In this episode, Erich and Javvad wrap up 2023 with a story about a Florida woman hitting her boyfriend with a Christmas tree, plus they discuss a call center takedown in India that netted arrests of 36 people, and more!
In ths episode, Erich and Javvad talk about cyber attacks impacting people buying homes, how cybercriminals are targeting booking.com users, and more hospital outages caused by ransomware.
All of these cybersecurity stories and more!
Stories from the show:
Thousands of house purchases frozen by cyber attack
https://finance.yahoo.com/news/thousands-house-purchases-frozen-cyber-183437339.html
Booking.com hackers increase attacks on customers
https://www.bbc.com/news/technology-67583486
Cyber-attack closes hospital emergency rooms in three US states
https://www.theguardian.com/us-news/2023/nov/28/cyber-attack-us-hospitals-texas-oklahoma-new-mexico
Regulator says stranger entered hospital, treated a patient, took a document … then vanished
https://www.theregister.com/2023/12/01/nhs_health_board_ticked_off/
In this episode, Erich and Javvad talk about using Google Calendar as a C2 channel, how a lack of resources ended the investigation into the EasyJet breach, and more!
Stories from the show:
EasyJet hack investigation abandoned because of ‘limited resources’
Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel
https://thehackernews.com/2023/11/google-warns-of-hackers-absing-calendar.html
Mr. Cooper Responds to Cyberattack: Offering Enhanced Payment Options for Customers
https://ts2.space/en/mr-cooper-responds-to-cyberattack-offering-enhanced-payment-options-for-customers/#google_vignette
Court rules automakers can record and intercept owner text messages
https://therecord.media/class-action-lawsuit-cars-text-messages-privacy
Plastic surgeons hit by hackers
https://www.timesnownews.com/technology-science/plastic-surgery-data-breach-nude-photos-leaked-article-105062693
After quite a bit of travel in the last couple of weeks, the dynamic duo is back to chat about recent #cybersecurity stories and more.
In this episode, Erich and Javvad talk about some of the most recent antics from North Korea, including attacks on shipbuilding and aerospace organizations, something called a ‘Dual Ransomware Attack’, and much more.
Stories from the show:
South Korea accuses North of Phish and Ships attack
https://www.theregister.com/2023/10/05/north_korea_phishing_attack_on_south/
Lazarus impersonated Meta recruiter to breach Spanish aerospace firm
https://www.helpnetsecurity.com/2023/10/02/lazarus-lightlesscan/
FBI: Crippling ‘Dual Ransomware Attacks’ on the Rise
https://www.darkreading.com/threat-intelligence/fbi-highlights-dual-ransomware-attack-in-rising-cybertrends
People’s Republic of China-Linked Cyber Actors Hide in Router Firmware
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-270a
In this episode, Erich and Javvad discuss the takedown of the Qakbot botnet, an attack on the Polish train system, the Forever 21 breach, which impacts more than 500k people, and much more.
