Episodes

00:00 - PreShow Banter™ — The Old and The New 02:27 - BHIS - Talkin’ Bout [infosec] News 2024-11-11 03:44 - Story # 1: Mattel pulls thousands of ‘Wicked’ dolls off shelves after printing adult website on packaging 08:03 - Story # 2: Office apps crash on Windows 11 24H2 PCs with CrowdStrike antivirus 11:41 - Story # 3: Mislabeled patch sends Windows Server 2022 admins on unwanted upgrade to 2025 16:49 - Story # 4: Suspected Snowflake Hacker Arrested in Canada 18:26 - Story # 5: Interpol Cyb...

00:00:00 - PreShow Banter™ — The Grey Times 00:04:33 - BHIS - Talkin’ Bout [infosec] News 2024-11-04 00:05:54 - Story # 1: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files 00:16:45 - Story # 2: Follow Up - 5 Things To Know On Delta’s Lawsuit Against CrowdStrike 00:17:43 - Story # 2b: CrowdStrike Sues Delta: 5 Key Takeaways 00:22:04 - Story # 3: Russian charged by U.S. for creating RedLine infostealer malware 00:22:59 - Story # 3b: How a series of opsec failure...

00:00:00 - PreShow Banter™ — Sarsaparilla 00:05:50 - BHIS - Talkin’ Bout [infosec] News 2024-10-28 00:06:46 - Story # 1: AWS, Azure auth keys found in Android and iOS apps used by millions 00:15:02 - Story # 2: Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs 00:29:03 - Story # 3: Delta officially launches lawyers at $500M CrowdStrike problem 00:40:60 - Story # 4: New Rules for US National Security Agencies Balance AI’s Promise With Need to ...

00:00:00 - PreShow Banter™ — Log Con 00:11:41 - BHIS - Talkin’ Bout [infosec] News 2024-10-21 00:12:51 - Story # 1: Internet Archive exposed again – this time through Zendesk 00:14:57 - Story # 1b: Hackers steal information from 31 million Internet Archive users 00:20:42 - Story # 2: Sophos buys Secureworks for $859 mln to beef up cybersecurity portfolio 00:24:21 - Story # 3: USDoD hacker behind National Public Data breach arrested in Brazil 00:27:12 - Story # 4: Debunking Hype: China Hasn...

00:00:00 - PreShow Banter™ — Cast of Special Characters 00:06:37 - BHIS - Talkin’ Bout [infosec] News 2024-09-30 00:08:06 - Story # 1: CUPS flaws enable Linux remote code execution, but there’s a catch 00:23:40 - Story # 2: US Capitol Hit by Massive Dark Web Cyber Attack - Newsweek 00:27:40 - Story # 2b: ‘I’m a black NAZI!’: NC GOP nominee for governor made dozens of disturbing comments on porn forum 00:35:57 - Story # 3: NIST proposes barring some of the most nonsensical password rules 00...

00:00 - PreShow Banter™ — Plane Talk 05:50 - BHIS - Talkin’ Bout [infosec] News 2024-09-23 06:16 - A SANS Difference Maker Award Finalist 09:47 - Story # 1: Pagers attack brings to life long-feared supply chain threat 24:08 - Story # 2: Recaptcha Phish - John Hammond 25:49 - Story # 2b: Clever ‘GitHub Scanner’ campaign abusing repos to push malware 30:05 - Story # 3: Lazarus Group Targets Developers in Fresh VMConnect Campaign 35:22 - Story # 4: LinkedIn Addresses User Data Collection for...

00:00 - PreShow Banter™ — Pour Over News 06:01 - BHIS - Talkin’ Bout [infosec] News 2024-09-16 07:14 - Story # 1: Fortinet confirms data breach after hacker claims to steal 440GB of files 15:37 - Story # 2: Snowflake slams ‘more MFA’ button again – months after Ticketmaster, Santander breaches 21:30 - Story # 3: Omnipresent AI cameras will ensure good behavior, says Larry Ellison 28:11 - Story # 4: Mastercard bolsters threat intelligence capabilities with $2.65 billion deal for Recorded Fut...

