Defensive Security Podcast Episode 270

https://www.bleepingcomputer.com/news/security/cosmicstrand-uefi-malware-found-in-gigabyte-asus-motherboards/ https://www.bleepingcomputer.com/news/security/hackers-scan-for-vulnerabilities-within-15-minutes-of-disclosure/ https://www.techcircle.in/2022/07/31/paytm-mall-refutes-cyber-breach-report-says-users-data-safe

<a href="https://www.bleepingcomputer.com/news/security/cosmicstrand-uefi-malware-found-in-gigabyte-asus-motherboards/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/security/cosmicstrand-uefi-malware-found-in-gigabyte-asus-motherboards/</a> <a href="https://www.bleepingcomputer.com/news/security/hackers-scan-for-vulnerabilities-within-15-minutes-of-disclosure/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/security/hackers-scan-for-vulnerabilities-within-15-minutes-of-disclosure/</a> <a href="https://www.techcircle.in/2022/07/31/paytm-mall-refutes-cyber-breach-report-says-users-data-safe" rel="nofollow" target="_blank">https://www.techcircle.in/2022/07/31/paytm-mall-refutes-cyber-breach-report-says-users-data-safe</a>

Defensive Security Podcast Episode 269

Defensive Security Podcast Episode 268

Defensive Security Podcast Episode 267

https://www.csoonline.com/article/3660560/uber-cisos-trial-underscores-the-importance-of-truth-transparency-and-trust.html https://thehackernews.com/2022/06/conti-leaks-reveal-ransomware-gangs.html?m=1 https://www.bleepingcomputer.com/news/security/new-symbiote-malware-infects-all-running-processes-on-linux-systems/ https://doublepulsar.com/bpfdoor-an-active-chinese-global-surveillance-tool-54b078f1a896

<a href="https://www.csoonline.com/article/3660560/uber-cisos-trial-underscores-the-importance-of-truth-transparency-and-trust.html" rel="nofollow" target="_blank">https://www.csoonline.com/article/3660560/uber-cisos-trial-underscores-the-importance-of-truth-transparency-and-trust.html</a> <a href="https://thehackernews.com/2022/06/conti-leaks-reveal-ransomware-gangs.html?m=1" rel="nofollow" target="_blank">https://thehackernews.com/2022/06/conti-leaks-reveal-ransomware-gangs.html?m=1</a> <a href="https://www.bleepingcomputer.com/news/security/new-symbiote-malware-infects-all-running-processes-on-linux-systems/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/security/new-symbiote-malware-infects-all-running-processes-on-linux-systems/</a> <a href="https://doublepulsar.com/bpfdoor-an-active-chinese-global-surveillance-tool-54b078f1a896" rel="nofollow" target="_blank">https://doublepulsar.com/bpfdoor-an-active-chinese-global-surveillance-tool-54b078f1a896</a>

Defensive Security Podcast Episode 266

Google Exposes Initial Access Broker Ties With Ransomware Actors (bankinfosecurity.com) Okta says hundreds of companies impacted by security breach | TechCrunch Okta: “We made a mistake” delaying the Lapsus$ hack disclosure (bleepingcomputer.com) Microsoft confirms Lapsus$ breach after hackers publish Bing, Cortana source code | TechCrunch DEV-0537 criminal actor targeting organizations for data exfiltration and destruction – Microsoft Security Blog Sabotage: Code added to popular NPM package wiped files in Russia and Belarus | Ars Technica President Biden Signs into Law the Cyber Incident Reporting Act (natlawreview.com) SEC Proposes Rules On Cybersecurity Risk Management, Strategy, Governance, And Incident Disclosure By Public Companies – Technology – United States (mondaq.com)

<a href="https://www.bankinfosecurity.com/google-exposes-initial-access-broker-ties-to-ransomware-a-18758" rel="nofollow" target="_blank">Google Exposes Initial Access Broker Ties With Ransomware Actors (bankinfosecurity.com)</a> <a href="https://techcrunch.com/2022/03/23/okta-breach-sykes-sitel/" rel="nofollow" target="_blank">Okta says hundreds of companies impacted by security breach | TechCrunch</a> <a href="https://www.bleepingcomputer.com/news/security/okta-we-made-a-mistake-delaying-the-lapsus-hack-disclosure/" rel="nofollow" target="_blank">Okta: “We made a mistake” delaying the Lapsus$ hack disclosure (bleepingcomputer.com)</a> <a href="https://techcrunch.com/2022/03/23/microsoft-lapsus-hack-source-code/" rel="nofollow" target="_blank">Microsoft confirms Lapsus$ breach after hackers publish Bing, Cortana source code | TechCrunch</a> <a href="https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/" rel="nofollow" target="_blank">DEV-0537 criminal actor targeting organizations for data exfiltration and destruction – Microsoft Security Blog</a> <a href="https://arstechnica.com/information-technology/2022/03/sabotage-code-added-to-popular-npm-package-wiped-files-in-russia-and-belarus/2/" rel="nofollow" target="_blank">Sabotage: Code added to popular NPM package wiped files in Russia and Belarus | Ars Technica</a> <a href="https://www.natlawreview.com/article/president-biden-signs-law-cyber-incident-reporting-act-imposing-reporting" rel="nofollow" target="_blank">President Biden Signs into Law the Cyber Incident Reporting Act (natlawreview.com)</a> <a href="https://www.mondaq.com/unitedstates/security/1173760/sec-proposes-rules-on-cybersecurity-risk-management-strategy-governance-and-incident-disclosure-by-public-companies" rel="nofollow" target="_blank">SEC Proposes Rules On Cybersecurity Risk Management, Strategy, Governance, And Incident Disclosure By Public Companies – Technology – United States (mondaq.com)</a>

Defensive Security Podcast Episode 265

Adafruit discloses data leak from ex-employee’s GitHub repo (bleepingcomputer.com) Malware now using NVIDIA’s stolen code signing certificates (bleepingcomputer.com) NSA report: This is how you should be securing your network | ZDNet

