22:41) - Story # 2f: AirNav RadarBox FlightStick - ADS-B USB Receiver with Integrated Filter, Amplifier and ESD Protection (26:41) - Story # 3: FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked (32:24) - Story # 4: Reno mayor sues after finding tracking device on vehicle (36:43) - Story # 5: Email hijackers scam food out of businesses, not just money (42:46) - Story # 6: Bugs in LEGO Resale Site Allowed Hackers to Hijack Accounts (45:41) - Story # 7: CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks (50:05) - Story # 8: CISA researchers: Russia's Fancy Bear infiltrated US satellite network

00:00 – PreShow Banter™ — Scissors Vs Paper00:15 – BHIS – Talkin’ Bout [infosec] News 2022-12-1202:12 – Story # 1: Rackspace confirms ransomware attack behind days-long email meltdownhttps://www.theregister.com/2022/12/06/rackspace_confirms_ransomware/07:56 – Story […] The post Talkin’ About Infosec News – 12/15/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Scissors Vs Paper (00:15) - BHIS - Talkin' Bout [infosec] News 2022-12-12 (02:12) - Story # 1: Rackspace confirms ransomware attack behind days-long email meltdown (07:56) - Story # 1b: Rackspace Hit With Lawsuits Over Ransomware Attack (09:13) - Story # 2: Uber suffers new data breach after attack on vendor, info leaked online (13:18) - Story # 3: Apple Plans New Encryption System to Ward Off Hackers and Protect iCloud Data (14:20) - Story # 3b: Apple Newsroom: Apple advances user security with powerful new data protections (16:46) - Story # 3c: FBI Calls End-to-End Encryption 'Deeply Concerning' as Privacy Groups Hail Apple's Advanced Data Protection as a Victory for Users (21:17) - Story # 3d: Learn more about iCloud in China mainland (22:53) - Story # 3e: Apple Kills Its Plan to Scan Your Photos for CSAM. Here’s What’s Next (25:02) - Story # 4: Pet Dog Unmasks Drug Trafficker on Encrypted Chat (28:34) - Story # 4b: Operation Venetic: Pet dog and accidental selfies help convict international drugs traffickers (30:06) - Story # 5: ChatGPT (45:43) - Story # 6: San Francisco decides killer police robots aren’t such a great idea

00:00 – PreShow Banter™ — Florida Bobsledding Team01:29 – PreShow Banter™ — Open AI Phishing Campaign05:17 – BHIS – Talkin’ Bout [infosec] News 2022-12-0507:53 – Story # 1: There are […] The post Talkin’ About Infosec News – 12/6/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Florida Bobsleding Team (01:29) - PreShow Banter™ — Open AI Phishing Campaign (05:17) - BHIS - Talkin' Bout [infosec] News 2022-12-05 (07:53) - Story # 1: There are no episodes of Darknet Diaries scheduled Q1 (09:45) - Story # 2: Elon Musk Meets With Apple CEO Tim Cook Amid Claims of Twitter App Store Dispute (14:46) - Story # 3: Anker's Eufy Cameras Caught Uploading Content to the Cloud Without User Consent (23:20) - Story # 3b: Eufy caught lying about local-only security cameras with footage sent to cloud, accessible in unencrypted streams (26:54) - Story # 4: FCC faces long road in stripping Chinese tech from US telecom networks (34:19) - Story # 5: TikTok NSFW if you work for the South Dakota government (37:40) - Story # 6: Never-before-seen malware is nuking data in Russia’s courts and mayors’ offices (41:56) - Story # 7: Lessons from Russia’s cyber-war in Ukraine (44:15) - Story # 8: DHS Cyber Safety Review Board to focus on Lapsus$ hackers (49:49) - Story # 8b: Cyber Safety Review Board to Conduct Second Review on Lapsus$ (50:42) - Story # 9: Rackspace rocked by ‘security incident’ that has taken out hosted Exchange services (57:05) - Story # 10: Red Alert: The SFPD Want the Power to Kill with Robots

