The 443 - Security Simplified

This week on The 443 – Security Simplified, we discuss two news events involving bug bounties. The first event involves a security researcher withholding details of a critical flaw in Mac OS because of Apple’s lack of a bug bounty program, and the second involves a researcher that was allegedly assaulted by a vendor while following up on promises of a payment. After that excitement, we jump in to the world of CAPTCHA, including where it started and how its evolving.

This edition of The 443 – Security Simplified was recorded in front of a live audience at a recent WatchGuard event. Marc and Corey engage the crowd, and WatchGuard executives, in discussion about the state of information security at the beginning of 2019, and have fun with some security and pop culture trivia games.

In today’s episode of The 443 – Security Simplified, we cover the latest news where a group of researchers accidently triggered a bug, disrupting internet routing. We’ll then jump in to the 6 different categories of data breaches, how they occur, and how to defend against them.

In today’s episode, we cover the overlooked cybersecurity ramifications of the US government shutdown. From NIST to expired certificates, we’ll discuss the government agencies, programs, and tools that private organizations rely on every day which are most impacted by the US congress’s ongoing failure to pass a budget for 2019.

In today’s episode of The 443 – Security Simplified, we cover recent news of a mass account breach at Reddit and a global DNS hijacking campaign. We then discuss in to a group of hackers attempting to convince the world to subscribe to a popular YouTube personality’s channel by compromising printers and Chromecasts.

This week on The 443 – Security Simplified, we sit down for an interview with authentication expert Roger Grimes, author of A Data-Driven Computer Security Defense. We’ll discuss the security benefits of multi-factor authentication and how attackers circumvent them.

What a year! Since launching The 443 – Security Simplified in June we’ve recorded over 30 episodes full of the latest news, interviews and breakdowns of complex security topics. In this episode, we share some fan-favorite segments complete with the latest updates on where the discussion topics stand today.

In this episode of The 443 – Security Simplified, we cover WatchGuard’s Internet Security Report for Q3 2018. We’ll run through the latest malware and network attack trends, discuss the top security incidents from the quarter, and dive in to the WatchGuard Threat Lab’s latest research.

Are you planning on decking out your home with the latest "smart" gadgets this holiday season? In today's episode of The 443 – Security Simplified, discuss which smart home devices are more secure than others and how to keep your home networks safe while adding your new internet-connected lightbulbs. Before that though, we cover the latest in data breaches with two big ones disclosed in the last week.

Welcome back to another episode of The 443 - Security Simplified. This week in the news, we cover a supply chain attack against a popular Bitcoin wallet. For our main event, we've picked a few of our favorite predictions that didn't make the cut this year. We'll explain the trends behind each one and the reasons why they weren't included with the rest of them.

With Thanksgiving right around the corner (or just having just passed depending on when you listen to this), we wanted to take some time and talk about the things we are thankful for in the cyber security world. Before that though, we’ll cover the latest news in breaking biometrics where researchers out of New York University and the University of Michigan have developed a fingerprint master key.

With Black Friday and Cyber Monday right around the corner, in today’s episode of The 443 – Security Simplified, we provide some useful cyber security tips to keep your bank account and home network safe while shopping for the latest holiday tech. Before that though, we cover a breach of over 23 million SMS messages and its impact on multi-factor authentication and account security as a whole.

In this special edition of The 443 – Security Simplified, we cover WatchGuard’s 2019 security predictions, available in video and audio formats! For this year’s predictions, the WatchGuard Threat Lab imagines a dystopian future caused by a cybersecurity apocalypse. Learn about Vaporworms, ransomware targeting industrial control systems, the Internet being held hostage, and more. But don’t worry, we’ll also discuss how it can all be avoided! See both our predictions teaser video, and the full video podcast, here: watchguard.com/2019predictions

We’re about to launch our security predictions for 2019, but in this episode we review and rate our predictions from last year. Did the predictions hit, miss or were just “meh”? Listen to find out!