<a href="https://www.bleepingcomputer.com/news/security/adafruit-discloses-data-leak-from-ex-employees-github-repo/" rel="nofollow" target="_blank">Adafruit discloses data leak from ex-employee’s GitHub repo (bleepingcomputer.com)</a> <a href="https://www.bleepingcomputer.com/news/security/malware-now-using-nvidias-stolen-code-signing-certificates/" rel="nofollow" target="_blank">Malware now using NVIDIA’s stolen code signing certificates (bleepingcomputer.com)</a> <a href="https://www.zdnet.com/article/nsa-report-this-is-how-you-should-be-securing-your-network/" rel="nofollow" target="_blank">NSA report: This is how you should be securing your network | ZDNet</a>

Defensive Security Podcast Episode 264

https://www.govinfosecurity.com/data-breach-exposes-booking-details-19-million-customers-a-18505 https://www.helpnetsecurity.com/2022/02/11/cloud-security-training/ https://www.bankinfosecurity.com/massive-breach-hits-500-e-commerce-sites-a-18492 https://www.darkreading.com/cloud/linux-malware-on-the-rise-including-illicit-use-of-cobalt-strike https://www.darkreading.com/attacks-breaches/google-cuts-account-compromises-in-half-with-simple-change

<a href="https://www.govinfosecurity.com/data-breach-exposes-booking-details-19-million-customers-a-18505" rel="nofollow" target="_blank">https://www.govinfosecurity.com/data-breach-exposes-booking-details-19-million-customers-a-18505</a> <a href="https://www.helpnetsecurity.com/2022/02/11/cloud-security-training/" rel="nofollow" target="_blank">https://www.helpnetsecurity.com/2022/02/11/cloud-security-training/</a> <a href="https://www.bankinfosecurity.com/massive-breach-hits-500-e-commerce-sites-a-18492" rel="nofollow" target="_blank">https://www.bankinfosecurity.com/massive-breach-hits-500-e-commerce-sites-a-18492</a> <a href="https://www.darkreading.com/cloud/linux-malware-on-the-rise-including-illicit-use-of-cobalt-strike" rel="nofollow" target="_blank">https://www.darkreading.com/cloud/linux-malware-on-the-rise-including-illicit-use-of-cobalt-strike</a> <a href="https://www.darkreading.com/attacks-breaches/google-cuts-account-compromises-in-half-with-simple-change" rel="nofollow" target="_blank">https://www.darkreading.com/attacks-breaches/google-cuts-account-compromises-in-half-with-simple-change</a>

Defensive Security Podcast Episode 263

https://www.darkreading.com/edge-threat-monitor/most-common-cause-of-data-breach-in-2021-phishing-smishing-bec https://www.bleepingcomputer.com/news/security/fbi-shares-lockbit-ransomware-technical-details-defense-tips/ https://www.csoonline.com/article/3648991/dhs-announces-the-creation-of-the-cyber-safety-review-board.html https://www.darkreading.com/application-security/disclosure-panic-patch-can-we-do-better-

<a href="https://www.darkreading.com/edge-threat-monitor/most-common-cause-of-data-breach-in-2021-phishing-smishing-bec" rel="nofollow" target="_blank">https://www.darkreading.com/edge-threat-monitor/most-common-cause-of-data-breach-in-2021-phishing-smishing-bec</a> <a href="https://www.bleepingcomputer.com/news/security/fbi-shares-lockbit-ransomware-technical-details-defense-tips/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/security/fbi-shares-lockbit-ransomware-technical-details-defense-tips/</a> <a href="https://www.csoonline.com/article/3648991/dhs-announces-the-creation-of-the-cyber-safety-review-board.html" rel="nofollow" target="_blank">https://www.csoonline.com/article/3648991/dhs-announces-the-creation-of-the-cyber-safety-review-board.html</a> <a href="https://www.darkreading.com/application-security/disclosure-panic-patch-can-we-do-better-" rel="nofollow" target="_blank">https://www.darkreading.com/application-security/disclosure-panic-patch-can-we-do-better-</a>

Defensive Security Podcast Episode 262

https://www.bleepingcomputer.com/news/security/hackers-are-taking-over-ceo-accounts-with-rogue-oauth-apps/ https://blog.f-secure.com/insight-from-a-large-scale-phishing-study/ https://www.darkreading.com/attacks-breaches/log4j-proved-public-disclosure-still-helps-attackers https://www.csoonline.com/article/3647756/how-to-prioritize-and-remediate-vulnerabilities-in-the-wake-of-log4j-and-microsofts-patch-tuesday-b.html

<a href="https://www.bleepingcomputer.com/news/security/hackers-are-taking-over-ceo-accounts-with-rogue-oauth-apps/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/security/hackers-are-taking-over-ceo-accounts-with-rogue-oauth-apps/</a> <a href="https://blog.f-secure.com/insight-from-a-large-scale-phishing-study/" rel="nofollow" target="_blank">https://blog.f-secure.com/insight-from-a-large-scale-phishing-study/</a> <a href="https://www.darkreading.com/attacks-breaches/log4j-proved-public-disclosure-still-helps-attackers" rel="nofollow" target="_blank">https://www.darkreading.com/attacks-breaches/log4j-proved-public-disclosure-still-helps-attackers</a> <a href="https://www.csoonline.com/article/3647756/how-to-prioritize-and-remediate-vulnerabilities-in-the-wake-of-log4j-and-microsofts-patch-tuesday-b.html" rel="nofollow" target="_blank">https://www.csoonline.com/article/3647756/how-to-prioritize-and-remediate-vulnerabilities-in-the-wake-of-log4j-and-microsofts-patch-tuesday-b.html</a>

Defensive Security Podcast Episode 261

Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data  breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.

I always learn something whenever I listen to this podcast. Very entertaining

Love this Podcast

These guys are knowledgeable, articulate, and engaging. This is a great listen.