00:00 – PreShow Banter™ — Inflatable Turkey00:15 – BHIS – Talkin’ Bout [infosec] News 2022-11-2802:34 – Story # 1: Musk recruits engineers for “Twitter 2.0”https://arstechnica.com/tech-policy/2022/11/musk-recruits-engineers-for-twitter-2-0-after-mass-layoffs-and-resignations/06:28 – Story # 2: Security […] The post Talkin’ About Infosec News – 11/30/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Inflatable Turkey (00:15) - BHIS - Talkin' Bout [infosec] News 2022-11-28 (02:34) - Story # 1: Musk recruits engineers for “Twitter 2.0” (06:28) - Story # 2: Security experts are laying Mastodon's flaws bare (15:01) - Story # 3: 5.4 million Twitter users' stolen data leaked online — more shared privately (18:23) - Story # 4: 34 Russian Cybercrime Groups Stole Over 50 Million Passwords with Stealer Malware (19:48) - Story # 5: Sonder confirms data breach, documents and other PII potentially compromised (27:49) - Story # 6: Why Medibank should have paid the hackers (30:43) - Story # 7: Hackers are locking out Mars Stealer operators from their own servers (33:42) - Story # 8: Ransomware gang says it won’t attack AirAsia again due to the “chaotic organisation” and sloppy security of hacked airline’s network (40:09) - Story # 9: Over 1,600 Docker Hub Repositories Were Found to Hide Malware (46:25) - Story # 10: New Windows Server updates cause domain controller freezes, restarts (53:39) - Story # 11: Making Cobalt Strike harder for threat actors to abuse

00:00 – BHIS – Talkin’ Bout [infosec] News 2022-11-1402:26 – Story # 1: Hackers Dump Australian Health Records Online After Insurer Refuses to Pay Ransom– https://gizmodo.com/hackers-health-info-online-medibank-pay-onion-dark-web-184976074210:04 – Story # 2: TransUnion […] The post Talkin’ About Infosec News – 11/16/2022 appeared first on Black Hills Information Security. (00:00) - BHIS - Talkin' Bout [infosec] News 2022-11-14 (02:26) - Story # 1: Hackers Dump Australian Health Records Online After Insurer Refuses to Pay Ransom (10:04) - Story # 2: TransUnion LLC Confirms Recent Data Breach with State Attorney General’s Office (18:08) - Story # 3: Russian LockBit ransomware operator arrested in Canada (22:58) - Story # 4: The downfall of FTX's Sam Bankman-Fried sends shockwaves through the crypto world (32:10) - Story # 4b: Coinsec Podcast. coinsecpodcast.com (40:23) - Story # 5: Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero-Days (42:12) - Story # 6: Elon Musk is putting Twitter at risk of billions in fines, warns company lawyer (51:12) - Story # 7: https://infosec.exchange/explore (55:04) - Story # 8: Microsoft Windows Sysmon Elevation of Privilege Vulnerability (55:30) - Story # 8b: https://twitter.com/filip_dragovic/status/1590104354727436290

00:00 – PreShow Banter™ — A is for All Team00:33 – BHIS – Talkin’ Bout [infosec] News 2022-11-0703:56 – Story # 1: Musk to cut half of Twitter jobs and […] The post Talkin’ About Infosec News – 11/11/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — A is for All Team (00:33) - BHIS - Talkin' Bout [infosec] News 2022-11-07 (03:56) - Story # 1: Musk to cut half of Twitter jobs and end remote work for the rest, report says (18:56) - Story # 2: Dropbox Data Breach Another Multifactor Fail (19:43) - Story # 2b: Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories (24:24) - Story # 3: Hundreds of U.S. news sites push malware in supply-chain attack (28:38) - Story # 4: New TikTok Privacy Policy Confirms Chinese Staff Can Access European Users' Data (32:23) - Story # 5: A cyberattack blocked the trains in DenmarkSecurity Affairs (40:52) - Story # 6: Facebook probably has your phone number, even if you never shared it. Now it has a secret tool to let you delete it. (45:19) - Story # 7: China is likely stockpiling and deploying vulnerabilities, says Microsoft (48:44) - Story # 8: Hackers selling access to 576 corporate networks for $4 million

00:00 – PreShow Banter™ — Spook Show00:58 – BHIS – Talkin’ Bout [infosec] News 2022-10-3104:00 – Story # 1: OpenSSL warns of critical security vulnerability with upcoming patch– https://www.zdnet.com/article/openssl-warns-of-critical-security-vulnerability-with-upcoming-patch/04:42 – Story […] The post Talkin’ About Infosec News – 11/1/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Spook Show (00:58) - BHIS - Talkin' Bout [infosec] News 2022-10-31 (04:00) - Story # 1: OpenSSL warns of critical security vulnerability with upcoming patch (04:42) - Story # 1b: Notes on OpenSSL remote memory corruption (12:28) - Story # 2: GitHub Bug Exposed Repositories to Hijacking (16:20) - Story # 3: Gartner Identifies the Top 10 Strategic Technology Trends for 2023 (25:54) - Story # 4: Former U.K. Prime Minister Liz Truss’ Phone Allegedly Hacked By Kremlin Spies: Report (34:45) - Story # 5: New Azov data wiper tries to frame researchers and BleepingComputer

