The 443 - Security Simplified

We’re about to launch our security predictions for 2019, but in this episode we review and rate our predictions from last year. Did the predictions hit, miss or were just “meh”? Listen to find out!

This week, on The 443 – Security Simplified, we cover the Bleeding Bit Bluetooth vulnerability impacting a large number of wireless access points. We then dive headfirst in to election security. We’ll cover both what we’re worried about and what isn’t very likely when it comes to securing the 2018 US mid-term elections.

In today's episode of The 443 -- Security Simplified, we cover a class action settlement for the largest data breach in history (so far). We then dive in to the world of bots. From botnets to Twitter bots, we cover how they work, where they came from, and where they are going.

In this episode of The 443 – Security Simplified, we cover the recent activity of the APT group known as Grey Energy. Who are they? Who are they targeting? And what are their methods? We’ll answer all of that before diving in to the basics of web app security. We’ll break down 5 of the OWASP Top 10 web app security threats into easily understood and actionable advice.

On this week's episode of The 443 - Security Simplified, we cover a recent cyber security audit of major DoD weapons systems (spoiler alert: it's bad). Then we dive in to the recent controversial story out of Bloomberg about hardware implants in motherboards manufactured in China. Did it actually happen? And if so, what does it mean for the future of hardware manufacturing? We'll give our thoughts and more.

Welcome back to The 443 – Security Simplified. Have you ever wondered how to get in to cyber-security? In this episode, we talk weigh the benefits of formal education versus self-taught knowledge and discuss the certifications and skills that can help get your foot in the door. Before that though, we’ll dive in to this week’s news including another bad day for Facebook and the latest in nation-state attacks.

This week on The 443 – Security Simplified, we cover Microsoft’s latest push towards killing off passwords once and for all and the privacy impact of Facebook maintaining “Shadow Contact Information.” We then dive deep in to the world of digital certificates and how they secure our web connections.

This week on The 443 – Security Simplified, we talk about the recently-sentenced authors of the Mirai Botnet and other cybercriminals that became FBI consultants. We then break down three of the most sophisticated cyber-attacks on the last decade. From Stuxnet to Operation Aurora, we’ll dive in to exactly what made these attacks so successful.

This week on The 443 – Security Simplified, we dive in to WatchGuard’s latest Internet Security Report for Q2 2018. We’ll cover the malware and network attack trends from the last quarter including what you need to watch out for and how to keep your systems secure. We also cover the latest research from the WatchGuard Threat Lab and explain how the EFail PHP and S/MIME vulnerabilities work and how to stay safe.

This week on The 443 – Security Simplified, we cover the US Department of Justice’s recently unsealed charges against a North Korean national claimed to be involved in the WannaCry and Sony Pictures attacks. We then break down the differences between stateful firewalling and deep packet inspection and why the latter is so important for detecting modern threats.

On this week’s episode of The 443 – Security Simplified, we cover a vulnerability in a popular video game that recently came to Android and the latest in the seemingly never-ending cycle of data breaches. Then, we shed some light on a sector of IoT that doesn’t seem to garner as much attention as hacked cameras and medical equipment, but still poses security risks to companies.

This week on The 443 – Security Simplified, we cover the DNC phishing scare that triggered an alert to the FBI, and a targeted ransomware attack demanding hundreds of thousands of dollars in payment. We then talk about a few outside the box hacks where researchers discovered unique ways to compromise potential targets.

On this week's episode of The 443 - Security Simplified, we cover a new vulnerability in the WPA2 Wi-Fi standard and the re-release of the MANA wireless hacking toolkit. Marc and Corey also highlight their favorite talks from the DEF CON hacker conference in Las Vegas including attacks against enterprise blockchain, Nintendo systems, and even science itself.

This week’s episode comes (almost) live from the Black Hat hacking conference in Las Vegas. We start out with a discussion about the Capture the Flag (CTF) challenge that the WatchGuard Threat Lab released for the second year in a row and then jump right in to our favorite talks from this year’s Black Hat including important takeaways for the future of security.

In this week’s news, we discuss how an attack against SMS 2-Factor Authentication allowed someone to access use compromised employee credentials to access Reddit’s source code and some user data. We then go relive some of our favorite bits of research to come out of previous Black Hat and DEF CON events. From hacking cars to ripping pages out of presentation books, you’ll hear it all on this week’s episode.

