Episodes

00:00 - PreShow Banter™ — World Class RSA Cookies 04:49 - BHIS - Talkin’ Bout [infosec] News 2024-05-14 06:33 - Story # 1: Zscaler takes “test environment” offline after rumors of a breach 18:48 - Story # 2: Okta’s security chief on the company’s own cyberattack and how the ‘battleground’ has shifted 43:36 - Story # 3: Leaked FBI email stresses need for warrantless surveillance of Americans 48:46 - Story # 4: Despite big tech lobbying, Maryland passes two internet privacy bills 52:26 - Sto...

00:00 - PreShow Banter™ — RSA Power Moves 08:14 - BHIS - Talkin’ Bout [infosec] News 2024-05-06 09:49 - Story # 1: Shortridge Makes Sense of the 2024 Verizon DBIR 15:04 - Story # 2: A recent security incident involving Dropbox Sign 20:30 - Story # 3: Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover 28:40 - Story # 4: Millions of Docker repos found pushing malware, phishing sites 32:53 - Story # 5: 1,400 GitLab Servers Impacted by Exploited Vulnerability 42:07 -...

00:00 - BHIS - Talkin’ Bout [infosec] News 2024-04-29 02:33 - Story # 1: Cyber Hygiene Helps Organizations Mitigate Ransomware-Related Vulnerabilities 10:38 - Story # 2: ‘Admin’ and ‘12345’ banned from being used as passwords in UK crackdown on cyber attacks 16:34 - Story # 3: Maximum severity Flowmon bug has a public exploit, patch now 21:06 - Story # 3b: CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon 22:45 - Story # 4:GitHub comments abused to push malware via Microsof...

00:00 - PreShow Banter™ — A Parent Process 03:01 - BHIS - Talkin’ Bout [infosec] News 2024-04-22 04:13 - Story # 1: Exploit code for Palo Alto Networks zero-day now public 07:44 - Story # 1b: (Timeline) Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400) 23:22 - Story # 2: MGM says FTC can’t possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time 31:37 - Story # 3: MITRE was breached through Ivanti z...

00:00 - PreShow Banter™ — Retro Actions 04:48 - BHIS - Talkin’ Bout [infosec] News 2024-04-15 07:05 - Story # 1: FCC to vote on net neutrality rules on April 25 18:52 - Story # 2: “All Your Secrets Are Belong To Us” — A Delinea Secret Server AuthN/AuthZ Bypass 23:40 - Story # 2b: Delinea has cloud security incident in Thycotic Secret Server gaff 28:23 - Story # 3: CISA Releases Malware Next-Gen Analysis System for Public Use 40:36 - Story # 4: Hacker Leaks 8.5M U.S. Environmental Protectio...

00:00 - PreShow Banter™ — BHIS Bees Corp® 04:08 - The FUTURE IS…… Kickstarter 05:29 - BHIS - Talkin’ Bout [infosec] News 2024-04-08 06:03 - Story # 1: New draft bipartisan US federal privacy bill unveiled 11:03 - Story # 2: How To Opt Out Of GM Sharing Your Driving Data With Insurance Companies 13:04 - Story # 2b: Request a Consumer Disclosure Report 14:25 - Story # 3: Hackers Hijacked Notepad++ Plugin To Execute Malicious Code 29:19 - Story # 4: A Vigilante Hacker Took Down North Korea’s...

00:00 - PreShow Banter™ — Zippers, Jokes, & Lawyers (Not to be confused with the song "Lawyers, Guns and Money") 02:59 - BHIS - Talkin’ Bout [infosec] News 2024-04-01 03:57 - Story # 1: New Darcula phishing service targets iPhone users via iMessage 11:57 - Story # 2: Recent ‘MFA Bombing’ Attacks Targeting Apple Users 17:22 - Story # 3: Thousands of phones and routers swept into proxy service, unbeknownst to users 22:11 - Story # 4: Digital signs around Brookline are collecting data from you...

00:00 - PreShow Banter™ — “Allegedly” 03:18 - BHIS - Talkin’ Bout [infosec] News 2024-03-25 08:00 - Story # 1: Cisco Completes Acquisition of Splunk 10:47 - Story # 2: General Motors Quits Sharing Driving Behavior With Data Brokers 15:27 - Story # 3: Ron DeSantis signs bill requiring parental consent for kids under 16 to hold social media accounts 24:34 - Story # 4: House passes bill to prevent the sale of personal data to foreign adversaries 28:19 - Story # 5: Unsaflok - vulnerability imp...

Brought to you by Antisyphon Training — https://www.antisyphontraining.com (https://www.antisyphontraining.com)00:00:00 - PreShow Banter™ — New Arms Again00:03:24 - BHIS - Talkin’ Bout [infosec] News 2024-03-1800:04:54 - Story # 1: NIST Releases Version 2

00:00 - PreShow Banter™ — Death to Clippy 05:18 - BHIS - Talkin’ Bout [infosec] News 2024-03-11 – Featuring Josh Mason 06:58 - Story # 1: Behind the doors of a Chinese hacking company, a sordid culture fueled by influence, alcohol, and sex 13:43 - Story # 2: Top US cybersecurity agency hacked and forced to take some systems offline 23:39 - Story # 3: Microsoft admits Russian state hack still not contained. ‘This has tremendous national security implications’ 30:27 - Story # 4: FBI’s 2023 In...

A weekly Podcast with BHIS and Friends. stories. We discuss notable Infosec, and infosec-adjacent news stories. Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com/ Antisyphon Training https://www.antisyphontraining.com/ Story # 1: Executive Order on Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern https://www.whitehouse.gov/briefing-r... Story # 2: A leaky database spilled 2FA...

