惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

爱范儿
爱范儿
大猫的无限游戏
大猫的无限游戏
J
Java Code Geeks
MongoDB | Blog
MongoDB | Blog
Martin Fowler
Martin Fowler
GbyAI
GbyAI
Microsoft Azure Blog
Microsoft Azure Blog
Recent Announcements
Recent Announcements
F
Fortinet All Blogs
B
Blog
U
Unit 42
B
Blog RSS Feed
D
DataBreaches.Net
Google DeepMind News
Google DeepMind News
人人都是产品经理
人人都是产品经理
腾讯CDC
量子位
酷 壳 – CoolShell
酷 壳 – CoolShell
V
Visual Studio Blog
博客园 - 聂微东
MyScale Blog
MyScale Blog
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
博客园 - 三生石上(FineUI控件)
Engineering at Meta
Engineering at Meta

Black Hills Information Security, Inc.

Bad Habits: An ANTISOC Operation Same Problem, Different Angles: When Red Team and Blue Team Actually Talk to Each Other How to Identify and Exploit New Vulnerabilities Swapper – A Pure Regex Match/Replace Burp Extension A Practical Guide to BloodHound Data Collection Network Engineering Basics Signed, Trusted, and Abused: Proxy Execution via WebView2 Getting Started In Pentesting – Advice From The BHIS Pentest Lead Cloud Security: Tips and Resources for Securing the Cloud Lessons From A Chatbot Incident How to Lead Effective Tabletops Understanding GRC: How to Navigate Risks and Compliance Standards The “P” in PAM is for Persistence: Linux Persistence Technique Malware Analysis: How to Analyze and Understand Malware OSINT: How to Find, Use, and Control Open-Source Intelligence What to Do with Your First Home Lab When the SOC Goes to Deadwood: A Night to Remember Social Engineering and Microsoft SSPR: The Road to Pwnage is Paved with Good Intentions Common Cyber Threats Finding the Right Penetration Testing Company Deceptive-Auditing: An Active Directory Honeypots Tool The Curious Case of the Comburglar How to Set Smart Goals (That Actually Work For You) Inside the BHIS SOC: A Conversation with Hayden Covington Abusing Delegation with Impacket (Part 3): Resource-Based Constrained Delegation Why You Got Hacked – 2025 Super Edition Abusing Delegation with Impacket (Part 2): Constrained Delegation Abusing Delegation with Impacket (Part 1): Unconstrained Delegation GoSpoof – Turning Attacks into Intel Model Context Protocol (MCP)
Talkin’ About Infosec News – 2/4/2022
BHIS · 2022-02-05 · via Black Hills Information Security, Inc.

, , ,





ORIGINALLY AIRED ON JANUARY 31, 2022

Articles discussed in this episode:

00:00 – PreShow Banter™ — Legions of the Undead

01:26 – BHIS – Talkin’ Bout [infosec] News 2022-01-31

04:06 – Story # 1: Hacktivists say they hacked Belarus rail system to stop Russian military buildup – https://arstechnica.com/information-technology/2022/01/hactivists-say-they-hacked-belarus-rail-system-to-stop-russian-military-buildup/

08:46 – Story # 2: Ukrainian government calls out false flag operation in recent data wiping attack – https://therecord.media/ukrainian-government-calls-out-false-flag-operation-in-recent-data-wiping-attack/

11:18 – Story # 3: Ukrainian cyber defense in need of upgrades as tensions rise – https://therecord.media/ukrainian-cyberdefense-in-need-of-upgrades-as-tensions-rise/

17:32 – Story # 4: DoD weapons testers to assess cybersecurity of GPS satellites, ground system, and user equipment – https://spacenews.com/dod-weapons-testers-to-assess-cybersecurity-of-gps-satellites-ground-system-and-user-equipment/

24:50 – Story # 5: FBI Reportedly Considered Buying NSO Spyware – https://www.govinfosecurity.com/fbi-reportedly-considered-buying-nso-spyware-a-18407

28:02 – Story # 6: Hacking the Apple Webcam (again) – https://www.ryanpickren.com/safari-uxss

30:36 – Story # 7: Microsoft Teams users can now chat with any Teams user outside their organization – https://techcommunity.microsoft.com/t5/microsoft-teams-blog/microsoft-teams-users-can-now-chat-with-any-teams-user-outside/ba-p/3070832

34:11 – Story # 7b: https://twitter.com/rucam365/status/1487861808081915906

38:15 – Story # 8: Lazarus hackers use Windows Update to deploy malware – https://www.bleepingcomputer.com/news/security/lazarus-hackers-use-windows-update-to-deploy-malware/

41:38 – Story # 9: Elon Musk Tried To Pay A Teen Thousands Of Dollars To Stop Tracking His Plane – https://jalopnik.com/elon-musk-tried-to-pay-a-teen-thousands-of-dollars-to-s-1848435520

45:36 – Story # 10: 1.5M US bank cards have been hacked: NordVPN – https://finance.yahoo.com/news/15-m-us-bank-cards-have-been-hacked-nord-vpn-161248088.html

51:15 – Story # 11: 2FA app with 10,000 Google Play downloads loaded well-known banking trojan – https://arstechnica.com/information-technology/2022/01/2fa-app-with-10000-google-play-downloads-loaded-well-known-banking-trojan/

54:50 – Story # 12: Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets – https://thehackernews.com/2022/01/hackers-exploited-mshtml-flaw-to-spy-on.html



Ready to learn more?

Level up your skills with affordable classes from Antisyphon!

Pay-What-You-Can Training

Available live/virtual and on-demand