Episodes

Today we’re talking Blue Leaks, the massive data leak impacting law enforcement agencies at all levels, not to be confused with the classic Martin Lawrence movie Blue Streak, a comedy from 1999. We talk about the impacts of the breach, how and why it happened, and the continued risk to government agencies as they expand their online presence. More info on the breach from Wired: https://www.wired.com/story/blueleaks-anonymous-law-enforcement-hack/ Check out NuHarbor Security for complete cyber ...

On this week’s episode we're talking to Kristof about ISO 27001. We cover the who, what, when, why, and how of ISO and discuss how the process works from initial discussion through certification. Kristof points out some of the pitfalls and shares his thoughts on why ISO is often a better choice than some of the other standards that exist (NIST, we are looking at you.) If you're a organization interested in ISO, be sure to listen! Check out NuHarbor Security for complete cyber security protection...

On this week’s episode we’re talking to Kristof about ISO 27001. We cover the who, what, when, why, and how of ISO and discuss how the process works from initial discussion through certification. Kristof points out some of the pitfalls and shares his thoughts on why ISO is often a better choice than some of the other standards that exist (NIST, we are looking at you.) If you’re a organization interested in ISO, be sure to listen! Check out NuHarbor Security for complete cyber security protectio...

This week Justin and Zack realize with terror, that their favorite form of transportation has betrayed them. The NuHarbor train system of choice, Amtrak, found itself on the receiving end of a data breach and unfortunately the train has left the station. The breach appears to have originated within the app used to access your Amtrak guest points system, sharing all the weird things you purchased using your points and your PII like social security number, names, and addresses. At the same time, t...

This week Justin and Zack realize with terror, that their favorite form of transportation has betrayed them. The NuHarbor train system of choice, Amtrak, found itself on the receiving end of a data breach and unfortunately the train has left the station. The breach appears to have originated within the app used to access your Amtrak guest points system, sharing all the weird things you purchased using your points and your PII like social security number, names, and addresses. At the same time, t...

You shouldn't be shocked by this, but North Korea is trying to break into your data. Seriously, check your logs. If you do not see the telltale signs, it's only a matter of when, not if, a nation state takes a shot at you. This was originally set to be a Breach of the Week, but we got chatty and we decided to launch this as a regular full episode. Justin and Zack discuss how cyber-attacks are leveling the playing field between nations. Specifically, they discuss how North Korea has built a 7,000...

You shouldn’t be shocked by this, but North Korea is trying to break into your data. Seriously, check your logs. If you do not see the telltale signs, it’s only a matter of when, not if, a nation state takes a shot at you. This was originally set to be a Breach of the Week, but we got chatty and we decided to launch this as a regular full episode. Justin and Zack discuss how cyber-attacks are leveling the playing field between nations. Specifically, they discuss how North Korea has built a 7,000...

For this week’s Breach of the Week, we're talking about a software on a chip maker that got hit by our old friend, Maze Ransomware. Justin talks about the persistence of viruses after you've been hit and how companies can try to prevent this from happening. We also are beginning to discuss 5G. What is 5G? Well, if you believe the hype, it is literally everything. Stay tuned for more 5G coverage in the future as we begin to explore the benefits and challenges of this new tech. To learn more about...

For this week’s Breach of the Week, we’re talking about a software on a chip maker that got hit by our old friend, Maze Ransomware. Justin talks about the persistence of viruses after you’ve been hit and how companies can try to prevent this from happening. We also are beginning to discuss 5G. What is 5G? Well, if you believe the hype, it is literally everything. Stay tuned for more 5G coverage in the future as we begin to explore the benefits and challenges of this new tech. To learn more abou...

What is up everyone! For this week's episode we're digging into the archives and we picked one of the most popular episodes from Season 1 of Pwned, Exim Server Vulnerabilities. What's fascinating about Exim is that it first launched 25 years ago and still supports a lot of email systems around the globe. The software’s longevity and proliferation mean that hackers have had a long time to learn the vulnerabilities of the platform and unpatched servers seems to be the target that get picked off th...

What is up everyone! For this week’s episode we’re digging into the archives and we picked one of the most popular episodes from Season 1 of Pwned, Exim Server Vulnerabilities. What’s fascinating about Exim is that it first launched 25 years ago and still supports a lot of email systems around the globe. The software’s longevity and proliferation mean that hackers have had a long time to learn the vulnerabilities of the platform and unpatched servers seems to be the target that get picked off th...

We have a very special episode this week! NuHarbor Security is literally the best place to work. Seriously, NuHarbor was selected as a "Best Places to Work in Vermont" for the second time! Justin and Zack discuss why they think NuHarbor was selected and why NuHarbor staff members make the difference. Justin also talks about how having a strong corporate philosophy that emphasizes staff wellness above all else can help any company succeed and how he prioritizes building a company of people who wo...

