Welcome back to the Tenable Research Podcast. In this new episode we look back at June’s Microsoft patches, and ask Tenable staff research engineer Satnam Narang what he feels the reasons are for the number of patches generally decreasing both monthly and annually. We are also joined by director of product management Ray Carney, as we look into the increase of ransomware in 2021, what have been the causes of this increase, and what the threat landscape looks like currently. Show References:https://www.tenable.com/blog/microsoft-june-2021-patch-tuesday-49-cves-cve-2021-31955-cve-2021-31956-and-cve-2021-33742 https://www.tenable.com/blog/cve-2021-21985-critical-vmware-vcenter-server-remote-code-execution Follow along for more from Tenable Research:Subscribe to the blogFollow Tenable’s Zero Day team on Medium

Welcome back to the Tenable Research Podcast. In this new episode we look back at June’s Microsoft patches, and ask Tenable staff research engineer Satnam Narang what he feels the reasons are for the number of patches generally decreasing both monthly and annually. We are also joined by director of product management Ray Carney, as we look into the increase of ransomware in 2021, what have been the causes of this increase, and what the threat landscape looks like currently.  Show References:<a href="https://www.tenable.com/blog/microsoft-june-2021-patch-tuesday-49-cves-cve-2021-31955-cve-2021-31956-and-cve-2021-33742" rel="nofollow" target="_blank">https://www.tenable.com/blog/microsoft-june-2021-patch-tuesday-49-cves-cve-2021-31955-cve-2021-31956-and-cve-2021-33742</a> <a href="https://www.tenable.com/blog/cve-2021-21985-critical-vmware-vcenter-server-remote-code-execution" rel="nofollow" target="_blank">https://www.tenable.com/blog/cve-2021-21985-critical-vmware-vcenter-server-remote-code-execution</a> Follow along for more from Tenable Research:<a href="http://www.tenable.com/blog" rel="nofollow" target="_blank">Subscribe to the blog</a><a href="https://medium.com/tenable-techblog" rel="nofollow" target="_blank">Follow Tenable’s Zero Day team on Medium</a>

Back to Reality, Ransomware and Patch Tuesday

After a looong absence, Bill and Gavin discuss Supply Chain Attacks and how Solarwinds personally impacted Gavin's slides. The chaps also talk through some pretty big additions to Tenable's Cloud capabilities with Frictionless Assessment.

After a looong absence, Bill and Gavin discuss Supply Chain Attacks and how Solarwinds personally impacted Gavin's slides. The chaps also talk through some pretty big additions to Tenable's Cloud capabilities with Frictionless Assessment.

Supplying Security Issues

It was a long summer and fall months; nevertheless, we are back at it. This is the "lost" episode and final for 2020. We will try to be more regular in 2021.Happy New Year! &amp; Stay Safe!In this episode, Gavin and I discuss what we have been up to over the last several months as we'll discuss some major improvements/innovations here at Tenable.Links:https://www.tenable.com/bloghttps://www.tenable.com/blog/research

It was a long summer and fall months; nevertheless, we are back at it. This is the "lost" episode and final for 2020. We will try to be more regular in 2021. Happy New Year! &amp; Stay Safe! In this episode, Gavin and I discuss what we have been up to over the last several months as we'll discuss some major improvements/innovations here at Tenable. Links: <a href="https://www.tenable.com/blog" rel="nofollow" target="_blank">https://www.tenable.com/blog</a> <a href="https://www.tenable.com/blog/research" rel="nofollow" target="_blank">https://www.tenable.com/blog/research</a>

The lost 2020 episode... We are back and now we are Frictionless!

In this episode Bill and Gavin discuss becoming more business aligned security leaders and how to influence change. 

In this episode Bill and Gavin discuss becoming more business aligned security leaders and how to influence change.

Business Aligned Without Selling Out

In this episode Bill and Gavin are joined by Wei Tai from the Data Science team to discuss Machine Learning and how accurate the team have identified the major vulnerabilities of 2019. Bill also learns how to press the record button so the team don’t have to record the podcast for a third time in a week.

In this episode Bill and Gavin are joined by Wei Tai from the Data Science team to discuss Machine Learning and how accurate the team have identified the major vulnerabilities of 2019. Bill also learns how to press the record button so the team don’t have to record the podcast for a third time in a week.

ML Geek-off

In this episode Bill and Gavin discuss predicting the vulnerabilities that matter most through machine learning and reducing the burden of patching the infrastructure.

In this episode Bill and Gavin discuss predicting the vulnerabilities that matter most through machine learning and reducing the burden of patching the infrastructure.

Predict to protect

In this episode Bill and Gavin discuss Nessus on Raspberry Pi, which unfortunately didn't make it through the rigorous testing processes, and the top vulnerabilities you should be patching to secure the remote workforce.https://www.tenable.com/remote-workforcehttps://www.tenable.com/blog/how-covid-19-response-is-expanding-the-cyberattack-surfaceAlso apologies if we offend anyone this week, we might be going a tad stir crazy which is affecting our (Gavin's) filter somewhat.

In this episode Bill and Gavin discuss Nessus on Raspberry Pi, which unfortunately didn't make it through the rigorous testing processes, and the top vulnerabilities you should be patching to secure the remote workforce. <a href="https://www.tenable.com/remote-workforce" rel="nofollow" target="_blank">https://www.tenable.com/remote-workforce</a> <a href="https://www.tenable.com/blog/how-covid-19-response-is-expanding-the-cyberattack-surface" rel="nofollow" target="_blank">https://www.tenable.com/blog/how-covid-19-response-is-expanding-the-cyberattack-surface</a> Also apologies if we offend anyone this week, we might be going a tad stir crazy which is affecting our (Gavin's) filter somewhat.

Bill serves Gavin a bitter tasting Pi

In this episode Bill and Gavin talk about protecting the new norm of the remote workforce and discuss CVE-2020-0796.Tenable SRT Blog https://www.tenable.com/blog/cyber-exposure-alertsTenable Plugin list - https://www.tenable.com/plugins

In this episode Bill and Gavin talk about protecting the new norm of the remote workforce and discuss CVE-2020-0796. <ul><li>Tenable SRT Blog <a href="https://www.tenable.com/blog/cyber-exposure-alerts" rel="nofollow" target="_blank">https://www.tenable.com/blog/cyber-exposure-alerts</a></li><li>Tenable Plugin list - <a href="https://www.tenable.com/plugins" rel="nofollow" target="_blank">https://www.tenable.com/plugins</a></li></ul>

Maslow’s Modified Needs

In this episode Bill and Gavin discuss a presentation on the top 5 attack vectors in 2020 according to SANS.Here’s a link to the video of the presentation Bill and Gavin are referencing:https://www.youtube.com/watch?v=xz7IFVJf3Lk

In this episode Bill and Gavin discuss a presentation on the top 5 attack vectors in 2020 according to SANS. Here’s a link to the video of the presentation Bill and Gavin are referencing: <a href="https://www.youtube.com/watch?v=xz7IFVJf3Lk" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=xz7IFVJf3Lk</a>

Takeaway RSA

New year, new format. Instead of the usual Olson mocking through the use of the latest cyber news, Bill and Gavin will be sharing some inner workings of team Tenable and what the dev are creating.In this episode, Bill and Gavin talk about the innovation competition between dev teams and measuring the maturity of your assessment practices. 

New year, new format. Instead of the usual Olson mocking through the use of the latest cyber news, Bill and Gavin will be sharing some inner workings of team Tenable and what the dev are creating. In this episode, Bill and Gavin talk about the innovation competition between dev teams and measuring the maturity of your assessment practices.

INIT to win it

Conversations and interviews related to Cyber Exposure, vulnerability management, and security overall

In this special episode, Bill and Gavin are joined by Tenable's CISO Bob Huber and Data Scientist Bryan Doyle. The chaps discuss measurements that matter and how to communicate security effectiveness.