Story #1: Mr. Cooper leak exposes over two million customers Story #2: ConnectWise ScreenConnect attacks deliver malware Story #3: LockBit Infrastructure Seized by US, UK Police Story #4: US health tech giant Change Healthcare hit by cyberattack Story #5: The reported leak of Chinese hacking documents supports experts’ warnings about how compromised the US could be (00:00) - PreShow Banter™ — It's a Wii Match (05:22) - BHIS - Talkin' Bout [infosec] News 2024-02-26 (07:10) - Story # 1: Mr....

The post Talkin’ About Infosec News – 2/20/24 appeared first on Black Hills Information Security.

The post Talkin’ About Infosec News – 2/14/2024 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Fashion in Oregon (01:51) - BHIS - Talkin' Bout [infosec] News 2024-02-12 (08:54) - Story # 1: Ivanti devices hit by wave of exploits for latest security hole (31:53) - Story # 2: Hackers Exploit Job Boards, Stealing Millions of Resumes and Personal Data (43:15) - Story # 3: Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux Distros (54:13) - Stor...

The post Talkin’ About Infosec News – 2/6/24 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — 5 Min Webcasts (04:29) - BHIS - Talkin' Bout [infosec] News 2024-02-05 (09:06) - Story # 1: Thanksgiving 2023 security incident (22:09) - Story # 2: AnyDesk Incident Response 5-2-2024 (34:14) - Story # 3: Finance worker pays out $25 million after video call with deepfake ‘chief financial officer’ (50:13) - Story # 4: All federal civilian agencies ordered to disconnec...

The post Talkin’ About Infosec News – 1/31/2024 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — No Hacking on Fridays (04:33) - BHIS - Talkin' Bout [infosec] News 2024-01-29 (09:48) - Story # 1: SEC confirms X account was hacked in SIM swapping attack (17:45) - Story # 2: MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries (23:03) - Story # 3: Fortra warns of new critical GoAnywhere MFT auth bypass, patch now (26:35) - Story # ...

The post Talkin’ About Infosec News – 1/24/2024 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — There's More Than Swim Meets (01:21) - BHIS - Talkin' Bout [infosec] News 2024-01-22 (05:21) - Story # 1 : Florida bill banning youth from social media moves forward (14:19) - Story # 2 : Microsoft network breached through password-spraying by Russia-state hackers (21:38) - Story # 3 : This new data poisoning tool lets artists fight back against generative AI (28:...

The post Talkin’ About Infosec News – 1/16/2024 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Book-It Steak Dinners (05:25) - BHIS - Talkin' Bout [infosec] News 2024-01-15 (08:01) - Most Offensive Con - (08:16) - Story # 1: Linux devices are under attack by a never-before-seen worm (21:09) - Story # 2: Hacker spins up 1 million virtual servers to illegally mine crypto (25:47) - Story # 3: Actively exploited 0-days in Ivanti VPN are letting hackers backdoor...

The post Talkin’ About Infosec News – 1/10/24 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Welcome to 2025 (03:36) - BHIS - Talkin' Bout [infosec] News 2024-01-08 (05:30) - Story # 1: Law firm that handles data breaches was hit by data breach (10:36) - Story # 2: Fred Hutch patients get blackmail emails after cyberattack (17:55) - Story # 3: Bitwarden Heist - How to Break Into Password Vaults Without Using Passwords (19:56) - Story # 3b: Privacy Harms – D...

The post Talkin’ About Infosec News – 12/21/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Talking Bout Fabric (07:16) - BHIS - Talkin' Bout [infosec] News 2023-12-18 (10:06) - Story # 1: Cartels Are Using a Police Database to Track and Target Their Enemies (23:15) - Story # 2: CVS, Rite Aid, Walgreens hand out medical records to cops without warrants (37:18) - Story # 3: Cloud engineer gets 2 years for wiping ex-employer’s code repos (45:11) - Story #...

https://youtu.be/MaThvw_VWJ8 Brought to you by Antisyphon Training https://www.antisyphontraining.com (00:00) - PreShow Banter™ — Fine McDonalds Drinkware (04:36) - BHIS - Talkin' Bout [infosec] News 2023-12-11 (07:04) - Story # 1: America’s Water Infrastructure Act of 2018 (AWIA) (08:55) - Story # 1b: Dragos Launches Program to Provide Water, Electric Utilities With Free Cybersecurity Tools (09:42) - Story # 1c: Dragos Community Defense Program (11:38) - Story # 2: BlackCat ransomware cri...

The post Talkin’ About Infosec News – 12/06/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Chaos Agency (08:16) - BHIS - Talkin' Bout [infosec] News 2023-12-04 (11:03) - Story # 1: 2 municipal water facilities report falling to hackers in separate breaches (30:49) - Story # 2: PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214) (37:16) - Story # 3: ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitation (39:44) - ...

The post Talkin’ About Infosec News – 11/30/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — Glitch, Please (01:54) - BHIS - Talkin' Bout [infosec] News 2023-11-27 (04:55) - Story # 1: General Electric investigates claims of cyber attack, data theft (10:01) - Story # 2: CISA orders federal agencies to patch Looney Tunables Linux bug (16:26) - Story # 3: Phishing attacks spike attributed to generative AI adoption (18:49) - Story # 3b: SlashNext report unc...

The post Talkin’ About Infosec News – 11/22/2023 appeared first on Black Hills Information Security. (00:00) - PreShow Banter™ — A clean-shaven galaxy, a long time away. (07:50) - BHIS - Talkin' Bout [infosec] News 2023-11-20 (09:53) - Story # 1: Ransomware gang files complaint with SEC complaining victim didn’t promptly announce breach (12:36) - Story # 1b: AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC (2) (17:04) - Story # 1c : Services in North ...