00:00 - Introduction 01:22 - The Scenario 02:50 - First Steps 03:48 - Endpoint Analysis Roll 04:22 - Logon Scripts Were installed 05:09 - I.R. Team Introductions 07:17 - Second Step 10:32 - Network Threat Hunting Roll 11:36 - Third Step 15:12 - Anyway Here’s Firewall Roll 15:43 - Fourth Step 18:26 - SIEM Roll 19:41 - Fifth Step 20:47 - UEBA Roll 21:19 - Senario Recap 22:20 - Senario Plausibility? 25:51 - Wrap-up Takeaways (00:00) - Introduction (01:21) - The Scenario (02:50) -...

00:00 - PreShow Banter™ — Revenge of the Nerds / More Chicken Related Crimes 05:19 - N.Y. Official Charged With Taking Money, Travel and Poultry to Aid China 09:23 - BHIS - Talkin’ Bout [infosec] News 2024-09-09 09:50 - Story # 1: YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel 20:35 - Story # 2: Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database 25:24 - Story # 3: California legislature passes sweeping AI safety bill 38:02 - Story #...

00:00 - PreShow Banter™ — Move to Signal 03:47 - BHIS - Talkin’ Bout [infosec] News 2024-08-26 04:37 - Story # 1: Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance 11:03 - Story # 1b: Moxie on X.com 23:17 - Story # 2: Unveiling “sedexp”: A Stealthy Linux Malware Exploiting udev Rules 29:39 - Story # 3: Seattle airport ‘possible cyberattack’ snarls travel yet again 32:42 - Story # 4: Iran named as source of Trump campaign phish, leaks 38:53 - Story # 5: Man who hacked Hawaii stat...

00:00:00 - PreShow Banter™ — Nine Years for Chicken Wings 00:08:19 - BHIS - Talkin’ Bout [infosec] News 2024-08-19 00:09:03 - Story # 1: NationalPublicData.com Hack Exposes a Nation’s Data 00:18:17 - Story # 1b: National Public Data Published Its Own Passwords 00:25:01 - Story # 2: RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks 00:26:52 - Story # 3: T-Mobile fined $60 million for failing to stop data breaches 00:34:03 - Story # 4: Massive Cyber Attack On AWS Targets 2...

00:00 - PreShow Banter™ — Scotty’s Pizza (Not Sponsored) 03:38 - BHIS - Talkin’ Bout [infosec] News 2024-08-12 03:59 - Hacker Summer Camp Report 2024 08:56 - Story # 1: ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections 14:26 - Story # 2: Black Hat USA 2024, DEF CON 32 attendees treated like children – or criminals – with invasive hotel room checks 29:49 - Story # 3: DEF CON Badge Maker Pulled Off Stage Amid Claims of Non-Payment and Failed Wor...

00:00 - PreShow Banter™ — What’s the f___ 03:34 - BHIS - Talkin’ Bout [infosec] News 2024-08-05 06:57 - Story # 1: Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails 23:57 - Story # 2: Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say 36:47 - Story # 3: Eavesdropping on HDMI cables can reveal computer screen’s content 37:43 - Story # 3b Hak5 Screen Crab 39:18 - Story # 4: Microsoft says massive Azure outage was...

00:00 - PreShow Banter™ — Microsoft Sad Face 02:13 - BHIS - Talkin’ Bout [infosec] News 2024-07-29 03:08 - Story # 1: Fake CrowdStrike repair manual pushes new infostealer malware 15:26 - Story # 1b: 83-year-old man found safe a week after going missing when CrowdStrike outage canceled flight 20:39 - Story # 2: Multifactor Authentication Is Not Enough to Protect Cloud Data 38:59 - Graphrunner 47:19 - Story # 3: Data pilfered from Pentagon IT supplier Leidos 57:57 - Story # 4: How a North ...

00:00 - PreShow Banter™ — CrowdStroke Memes 05:59 - BHIS - Talkin’ Bout [infosec] News 2024-07-22 07:01 - Story # 1: A Windows version from 1992 is saving Southwest’s butt right now 07:36 - Crowdstrike Global Outage - BHIS - Talkin’ Bout [infosec] #News 09:48 - Story # 1b: CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft 12:13 - Story # 1c: Let’s blame the dev who pressed “Deploy” 17:23 - Figure 1 22:14 - Story # 2: DHS Has a DoS Robot to Disable Internet of...

The outage of the decade!