In this special episode, Bill and Gavin are joined by Tenable's CISO Bob Huber and Data Scientist Bryan Doyle. The chaps discuss measurements that matter and how to communicate security effectiveness.

Measuring up

In this episode Bill finally gets some payback on Gavin, they discuss Smart Televisions on spending sprees, a goose with a bad attitude and poor cyber hygiene and Bluekeep exploitation. Bill is also joined by Amit Yoran, CEO of Tenable, to discuss learned helplessness in the world of Cyber Security.Need a new job? Run for officehttps://www.wsj.com/articles/the-new-hot-job-real-time-password-manager-11573237540https://thehill.com/policy/cybersecurity/469961-retirements-pose-threat-to-cybersecurity-expertise-in-congressMore More stunt hackinghttps://www.theregister.co.uk/2019/10/31/amazon_account_hacking/HONK HONKhttps://gizmodo.com/untitled-goose-game-vulnerability-allows-hackers-to-sew-1839443617Bad hackershttps://www.cnet.com/news/hackers-plead-guilty-for-extorting-uber-linkedin/#ftag=CAD-09-10aai5bMarket differentiation?https://securityintelligence.com/posts/why-its-time-to-adopt-iot-security-by-design/Who has the real blueshttps://arstechnica.com/information-technology/2019/11/solved-why-in-the-wild-bluekeep-exploits-are-causing-patched-machines-to-crash/More adobe flawshttps://www.zdnet.com/article/adobe-squashes-critical-vulnerabilities-in-illustrator-media-encoder/

In this episode Bill finally gets some payback on Gavin, they discuss Smart Televisions on spending sprees, a goose with a bad attitude and poor cyber hygiene and Bluekeep exploitation. Bill is also joined by Amit Yoran, CEO of Tenable, to discuss learned helplessness in the world of Cyber Security. Need a new job? Run for office<a href="https://www.wsj.com/articles/the-new-hot-job-real-time-password-manager-11573237540" rel="nofollow" target="_blank">https://www.wsj.com/articles/the-new-hot-job-real-time-password-manager-11573237540</a><a href="https://thehill.com/policy/cybersecurity/469961-retirements-pose-threat-to-cybersecurity-expertise-in-congressMore" rel="nofollow" target="_blank">https://thehill.com/policy/cybersecurity/469961-retirements-pose-threat-to-cybersecurity-expertise-in-congressMore</a> More stunt hacking<a href="https://www.theregister.co.uk/2019/10/31/amazon_account_hacking/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/10/31/amazon_account_hacking/</a>HONK HONK<a href="https://gizmodo.com/untitled-goose-game-vulnerability-allows-hackers-to-sew-1839443617" rel="nofollow" target="_blank">https://gizmodo.com/untitled-goose-game-vulnerability-allows-hackers-to-sew-1839443617</a>Bad hackers<a href="https://www.cnet.com/news/hackers-plead-guilty-for-extorting-uber-linkedin/#ftag=CAD-09-10aai5b" rel="nofollow" target="_blank">https://www.cnet.com/news/hackers-plead-guilty-for-extorting-uber-linkedin/#ftag=CAD-09-10aai5b</a>Market differentiation?<a href="https://securityintelligence.com/posts/why-its-time-to-adopt-iot-security-by-design/" rel="nofollow" target="_blank">https://securityintelligence.com/posts/why-its-time-to-adopt-iot-security-by-design/</a>Who has the real blues<a href="https://arstechnica.com/information-technology/2019/11/solved-why-in-the-wild-bluekeep-exploits-are-causing-patched-machines-to-crash/" rel="nofollow" target="_blank">https://arstechnica.com/information-technology/2019/11/solved-why-in-the-wild-bluekeep-exploits-are-causing-patched-machines-to-crash/</a>More adobe flaws<a href="https://www.zdnet.com/article/adobe-squashes-critical-vulnerabilities-in-illustrator-media-encoder/" rel="nofollow" target="_blank">https://www.zdnet.com/article/adobe-squashes-critical-vulnerabilities-in-illustrator-media-encoder/</a>

Meet Dave, My Personal Password Manager

Honey is not just for Poohhttps://www.wilbursecurity.com/2019/10/rdp-honeypotting/Mo Moneyhttps://www.vice.com/en_us/article/7x5ddg/malware-that-spits-cash-out-of-atms-has-spread-across-the-worldOh boyhttps://www.techdirt.com/articles/20191004/19564743128/city-baltimore-blew-off-76000-ransomware-demand-only-to-find-out-bunch-data-had-never-been-backed-up.shtmlWhoa - this is crazyhttps://fossbytes.com/hackers-use-wav-audio-files/A great bloghttps://medium.com/anton-on-security/move-to-cloud-a-chance-to-finally-transform-security-e9614aae4f9cGavin made this up, right?https://arstechnica.com/information-technology/2019/10/alexa-and-google-home-abused-to-eavesdrop-and-phish-passwords/RCEs are funhttps://www.zdnet.com/article/nasty-php7-remote-code-execution-bug-exploited-in-the-wild/#ftag=CAD-03-10abf5fhttps://www.tenable.com/blog/cve-2019-7609-exploit-script-available-for-kibana-remote-code-execution-vulnerabilityThe power of VPRhttps://www.tenable.com/blog/cve-2019-7609-exploit-script-available-for-kibana-remote-code-execution-vulnerability Mo Money Mo Moneyhttps://www.tenable.com/blog/cash-app-scams-legitimate-giveaways-provide-boost-to-opportunistic-scammershttps://www.tenable.com/blog/cash-app-scams-giveaway-offers-ensnare-instagram-users-while-youtube-videos-promise-easy-money

<ol><li>Honey is not just for Pooh<ol><li><a href="https://www.wilbursecurity.com/2019/10/rdp-honeypotting/" rel="nofollow" target="_blank">https://www.wilbursecurity.com/2019/10/rdp-honeypotting/</a></li></ol></li><li>Mo Money<ol><li><a href="https://www.vice.com/en_us/article/7x5ddg/malware-that-spits-cash-out-of-atms-has-spread-across-the-world" rel="nofollow" target="_blank">https://www.vice.com/en_us/article/7x5ddg/malware-that-spits-cash-out-of-atms-has-spread-across-the-world</a></li></ol></li><li>Oh boy<ol><li><a href="https://www.techdirt.com/articles/20191004/19564743128/city-baltimore-blew-off-76000-ransomware-demand-only-to-find-out-bunch-data-had-never-been-backed-up.shtml" rel="nofollow" target="_blank">https://www.techdirt.com/articles/20191004/19564743128/city-baltimore-blew-off-76000-ransomware-demand-only-to-find-out-bunch-data-had-never-been-backed-up.shtml</a></li></ol></li><li>Whoa - this is crazy<ol><li><a href="https://fossbytes.com/hackers-use-wav-audio-files/" rel="nofollow" target="_blank">https://fossbytes.com/hackers-use-wav-audio-files/</a></li></ol></li><li>A great blog<ol><li><a href="https://medium.com/anton-on-security/move-to-cloud-a-chance-to-finally-transform-security-e9614aae4f9c" rel="nofollow" target="_blank">https://medium.com/anton-on-security/move-to-cloud-a-chance-to-finally-transform-security-e9614aae4f9c</a></li></ol></li><li>Gavin made this up, right?<ol><li><a href="https://arstechnica.com/information-technology/2019/10/alexa-and-google-home-abused-to-eavesdrop-and-phish-passwords/" rel="nofollow" target="_blank">https://arstechnica.com/information-technology/2019/10/alexa-and-google-home-abused-to-eavesdrop-and-phish-passwords/</a></li></ol></li><li>RCEs are fun<ol><li><a href="https://www.zdnet.com/article/nasty-php7-remote-code-execution-bug-exploited-in-the-wild/#ftag=CAD-03-10abf5f" rel="nofollow" target="_blank">https://www.zdnet.com/article/nasty-php7-remote-code-execution-bug-exploited-in-the-wild/#ftag=CAD-03-10abf5f</a></li></ol></li><li><a href="https://www.tenable.com/blog/cve-2019-7609-exploit-script-available-for-kibana-remote-code-execution-vulnerability" rel="nofollow" target="_blank">https://www.tenable.com/blog/cve-2019-7609-exploit-script-available-for-kibana-remote-code-execution-vulnerability</a></li><li>The power of VPR<ol><li><a href="https://www.tenable.com/blog/cve-2019-7609-exploit-script-available-for-kibana-remote-code-execution-vulnerability" rel="nofollow" target="_blank">https://www.tenable.com/blog/cve-2019-7609-exploit-script-available-for-kibana-remote-code-execution-vulnerability</a> </li></ol></li><li>Mo Money Mo Money<ol><li><a href="https://www.tenable.com/blog/cash-app-scams-legitimate-giveaways-provide-boost-to-opportunistic-scammers" rel="nofollow" target="_blank">https://www.tenable.com/blog/cash-app-scams-legitimate-giveaways-provide-boost-to-opportunistic-scammers</a></li><li><a href="https://www.tenable.com/blog/cash-app-scams-giveaway-offers-ensnare-instagram-users-while-youtube-videos-promise-easy-money" rel="nofollow" target="_blank">https://www.tenable.com/blog/cash-app-scams-giveaway-offers-ensnare-instagram-users-while-youtube-videos-promise-easy-money</a></li></ol></li></ol>