00:00 – PreShow Banter™ — Best WWHF Ever!00:31 – BHIS – Talkin’ Bout [infosec] News 2022-10-1704:55 – Story # 1: The Verge: Cybersecurity Week 2022– https://www.theverge.com/23365380/cybersecurity-week-series-phishing-encryption-device-security07:02 – Story # 2: Google […] The post Talkin’ About Infosec News – 10/17/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Best WWHF Ever! (00:31) - BHIS - Talkin' Bout [infosec] News 2022-10-17 (04:55) - Story # 1: The Verge: Cybersecurity Week 2022 (07:02) - Story # 2: Google Cybersecurity Action Team Threat Horizons Report #4 Is Out! (23:34) - Story # 3: Caffeine service lets anyone launch Microsoft 365 phishing attacks (28:05) - Story # 4: AirTags in Checked Baggage (31:55) - Story # 5: International crackdown on West-African financial crime rings (36:50) - Story # 6: Indian Energy Company Tata Power's IT Infrastructure Hit By Cyber Attack (38:17) - Story # 6b: This Is How They Tell Me the World Ends: The Cyberweapons Arms Race (56:08) - Story # 6c: Brave New War: The Next Stage of Terrorism and the End of Globalization (58:18) - Bear Vs Bear Breaking News

00:00 – PreShow Banter™ — Dumpster Fire Friends03:07 – PreShow Banter™ — WHHF Deadwood – https://wildwesthackinfest.com/deadwood/ 03:48 – BHIS – Talkin’ Bout [infosec] News 2022-10-0307:37 – Story # 1: High-severity […] The post Talkin’ About Infosec News – 10/17/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Dumpster Fire Friends (03:07) - PreShow Banter™ — WHHF Deadwood (03:48) - BHIS - Talkin’ Bout [infosec] News 2022-10-03 (07:37) - Story # 1: High-severity Microsoft Exchange 0-day under attack threatens 220,000 servers (19:30) - Story # 2: Stealthy hackers target military and weapons contractors in recent attack (25:52) - Story # 3: Putin grants Russian citizenship to Edward Snowden (29:09) - Story # 4: What the Securing Open Source Software Act does and what it misses (38:17) - Story # 4b: SecBSD Team (40:43) - Story # 5: New Malware Campaign Targeting Job Seekers with Cobalt Strike Beacons

02:28 – Story # 1: American Airlines Breach Exposes Customer and Staff Information– https://www.infosecurity-magazine.com/news/american-airlines-breach-customer/18:59 – Story # 2: London police arrest, charge teen hacking suspect but won’t confirm GTA 6, Uber […] The post Talkin’ About Infosec News – 10/5/2022 appeared first on Black Hills Information Security. (00:00) - BHIS - Talkin' Bout [infosec] News 2022-09-26 (02:28) - Story # 1: American Airlines Breach Exposes Customer and Staff Information (18:59) - Story # 2: London police arrest, charge teen hacking suspect but won’t confirm GTA 6, Uber links (25:32) - Story # 3: LockBit ransomware builder leaked online by “angry developer” (30:11) - Story # 4: Malwarebytes blocks Google, YouTube as malware (32:14) - Story # 5: AdGuard’s new ad blocker struggles with Google’s Manifest v3 rules (37:29) - Story # 6: Adware on Google Play and Apple Store installed 13 million times (41:18) - Story # 7: Revealed: US Military Bought Mass Monitoring Tool That Includes Internet Browsing, Email Data (50:55) - Story # 8: SIM Swapper Abducted, Beaten, Held for $200k Ransom

The post Talkin’ About Infosec News – 9/22/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Special Operations Gig (00:28) - BHIS - Talkin' Bout [infosec] News 2022-09-19 (02:45) - Story # 1: Uber Security Update (04:26) - Story # 1b: A teen hacked Uber and announced it in the company Slack. Employees thought it was a joke (30:01) - Story # 2: White House Releases First-Ever Comprehensive Framework for Responsible Development of Digital Assets (35:34) - Story # 3: GTA 6 source code and videos leaked after Rockstar Games hack (44:40) - Story # 4: Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs (47:47) - Story # 5: LockBit 3.0 Ransomware Victim: First bounty payout $50,000