We have a very special episode this week! NuHarbor Security is literally the best place to work. Seriously, NuHarbor was selected as a “Best Places to Work in Vermont” for the second time! Justin and Zack discuss why they think NuHarbor was selected and why NuHarbor staff members make the difference. Justin also talks about how having a strong corporate philosophy that emphasizes staff wellness above all else can help any company succeed and how he prioritizes building a company of people who wo...

On this week’s Breach of the Week, we're talking CIA and a pretty epic dump of highly sensitive and classified materials including some of the most dangerous hacking tools they've created. Was it a nation state looking to seek revenge? Was it a hacking group that perpetrated the deepest depths of the government's networks? Listen and find out (hint: It wasn't either of those things). Justin gives his thoughts on how this went down, the lack of good policies and procedures, and we talk about the ...

On this week’s Breach of the Week, we’re talking CIA and a pretty epic dump of highly sensitive and classified materials including some of the most dangerous hacking tools they’ve created. Was it a nation state looking to seek revenge? Was it a hacking group that perpetrated the deepest depths of the government’s networks? Listen and find out (hint: It wasn’t either of those things). Justin gives his thoughts on how this went down, the lack of good policies and procedures, and we talk about the ...

On this week's episode Justin's discussing cyber threat intelligence and why it takes a combination of good systems, smart people, and solid processes to stay ahead of the bad guys. Justin also shared some sources you can use to find intel and some thoughts on how to effectively use that intel including building your platform to manage all the data. You're going to be drinking from a fire hose once you start ingesting intel, so Justin also provides his thoughts on how to make sense of everything...

On this week’s episode Justin’s discussing cyber threat intelligence and why it takes a combination of good systems, smart people, and solid processes to stay ahead of the bad guys. Justin also shared some sources you can use to find intel and some thoughts on how to effectively use that intel including building your platform to manage all the data. You’re going to be drinking from a fire hose once you start ingesting intel, so Justin also provides his thoughts on how to make sense of everything...

On this week’s episode we are digging into a specific Maze Ransomware attack that hit one of the biggest security firms on the planet. What does it mean when a security company gets hit, how they'll probably be just fine with their billions of dollars, and whether or not we should cut them some slack. While we don't know how much they ultimately paid the hackers, we know that they estimate the impact to their company to be in the tens of millions of dollars, which for a company of this size is p...

On this week’s episode we are digging into a specific Maze Ransomware attack that hit one of the biggest security firms on the planet. What does it mean when a security company gets hit, how they’ll probably be just fine with their billions of dollars, and whether or not we should cut them some slack. While we don’t know how much they ultimately paid the hackers, we know that they estimate the impact to their company to be in the tens of millions of dollars, which for a company of this size is p...

Maze Ransomware has been in the headlines quite a bit recently and the way things look, we're probably going to see it more in the future. Justin and Zack take a deep dive into what Maze is, how it works, and why businesses impacted should probably not mess around with getting it sorted out. They'll also cover the unfortunate reality that once your hit, it's very likely you'll be targeted again and what you can do to prevent getting impacted in the first place. As is often the case, human error ...

Maze Ransomware has been in the headlines quite a bit recently and the way things look, we’re probably going to see it more in the future. Justin and Zack take a deep dive into what Maze is, how it works, and why businesses impacted should probably not mess around with getting it sorted out. They’ll also cover the unfortunate reality that once your hit, it’s very likely you’ll be targeted again and what you can do to prevent getting impacted in the first place. As is often the case, human error ...

Despite the mediocre R.E.M. pun, this is a good episode. We're covering ShinyHunters and how they got busy in May dumping millions of accounts into the dark web. Zack learns that hacked data doesn't necessarily arrive ready to start using and Justin laments at the fact that hackers only need to be right once and business need to be right 100% of the time. We also talk about the return of Anonymous and who their targeting during their resurgence. Once again, we suggest you let REDSEC, our offensi...

Despite the mediocre R.E.M. pun, this is a good episode. We’re covering ShinyHunters and how they got busy in May dumping millions of accounts into the dark web. Zack learns that hacked data doesn’t necessarily arrive ready to start using and Justin laments at the fact that hackers only need to be right once and business need to be right 100% of the time. We also talk about the return of Anonymous and who their targeting during their resurgence. Once again, we suggest you let REDSEC, our offensi...

On this week’s episode we're talking to Davis about threat analysis and how he sifts through the noise to help keep organizations safer from security threats. We are covering everything from the alphabet soup of infosec acronyms to why having some human eyes on intel can strengthen information security to what the future holds in threat analysis. Davis sits in the purple side of the house between the REDSEC offensive security team and the groups defending against attacks. Justin also gets anothe...