This week, on The 443 – Security Simplified, we cover the Bleeding Bit Bluetooth vulnerability impacting a large number of wireless access points. We then dive headfirst in to election security. We’ll cover both what we’re worried about and what isn’t very likely when it comes to securing the 2018 US mid-term elections.

In today's episode of The 443 -- Security Simplified, we cover a class action settlement for the largest data breach in history (so far). We then dive in to the world of bots. From botnets to Twitter bots, we cover how they work, where they came from, and where they are going.

In this episode of The 443 – Security Simplified, we cover the recent activity of the APT group known as Grey Energy. Who are they? Who are they targeting? And what are their methods? We’ll answer all of that before diving in to the basics of web app security. We’ll break down 5 of the OWASP Top 10 web app security threats into easily understood and actionable advice.

On this week's episode of The 443 - Security Simplified, we cover a recent cyber security audit of major DoD weapons systems (spoiler alert: it's bad). Then we dive in to the recent controversial story out of Bloomberg about hardware implants in motherboards manufactured in China. Did it actually happen? And if so, what does it mean for the future of hardware manufacturing? We'll give our thoughts and more.

Welcome back to The 443 – Security Simplified. Have you ever wondered how to get in to cyber-security? In this episode, we talk weigh the benefits of formal education versus self-taught knowledge and discuss the certifications and skills that can help get your foot in the door. Before that though, we’ll dive in to this week’s news including another bad day for Facebook and the latest in nation-state attacks.

This week on The 443 – Security Simplified, we cover Microsoft’s latest push towards killing off passwords once and for all and the privacy impact of Facebook maintaining “Shadow Contact Information.” We then dive deep in to the world of digital certificates and how they secure our web connections.

This week on The 443 – Security Simplified, we talk about the recently-sentenced authors of the Mirai Botnet and other cybercriminals that became FBI consultants. We then break down three of the most sophisticated cyber-attacks on the last decade. From Stuxnet to Operation Aurora, we’ll dive in to exactly what made these attacks so successful.

This week on The 443 – Security Simplified, we dive in to WatchGuard’s latest Internet Security Report for Q2 2018. We’ll cover the malware and network attack trends from the last quarter including what you need to watch out for and how to keep your systems secure. We also cover the latest research from the WatchGuard Threat Lab and explain how the EFail PHP and S/MIME vulnerabilities work and how to stay safe.

This week on The 443 – Security Simplified, we cover the US Department of Justice’s recently unsealed charges against a North Korean national claimed to be involved in the WannaCry and Sony Pictures attacks. We then break down the differences between stateful firewalling and deep packet inspection and why the latter is so important for detecting modern threats.

On this week’s episode of The 443 – Security Simplified, we cover a vulnerability in a popular video game that recently came to Android and the latest in the seemingly never-ending cycle of data breaches. Then, we shed some light on a sector of IoT that doesn’t seem to garner as much attention as hacked cameras and medical equipment, but still poses security risks to companies.

This week on The 443 – Security Simplified, we cover the DNC phishing scare that triggered an alert to the FBI, and a targeted ransomware attack demanding hundreds of thousands of dollars in payment. We then talk about a few outside the box hacks where researchers discovered unique ways to compromise potential targets.

On this week's episode of The 443 - Security Simplified, we cover a new vulnerability in the WPA2 Wi-Fi standard and the re-release of the MANA wireless hacking toolkit. Marc and Corey also highlight their favorite talks from the DEF CON hacker conference in Las Vegas including attacks against enterprise blockchain, Nintendo systems, and even science itself.

This week’s episode comes (almost) live from the Black Hat hacking conference in Las Vegas. We start out with a discussion about the Capture the Flag (CTF) challenge that the WatchGuard Threat Lab released for the second year in a row and then jump right in to our favorite talks from this year’s Black Hat including important takeaways for the future of security.

In this week’s news, we discuss how an attack against SMS 2-Factor Authentication allowed someone to access use compromised employee credentials to access Reddit’s source code and some user data. We then go relive some of our favorite bits of research to come out of previous Black Hat and DEF CON events. From hacking cars to ripping pages out of presentation books, you’ll hear it all on this week’s episode.