00:00 - PreShow Banter™ — Absolute Madmen 02:28 - BHIS - Talkin’ Bout [infosec] News 2024-07-15 03:18 - Wi-Fi Forge 07:31 - Story # 1: CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth 22:39 - Story # 2: AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach 33:35 - Story # 3: FTC study finds ‘dark patterns’ used by a majority of subscription apps and websites 38:48 - Story # 4: Clu...

00:00 - PreShow Banter™ — A Bunch of Lunatics 05:09 - BHIS - Talkin’ Bout [infosec] News 2024-07-08 08:41 - Story # 1: Europol takes down 593 Cobalt Strike servers used by cybercriminals 09:54 - Story # 1b: National Crime Agency leads international operation to degrade illegal versions of Cobalt Strike 15:17 - Story # 2: ‘RockYou2024’: Nearly 10 billion passwords leaked online 22:12 - Story # 3: Ticketmaster Breach: ShinyHunters Leak 440K Taylor Swift Eras Tour Ticket Data 24:20 - Story # ...

00:00 - PreShow Banter™ — Ice Cream Season 07:22 - BHIS - Talkin’ Bout [infosec] News 2024-07-01 07:48 - Story # 1: TeamViewer’s corporate network was breached in alleged APT hack 09:11 - Story # 1b: TeeamViewer Security Update – June 28, 2024, 12:10 PM CEST 16:33 - Story # 2: Supreme Court orders new look at Texas, Florida social media laws 21:32 - Story # 3: New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems 24:52 - Story # 4: CISA: Most critical open source projects no...

00:00 - PreShow Banter™ — Life is a Highway 04:28 - BHIS - Talkin’ Bout [infosec] News 2024-06-24 05:30 - Story # 1: Colorado Privacy Act Amended To Include Biometric Data Provisions 14:18 - Story # 2: Scathing report on Medibank cyberattack highlights unenforced MFA 24:30 - Story # 3: CDK suffered another data breach as it was attempting to recover 35:08 - Story # 4: LockBit claims the hack of the US Federal Reserve 40:00 - Story # 5: Amazon-Powered AI Cameras Used to Detect Emotions of U...

00:00 - PreShow Banter™ — Hungry Hungry Hipaa 03:39 - BHIS - Talkin’ Bout [infosec] News 2024-06-17 05:40 - Story # 1: Windows security hole allows attackers to install malware via Wi-Fi — new patch plugs gaping vulnerability 16:27 - Story # 2: Microsoft’s all-knowing Recall AI feature is being delayed 25:34 - Story # 3: Here’s how Apple’s AI model tries to keep your data private 32:27 - Story # 4: New Linux malware is controlled through emojis sent from Discord 35:28 - Story # 5: Pure Sto...

00:00 - PreShow Banter™ — Louie is Live 04:53 - BHIS - Talkin’ Bout [infosec] News 2024-06-10 07:09 - Story # 1: UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion 18:39 - Story # 2: Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. 39:02 - Story # 3: TikTok fixes zero-day bug used to hijack high-profile accounts 41:34 - Story # 4: The Age of the Drone Police Is Here 52...

00:00:00 - PreShow Banter™ — In an RV down by the dumpster 00:07:39 - BHIS - Talkin’ Bout [infosec] News 2024-06-03 00:09:21 - Story # 1: Ticketmaster confirms massive breach after stolen data for sale online 00:10:46 - Story # 1b: Snowflake, Cloud Storage Giant, Suffers Massive Breach: Hacker Confirms to Hudson Rock Access Through Infostealer Infection 00:13:03 - Story # 1c: Detecting and Preventing Unauthorized User Access: Instructions 00:13:42 - Story # 1d: Snowflake Denies Responsibili...

00:00 - PreShow Banter™ — Antichafing Training. 04:31 - BHIS - Talkin’ Bout [infosec] News 2024-05-20 07:12 - Story # 1: Linux maintainers were infected for 2 years by SSH-dwelling backdoor with huge reach 29:49 - Story # 2: Palo Alto Networks is buying security assets from IBM to expand customer base 36:50 - Story # 3: Charges and Seizures Brought in Fraud Scheme Aimed at Denying Revenue for Workers Associated with North Korea 43:55 - Story # 4: FCC might require telecoms to report on secu...