Episodes
-
Solorigate’s stealthy, careful operators. LuckyBoy malvertising. BEC as reconnaissance? Remote work and leaky sites. And good riddance to the Joker’s Stash.
Not summarized yet
-
More on that Solorigate threat actor, especially its non-SolarWinds activity. Chimera’s new target list. Executive Order on reducing IaaS exploitation. The case of the stolen laptop.
Not summarized yet
-
EMA emails altered before release in apparent disinformation effort. Vishing rising. Another backdoor found in SolarWinds supply chain campaign. An arrest and a stolen laptop.
Not summarized yet
-
Encore: You will pay for that one way or another. [Caveat]
Not summarized yet
-
Ann Johnson: Trying to make the world safer. [Business Development] [Career Notes]
Not summarized yet
-
Manufacturing sector is increasingly a target for adversaries. [Research Saturday]
Not summarized yet
-
Charming Kitten’s smishing and phishing. Solorigate updates. Supply chain attacks and the convergence of espionage and crime. Greed-bait. Ring patches bug. Best practices from NSA, CISA.
Not summarized yet
-
SideWinder and South Asian cyberespionage. Project Zero and motivation to patch. CISA’s advice for cloud security. Classiscam in the criminal-to-criminal market. SolarLeaks misdirection?
Not summarized yet
-
Looking for that threat actor “likely based in Russia.” SolarLeaks and a probably bogus offer of stolen files. Notes on Patch Tuesday.
Not summarized yet
-
Cyberespionage campaign hits Colombia. New malware found in the SolarWinds incident. Mimecast certificates compromised. Ubiquiti tells users to reset passwords. Two wins for the good guys.
Not summarized yet
-
More (ambiguous) evidence for attribution of Solorigate. CISA expands incident response advice. Inspiration, investigation, and deplatforming: notes from the Capitol Hill riot.
Not summarized yet
-
Tom Gorup: Fail fast and fail forward. [Operations] [Career Notes]
Not summarized yet
-
Emotet reemerges and becomes one of most prolific threat groups out there. [Research Saturday]
Not summarized yet
-
The Solorigate cyberespionage campaign and sensitive corporate data. The cybersecurity implications of physical access during the Capitol Hill riot. Ransomware’s successful business model.
Not summarized yet
-
CISA updates its alerts and directives concerning Solorigate as the investigation expands. Rioting, social media, and cybersecurity.
Not summarized yet
-
Who worked through SolarWinds? An APT “likely Russian in origin,” says the US. Rattling backdoors, rifling cryptowallets, and asking victims if they’re ensured. No bail for Mr. Assange.
Not summarized yet
-
It’s not Kates and Vals over Ford Island, but it’s not just a tourist under diplomatic cover taking pictures of Battleship Row, either. Another APT side hustle? To delist or not to delist.
Not summarized yet
-
Threat actors were able to see Microsoft source code repositories. Zyxel closes a backdoor. Kawasaki discloses data exposure. Slack’s troubles. Julian Assange escapes extradition to the US.
Not summarized yet
-
Ellen Sundra: Actions speak louder than words. [Engineering] [Career Notes]
Not summarized yet
-
Encore: Unpacking the Malvertising Ecosystem. [Research Saturday]
Not summarized yet
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account