Awesome

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

A question from Bob on Active Directory; 67 percent of critical infrastructure providers were breached last year; Malware coming from shipping scanners; It’s the end of the road for Windows Server 2003; Details emerge on the Boeing hack; Testing your APT response plan; Revamping your insider threat program; Beware of computers in hotel business centers. Subscribe in iTunes | Podcast RSS Feed | Twitter | Email http://www.esecurityplanet.com/network-security/67-percent-of-critical-infrastructure-providers-were-breached-last-year.html http://www.securityweek.com/hackers-attack-shipping-and-logistics-firms-using-malware-laden-handheld-scanners http://blogs.technet.com/b/canitpro/archive/2014/06/10/migrating-from-windows-server-2003-to-windows-server-2012-r2.aspx http://www.databreachtoday.com/details-emerge-boeing-hack-a-7053 http://www.databreachtoday.com/interviews/testing-your-apt-response-plan-i-2382 http://www.csoonline.com/article/2453392/security/revamping-your-insider-threat-program.html?nsdr=true http://krebsonsecurity.com/2014/07/beware-keyloggers-at-hotel-business-centers/

A question from Bob on Active Directory; 67 percent of critical infrastructure providers were breached last year; Malware coming from shipping scanners; It’s the end of the road for Windows Server 2003; Details emerge on the Boeing hack; Testing your APT response plan; Revamping your insider threat program; Beware of computers in hotel business centers. <a href="https://itunes.apple.com/us/podcast/defensive-security/id585914973" rel="nofollow" target="_blank">Subscribe in iTunes</a> | <a href="https://defensivesecurity.org/feed/podcast" rel="nofollow" target="_blank">Podcast RSS Feed</a> | <a href="http://www.twitter.com/defensivesec" rel="nofollow" target="_blank">Twitter </a>| <a href="mailto:info@defensivesecurity.org">Email</a> <a href="http://www.esecurityplanet.com/network-security/67-percent-of-critical-infrastructure-providers-were-breached-last-year.html" rel="nofollow" target="_blank">http://www.esecurityplanet.com/network-security/67-percent-of-critical-infrastructure-providers-were-breached-last-year.html</a> <a href="http://www.securityweek.com/hackers-attack-shipping-and-logistics-firms-using-malware-laden-handheld-scanners" rel="nofollow" target="_blank">http://www.securityweek.com/hackers-attack-shipping-and-logistics-firms-using-malware-laden-handheld-scanners</a> <a href="http://blogs.technet.com/b/canitpro/archive/2014/06/10/migrating-from-windows-server-2003-to-windows-server-2012-r2.aspx" rel="nofollow" target="_blank">http://blogs.technet.com/b/canitpro/archive/2014/06/10/migrating-from-windows-server-2003-to-windows-server-2012-r2.aspx</a> <a href="http://www.databreachtoday.com/details-emerge-boeing-hack-a-7053" rel="nofollow" target="_blank">http://www.databreachtoday.com/details-emerge-boeing-hack-a-7053</a> <a href="http://www.databreachtoday.com/interviews/testing-your-apt-response-plan-i-2382" rel="nofollow" target="_blank">http://www.databreachtoday.com/interviews/testing-your-apt-response-plan-i-2382</a> <a href="http://www.csoonline.com/article/2453392/security/revamping-your-insider-threat-program.html?nsdr=true" rel="nofollow" target="_blank">http://www.csoonline.com/article/2453392/security/revamping-your-insider-threat-program.html?nsdr=true</a> <a href="http://krebsonsecurity.com/2014/07/beware-keyloggers-at-hotel-business-centers/" rel="nofollow" target="_blank">http://krebsonsecurity.com/2014/07/beware-keyloggers-at-hotel-business-centers/</a>

Defensive Security Podcast Episode 76

http://www.wsj.com/articles/puzzle-forms-in-morgan-stanley-data-breach-1420590326 http://www.economist.com/news/leaders/21637390-states-should-police-corporate-cyber-security-more-toughlybut-react-breaches-cautiously-losing http://www.securityweek.com/google-discloses-new-unpatched-windows-81-privilege-escalation-flaw http://www.cultofmac.com/308478/confidential-apple-product-plans-quanta/ http://www.networkworld.com/article/2867565/microsoft-subnet/hackers-dump-over-30-000-confidential-client-emails-after-bank-refuses-to-pay-ransom.html

<a href="http://www.wsj.com/articles/puzzle-forms-in-morgan-stanley-data-breach-1420590326" rel="nofollow" target="_blank">http://www.wsj.com/articles/puzzle-forms-in-morgan-stanley-data-breach-1420590326</a> <a href="http://www.economist.com/news/leaders/21637390-states-should-police-corporate-cyber-security-more-toughlybut-react-breaches-cautiously-losing" rel="nofollow" target="_blank">http://www.economist.com/news/leaders/21637390-states-should-police-corporate-cyber-security-more-toughlybut-react-breaches-cautiously-losing</a> <a href="http://www.securityweek.com/google-discloses-new-unpatched-windows-81-privilege-escalation-flaw" rel="nofollow" target="_blank">http://www.securityweek.com/google-discloses-new-unpatched-windows-81-privilege-escalation-flaw</a> <a href="http://www.cultofmac.com/308478/confidential-apple-product-plans-quanta/" rel="nofollow" target="_blank">http://www.cultofmac.com/308478/confidential-apple-product-plans-quanta/</a> <a href="http://www.networkworld.com/article/2867565/microsoft-subnet/hackers-dump-over-30-000-confidential-client-emails-after-bank-refuses-to-pay-ransom.html" rel="nofollow" target="_blank">http://www.networkworld.com/article/2867565/microsoft-subnet/hackers-dump-over-30-000-confidential-client-emails-after-bank-refuses-to-pay-ransom.html</a>

Defensive Security Podcast Episode 101

http://www.symantec.com/connect/fr/blogs/check-your-sources-trojanized-open-source-ssh-software-used-steal-information https://nakedsecurity.sophos.com/2015/05/21/anatomy-of-a-logjam-another-tls-vulnerability-and-what-to-do-about-it/ http://krebsonsecurity.com/2015/05/carefirst-blue-cross-breach-hits-1-1m/ http://www.forbes.com/sites/thomasbrewster/2015/05/20/guns-bombs-hacking-cars-and-planes-dangerous-tweets-for-a-security-researcher/