Mo Money, Mo Honey

In this episode Bill and Gavin talk about dismantling hotel lamps for fun and profit, multiple router Vulnerabilities and keeping track of private information in repositories. Bill is also joined by Ryan and Scott from the research team to discuss a couple of major zero days affecting Exim and vBulletin.Keeping track of all your assets is hardhttps://github.com/eth0izzle/shhgit/https://www-vice-com.cdn.ampproject.org/c/s/www.vice.com/amp/en_us/article/ywanev/thousands-of-cloud-computing-servers-could-be-owned-with-very-simple-attack-researchers-sayCisco has lots of things needing patchinghttps://www.theregister.co.uk/2019/10/04/cisco_patches/tieing it  to this d-link vulnerability https://www.zdnet.com/article/d-link-routers-contain-remote-code-execution-vulnerability/Do you know the game - “never have I ever”?https://www.verdict.co.uk/wework-data-security-ipo/Are people thinking about BYOD anymorehttps://arstechnica.com/information-technology/2019/10/attackers-exploit-0day-vulnerability-that-gives-full-control-of-android-phones/Is it me, or could this have been the plan along, too good be true is often…https://threatpost.com/bug-in-nsas-ghidra/148787/With all that is going on - could this be a thing that makes you go hmmmhttps://www.darkreading.com/vulnerabilities---threats/facebook-patches-critical-whatsapp-security-flaw/d/d-id/1335993 and signal had a nasty bug as well https://thenextweb.com/security/2019/10/07/signal-patches-android-bug-that-allowed-hackers-to-answer-calls-on-your-behalf/Here take my charger, pleasehttps://www.vice.com/en_us/article/3kx5nk/fake-apple-lightning-cable-hacks-your-computer-omg-cable-mass-produced-soldTenable researchhttps://www.tenable.com/blog/cve-2019-16928-critical-buffer-overflow-flaw-in-exim-is-remotely-exploitablehttps://www.tenable.com/blog/critical-zero-day-pre-authentication-remote-code-execution-exploit-published-for-5-x-versions

In this episode Bill and Gavin talk about dismantling hotel lamps for fun and profit, multiple router Vulnerabilities and keeping track of private information in repositories. Bill is also joined by Ryan and Scott from the research team to discuss a couple of major zero days affecting Exim and vBulletin.<ol><li>Keeping track of all your assets is hard<ol><li><a href="https://github.com/eth0izzle/shhgit/" rel="nofollow" target="_blank">https://github.com/eth0izzle/shhgit/</a></li><li><a href="https://www-vice-com.cdn.ampproject.org/c/s/www.vice.com/amp/en_us/article/ywanev/thousands-of-cloud-computing-servers-could-be-owned-with-very-simple-attack-researchers-say" rel="nofollow" target="_blank">https://www-vice-com.cdn.ampproject.org/c/s/www.vice.com/amp/en_us/article/ywanev/thousands-of-cloud-computing-servers-could-be-owned-with-very-simple-attack-researchers-say</a></li></ol></li><li>Cisco has lots of things needing patching<ol><li><a href="https://www.theregister.co.uk/2019/10/04/cisco_patches/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/10/04/cisco_patches/</a></li><li>tieing it  to this d-link vulnerability <a href="https://www.zdnet.com/article/d-link-routers-contain-remote-code-execution-vulnerability/" rel="nofollow" target="_blank">https://www.zdnet.com/article/d-link-routers-contain-remote-code-execution-vulnerability/</a></li></ol></li><li>Do you know the game - “never have I ever”?<ol><li><a href="https://www.verdict.co.uk/wework-data-security-ipo/" rel="nofollow" target="_blank">https://www.verdict.co.uk/wework-data-security-ipo/</a></li></ol></li><li>Are people thinking about BYOD anymore<ol><li><a href="https://arstechnica.com/information-technology/2019/10/attackers-exploit-0day-vulnerability-that-gives-full-control-of-android-phones/" rel="nofollow" target="_blank">https://arstechnica.com/information-technology/2019/10/attackers-exploit-0day-vulnerability-that-gives-full-control-of-android-phones/</a></li></ol></li><li>Is it me, or could this have been the plan along, too good be true is often…<ol><li><a href="https://threatpost.com/bug-in-nsas-ghidra/148787/" rel="nofollow" target="_blank">https://threatpost.com/bug-in-nsas-ghidra/148787/</a></li></ol></li><li>With all that is going on - could this be a thing that makes you go hmmm<ol><li><a href="https://www.darkreading.com/vulnerabilities---threats/facebook-patches-critical-whatsapp-security-flaw/d/d-id/1335993" rel="nofollow" target="_blank">https://www.darkreading.com/vulnerabilities---threats/facebook-patches-critical-whatsapp-security-flaw/d/d-id/1335993</a> and signal had a nasty bug as well <a href="https://thenextweb.com/security/2019/10/07/signal-patches-android-bug-that-allowed-hackers-to-answer-calls-on-your-behalf/" rel="nofollow" target="_blank">https://thenextweb.com/security/2019/10/07/signal-patches-android-bug-that-allowed-hackers-to-answer-calls-on-your-behalf/</a></li></ol></li><li>Here take my charger, please<ol><li><a href="https://www.vice.com/en_us/article/3kx5nk/fake-apple-lightning-cable-hacks-your-computer-omg-cable-mass-produced-sold" rel="nofollow" target="_blank">https://www.vice.com/en_us/article/3kx5nk/fake-apple-lightning-cable-hacks-your-computer-omg-cable-mass-produced-sold</a></li></ol></li><li>Tenable research<ol><li><a href="https://www.tenable.com/blog/cve-2019-16928-critical-buffer-overflow-flaw-in-exim-is-remotely-exploitable" rel="nofollow" target="_blank">https://www.tenable.com/blog/cve-2019-16928-critical-buffer-overflow-flaw-in-exim-is-remotely-exploitable</a></li><li><a href="https://www.tenable.com/blog/critical-zero-day-pre-authentication-remote-code-execution-exploit-published-for-5-x-versions" rel="nofollow" target="_blank">https://www.tenable.com/blog/critical-zero-day-pre-authentication-remote-code-execution-exploit-published-for-5-x-versions</a></li></ol></li></ol>