The post Talkin’ About Infosec News – 9/13/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Forbidden Snacks (02:41) - BHIS - Talkin' Bout [infosec] News 2022-09-12 (04:54) - Story # 1: China Accuses US of 'Tens of Thousands' of Cyberattacks (12:13) - Story # 2: Hackers Honeytrap Russian Troops Into Sharing Location, Base Bombed: Report (18:33) - Story # 3: Inside Fog Data Science, the Secretive Company Selling Mass Surveillance to Local Police (44:13) - Story # 4: Ireland fines Instagram a record $400 mln over children's data (46:29) - Story # 5: FBI, Secret Service join Kentucky investigation into $4 million cybercrime theft (50:12) - Story # 6: New Ransomware Group BianLian Activity Exploding (51:41) - Story # 6b: https://canarytokens.org/generate#

The post Talkin’ About Infosec News – 9/9/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Accidental Furry Hoodies (02:19) - BHIS - Talkin' Bout [infosec] News 2022-08-29 (04:37) - Story # 1: Plex breach exposes usernames, emails, and encrypted passwords (09:06) - Story # 2: LastPass Breach (18:33) - Story # 3: DoorDash data breach exposes customer details (22:47) - Story # 4: Greek gas operator refuses to negotiate with ransomware group after attack (25:01) - Story # 5: Ex-Twitter exec blows the whistle, alleging reckless and negligent cybersecurity policies (35:46) - Story # 6: Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers (42:16) - Story # 7: Google opens up its experimental AI chatbot for public testing (45:22) - Story # 8: Microsoft finds critical hole in operating system that for once isn't Windows (46:56) - Story # 9: VMware confirms Carbon Black causes BSODs, boot loops on Windows (56:01) - Story # 10: Nato investigates hacker sale of missile firm data

ORIGINALLY AIRED ON AUGUST 22, 2022 00:00 – PreShow Banter™ — Ralph’s Birthday00:53 – BHIS – Talkin’ Bout [infosec] News 2022-08-2203:27 – Story # 1: PC store told it can’t […] The post Talkin’ About Infosec News – 8/26/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Ralph's Birthday (00:53) - BHIS - Talkin' Bout [infosec] News 2022-08-22 (03:27) - Story # 1: PC store told it can't claim full cyber-crime insurance after social-engineering attack (13:48) - Story # 2: Lloyd’s to Exclude Catastrophic Nation-Backed Cyberattacks From Insurance Coverage (15:33) - Story # 2b: LLOYD'S Market Bulletin (24:53) - Story # 3: AirTag leads to arrest of airline worker accused of stealing at least $15,000 worth of items from luggage (30:12) - Story # 4: Apple security updates fix 2 zero-days used to hack iPhones, Macs (37:58) - Story # 5: Microsoft Sysmon can now block malicious EXEs from being created (43:37) - Story # 6: Def Con hacker shows John Deere’s tractors can run Doom (53:44) - Story # 7: Janet Jackson’s ‘Rhythm Nation’ apparently vibed too hard for some laptops

ORIGINALLY AIRED ON AUGUST 15, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Sneaking Candy03:32 – BHIS – Talkin’ Bout [infosec] News 2022-08-1507:06 – Story # 1: […] The post Talkin’ About Infosec News – 8/18/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Sneaking Candy (03:32) - BHIS - Talkin' Bout [infosec] News 2022-08-15 (07:06) - Story # 1: Blackhat 2022 recap – Trends and highlights (09:52) - Story # 2: The Zoom installer let a researcher hack his way to root access on macOS (14:15) - Story # 3: Researchers Find Vulnerabilities in Software Underlying Discord, Microsoft Teams, and Other Apps (16:18) - Story # 4: Starlink Successfully Hacked Using $25 Modchip (21:47) - Story # 5: Anonymous poop gifting site hacked, customers exposed (28:58) - Story # 6: Automotive supplier breached by 3 ransomware gangs in 2 weeks (33:49) - Story # 7: Man who built ISP instead of paying Comcast $50K expands to hundreds of homes (38:09) - Story # 8: Slack leaked hashed passwords from its servers for years (40:33) - Story # 9: Cisco Talos shares insights related to recent cyber attack on Cisco (48:07) - Story # 10: Incident Report: Employee and Customer Account Compromise (50:54) - Story # 11: Hackers Behind Twilio Breach Also Targeted Cloudflare Employees