<a href="http://www.symantec.com/connect/fr/blogs/check-your-sources-trojanized-open-source-ssh-software-used-steal-information" rel="nofollow" target="_blank">http://www.symantec.com/connect/fr/blogs/check-your-sources-trojanized-open-source-ssh-software-used-steal-information</a> <a href="https://nakedsecurity.sophos.com/2015/05/21/anatomy-of-a-logjam-another-tls-vulnerability-and-what-to-do-about-it/" rel="nofollow" target="_blank">https://nakedsecurity.sophos.com/2015/05/21/anatomy-of-a-logjam-another-tls-vulnerability-and-what-to-do-about-it/</a> <a href="http://krebsonsecurity.com/2015/05/carefirst-blue-cross-breach-hits-1-1m/" rel="nofollow" target="_blank">http://krebsonsecurity.com/2015/05/carefirst-blue-cross-breach-hits-1-1m/</a> <a href="http://www.forbes.com/sites/thomasbrewster/2015/05/20/guns-bombs-hacking-cars-and-planes-dangerous-tweets-for-a-security-researcher/" rel="nofollow" target="_blank">http://www.forbes.com/sites/thomasbrewster/2015/05/20/guns-bombs-hacking-cars-and-planes-dangerous-tweets-for-a-security-researcher/</a>

Defensive Security Podcast Episode 118

http://www.welivesecurity.com/2014/11/25/craigslist-redirected-prank-site-via-dns-hijack/https://nakedsecurity.sophos.com/2014/11/28/syrian-electronic-army-returns-with-thanksgiving-press-hack/http://www.theregister.co.uk/2014/12/02/us_parking_garage_breach/http://arstechnica.com/security/2014/12/critical-networks-in-us-15-nations-completely-owned-by-iran-backed-hackers/http://www.wired.com/2014/12/sony-hack-what-we-know/

<a href="http://www.welivesecurity.com/2014/11/25/craigslist-redirected-prank-site-via-dns-hijack/" rel="nofollow" target="_blank">http://www.welivesecurity.com/2014/11/25/craigslist-redirected-prank-site-via-dns-hijack/</a><a href="https://nakedsecurity.sophos.com/2014/11/28/syrian-electronic-army-returns-with-thanksgiving-press-hack/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29" rel="nofollow" target="_blank">https://nakedsecurity.sophos.com/2014/11/28/syrian-electronic-army-returns-with-thanksgiving-press-hack/</a><a href="http://www.theregister.co.uk/2014/12/02/us_parking_garage_breach/" rel="nofollow" target="_blank">http://www.theregister.co.uk/2014/12/02/us_parking_garage_breach/</a><a href="http://arstechnica.com/security/2014/12/critical-networks-in-us-15-nations-completely-owned-by-iran-backed-hackers/" rel="nofollow" target="_blank">http://arstechnica.com/security/2014/12/critical-networks-in-us-15-nations-completely-owned-by-iran-backed-hackers/</a><a href="http://www.wired.com/2014/12/sony-hack-what-we-know/" rel="nofollow" target="_blank">http://www.wired.com/2014/12/sony-hack-what-we-know/</a>

Defensive Security Podcast Episode 95

https://www.straitstimes.com/singapore/personal-info-of-15m-singhealth-patients-including-pm-lee-stolen-in-singapores-most https://www.bankinfosecurity.com/labcorp-still-recovering-from-ransomware-attack-a-11235 https://www.securityweek.com/cyber-axis-evil-rewriting-cyber-kill-chain https://arstechnica.com/information-technology/2018/07/prolific-hacking-group-steals-almost-1-million-from-russian-bank/#p3 https://www.bleepingcomputer.com/news/government/us-charges-12-russian-intelligence-officers-for-hacking-dnc-running-dcleaks/

<a href="https://www.straitstimes.com/singapore/personal-info-of-15m-singhealth-patients-including-pm-lee-stolen-in-singapores-most" rel="nofollow" target="_blank">https://www.straitstimes.com/singapore/personal-info-of-15m-singhealth-patients-including-pm-lee-stolen-in-singapores-most</a> <a href="https://www.bankinfosecurity.com/labcorp-still-recovering-from-ransomware-attack-a-11235" rel="nofollow" target="_blank">https://www.bankinfosecurity.com/labcorp-still-recovering-from-ransomware-attack-a-11235</a> <a href="https://www.securityweek.com/cyber-axis-evil-rewriting-cyber-kill-chain" rel="nofollow" target="_blank">https://www.securityweek.com/cyber-axis-evil-rewriting-cyber-kill-chain</a> <a href="https://arstechnica.com/information-technology/2018/07/prolific-hacking-group-steals-almost-1-million-from-russian-bank/#p3" rel="nofollow" target="_blank">https://arstechnica.com/information-technology/2018/07/prolific-hacking-group-steals-almost-1-million-from-russian-bank/#p3</a> <a href="https://www.bleepingcomputer.com/news/government/us-charges-12-russian-intelligence-officers-for-hacking-dnc-running-dcleaks/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/government/us-charges-12-russian-intelligence-officers-for-hacking-dnc-running-dcleaks/</a>

Defensive Security Podcast Episode 223

https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html http://www.csoonline.com/article/3012443/security/how-the-nsa-uses-behavior-analytics-to-detect-threats.html#tk.rss_all http://www.databreachtoday.com/wyndham-agrees-to-settle-ftc-breach-case-a-8737 https://technet.microsoft.com/en-us/library/security/ms15-127.aspx https://www.reddit.com/r/sysadmin/comments/3wa8rl/early_warning_system_for_cryptowall_crypto_canary/