Legit Shhgit

In this episode Bill and Gavin talk snooping on cat scans, TGIF data breach, breaking into Gavin's bank account with a handy sound board and power grid blackouts. Bill also interviews Steve Smith and Kent Dyer from the Government Affairs team to understand issues affecting Governments across the Globe.Can we get Gavin out of retirementhttps://www.wired.com/story/air-force-defcon-satellite-hacking/It could have been way worsehttps://www.wired.com/story/russia-ukraine-cyberattack-power-grid-blackout-destruction/“My voice  is my password, verify”https://www.aidaily.co.uk/articles/y6lb0fd9agmmvc2fgkhorc3teapmddhttps://www.youtube.com/watch?v=-zVgWpVXb64TGIF - down under is not as relaxinghttps://www.smartcompany.com.au/technology/cyber-security/tgi-fridays-data-breach/Lessons are everywherehttps://www.tenable.com/blog/what-skyjacking-and-kidnapping-cases-can-teach-us-about-responding-to-ransomware-attacks?mkt_tok=eyJpIjoiTldOaE1tVXdOelkxWWpVNSIsInQiOiJEQldWVUtpMjZ1YXU2aDZcL1k0b2U3K1RoZlY0Mlh0YnpFS1BYUmw1NUR6aXJHdmYyUXlXRGFtd0xFbDk5VHNGN0gzdGQyYVVtXC9lWlwvWXlqUVJLdzZmS2lRRXpPV1IxNzhBYTJkR2hnKzdKTVkrMmVaaG1mS1Z0QkJWTWhhcWR2aiJ9How are you feeling?https://healthitsecurity.com/news/82-iot-devices-of-health-providers-vendors-targeted-by-cyberattackshttps://www.propublica.org/article/millions-of-americans-medical-images-and-data-are-available-on-the-internetLove the idea, the devil will be in the detailshttps://www.smartcitiesdive.com/news/st-louis-dhs-team-up-for-smart-city-pilot/562031/

In this episode Bill and Gavin talk snooping on cat scans, TGIF data breach, breaking into Gavin's bank account with a handy sound board and power grid blackouts. Bill also interviews Steve Smith and Kent Dyer from the Government Affairs team to understand issues affecting Governments across the Globe. Can we get Gavin out of retirement <a href="https://www.wired.com/story/air-force-defcon-satellite-hacking/" rel="nofollow" target="_blank">https://www.wired.com/story/air-force-defcon-satellite-hacking/</a>It could have been way worse <a href="https://www.wired.com/story/russia-ukraine-cyberattack-power-grid-blackout-destruction/" rel="nofollow" target="_blank">https://www.wired.com/story/russia-ukraine-cyberattack-power-grid-blackout-destruction/</a>“My voice  is my password, verify” <a href="https://www.aidaily.co.uk/articles/y6lb0fd9agmmvc2fgkhorc3teapmdd" rel="nofollow" target="_blank">https://www.aidaily.co.uk/articles/y6lb0fd9agmmvc2fgkhorc3teapmdd</a> <a href="https://www.youtube.com/watch?v=-zVgWpVXb64" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=-zVgWpVXb64</a>TGIF - down under is not as relaxing <a href="https://www.smartcompany.com.au/technology/cyber-security/tgi-fridays-data-breach/" rel="nofollow" target="_blank">https://www.smartcompany.com.au/technology/cyber-security/tgi-fridays-data-breach/</a>Lessons are everywhere <a href="https://www.tenable.com/blog/what-skyjacking-and-kidnapping-cases-can-teach-us-about-responding-to-ransomware-attacks?mkt_tok=eyJpIjoiTldOaE1tVXdOelkxWWpVNSIsInQiOiJEQldWVUtpMjZ1YXU2aDZcL1k0b2U3K1RoZlY0Mlh0YnpFS1BYUmw1NUR6aXJHdmYyUXlXRGFtd0xFbDk5VHNGN0gzdGQyYVVtXC9lWlwvWXlqUVJLdzZmS2lRRXpPV1IxNzhBYTJkR2hnKzdKTVkrMmVaaG1mS1Z0QkJWTWhhcWR2aiJ9" rel="nofollow" target="_blank">https://www.tenable.com/blog/what-skyjacking-and-kidnapping-cases-can-teach-us-about-responding-to-ransomware-attacks?mkt_tok=eyJpIjoiTldOaE1tVXdOelkxWWpVNSIsInQiOiJEQldWVUtpMjZ1YXU2aDZcL1k0b2U3K1RoZlY0Mlh0YnpFS1BYUmw1NUR6aXJHdmYyUXlXRGFtd0xFbDk5VHNGN0gzdGQyYVVtXC9lWlwvWXlqUVJLdzZmS2lRRXpPV1IxNzhBYTJkR2hnKzdKTVkrMmVaaG1mS1Z0QkJWTWhhcWR2aiJ9</a>How are you feeling? <a href="https://healthitsecurity.com/news/82-iot-devices-of-health-providers-vendors-targeted-by-cyberattacks" rel="nofollow" target="_blank">https://healthitsecurity.com/news/82-iot-devices-of-health-providers-vendors-targeted-by-cyberattacks</a> <a href="https://www.propublica.org/article/millions-of-americans-medical-images-and-data-are-available-on-the-internet" rel="nofollow" target="_blank">https://www.propublica.org/article/millions-of-americans-medical-images-and-data-are-available-on-the-internet</a>Love the idea, the devil will be in the details <a href="https://www.smartcitiesdive.com/news/st-louis-dhs-team-up-for-smart-city-pilot/562031/" rel="nofollow" target="_blank">https://www.smartcitiesdive.com/news/st-louis-dhs-team-up-for-smart-city-pilot/562031/</a>

All your cat scans belong to us

States be getting pwnd https://www.dallasnews.com/business/technology/2019/08/17/20-texas-jurisdictions-hit-coordinated-ransomware-attack-state-saysWhere are your notes, or is this your favorite text editor?https://www.digitaltrends.com/computing/major-security-flaw-in-notepad-leaves-windows-pcs-vulnerable-to-hackers/https://googleprojectzero.blogspot.com/2019/08/down-rabbit-hole.htmlRCEs in Windows 10https://www.digitaltrends.com/computing/microsoft-patches-two-critical-windows-10-security-flaw/What else happens 20 times a day….https://www.darkreading.com/attacks-breaches/more-than-20-data-breaches-reported-per-day-in-first-half-of-2019/d/d-id/1335538https://www.theregister.co.uk/2019/08/07/black_hat_keynote/Do you know what your business does?https://www.theregister.co.uk/2019/08/26/security_roundup/Fun with appshttps://www.tenable.com/blog/tiktok-scams-how-social-currency-fuels-the-economy-for-impersonation-accounts-and-free

<ol><li>States be getting pwnd <ol><li><a href="https://www.dallasnews.com/business/technology/2019/08/17/20-texas-jurisdictions-hit-coordinated-ransomware-attack-state-says" rel="nofollow" target="_blank">https://www.dallasnews.com/business/technology/2019/08/17/20-texas-jurisdictions-hit-coordinated-ransomware-attack-state-says</a></li></ol></li><li>Where are your notes, or is this your favorite text editor?<ol><li><a href="https://www.digitaltrends.com/computing/major-security-flaw-in-notepad-leaves-windows-pcs-vulnerable-to-hackers/" rel="nofollow" target="_blank">https://www.digitaltrends.com/computing/major-security-flaw-in-notepad-leaves-windows-pcs-vulnerable-to-hackers/</a></li><li><a href="https://googleprojectzero.blogspot.com/2019/08/down-rabbit-hole.html" rel="nofollow" target="_blank">https://googleprojectzero.blogspot.com/2019/08/down-rabbit-hole.html</a></li></ol></li><li>RCEs in Windows 10<ol><li><a href="https://www.digitaltrends.com/computing/microsoft-patches-two-critical-windows-10-security-flaw/" rel="nofollow" target="_blank">https://www.digitaltrends.com/computing/microsoft-patches-two-critical-windows-10-security-flaw/</a></li></ol></li><li>What else happens 20 times a day….<ol><li><a href="https://www.darkreading.com/attacks-breaches/more-than-20-data-breaches-reported-per-day-in-first-half-of-2019/d/d-id/1335538" rel="nofollow" target="_blank">https://www.darkreading.com/attacks-breaches/more-than-20-data-breaches-reported-per-day-in-first-half-of-2019/d/d-id/1335538</a></li><li><a href="https://www.theregister.co.uk/2019/08/07/black_hat_keynote/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/08/07/black_hat_keynote/</a></li></ol></li><li>Do you know what your business does?<ol><li><a href="https://www.theregister.co.uk/2019/08/26/security_roundup/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/08/26/security_roundup/</a></li></ol></li><li>Fun with apps<ol><li><a href="https://www.tenable.com/blog/tiktok-scams-how-social-currency-fuels-the-economy-for-impersonation-accounts-and-free" rel="nofollow" target="_blank">https://www.tenable.com/blog/tiktok-scams-how-social-currency-fuels-the-economy-for-impersonation-accounts-and-free</a></li></ol></li></ol>