This week, the ACLU tested Amazon’s “Rekognition” facial recognition software, comparing 25,000 mugshots and members of US Congress with interesting results. What does this mean to the future of facial recognition in law enforcement and machine learning as a whole? Also, we are now only two weeks out from the annual Black Hat and DEF CON security conferences in Las Vegas. We’ll preview what you can expect if you attend as well as the talks we are looking forward to the most.

Well look at that…we’re already 8 episodes into the new podcast. Thanks to everyone who has downloaded and listened, and if you like what we’re doing, please tell a friend. Just after we recorded last week, an unsealed indictment disclosed the hacking efforts of accused Russian intelligence agents who gained access to Democratic Congressional Campaign Committee (DCCC) and Democratic National Convention (DNC) networks. While many of the news headlines focused on the political implications, we’ll dig into how the hackers did it. Spoiler alert, we see far too many “hacker 101” techniques successfully employed. Also, we pick the brain of our resident Wi-Fi security expert to learn how hackers exploit weak Wi-Fi security practices, and offer some practical advice for both business and consumers to protect themselves.

This week, U.S. military drone documents surfaced on the Dark Web for a mere $150, as did ways to remotely access tens of thousands of compromised systems. What is the Dark Web, who created it and why, is it solely a camouflaged underground for criminals to conduct illicit activities? In this episode of The 443 – Security Simplified, we leave the bright and shiny intertubes of the Clearnet, and we venture to the dark side of the web. Subscribe to "The 443 - Security Simplified" Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

In this episode, we cover an attack against 4G LTE networks called aLTEr. This attack comes with a marketable name and a website full of custom graphics, but is it the real deal, or does it have more bark than bite? We also break down HTTPS, the protocol that keeps your web browsing secure and private. Subscribe to "The 443 - Security Simplified" on Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

In this episode of "The 443 – Security Simplified", we talk about the Cyber Cold War and how nation-state cyber attacks impact not just countries but private organizations as well. Before that though, we take some time to break down the new WPA3 wireless security standard from the Wi-Fi alliance. Are VPNs still required for a secure wireless experience? Subscribe to "The 443 - Security Simplified" on Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

When they are not podcasting, Corey, Marc, and the rest of the WatchGuard Threat Lab team, conduct security research. Each quarter, the highlights of this research are showcased in the Internet Security Report. Today, the report for Q1 2018 was released, and the guys review the top malware and network attack trends from the first quarter, and give our thoughts on another record breaking DDoS attack that targeted Github back in February.

In this episode, our hosts Marc and Corey take a break from analyzing the latest security threats and trends, and analyze each other in a fun Q&A session. Hear about how their hacking backgrounds, first electrocutions, favorite gadgets, and faux hawk vs. mohawk!

Welcome back to "The 443 – Security Simplified". It’s episode 2, and because the universe has a great sense of humor, just after digging into cryptocurrency in episode 1, we get a major hack of a cryptocurrency exchange, AND cypto-mining malware on Amazon TV and FIRE sticks. Never a dull moment in this industry! Subscribe to "The 443 - Security Simplified" Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

Welcome to the first episode of "The 443 - Security Simplified". Each week on the podcast, white-hat hackers from the WatchGuard Threat Lab will analyze the methods and techniques behind the latest hacks, attacks, and breaches. We’ll tell you what happened, how the bad guys did it, and how to protect your business, employees and customers. On today’s episode, we cover cryptocurrency and the blockchain, learn that hard forks are a big deal, hear tales of fake ICOs, and learn about the utility of private blockchains. Also, is your Google Home leaking? Subscribe to "The 443 - Security Simplified" Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

We are excited to announce our new podcast, "The 443 - Security Simplified". Listen to the trailer for a preview, and to subscribe, either search for “The 443 – Security Simplified” or use the links below. This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Each week, we’ll educate and entertain you by breaking down and simplifying the latest cyber security headlines and trends. Hosts Marc Laliberte and Corey Nachreiner will use their special blend of expertise, wit, and cynicism, and turn complex security concepts into easily understood and actionable insights. Subscribe