<a href="https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html" rel="nofollow" target="_blank">https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html</a> <a href="http://www.csoonline.com/article/3012443/security/how-the-nsa-uses-behavior-analytics-to-detect-threats.html#tk.rss_all" rel="nofollow" target="_blank">http://www.csoonline.com/article/3012443/security/how-the-nsa-uses-behavior-analytics-to-detect-threats.html#tk.rss_all</a> <a href="http://www.databreachtoday.com/wyndham-agrees-to-settle-ftc-breach-case-a-8737" rel="nofollow" target="_blank">http://www.databreachtoday.com/wyndham-agrees-to-settle-ftc-breach-case-a-8737</a> <a href="https://technet.microsoft.com/en-us/library/security/ms15-127.aspx" rel="nofollow" target="_blank">https://technet.microsoft.com/en-us/library/security/ms15-127.aspx</a> <a href="https://www.reddit.com/r/sysadmin/comments/3wa8rl/early_warning_system_for_cryptowall_crypto_canary/" rel="nofollow" target="_blank">https://www.reddit.com/r/sysadmin/comments/3wa8rl/early_warning_system_for_cryptowall_crypto_canary/</a>

Defensive Security Podcast Episode 142

http://www.darkreading.com/attacks-breaches/long-running-cyberattacks-become-the-norm/d/d-id/1318392http://www.hotforsecurity.com/blog/top-10-data-breaches-of-2014-lessons-learned-for-a-safer-2015-11101.htmlhttp://www.net-security.org/secworld.php?id=17784http://m.healthcareitnews.com/news/phi-485k-swiped-usps-data-breachhttp://www.databreachtoday.com/breach-prevention-5-lessons-learned-a-7757/op-1http://www.securityweek.com/morgan-stanley-fires-employee-stealing-client-data

<a href="http://www.darkreading.com/attacks-breaches/long-running-cyberattacks-become-the-norm/d/d-id/1318392" rel="nofollow" target="_blank">http://www.darkreading.com/attacks-breaches/long-running-cyberattacks-become-the-norm/d/d-id/1318392</a><a href="http://www.hotforsecurity.com/blog/top-10-data-breaches-of-2014-lessons-learned-for-a-safer-2015-11101.html" rel="nofollow" target="_blank">http://www.hotforsecurity.com/blog/top-10-data-breaches-of-2014-lessons-learned-for-a-safer-2015-11101.html</a><a href="http://www.net-security.org/secworld.php?id=17784" rel="nofollow" target="_blank">http://www.net-security.org/secworld.php?id=17784</a><a href="http://m.healthcareitnews.com/news/phi-485k-swiped-usps-data-breach" rel="nofollow" target="_blank">http://m.healthcareitnews.com/news/phi-485k-swiped-usps-data-breach</a><a href="http://www.databreachtoday.com/breach-prevention-5-lessons-learned-a-7757/op-1" rel="nofollow" target="_blank">http://www.databreachtoday.com/breach-prevention-5-lessons-learned-a-7757/op-1</a><a href="http://www.securityweek.com/morgan-stanley-fires-employee-stealing-client-data" rel="nofollow" target="_blank">http://www.securityweek.com/morgan-stanley-fires-employee-stealing-client-data</a>

Defensive Security Podcast Episode 100

http://www.bizjournals.com/atlanta/blog/atlantech/2015/09/atlantas-bitpay-got-hacked-for-1-8-million-in.html http://www.securityweek.com/excellus-data-breach-impacts-10-million http://www.databreachtoday.com/attacks-on-insurers-lessons-learned-a-8530 http://federalnewsradio.com/cybersecurity/2015/09/us-certs-dos-and-donts-for-after-the-cyber-hack/ http://www.theguardian.com/technology/2015/sep/10/cyber-threat-data-manipulation-us-intelligence-chief http://www.csoonline.com/article/2984543/vulnerabilities/as-containers-take-off-so-do-security-concerns.html

<a href="http://www.bizjournals.com/atlanta/blog/atlantech/2015/09/atlantas-bitpay-got-hacked-for-1-8-million-in.html" rel="nofollow" target="_blank">http://www.bizjournals.com/atlanta/blog/atlantech/2015/09/atlantas-bitpay-got-hacked-for-1-8-million-in.html</a> <a href="http://www.securityweek.com/excellus-data-breach-impacts-10-million" rel="nofollow" target="_blank">http://www.securityweek.com/excellus-data-breach-impacts-10-million</a> <a href="http://www.databreachtoday.com/attacks-on-insurers-lessons-learned-a-8530" rel="nofollow" target="_blank">http://www.databreachtoday.com/attacks-on-insurers-lessons-learned-a-8530</a> <a href="http://federalnewsradio.com/cybersecurity/2015/09/us-certs-dos-and-donts-for-after-the-cyber-hack/" rel="nofollow" target="_blank">http://federalnewsradio.com/cybersecurity/2015/09/us-certs-dos-and-donts-for-after-the-cyber-hack/</a> <a href="http://www.theguardian.com/technology/2015/sep/10/cyber-threat-data-manipulation-us-intelligence-chief" rel="nofollow" target="_blank">http://www.theguardian.com/technology/2015/sep/10/cyber-threat-data-manipulation-us-intelligence-chief</a> <a href="http://www.csoonline.com/article/2984543/vulnerabilities/as-containers-take-off-so-do-security-concerns.html" rel="nofollow" target="_blank">http://www.csoonline.com/article/2984543/vulnerabilities/as-containers-take-off-so-do-security-concerns.html</a>

Defensive Security Podcast Episode 131

https://blog.malwarebytes.org/intelligence/2016/01/draft-lechiffre-a-manually-run-ransomware/ http://www.tripwire.com/state-of-security/security-data-protection/boeing-supplier-hacked-claims-55-million-worth-of-damage-as-stock-price-falls/ http://krebsonsecurity.com/2016/01/firm-sues-cyber-insurer-over-480k-loss/ http://shawnetuma.com/2016/01/08/supervalu-data-breach-class-action-dismissed-for-lack-of-harm/ Hack in the Box: https://conference.hitb.org/ Circle City Con: https://circlecitycon.com/tickets/