Tik Tok Hot Shot

In this episode, Bill and Gavin discuss attacks against adult apps, a WhatsApp flaw that enables an attacker to change messages and join groups, hacking alarm systems with a $2 device, and predicting the NVD future with Predictive Prioritization.Rogue Asset Discovery for free!https://www.tenable.com/blog/new-capabilities-to-automatically-discover-and-assess-rogue-assetsSeeing into the future, or before NVD, with Predictive Prioritizationhttps://www.tenable.com/predictive-prioritizationLockPickingLawyer takes on IoT Alarmshttps://www.youtube.com/watch?v=UlNkQJzw4oA3Fun hacking for fun and embarrassmenthttps://www.theregister.co.uk/2019/08/09/threesome_hookup_app_insecurity/WhatsApp hack attack can change your messageshttps://www.forbes.com/sites/daveywinder/2019/08/07/whatsapp-hack-attack-changes-your-messages-and-facebook-doesnt-seem-to-care/#1fa389532332VXWorks flaw affects over 200M deviceshttps://www.wired.com/story/vxworks-vulnerabilities-urgent11/

In this episode, Bill and Gavin discuss attacks against adult apps, a WhatsApp flaw that enables an attacker to change messages and join groups, hacking alarm systems with a $2 device, and predicting the NVD future with Predictive Prioritization. Rogue Asset Discovery for free! <a href="https://www.tenable.com/blog/new-capabilities-to-automatically-discover-and-assess-rogue-assets" rel="nofollow" target="_blank">https://www.tenable.com/blog/new-capabilities-to-automatically-discover-and-assess-rogue-assets</a> Seeing into the future, or before NVD, with Predictive Prioritization <a href="https://www.tenable.com/predictive-prioritization" rel="nofollow" target="_blank">https://www.tenable.com/predictive-prioritization</a> LockPickingLawyer takes on IoT Alarms <a href="https://www.youtube.com/watch?v=UlNkQJzw4oA" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=UlNkQJzw4oA</a> 3Fun hacking for fun and embarrassment <a href="https://www.theregister.co.uk/2019/08/09/threesome_hookup_app_insecurity/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/08/09/threesome_hookup_app_insecurity/</a> WhatsApp hack attack can change your messages <a href="https://www.forbes.com/sites/daveywinder/2019/08/07/whatsapp-hack-attack-changes-your-messages-and-facebook-doesnt-seem-to-care/#1fa389532332" rel="nofollow" target="_blank">https://www.forbes.com/sites/daveywinder/2019/08/07/whatsapp-hack-attack-changes-your-messages-and-facebook-doesnt-seem-to-care/#1fa389532332</a> VXWorks flaw affects over 200M devices <a href="https://www.wired.com/story/vxworks-vulnerabilities-urgent11/" rel="nofollow" target="_blank">https://www.wired.com/story/vxworks-vulnerabilities-urgent11/</a>

Black Hats Recapped IRL

In this episode, Bill turns the insecurity tables on Gavin with the iOS 13 keychain bug. The chaps also discuss insecure trains, remote code execution vulnerabilities in Atlassian, and how to publicly respond to a major outage. This episode also features David Wells, who talks about the recent vulnerability he discovered in Comodo AV.Rundownhttps://9to5mac.com/2019/07/15/ios-13-password-bug/Major software bug in IOS 13 beta reveals stored passwords without authenticationhttps://www.theregister.co.uk/2019/07/12/train_software_theftTrain software snaffled by employeehttps://www.corben.io/atlassian-crowd-rce/Multiple Atlassian Vulnerabilitieshttps://medium.com/tenable-techblog/an-exploit-chain-against-citrix-sd-wan-709db08fb4acMultiple vulnerabilities to pivot through the Citrix SD-WANhttps://www.tenable.com/press-releases/tenable-research-discovers-vulnerability-in-siemens-critical-infrastructure-designTenable research discover major weaknesses in Siemenshttps://qz.com/work/1666535/cloudflare-turned-outage-into-teaching-point-about-transparency/Cloudflare shows the right way to discuss a major public incident

In this episode, Bill turns the insecurity tables on Gavin with the iOS 13 keychain bug. The chaps also discuss insecure trains, remote code execution vulnerabilities in Atlassian, and how to publicly respond to a major outage. This episode also features David Wells, who talks about the recent vulnerability he discovered in Comodo AV. Rundown<a href="https://9to5mac.com/2019/07/15/ios-13-password-bug/" rel="nofollow" target="_blank">https://9to5mac.com/2019/07/15/ios-13-password-bug/</a>Major software bug in IOS 13 beta reveals stored passwords without authentication<a href="https://www.theregister.co.uk/2019/07/12/train_software_theft/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/07/12/train_software_theft</a> Train software snaffled by employee <a href="https://www.corben.io/atlassian-crowd-rce/" rel="nofollow" target="_blank">https://www.corben.io/atlassian-crowd-rce/</a> Multiple Atlassian Vulnerabilities<a href="https://medium.com/tenable-techblog/an-exploit-chain-against-citrix-sd-wan-709db08fb4ac" rel="nofollow" target="_blank">https://medium.com/tenable-techblog/an-exploit-chain-against-citrix-sd-wan-709db08fb4ac</a> Multiple vulnerabilities to pivot through the Citrix SD-WAN<a href="https://www.tenable.com/press-releases/tenable-research-discovers-vulnerability-in-siemens-critical-infrastructure-design" rel="nofollow" target="_blank">https://www.tenable.com/press-releases/tenable-research-discovers-vulnerability-in-siemens-critical-infrastructure-design</a> Tenable research discover major weaknesses in Siemens<a href="https://qz.com/work/1666535/cloudflare-turned-outage-into-teaching-point-about-transparency/" rel="nofollow" target="_blank">https://qz.com/work/1666535/cloudflare-turned-outage-into-teaching-point-about-transparency/</a> Cloudflare shows the right way to discuss a major public incident

Apples Rotting in Gavin's Vault

In this episode, Bill and Gavin discuss strange meetings in English Forests, improvements in security guidelines around IoT devices, bricking iPhone with a single message, and the issues with non-experts defining government policy. Bill is also joined by Tenable Researcher Jimi Sebree to discuss how he discovers new zero-days and a recent Arlo Camera teardown.All things IoT https://nvlpubs.nist.gov/nistpubs/ir/2019/NIST.IR.8228.pdfCrime does not pay https://www.darkreading.com/attacks-breaches/former-equifax-cio-sentenced-to-prison-for-insider-trading/d/d-id/13350781 more reason to use a password vaulthttps://medium.com/@NullByteWht/hacking-macos-how-to-dump-1password-keepassx-lastpass-passwords-in-plaintext-723c5b1c311bConvenient loss @ a convenience store https://www.zdnet.com/article/7-eleven-japanese-customers-lose-500000-due-to-mobile-app-flaw/2019 so far so….https://www.wired.com/story/biggest-cybersecurity-crises-2019-so-far/Protect yourself at all times https://www.infosecurity-magazine.com/news/bas-magecart-breach-lands-it-183mhttps://www.infosecurity-magazine.com/news/ba-hit-by-global-web-skimming/When the non-experts are making policyhttps://www.itnews.com.au/news/amazon-blasts-australias-technically-flawed-anti-encryption-laws-527855Bricking an iphone with malformed imessage https://bugs.chromium.org/p/project-zero/issues/detail?id=1826Fixed in 12.3https://www.forbes.com/sites/daveywinder/2019/07/07/google-confirms-apple-iphone-bricking-imessage-bomb/#788e01f07a43Similar to “Black dot” from last year