ORIGINALLY AIRED ON JULY 25, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-07-25 03:59 – Story # 1: DOJ seized ransoms paid by […] The post Talkin’ About Infosec News – 7/25/2022 appeared first on Black Hills Information Security. (00:00) - BHIS - Talkin' Bout [infosec] News 2022-07-25 (03:59) - Story # 1: DOJ seized ransoms paid by health centers in Kansas, Colorado after 2021 attacks (08:38) - Story # 1b: twitter.com/cryptowhale (17:34) - Story # 2: How Conti ransomware hacked and encrypted the Costa Rican government (22:29) - Story # 3: Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users (36:49) - Story # 4: Google Play hides app permissions in favor of developer-written descriptions (39:09) - Story # 4b: Google is reinstating app permissions list on Play Store (41:31) - Story # 5: Hack the pump: Rising prices lead to more reports of gas theft (46:04) - Story # 5b: Gas pump manipulators steal ‘millions of dollars’ in fuel (50:40) - Story # 5c: Secret Service agents warn fleets about 'fuel skimming' (53:13) - Story # 6: Atlassian fixes critical Confluence hardcoded credentials flaw (53:33) - Story # 6b: Cisco fixes bug that lets attackers execute commands as root (53:57) - Story # 7: New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals

ORIGINALLY AIRED ON JULY 18, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Talkin’ Bout Audio 07:23 – BHIS – Talkin’ Bout [infosec] News 2022-07-18 09:28 – […] The post Talkin’ About Infosec News – 7/18/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Talkin' Bout Audio (07:23) - BHIS - Talkin' Bout [infosec] News 2022-07-18 (09:28) - Story # 1: Russian “hacktivists” are causing trouble far beyond Ukraine (12:19) - Wade Into International Relations (21:25) - Story # 2: UK Info Commissioner slams use of WhatsApp by health officials during pandemic (26:11) - Story # 3: Microsoft warns of massive phishing campaign that can bypass MFA (31:44) - Bud Patches Reporting (37:08) - Story # 4: Today I learned Amazon has a form so police can get my data without permission or a warrant (48:35) - Story # 4b: San Francisco cops want real-time access to private security cameras for surveillance (56:59) - Story # 5: Man Arrested After Impersonating Disney Cast Member, Stealing $10,000 ‘Star Wars’ Droid (59:06) - Story # 6: Disneyland social media accounts hacked, offensive messages posted

ORIGINALLY AIRED ON JULY 11, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Cons, China, and Florida Man, oh my! 07:03 – Story # 1: North Korean […] The post Talkin’ About Infosec News – 7/11/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Cons, China, and Florida Man, oh my! (02:37) - BHIS - Talkin' Bout [infosec] News 2022-07-11 (07:03) - Story # 1: North Korean Hackers Target US Health Providers With 'Maui' Ransomware (10:29) - Story # 2: Ransomware, hacking groups move from Cobalt Strike to Brute Ratel (24:24) - Story # 3: DoD issues call for hackers to dig into networks (29:21) - Story # 3b: Department of Justice Announces New Policy for Charging Cases under the Computer Fraud and Abuse Act (33:15) - Story # 4: FCC Commissioner urges Google and Apple to ban TikTok (41:41) - Story # 5: Microsoft rolls back decision to block Office macros by default (42:01) - Story # 5b: Microsoft says decision to stop blocking Office VBA macros by default is ‘temporary’

ORIGINALLY AIRED ON JUNE 27, 2022 Articles discussed in this episode: 02:13 – Story # 1: The #1 Period Tracker on the App Store Will Hand Over Data Without a […] The post Talkin’ About Infosec News – 6/27/2022 appeared first on Black Hills Information Security. (00:00) - BHIS - Talkin' Bout [infosec] News 2022-06-27 (02:13) - Story # 1: The #1 Period Tracker on the App Store Will Hand Over Data Without a Warrant (20:56) - Story # 2: LockBit 3.0 introduces the first ransomware bug bounty program (25:44) - Story # 3: Former AWS engineer convicted over hack that cost Capital One $270m (28:52) - Story # 4: CISA experts propose ‘311’ cybersecurity emergency call line for small businesses (38:25) - Story # 5: Clever phishing method bypasses MFA using Microsoft WebView2 apps (40:00) - Story # 5b: mrd0x/WebView2-Cookie-Stealer (43:28) - Story # 6: Game on! The 2022 Google CTF is here (46:07) - Story # 7: Critical PHP flaw exposes QNAP NAS devices to RCE attacks (50:03) - Story # 8: Japanese man loses USB stick with entire city's personal details (54:51) - Story # 9: A Microsoft 365 feature can ransom files on SharePoint and OneDriveCould