<a href="https://blog.malwarebytes.org/intelligence/2016/01/draft-lechiffre-a-manually-run-ransomware/" rel="noreferrer nofollow" target="_blank">https://blog.malwarebytes.org/intelligence/2016/01/draft-lechiffre-a-manually-run-ransomware/</a> <a href="http://www.tripwire.com/state-of-security/security-data-protection/boeing-supplier-hacked-claims-55-million-worth-of-damage-as-stock-price-falls/" rel="noreferrer nofollow" target="_blank">http://www.tripwire.com/state-of-security/security-data-protection/boeing-supplier-hacked-claims-55-million-worth-of-damage-as-stock-price-falls/</a> <a href="http://krebsonsecurity.com/2016/01/firm-sues-cyber-insurer-over-480k-loss/" rel="noreferrer nofollow" target="_blank">http://krebsonsecurity.com/2016/01/firm-sues-cyber-insurer-over-480k-loss/</a> <a href="http://shawnetuma.com/2016/01/08/supervalu-data-breach-class-action-dismissed-for-lack-of-harm/" rel="noreferrer nofollow" target="_blank">http://shawnetuma.com/2016/01/08/supervalu-data-breach-class-action-dismissed-for-lack-of-harm/</a> Hack in the Box: <a href="https://conference.hitb.org/" rel="nofollow" target="_blank">https://conference.hitb.org/</a> Circle City Con: <a href="https://circlecitycon.com/tickets/" rel="nofollow" target="_blank">https://circlecitycon.com/tickets/</a>

Defensive Security Podcast Episode 146

https://www.zdnet.com/article/hackers-wipe-us-servers-of-email-provider-vfemail/ https://www.securityweek.com/russian-state-sponsored-hackers-are-fastest-crowdstrike https://www.zdnet.com/article/icann-there-is-an-ongoing-and-significant-risk-to-dns-infrastructure/ https://www.infosecurity-magazine.com/news/password-managers-no-more-secure-1/ https://www.zdnet.com/article/microsoft-do-these-things-now-to-protect-your-network/

<a href="https://www.zdnet.com/article/hackers-wipe-us-servers-of-email-provider-vfemail/" rel="noopener noreferrer nofollow" target="_blank">https://www.zdnet.com/article/hackers-wipe-us-servers-of-email-provider-vfemail/</a> <a href="https://www.securityweek.com/russian-state-sponsored-hackers-are-fastest-crowdstrike" rel="noopener noreferrer nofollow" target="_blank">https://www.securityweek.com/russian-state-sponsored-hackers-are-fastest-crowdstrike</a> <a href="https://www.zdnet.com/article/icann-there-is-an-ongoing-and-significant-risk-to-dns-infrastructure/" rel="noopener noreferrer nofollow" target="_blank">https://www.zdnet.com/article/icann-there-is-an-ongoing-and-significant-risk-to-dns-infrastructure/</a> <a href="https://www.infosecurity-magazine.com/news/password-managers-no-more-secure-1/" rel="noopener noreferrer nofollow" target="_blank">https://www.infosecurity-magazine.com/news/password-managers-no-more-secure-1/</a> <a href="https://www.zdnet.com/article/microsoft-do-these-things-now-to-protect-your-network/" rel="noopener noreferrer nofollow" target="_blank">https://www.zdnet.com/article/microsoft-do-these-things-now-to-protect-your-network/</a>

Defensive Security Podcast Episode 234

http://www.businessweek.com/articles/2014-09-11/home-depot-hack-malware-points-to-different-hackers-than-targets http://www.csoonline.com/article/2605857/security-awareness/successful-security-awareness-programs-hold-employees-hands-to-the-fire-in.html http://www.networkworld.com/article/2604411/security0/ernst-and-young-accused-by-canadian-used-computer-dealer-of-data-breach.html http://www.cyber-security-blog.com/2013/08/Responding-to-a-Domain-Admin-Account-Compromise-Bootstrapping-Trust-A-Billion-Dollar-Cyber-Security-Problem.html http://digital-forensics.sans.org/blog/2013/06/20/overview-of-microsofts-best-practices-for-securing-active-directory

<a href="http://www.businessweek.com/articles/2014-09-11/home-depot-hack-malware-points-to-different-hackers-than-targets" rel="nofollow" target="_blank">http://www.businessweek.com/articles/2014-09-11/home-depot-hack-malware-points-to-different-hackers-than-targets</a> <a href="http://www.csoonline.com/article/2605857/security-awareness/successful-security-awareness-programs-hold-employees-hands-to-the-fire-in.html#tk.rss_all" rel="nofollow" target="_blank">http://www.csoonline.com/article/2605857/security-awareness/successful-security-awareness-programs-hold-employees-hands-to-the-fire-in.html</a> <a href="http://www.networkworld.com/article/2604411/security0/ernst-and-young-accused-by-canadian-used-computer-dealer-of-data-breach.html" rel="nofollow" target="_blank">http://www.networkworld.com/article/2604411/security0/ernst-and-young-accused-by-canadian-used-computer-dealer-of-data-breach.html</a> <a href="http://www.cyber-security-blog.com/2013/08/Responding-to-a-Domain-Admin-Account-Compromise-Bootstrapping-Trust-A-Billion-Dollar-Cyber-Security-Problem.html" rel="nofollow" target="_blank">http://www.cyber-security-blog.com/2013/08/Responding-to-a-Domain-Admin-Account-Compromise-Bootstrapping-Trust-A-Billion-Dollar-Cyber-Security-Problem.html</a> <a href="http://digital-forensics.sans.org/blog/2013/06/20/overview-of-microsofts-best-practices-for-securing-active-directory" rel="nofollow" target="_blank">http://digital-forensics.sans.org/blog/2013/06/20/overview-of-microsofts-best-practices-for-securing-active-directory</a>