In this episode, Bill and Gavin discuss strange meetings in English Forests, improvements in security guidelines around IoT devices, bricking iPhone with a single message, and the issues with non-experts defining government policy. Bill is also joined by Tenable Researcher Jimi Sebree to discuss how he discovers new zero-days and a recent Arlo Camera teardown.<ol><li>All things IoT <ol><li><a href="https://nvlpubs.nist.gov/nistpubs/ir/2019/NIST.IR.8228.pdf" rel="nofollow" target="_blank">https://nvlpubs.nist.gov/nistpubs/ir/2019/NIST.IR.8228.pdf</a></li></ol></li><li>Crime does not pay <ol><li><a href="https://www.darkreading.com/attacks-breaches/former-equifax-cio-sentenced-to-prison-for-insider-trading/d/d-id/1335078" rel="nofollow" target="_blank">https://www.darkreading.com/attacks-breaches/former-equifax-cio-sentenced-to-prison-for-insider-trading/d/d-id/1335078</a></li></ol></li><li>1 more reason to use a password vault<ol><li><a href="https://medium.com/@NullByteWht/hacking-macos-how-to-dump-1password-keepassx-lastpass-passwords-in-plaintext-723c5b1c311b" rel="nofollow" target="_blank">https://medium.com/@NullByteWht/hacking-macos-how-to-dump-1password-keepassx-lastpass-passwords-in-plaintext-723c5b1c311b</a></li></ol></li><li>Convenient loss @ a convenience store <ol><li><a href="https://www.zdnet.com/article/7-eleven-japanese-customers-lose-500000-due-to-mobile-app-flaw/" rel="nofollow" target="_blank">https://www.zdnet.com/article/7-eleven-japanese-customers-lose-500000-due-to-mobile-app-flaw/</a></li></ol></li><li>2019 so far so….<ol><li><a href="https://www.wired.com/story/biggest-cybersecurity-crises-2019-so-far/" rel="nofollow" target="_blank">https://www.wired.com/story/biggest-cybersecurity-crises-2019-so-far/</a></li></ol></li><li>Protect yourself at all times <ol><li><a href="https://www.infosecurity-magazine.com/news/bas-magecart-breach-lands-it-183m" rel="nofollow" target="_blank">https://www.infosecurity-magazine.com/news/bas-magecart-breach-lands-it-183m</a></li><li><a href="https://www.infosecurity-magazine.com/news/ba-hit-by-global-web-skimming/" rel="nofollow" target="_blank">https://www.infosecurity-magazine.com/news/ba-hit-by-global-web-skimming/</a></li></ol></li><li>When the non-experts are making policy<ol><li><a href="https://www.itnews.com.au/news/amazon-blasts-australias-technically-flawed-anti-encryption-laws-527855" rel="nofollow" target="_blank">https://www.itnews.com.au/news/amazon-blasts-australias-technically-flawed-anti-encryption-laws-527855</a></li></ol></li><li>Bricking an iphone with malformed imessage <a href="https://bugs.chromium.org/p/project-zero/issues/detail?id=1826" rel="nofollow" target="_blank">https://bugs.chromium.org/p/project-zero/issues/detail?id=1826</a><ol><li>Fixed in 12.3</li><li><a href="https://www.forbes.com/sites/daveywinder/2019/07/07/google-confirms-apple-iphone-bricking-imessage-bomb/#788e01f07a43" rel="nofollow" target="_blank">https://www.forbes.com/sites/daveywinder/2019/07/07/google-confirms-apple-iphone-bricking-imessage-bomb/#788e01f07a43</a></li><li>Similar to “Black dot” from last year</li></ol></li></ol>

Overly-Convenient Store Cards

In this episode, Bill and Gavin talk about a Firefox Zero Day, organizations facing bankruptcy due to ransomware, and MSSP's as an attack vector and C&amp;C Slack. They are also joined by Matt Everson and Justin Brown from Tenable Research team. Breaches costing real money.https://krebsonsecurity.com/2019/06/collections-firm-behind-labcorp-quest-breaches-files-for-bankruptcy/Paying Ransom &amp; other feeshttps://nypost.com/2019/06/20/florida-city-pays-hackers-600k-in-bitcoin-to-get-computer-systems-back/https://www.youtube.com/watch?v=wQjR3NWXqgkhttps://www.helpnetsecurity.com/2019/06/24/eurofins-ransomware-attack/Firefox has a 0-dayhttps://objective-see.com/blog/blog_0x43.htmlCVE-2019-11707Help software is the vulnerabilityhttps://safebreach.com/Post/OEM-Software-Puts-Multiple-Laptops-At-RiskSlack - is more than usefulhttps://www.coalfire.com/The-Coalfire-Blog/June-2019/Introducing-Slackorhttps://www.tenable.com/blog/slack-patches-download-hijack-vulnerability-in-windows-desktop-appGangs attacking MSSPshttps://www.informationsecuritybuzz.com/expert-comments/hacker-gang-deploys-ransomware-on-customer-systems-by-hacking-msps/

In this episode, Bill and Gavin talk about a Firefox Zero Day, organizations facing bankruptcy due to ransomware, and MSSP's as an attack vector and C&amp;C Slack. They are also joined by Matt Everson and Justin Brown from Tenable Research team. <ol><li>Breaches costing real money.<ol><li><a href="https://krebsonsecurity.com/2019/06/collections-firm-behind-labcorp-quest-breaches-files-for-bankruptcy/" rel="nofollow" target="_blank">https://krebsonsecurity.com/2019/06/collections-firm-behind-labcorp-quest-breaches-files-for-bankruptcy/</a></li></ol></li><li>Paying Ransom &amp; other fees<ol><li><a href="https://nypost.com/2019/06/20/florida-city-pays-hackers-600k-in-bitcoin-to-get-computer-systems-back/" rel="nofollow" target="_blank">https://nypost.com/2019/06/20/florida-city-pays-hackers-600k-in-bitcoin-to-get-computer-systems-back/</a></li><li><a href="https://www.youtube.com/watch?v=wQjR3NWXqgk" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=wQjR3NWXqgk</a></li><li><a href="https://www.helpnetsecurity.com/2019/06/24/eurofins-ransomware-attack/" rel="nofollow" target="_blank">https://www.helpnetsecurity.com/2019/06/24/eurofins-ransomware-attack/</a></li></ol></li><li>Firefox has a 0-day<ol><li><a href="https://objective-see.com/blog/blog_0x43.html" rel="nofollow" target="_blank">https://objective-see.com/blog/blog_0x43.html</a></li><li>CVE-2019-11707</li></ol></li><li>Help software is the vulnerability<ol><li><a href="https://safebreach.com/Post/OEM-Software-Puts-Multiple-Laptops-At-Risk" rel="nofollow" target="_blank">https://safebreach.com/Post/OEM-Software-Puts-Multiple-Laptops-At-Risk</a></li></ol></li><li>Slack - is more than useful<ol><li><a href="https://www.coalfire.com/The-Coalfire-Blog/June-2019/Introducing-Slackor" rel="nofollow" target="_blank">https://www.coalfire.com/The-Coalfire-Blog/June-2019/Introducing-Slackor</a></li><li><a href="https://www.tenable.com/blog/slack-patches-download-hijack-vulnerability-in-windows-desktop-app" rel="nofollow" target="_blank">https://www.tenable.com/blog/slack-patches-download-hijack-vulnerability-in-windows-desktop-app</a></li></ol></li><li>Gangs attacking MSSPs<ol><li><a href="https://www.informationsecuritybuzz.com/expert-comments/hacker-gang-deploys-ransomware-on-customer-systems-by-hacking-msps/" rel="nofollow" target="_blank">https://www.informationsecuritybuzz.com/expert-comments/hacker-gang-deploys-ransomware-on-customer-systems-by-hacking-msps/</a></li></ol></li></ol>