ORIGINALLY AIRED ON JUNE 20, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-06-20 01:31 – Story # 1: Internal TikTok Meetings Shows That […] The post Talkin’ About Infosec News – 6/20/2022 appeared first on Black Hills Information Security. (00:00) - BHIS - Talkin' Bout [infosec] News 2022-06-20 (01:31) - Story # 1: Internal TikTok Meetings Shows That US User Data Accessed From China (05:14) - Story # 2: Mullvad VPN Removes Ability to Create New Subscriptions (09:23) - Story # 3: Flagstar Bank discloses data breach impacting 1.5 million customers (13:25) - Story # 4: Russia-linked APT targets Ukraine by exploiting the Follina RCE vulnerability (17:39) - Story # 5: Tesla cars barred for 2 months in Beidaihe, site of China leadership meet (20:18) - Story # 6: Microsoft 365 credentials targeted in new fake voicemail campaign (22:27) - Bud Patches Reporting with Dancing John Strand. (27:19) - Story # 7: FBI says fraud on LinkedIn a ‘significant threat’ to platform and consumers (30:04) - Story # 8: Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second (33:22) - Story # 9: Critical Code Execution Vulnerability Patched in Splunk Enterprise (35:53) - Story # 10: Google AI Reprise (37:43) - Story # 11: RSA was a Covid Superspreader event. (42:03) - Story # 12: Facebook Is Receiving Sensitive Medical Information from Hospital Websites (43:58) - Story # 12b: 18 HIPAA Identifiers

ORIGINALLY AIRED ON JUNE 13, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-06-13 02:26 – Story # 1: Roblox Game Pass store used […] The post Talkin’ About Infosec News – 6/13/2022 appeared first on Black Hills Information Security. (00:00) - BHIS - Talkin' Bout [infosec] News 2022-06-13 (02:26) - Story # 1: Roblox Game Pass store used to sell ransomware decryptor (07:35) - Story # 2: New Jersey school district forced to cancel final exams amid ransomware recovery effort (10:31) - Story # 3: Security Fixes Won't Require Full iOS Update in iOS 16, Will Be Installed Automatically (15:08) - Story # 4: Gone in 130 seconds: New Tesla hack gives thieves their own personal key (20:07) - Story # 5: DuckDuckGo browser allows Microsoft trackers due to search agreement (30:44) - Story # 6: Apple demos Safari’s ‘passkeys’ support in macOS Ventura that will help bring an end to passwords (38:34) - Story # 6: Mass Account Takeover in the Yunmai smart scale API (42:27) - Story # 7: Credentials for thousands of open source projects free for the taking—again! (48:09) - Story # 8: Internet Explorer (almost) breathes its final byte on Wednesday (55:28) - Story # 9: Google suspends engineer who claims its AI is sentient

ORIGINALLY AIRED ON JUNE 6, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Boat Facts 01:38 – BHIS – Talkin’ Bout [infosec] News 2022-06-06 03:51 – Story […] The post Talkin’ About Infosec News – 6/6/2022 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Boat Facts (01:38) - BHIS - Talkin' Bout [infosec] News 2022-06-06 (03:51) - Story # 1: Elon Musk threatens to scrap Twitter deal (07:04) - Story # 2: Confluence Server and Data Center CVE (13:55) - Story # 3: Mandiant: “No evidence” we were hacked by LockBit ransomware (18:29) - Story # 4: Fake Windows exploits target infosec community with Cobalt Strike (27:37) - Story # 5: Hacker Steals Database of Hundreds of Verizon Employees (36:14) - Story # 6: India Flights grounded after SpiceJet hit with ransomware (40:40) - Story # 7: Zero-Click Zoom Bug Allows Code Execution Just by Sending a Message (42:15) - Story # 7b: Zoom's Bug Bounty Programs Soar to $1.8M (45:29) - Story # 8: Twitter pays $150M fine for using two-factor login details to target ads (49:27) - Story # 9: Microsoft finds severe bugs in Android apps from large mobile providers