Defensive Security Podcast Episode 84

https://www.theregister.co.uk/2019/03/20/steffan_needham_aws_rampage_prison_sentence_voova/ https://www.zdnet.com/google-amp/article/study-shows-programmers-will-take-the-easy-way-out-and-not-implement-proper-password-security/ https://arstechnica.com/information-technology/2019/03/50-shades-of-greyhat-a-study-in-how-not-to-handle-security-disclosures/ https://matrix.org/blog/2019/04/11/security-incident/index.html

<a href="https://www.theregister.co.uk/2019/03/20/steffan_needham_aws_rampage_prison_sentence_voova/" rel="noopener noreferrer nofollow" target="_blank">https://www.theregister.co.uk/2019/03/20/steffan_needham_aws_rampage_prison_sentence_voova/</a> <a href="https://www.zdnet.com/google-amp/article/study-shows-programmers-will-take-the-easy-way-out-and-not-implement-proper-password-security/" rel="noopener noreferrer nofollow" target="_blank">https://www.zdnet.com/google-amp/article/study-shows-programmers-will-take-the-easy-way-out-and-not-implement-proper-password-security/</a> <a href="https://arstechnica.com/information-technology/2019/03/50-shades-of-greyhat-a-study-in-how-not-to-handle-security-disclosures/" rel="noopener noreferrer nofollow" target="_blank">https://arstechnica.com/information-technology/2019/03/50-shades-of-greyhat-a-study-in-how-not-to-handle-security-disclosures/</a> <a href="https://matrix.org/blog/2019/04/11/security-incident/index.html" rel="noopener noreferrer nofollow" target="_blank">https://matrix.org/blog/2019/04/11/security-incident/index.html</a>

Defensive Security Podcast Episode 235

http://www.bloomberg.com/news/articles/2015-02-19/morgan-stanley-probe-said-to-examine-whether-adviser-got-hacked http://gizmodo.com/state-department-computer-systems-hit-by-hackers-1659549503/1686899463/+chris-mills http://www.theregister.co.uk/2015/02/25/gemalto_everythings_fine_security_industry_hang_on_a_minute/ https://www2.fireeye.com/rs/fireye/images/rpt-m-trends-2015.pdf http://www.csoonline.com/article/2887930/network-security/how-better-log-monitoring-can-prevent-data-breaches.html

<a href="http://www.bloomberg.com/news/articles/2015-02-19/morgan-stanley-probe-said-to-examine-whether-adviser-got-hacked" rel="nofollow" target="_blank">http://www.bloomberg.com/news/articles/2015-02-19/morgan-stanley-probe-said-to-examine-whether-adviser-got-hacked</a> <a href="http://gizmodo.com/state-department-computer-systems-hit-by-hackers-1659549503/1686899463/+chris-mills" rel="nofollow" target="_blank">http://gizmodo.com/state-department-computer-systems-hit-by-hackers-1659549503/1686899463/+chris-mills</a> <a href="http://www.theregister.co.uk/2015/02/25/gemalto_everythings_fine_security_industry_hang_on_a_minute/" rel="nofollow" target="_blank">http://www.theregister.co.uk/2015/02/25/gemalto_everythings_fine_security_industry_hang_on_a_minute/</a> <a href="https://www2.fireeye.com/rs/fireye/images/rpt-m-trends-2015.pdf" rel="nofollow" target="_blank">https://www2.fireeye.com/rs/fireye/images/rpt-m-trends-2015.pdf</a> <a href="http://www.csoonline.com/article/2887930/network-security/how-better-log-monitoring-can-prevent-data-breaches.html" rel="nofollow" target="_blank">http://www.csoonline.com/article/2887930/network-security/how-better-log-monitoring-can-prevent-data-breaches.html</a>

Defensive Security Podcast Episode 107

Defensive Security Podcast Episode 236

http://www.zdnet.com/article/vtech-hack-gets-worse-kids-photos-chat-logs-also-stolen/ http://krebsonsecurity.com/2015/12/dhs-giving-firms-free-penetration-tests/ http://www.csoonline.com/article/3011580/data-protection/insurance-companies-will-crack-down-on-cyber-security-in-2016-report.html http://www.forbes.com/sites/joannabelbey/2015/11/30/7-tips-from-the-fbi-to-prepare-your-firm-for-a-cyber-attack/

<a href="http://www.zdnet.com/article/vtech-hack-gets-worse-kids-photos-chat-logs-also-stolen/" rel="nofollow" target="_blank">http://www.zdnet.com/article/vtech-hack-gets-worse-kids-photos-chat-logs-also-stolen/</a> <a href="http://krebsonsecurity.com/2015/12/dhs-giving-firms-free-penetration-tests/" rel="nofollow" target="_blank">http://krebsonsecurity.com/2015/12/dhs-giving-firms-free-penetration-tests/</a> <a href="http://www.csoonline.com/article/3011580/data-protection/insurance-companies-will-crack-down-on-cyber-security-in-2016-report.html" rel="nofollow" target="_blank">http://www.csoonline.com/article/3011580/data-protection/insurance-companies-will-crack-down-on-cyber-security-in-2016-report.html</a> <a href="http://www.forbes.com/sites/joannabelbey/2015/11/30/7-tips-from-the-fbi-to-prepare-your-firm-for-a-cyber-attack/" rel="nofollow" target="_blank">http://www.forbes.com/sites/joannabelbey/2015/11/30/7-tips-from-the-fbi-to-prepare-your-firm-for-a-cyber-attack/</a>

Defensive Security Podcast Episode 141

https://www.csoonline.com/article/3441220/marriott-data-breach-faq-how-did-it-happen-and-what-was-the-impact.html

<a href="https://www.csoonline.com/article/3441220/marriott-data-breach-faq-how-did-it-happen-and-what-was-the-impact.html" rel="nofollow" target="_blank">https://www.csoonline.com/article/3441220/marriott-data-breach-faq-how-did-it-happen-and-what-was-the-impact.html</a>