Foxy Zero Days and MSSP Misery

The Cyber Exposure Podcast

Corporate giants want to help students, feds and themselves by offering cyber pros $75,000 in loan assistancehttps://www.cyberscoop.com/workforce-cyber-talent-initiative-loan-assistance/Cool blog entry about building going "smart"https://tisiphone.netOwning WPA3https://www.zdnet.com/article/dragonblood-vulnerabilities-disclosed-in-wifi-wpa3-standard/All about Man in the Middle Attackshttps://hackercombat.com/man-in-the-middle-mitm-attacks-an-introduction/ Now you see Cancer, now you don'thttps://www.youtube.com/watch?v=_mkRAArj-x0Chipzillahttps://www.theregister.co.uk/2019/04/11/intel_april_patch/Windows 3.1 installed where?https://hackaday.com/2019/04/10/windows-3-1-in-my-bios-its-more-likely-than-you-think/The ubiquity of WordPress pluginshttps://www.zdnet.com/article/mailgun-hacked-part-of-massive-attack-on-wordpress-sites/Who is the group named Triton?https://www.infosecurity-magazine.com/news/triton-group-found-inside-second-1/Ponemon Report (registration required)https://lookbook.tenable.com/ponemonotreport/ponemon-OT-reportTed Gary's Blog Entryhttps://www.tenable.com/blog/cybersecurity-pros-face-significant-challenges-with-ot-security-ponemon-report

<ul><li>Corporate giants want to help students, feds and themselves by offering cyber pros $75,000 in loan assistance<ul><li><a href="https://www.cyberscoop.com/workforce-cyber-talent-initiative-loan-assistance/" rel="nofollow" target="_blank">https://www.cyberscoop.com/workforce-cyber-talent-initiative-loan-assistance/</a></li></ul></li><li>Cool blog entry about building going "smart"<ul><li><a href="https://tisiphone.net" rel="nofollow" target="_blank">https://tisiphone.net</a></li></ul></li><li>Owning WPA3<ul><li><a href="https://www.zdnet.com/article/dragonblood-vulnerabilities-disclosed-in-wifi-wpa3-standard/" rel="nofollow" target="_blank">https://www.zdnet.com/article/dragonblood-vulnerabilities-disclosed-in-wifi-wpa3-standard/</a></li></ul></li><li>All about Man in the Middle Attacks<ul><li><a href="https://hackercombat.com/man-in-the-middle-mitm-attacks-an-introduction/" rel="nofollow" target="_blank">https://hackercombat.com/man-in-the-middle-mitm-attacks-an-introduction/</a> </li></ul></li><li>Now you see Cancer, now you don't<ul><li><a href="https://www.youtube.com/watch?v=_mkRAArj-x0" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=_mkRAArj-x0</a></li></ul></li><li>Chipzilla<ul><li><a href="https://www.theregister.co.uk/2019/04/11/intel_april_patch/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/04/11/intel_april_patch/</a></li></ul></li><li>Windows 3.1 installed where?<ul><li><a href="https://hackaday.com/2019/04/10/windows-3-1-in-my-bios-its-more-likely-than-you-think/" rel="nofollow" target="_blank">https://hackaday.com/2019/04/10/windows-3-1-in-my-bios-its-more-likely-than-you-think/</a></li></ul></li><li>The ubiquity of WordPress plugins<ul><li><a href="https://www.zdnet.com/article/mailgun-hacked-part-of-massive-attack-on-wordpress-sites/" rel="nofollow" target="_blank">https://www.zdnet.com/article/mailgun-hacked-part-of-massive-attack-on-wordpress-sites/</a></li></ul></li><li>Who is the group named Triton?<ul><li><a href="https://www.infosecurity-magazine.com/news/triton-group-found-inside-second-1/" rel="nofollow" target="_blank">https://www.infosecurity-magazine.com/news/triton-group-found-inside-second-1/</a></li></ul></li><li>Ponemon Report (registration required)<ul><li><a href="https://lookbook.tenable.com/ponemonotreport/ponemon-OT-report" rel="nofollow" target="_blank">https://lookbook.tenable.com/ponemonotreport/ponemon-OT-report</a></li></ul></li><li>Ted Gary's Blog Entry<ul><li><a href="https://www.tenable.com/blog/cybersecurity-pros-face-significant-challenges-with-ot-security-ponemon-report" rel="nofollow" target="_blank">https://www.tenable.com/blog/cybersecurity-pros-face-significant-challenges-with-ot-security-ponemon-report</a></li></ul></li></ul>

Break into Bill's House With This One Simple Trick

In this episode, Bill and Gavin talk easy-to guess-passwords, the Beapy Cryptojacking worm sweeping through Asia, as well as hungry cybercriminals leveraging credential-stuffing attacks.10 most hacked passwordshttps://www.foxbusiness.com/technology/most-hacked-passwords-2019The Chipotle Hack And The Troubling Trend Of Credential Stuffinghttps://www.blog.themoneycloud.com/digital-currencies/the-chipotle-hack-and-the-troubling-trend-of-credential-stuffing/New zero-day vulnerability CVE-2019-0859 in win32k.syshttps://securelist.com/new-win32k-zero-day-cve-2019-0859/90435/Beapy: Cryptojacking Worm Hits Enterprises in Chinahttps://www.symantec.com/blogs/threat-intelligence/beapy-cryptojacking-worm-china

In this episode, Bill and Gavin talk easy-to guess-passwords, the Beapy Cryptojacking worm sweeping through Asia, as well as hungry cybercriminals leveraging credential-stuffing attacks.<ul><li>10 most hacked passwords<ul><li><a href="https://www.foxbusiness.com/technology/most-hacked-passwords-2019" rel="nofollow" target="_blank">https://www.foxbusiness.com/technology/most-hacked-passwords-2019</a></li></ul></li><li>The Chipotle Hack And The Troubling Trend Of Credential Stuffing<ul><li><a href="https://www.blog.themoneycloud.com/digital-currencies/the-chipotle-hack-and-the-troubling-trend-of-credential-stuffing/" rel="nofollow" target="_blank">https://www.blog.themoneycloud.com/digital-currencies/the-chipotle-hack-and-the-troubling-trend-of-credential-stuffing/</a></li></ul></li><li>New zero-day vulnerability CVE-2019-0859 in win32k.sys<ul><li><a href="https://securelist.com/new-win32k-zero-day-cve-2019-0859/90435/" rel="nofollow" target="_blank">https://securelist.com/new-win32k-zero-day-cve-2019-0859/90435/</a></li></ul></li><li>Beapy: Cryptojacking Worm Hits Enterprises in China<ul><li><a href="https://www.symantec.com/blogs/threat-intelligence/beapy-cryptojacking-worm-china" rel="nofollow" target="_blank">https://www.symantec.com/blogs/threat-intelligence/beapy-cryptojacking-worm-china</a></li></ul></li></ul>

Correct Horse Burrito Staple

Superhost Spycams

Airbnb Superhost’s creepy spycam sniffed out by sleuthing infosec proSharePoint servers under attack through CVE-2019-0604Open source bug poses a threat to sites running multiple CMSesDhound Chatbot: open domains, IP addressesUnless you want your payment card data skimmed, avoid these commerce sitesEXPLOITING 10,000+ DEVICES USED BY BRITAIN’S MOST VULNERABLE