This week, the ACLU tested Amazon’s “Rekognition” facial recognition software, comparing 25,000 mugshots and members of US Congress with interesting results. What does this mean to the future of facial recognition in law enforcement and machine learning as a whole? Also, we are now only two weeks out from the annual Black Hat and DEF CON security conferences in Las Vegas. We’ll preview what you can expect if you attend as well as the talks we are looking forward to the most.

Well look at that…we’re already 8 episodes into the new podcast. Thanks to everyone who has downloaded and listened, and if you like what we’re doing, please tell a friend. Just after we recorded last week, an unsealed indictment disclosed the hacking efforts of accused Russian intelligence agents who gained access to Democratic Congressional Campaign Committee (DCCC) and Democratic National Convention (DNC) networks. While many of the news headlines focused on the political implications, we’ll dig into how the hackers did it. Spoiler alert, we see far too many “hacker 101” techniques successfully employed. Also, we pick the brain of our resident Wi-Fi security expert to learn how hackers exploit weak Wi-Fi security practices, and offer some practical advice for both business and consumers to protect themselves.

This week, U.S. military drone documents surfaced on the Dark Web for a mere $150, as did ways to remotely access tens of thousands of compromised systems. What is the Dark Web, who created it and why, is it solely a camouflaged underground for criminals to conduct illicit activities? In this episode of The 443 – Security Simplified, we leave the bright and shiny intertubes of the Clearnet, and we venture to the dark side of the web. Subscribe to "The 443 - Security Simplified" Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

In this episode, we cover an attack against 4G LTE networks called aLTEr. This attack comes with a marketable name and a website full of custom graphics, but is it the real deal, or does it have more bark than bite? We also break down HTTPS, the protocol that keeps your web browsing secure and private. Subscribe to "The 443 - Security Simplified" on Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

In this episode of "The 443 – Security Simplified", we talk about the Cyber Cold War and how nation-state cyber attacks impact not just countries but private organizations as well. Before that though, we take some time to break down the new WPA3 wireless security standard from the Wi-Fi alliance. Are VPNs still required for a secure wireless experience? Subscribe to "The 443 - Security Simplified" on Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

When they are not podcasting, Corey, Marc, and the rest of the WatchGuard Threat Lab team, conduct security research. Each quarter, the highlights of this research are showcased in the Internet Security Report. Today, the report for Q1 2018 was released, and the guys review the top malware and network attack trends from the first quarter, and give our thoughts on another record breaking DDoS attack that targeted Github back in February.

In this episode, our hosts Marc and Corey take a break from analyzing the latest security threats and trends, and analyze each other in a fun Q&A session. Hear about how their hacking backgrounds, first electrocutions, favorite gadgets, and faux hawk vs. mohawk!

Welcome back to "The 443 – Security Simplified". It’s episode 2, and because the universe has a great sense of humor, just after digging into cryptocurrency in episode 1, we get a major hack of a cryptocurrency exchange, AND cypto-mining malware on Amazon TV and FIRE sticks. Never a dull moment in this industry! Subscribe to "The 443 - Security Simplified" Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

Welcome to the first episode of "The 443 - Security Simplified". Each week on the podcast, white-hat hackers from the WatchGuard Threat Lab will analyze the methods and techniques behind the latest hacks, attacks, and breaches. We’ll tell you what happened, how the bad guys did it, and how to protect your business, employees and customers. On today’s episode, we cover cryptocurrency and the blockchain, learn that hard forks are a big deal, hear tales of fake ICOs, and learn about the utility of private blockchains. Also, is your Google Home leaking? Subscribe to "The 443 - Security Simplified" Apple Podcasts Stitcher Overcast Google Play TuneIn RSS

We are excited to announce our new podcast, "The 443 - Security Simplified". Listen to the trailer for a preview, and to subscribe, either search for “The 443 – Security Simplified” or use the links below. This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Each week, we’ll educate and entertain you by breaking down and simplifying the latest cyber security headlines and trends. Hosts Marc Laliberte and Corey Nachreiner will use their special blend of expertise, wit, and cynicism, and turn complex security concepts into easily understood and actionable insights. Subscribe