Defensive Security Podcast Episode 238

http://training.pcisecuritystandards.org/pci-ssc-bulletin-on-impending-revisions-to-pci-dss-pa-dss-assessor http://www.theguardian.com/technology/2015/feb/05/company-loses-17m-in-email-scam http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html?_r=0 http://www.group-ib.com/files/Anunak_APT_against_financial_institutions.pdf http://arstechnica.com/security/2015/02/pwned-in-7-seconds-hackers-use-flash-and-ie-to-target-forbes-visitors/ http://www.csoonline.com/article/2883248/data-protection/zero-days-last-up-to-six-months-for-some-malware.html#tk.rss_all http://krebsonsecurity.com/2015/02/anthem-breach-may-have-started-in-april-2014/

<a href="http://training.pcisecuritystandards.org/pci-ssc-bulletin-on-impending-revisions-to-pci-dss-pa-dss-assessor" rel="nofollow" target="_blank">http://training.pcisecuritystandards.org/pci-ssc-bulletin-on-impending-revisions-to-pci-dss-pa-dss-assessor</a> <a href="http://www.theguardian.com/technology/2015/feb/05/company-loses-17m-in-email-scam" rel="nofollow" target="_blank">http://www.theguardian.com/technology/2015/feb/05/company-loses-17m-in-email-scam</a> <a href="http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html?_r=0" rel="nofollow" target="_blank">http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html?_r=0</a> <a href="http://www.group-ib.com/files/Anunak_APT_against_financial_institutions.pdf" rel="nofollow" target="_blank">http://www.group-ib.com/files/Anunak_APT_against_financial_institutions.pdf</a> <a href="http://arstechnica.com/security/2015/02/pwned-in-7-seconds-hackers-use-flash-and-ie-to-target-forbes-visitors/" rel="nofollow" target="_blank">http://arstechnica.com/security/2015/02/pwned-in-7-seconds-hackers-use-flash-and-ie-to-target-forbes-visitors/</a> <a href="http://www.csoonline.com/article/2883248/data-protection/zero-days-last-up-to-six-months-for-some-malware.html#tk.rss_all" rel="nofollow" target="_blank">http://www.csoonline.com/article/2883248/data-protection/zero-days-last-up-to-six-months-for-some-malware.html#tk.rss_all</a> <a href="http://krebsonsecurity.com/2015/02/anthem-breach-may-have-started-in-april-2014/" rel="nofollow" target="_blank">http://krebsonsecurity.com/2015/02/anthem-breach-may-have-started-in-april-2014/</a>

Defensive Security Podcast Episode 106

https://www.csoonline.com/article/3285982/data-protection/4-reasons-why-cisos-must-think-like-developers-to-build-cybersecurity-platforms.html https://www.csoonline.com/article/3287655/phishing/stop-training-your-employees-to-fall-for-phishing-attacks.html https://www.bankinfosecurity.com/cryptojacking-displaces-ransomware-as-top-malware-threat-a-11165 https://wiki.gentoo.org/wiki/Project:Infrastructure/Incident_Reports/2018-06-28_Github

<a href="https://www.csoonline.com/article/3285982/data-protection/4-reasons-why-cisos-must-think-like-developers-to-build-cybersecurity-platforms.html" rel="nofollow" target="_blank">https://www.csoonline.com/article/3285982/data-protection/4-reasons-why-cisos-must-think-like-developers-to-build-cybersecurity-platforms.html</a> <a href="https://www.csoonline.com/article/3287655/phishing/stop-training-your-employees-to-fall-for-phishing-attacks.html" rel="nofollow" target="_blank">https://www.csoonline.com/article/3287655/phishing/stop-training-your-employees-to-fall-for-phishing-attacks.html</a> <a href="https://www.bankinfosecurity.com/cryptojacking-displaces-ransomware-as-top-malware-threat-a-11165" rel="nofollow" target="_blank">https://www.bankinfosecurity.com/cryptojacking-displaces-ransomware-as-top-malware-threat-a-11165</a> <a href="https://wiki.gentoo.org/wiki/Project:Infrastructure/Incident_Reports/2018-06-28_Github" rel="nofollow" target="_blank">https://wiki.gentoo.org/wiki/Project:Infrastructure/Incident_Reports/2018-06-28_Github</a>

Defensive Security Podcast Episode 222

Defensive Security Podcast Episode 128

https://motherboard.vice.com/en_us/article/pa8emg/russian-indicted-jp-morgan-chase-hack https://www.zdnet.com/article/us-government-releases-post-mortem-report-on-equifax-hack/ https://www.zdnet.com/article/phishing-alert-north-korean-hacking-attacks-shows-your-email-is-still-the-weakest-link/ https://www.verizon.com/about/news/lifting-lid-cybercrime

<a href="https://motherboard.vice.com/en_us/article/pa8emg/russian-indicted-jp-morgan-chase-hack" rel="nofollow" target="_blank">https://motherboard.vice.com/en_us/article/pa8emg/russian-indicted-jp-morgan-chase-hack</a> <a href="https://www.zdnet.com/article/us-government-releases-post-mortem-report-on-equifax-hack/" rel="nofollow" target="_blank">https://www.zdnet.com/article/us-government-releases-post-mortem-report-on-equifax-hack/</a> <a href="https://www.zdnet.com/article/phishing-alert-north-korean-hacking-attacks-shows-your-email-is-still-the-weakest-link/" rel="nofollow" target="_blank">https://www.zdnet.com/article/phishing-alert-north-korean-hacking-attacks-shows-your-email-is-still-the-weakest-link/</a> <a href="https://www.verizon.com/about/news/lifting-lid-cybercrime" rel="nofollow" target="_blank">https://www.verizon.com/about/news/lifting-lid-cybercrime</a>

Defensive Security Podcast Episode 225

The Best Multi-Part Documentaries, with documentaries on Obama, Federer vs Nadal, the making of Star Wars, Netflix vs Blockbuster and more. Add episodes you're interested into your queue below!

Best Multi-Part Documentaries

The best podcast episodes on romantic relationships. Episodes talk about the 5 love languages, intimacy, and the taboo topics of sexual desires and infidelity. This topic is a deep dive into the science and complexities that face us in our relationships with others. Add episodes you're interested into your queue below!