Stories from the show:
https://www.bleepingcomputer.com/news/security/classiscam-fraud-as-a-service-expands-now-targets-banks-and-251-brands/
Classiscam fraud-as-a-service expands, now targets banks and 251 brands
FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown
https://www.fbi.gov/news/stories/fbi-partners-dismantle-qakbot-infrastructure-in-multinational-cyber-takedown
Poland investigates cyber-attack on rail network
https://www.bbc.com/news/world-europe-66630260
Forever 21 Data Breach: Personal Details of Over 500,000 Customers, Employees Compromised
Erich and Javvad are back after taking a couple of weeks off to vacation and to attend BSides Las Vegas, Blackhat and DEFCON. In this episode they talk about the conference and what has been happening in the cyber world for the past couple of weeks
Stories from the show:
Danish cloud host says customers ‘lost all data’ after ransomware attack
https://techcrunch.com/2023/08/23/cloudnordic-azero-cloud-host-ransomware/
Cybercriminals turn to AI to bypass modern email security measures
https://www.helpnetsecurity.com/2023/08/23/ai-enabled-email-threats/
TP-Link smart bulbs can let hackers steal your WiFi password
https://www.bleepingcomputer.com/news/security/tp-link-smart-bulbs-can-let-hackers-steal-your-wifi-password/
Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal
https://www.bbc.co.uk/news/technology-60864283
In this episode, Erich and Javvad talk about the upcoming BSides Las Vegas, Black Hat and DEFCON conferences, NHS sharing data via WhatsApp, the #cyber skills gap, and much more
Stories from the show:
Humans Unable to Reliably Detect Deepfake Speech
https://www.infosecurity-magazine.com/news/humans-detect-deefake-speech/
NHS Staff Reprimanded For WhatsApp Data Sharing
https://www.infosecurity-magazine.com/news/nhs-staff-reprimanded-whatsapp/
Microsoft Teams Targeted in Midnight Blizzard Phishing Attacks
https://www.infosecurity-magazine.com/news/microsoft-teams-midnight-blizzard/
Hacktivist Collective “Mysterious Team Bangladesh” Revealed
https://www.infosecurity-magazine.com/news/mysterious-team-bangladesh-revealed/
Report outlines causes of cyber security skills gap
https://www.publicsectorexecutive.com/articles/report-outlines-causes-cyber-security-skills-gap
In this episode, Erich and Javvad discuss current #cybersecurity stories including the attack on a cardiac services vendor, an attack on a Tampa hospital and some new SEC rules around breaches.
All this and more!
Stories from the show:
Security Incident Impacts CardioComm’s Operations
https://www.infosecurity-magazine.com/news/security-incident-cardiocomm/
Tampa General Hospital Data Breach Impacts 1.2 Million Patients
https://www.infosecurity-magazine.com/news/tampa-hospital-data-breach/
Today morning Erich and Javvad recount their experiences with the famed hacker and colleague Kevin Mitnick, chat about a Ukrainian takedown netting 150k SIM cards, concernes over the Frenchies plan to use AI to surveil the Paris olympics, Microsoft deciding that allowing access to security logs, without a fee, is good, and much more from the world of #cybersecurity.
Stories from the show:
Kevin Mitnick passed away at 59
https://www.dignitymemorial.com/obituaries/las-vegas-nv/kevin-mitnick-11371668
French Assembly passes bill allowing police to remotely activate phone cameras and microphones for surveillance
https://www.engadget.com/french-assembly-passes-bill-allowing-police-to-remotely-activate-phone-cameras-and-microphones-for-surveillance-210539401.html
Paris 2024 Olympics: Concern over French plan for AI surveillance
https://www.bbc.co.uk/news/world-europe-66122743
Under CISA pressure, err collaboration, Microsoft makes cloud security logs available for free
https://www.theregister.com/2023/07/20/under_cisa_spressures_collaboration_microsoft/
Ukraine takes down massive bot farm, seizes 150,000 SIM cards
https://www.bleepingcomputer.com/news/security/ukraine-takes-down-massive-bot-farm-seizes-150-000-sim-cards/
In this episode Erich and Javvad talk about the US government email hack, an ethical hacker gone rogue, Ruskies tempting diplomats with a cheap car, and more #cybersecurity stories from this week.
Stories from the show:
Fewer Than 100 Scammers Responsible For Global Email Extortion
https://www.infosecurity-magazine.com/news/fewer-100-scammers-global-email/
Chinese Hackers Gained Access To Some U.S. Government Emails, Microsoft Says
https://www.forbes.com/sites/siladityaray/2023/07/12/chinese-hackers-gained-access-to-some-us-government-emails-microsoft-says/?sh=5f49e30c2a37
Russian hackers lured diplomats in Ukraine with cheap BMW ad
https://www.reuters.com/world/europe/russian-hackers-lured-embassy-workers-ukraine-with-an-ad-cheap-bmw-2023-07-12/
Cybersecurity professional accused of stealing $9M in crypto
https://techcrunch.com/2023/07/11/cybersecurity-professional-charged-for-stealing-9-million-in-crypto/?guccounter=1
Number of email-based phishing attacks surges 464%
https://www.helpnetsecurity.com/2023/07/10/evolving-cyberattack-landscape/
Indian developer fired 90 percent of tech support team, outsourced the job to AI
https://www.theregister.com/2023/07/13/dukaan_ai_support_replacement/