<ol><li><a href="https://nakedsecurity.sophos.com/2019/05/10/airbnb-superhosts-creepy-spycam-sniffed-out-by-sleuthing-infosec-pro/" rel="nofollow" target="_blank">Airbnb Superhost’s creepy spycam sniffed out by sleuthing infosec pro</a></li><li><a href="https://www.helpnetsecurity.com/2019/05/13/sharepoint-servers-attack-cve-2019-0604/" rel="nofollow" target="_blank">SharePoint servers under attack through CVE-2019-0604</a></li><li><a href="https://arstechnica.com/information-technology/2019/05/open-source-bug-poses-threat-to-sites-running-multiple-cmses/" rel="nofollow" target="_blank">Open source bug poses a threat to sites running multiple CMSes</a></li><li><a href="https://dhound.io/dhound-chatbot" rel="nofollow" target="_blank">Dhound Chatbot: open domains, IP addresses</a></li><li><a href="https://arstechnica.com/information-technology/2019/05/more-than-100-commerce-sites-infected-with-code-that-steals-payment-card-data/" rel="nofollow" target="_blank">Unless you want your payment card data skimmed, avoid these commerce sites</a></li><li><a href="https://fidusinfosec.com/exploiting-10000-devices-used-by-britains-most-vulnerable/" rel="nofollow" target="_blank">EXPLOITING 10,000+ DEVICES USED BY BRITAIN’S MOST VULNERABLE</a></li></ol>

Superhost Spycams and Compromised CMSes

In this episode, Bill tries to track merger and acquisition activity with children GPS devices. Gavin highlights the issues of hiding malware in BIOS, and Thom Langford from TL(2) joins to give a CISO's perspective.Episode 6 story list:Motherboard flaws can lead to hidden malwarehttps://www.theregister.co.uk/2019/04/03/razer_laptop_flaw/Mar-a-lago physical security failurehttps://www.theregister.co.uk/2019/04/02/trump_china_malware_usb_stick/Game of Thrones torrents packing nasty surpriseshttps://thenextweb.com/insider/2019/04/03/game-of-thrones-torrents-are-packing-a-nasty-surprise/Researcher prints PWNED! on hundreds of GPS watcheshttps://www.zdnet.com/article/researcher-prints-pwned-on-hundreds-of-gps-watches-maps-due-to-unfixed-api/

In this episode, Bill tries to track merger and acquisition activity with children GPS devices. Gavin highlights the issues of hiding malware in BIOS, and Thom Langford from TL(2) joins to give a CISO's perspective. Episode 6 story list: Motherboard flaws can lead to hidden malware <a href="https://www.theregister.co.uk/2019/04/03/razer_laptop_flaw/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/04/03/razer_laptop_flaw/</a> Mar-a-lago physical security failure <a href="https://www.theregister.co.uk/2019/04/02/trump_china_malware_usb_stick/" rel="nofollow" target="_blank">https://www.theregister.co.uk/2019/04/02/trump_china_malware_usb_stick/</a> Game of Thrones torrents packing nasty surprises <a href="https://thenextweb.com/insider/2019/04/03/game-of-thrones-torrents-are-packing-a-nasty-surprise/" rel="nofollow" target="_blank">https://thenextweb.com/insider/2019/04/03/game-of-thrones-torrents-are-packing-a-nasty-surprise/</a> Researcher prints PWNED! on hundreds of GPS watches <a href="https://www.zdnet.com/article/researcher-prints-pwned-on-hundreds-of-gps-watches-maps-due-to-unfixed-api/" rel="nofollow" target="_blank">https://www.zdnet.com/article/researcher-prints-pwned-on-hundreds-of-gps-watches-maps-due-to-unfixed-api/</a>

Four Phones, Two laptops and a Malware-laden USB Stick Walk into a Bar...

Bill and Gavin talk about yet another leak of hundreds of millions of personal details with the Baltimore City Ransomware attack.  The chaps are joined by Research Analyst, Claire Tills, to discuss how the media drive remediation efforts for popular vulnerabilities.Baltimore Cityhttps://www.welivesecurity.com/2019/05/17/eternalblue-new-heights-wannacryptor/First American Titlehttps://krebsonsecurity.com/2019/05/first-american-financial-corp-leaked-hundreds-of-millions-of-title-insurance-records/SandboxEscaperhttps://kb.cert.org/vuls/id/119704/https://www.bleepingcomputer.com/news/security/new-windows-10-zero-day-bug-emerges-from-bypassing-patched-flaw/ (this one has all the other bugs discovered)ICS in Polandhttps://medium.com/@woj_ciech/state-of-industrial-control-systems-in-poland-and-switzerland-656e2e363fe3Old vulns and bad habitshttps://www.infosecurity-magazine.com/news/microsoft-warns-of-campaign-1/https://www.forbes.com/sites/daveywinder/2019/06/07/nsa-warns-microsoft-windows-users-update-now-or-face-devastating-damage/#6c0f5efb3aa0

Bill and Gavin talk about yet another leak of hundreds of millions of personal details with the Baltimore City Ransomware attack.  The chaps are joined by Research Analyst, Claire Tills, to discuss how the media drive remediation efforts for popular vulnerabilities. Baltimore City<a href="https://www.welivesecurity.com/2019/05/17/eternalblue-new-heights-wannacryptor/" rel="nofollow" target="_blank">https://www.welivesecurity.com/2019/05/17/eternalblue-new-heights-wannacryptor/</a>First American Title<a href="https://krebsonsecurity.com/2019/05/first-american-financial-corp-leaked-hundreds-of-millions-of-title-insurance-records/" rel="nofollow" target="_blank">https://krebsonsecurity.com/2019/05/first-american-financial-corp-leaked-hundreds-of-millions-of-title-insurance-records/</a>SandboxEscaper<ol><li><a href="https://kb.cert.org/vuls/id/119704/" rel="nofollow" target="_blank">https://kb.cert.org/vuls/id/119704/</a></li><li><a href="https://www.bleepingcomputer.com/news/security/new-windows-10-zero-day-bug-emerges-from-bypassing-patched-flaw/" rel="nofollow" target="_blank">https://www.bleepingcomputer.com/news/security/new-windows-10-zero-day-bug-emerges-from-bypassing-patched-flaw/</a> (this one has all the other bugs discovered)</li></ol>ICS in Poland<a href="https://medium.com/@woj_ciech/state-of-industrial-control-systems-in-poland-and-switzerland-656e2e363fe3" rel="nofollow" target="_blank">https://medium.com/@woj_ciech/state-of-industrial-control-systems-in-poland-and-switzerland-656e2e363fe3</a>Old vulns and bad habits<ul><li><a href="https://www.infosecurity-magazine.com/news/microsoft-warns-of-campaign-1/" rel="nofollow" target="_blank">https://www.infosecurity-magazine.com/news/microsoft-warns-of-campaign-1/</a></li><li><a href="https://www.forbes.com/sites/daveywinder/2019/06/07/nsa-warns-microsoft-windows-users-update-now-or-face-devastating-damage/#6c0f5efb3aa0" rel="nofollow" target="_blank">https://www.forbes.com/sites/daveywinder/2019/06/07/nsa-warns-microsoft-windows-users-update-now-or-face-devastating-damage/#6c0f5efb3aa0</a></li></ul>

Eternally Blue about Ransomware

What is this?
1 quote, 3 ideas & 1 question from a carefully curated podcast episode.
Every Monday & Wednesday.

Want a 3rd insight and episode every week? Email me at curation@owltail.com.

OwlTail

OwlTail 1-3-1

The best episodes for anyone looking to learn more about topics such as happiness, fulfillment, depression and psychology/mental health in general. With interviews with industry experts, personal stories of individuals, this topic has lessons applicable to everyone. Add episodes you're interested into your queue below!