Month: November 2021

In this episode, Erich and Javvad chat about the #infosec and #cybersecurity stories of the week. Check them out and chat live with the hosts.

Stories from the show:

New Memento ransomware switches to WinRar after failing at encryption:
https://www.bleepingcomputer.com/news/security/new-memento-ransomware-switches-to-winrar-after-failing-at-encryption/

Security company faces backlash for waiting 12 months to disclose Palo Alto 0-day:
https://www.zdnet.com/article/security-company-faces-backlash-for-waiting-12-months-to-disclose-palo-alto-0-day/

FBI system hacked to email ‘urgent’ warning about fake cyberattacks:
https://www.bleepingcomputer.com/news/security/fbi-system-hacked-to-email-urgent-warning-about-fake-cyberattacks/

In this episode, Erich and Javvad discuss issues around a fertility clinic hack, another way big pharma is a hot mess, how Robinhood was swindled with simple social engineering and how North Korea is up to it’s old tricks again.

Don’t forget to Like, Share and Subscribe!

Stories from the show:

Hack leaves fertility clinic medical data at risk:
https://www.bbc.com/news/technology-59156683

EU pharmaceutical giants run old, vulnerable apps and fail to use encryption in login forms:
https://www.zdnet.com/article/eu-pharmaceutical-giants-run-old-vulnerable-apps-and-fail-to-use-encryption-in-login-forms/

Robinhood discloses data breach impacting 7 million customers:
https://www.bleepingcomputer.com/news/security/robinhood-discloses-data-breach-impacting-7-million-customers/

OTP Bot Call Audio:
https://soundcloud.com/user-233140213/otp-bot-call-audio

North Korean hackers target the South’s think tanks through blog posts:
https://www.zdnet.com/article/north-korean-hackers-target-the-souths-think-tanks-through-blog-posts/

In this episode Javvad and Erich discuss Cisco’s decision to remover hard-coded credentials and SSH keys… finally, the US ban on Pegasus spyware, a Squid Game themed cryptocoin robbery, and parents being threatened after building a school app. 

Stories from the show:

Cisco fixes hard-coded credentials and default SSH key issues:
https://www.bleepingcomputer.com/news/security/cisco-fixes-hard-coded-credentials-and-default-ssh-key-issues/

US Bans Trade With Pegasus Spyware Maker:
https://threatpost.com/pegasus-spyware-blacklisted-us/175999/

Squid Game crypto token collapses in apparent scam:
https://www.bbc.co.uk/news/business-59129466

These Parents Built a School App. Then the City Called the Cops:
https://www.wired.com/story/sweden-stockholm-school-app-open-source/