惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

爱范儿
爱范儿
腾讯CDC
博客园 - 司徒正美
A
About on SuperTechFans
H
Help Net Security
J
Java Code Geeks
C
Check Point Blog
B
Blog RSS Feed
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
MongoDB | Blog
MongoDB | Blog
U
Unit 42
Hugging Face - Blog
Hugging Face - Blog
Last Week in AI
Last Week in AI
MyScale Blog
MyScale Blog
V
Visual Studio Blog
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
I
InfoQ
H
Hackread – Cybersecurity News, Data Breaches, AI and More
F
Fortinet All Blogs
博客园 - 聂微东
酷 壳 – CoolShell
酷 壳 – CoolShell
GbyAI
GbyAI
博客园 - 【当耐特】
雷峰网
雷峰网

Black Hills Information Security, Inc.

Bad Habits: An ANTISOC Operation Same Problem, Different Angles: When Red Team and Blue Team Actually Talk to Each Other How to Identify and Exploit New Vulnerabilities Swapper – A Pure Regex Match/Replace Burp Extension A Practical Guide to BloodHound Data Collection Network Engineering Basics Signed, Trusted, and Abused: Proxy Execution via WebView2 Getting Started In Pentesting – Advice From The BHIS Pentest Lead Cloud Security: Tips and Resources for Securing the Cloud Lessons From A Chatbot Incident How to Lead Effective Tabletops Understanding GRC: How to Navigate Risks and Compliance Standards The “P” in PAM is for Persistence: Linux Persistence Technique Malware Analysis: How to Analyze and Understand Malware OSINT: How to Find, Use, and Control Open-Source Intelligence What to Do with Your First Home Lab When the SOC Goes to Deadwood: A Night to Remember Social Engineering and Microsoft SSPR: The Road to Pwnage is Paved with Good Intentions Common Cyber Threats Finding the Right Penetration Testing Company Deceptive-Auditing: An Active Directory Honeypots Tool The Curious Case of the Comburglar How to Set Smart Goals (That Actually Work For You) Inside the BHIS SOC: A Conversation with Hayden Covington Abusing Delegation with Impacket (Part 3): Resource-Based Constrained Delegation Why You Got Hacked – 2025 Super Edition Abusing Delegation with Impacket (Part 2): Constrained Delegation Abusing Delegation with Impacket (Part 1): Unconstrained Delegation GoSpoof – Turning Attacks into Intel Model Context Protocol (MCP)
Talkin’ About Infosec News – 1/27/2022
BHIS · 2022-01-28 · via Black Hills Information Security, Inc.

, , ,





ORIGINALLY AIRED ON JANUARY 24, 2022

Articles discussed in this episode:

00:00 – PreShow Banter™ — The Monkey Dance

00:25 – BHIS – Talkin’ Bout [infosec] News 2022-01-24

01:49 – Story # 1: New Log4j attacks target SolarWinds, ZyXEL devices – https://therecord.media/new-log4j-attacks-target-solarwinds-zyxel-devices/

08:18 – Story # 2: New MoonBounce UEFI bootkit can’t be removed by replacing the hard drive – https://therecord.media/new-moonbounce-uefi-bootkit-cant-be-removed-by-replacing-the-hard-drive/

13:18 – Story # 3: Crypto.com finally confirms major hack, says it lost $34 million – https://therecord.media/crypto-com-finally-confirms-major-hack-says-it-lost-34-million/

15:53 – Story # 3b: Coinbase Hack – https://www.bleepingcomputer.com/news/security/hackers-rob-thousands-of-coinbase-customers-using-mfa-flaw/

21:47 – Story # 4: Hackers From North Korea Stole Millions Of Dollars From Cryptocurrency Startups All Across The World. – https://cyberworkx.in/2022/01/17/hackers-from-north-korea-stole-millions-of-dollars-from-cryptocurrency-startups-all-across-the-world/

26:42 – Story # 5: Mixed Messages: Busting Box’s MFA Methods – https://www.varonis.com/blog/box-mfa-bypass-sms

35:06 – Story # 6: School District reports a 334% hike in cybersecurity insurance costs – https://www.bleepingcomputer.com/news/security/school-district-reports-a-334-percent-hike-in-cybersecurity-insurance-costs/

38:42 – Story # 7: Europol takes down VPNLab, a service used by ransomware gangs – https://therecord.media/europol-takes-down-vpnlab-a-service-used-by-ransomware-gangs/

42:12 – Story # 8: Why this threat intelligence expert believes cyberattacks aren’t Ukraine’s biggest concern – https://therecord.media/why-this-threat-intelligence-expert-believes-cyberattacks-arent-ukraines-biggest-concern/

Check out the CoinSecPodcast.com



Ready to learn more?

Level up your skills with affordable classes from Antisyphon!

Pay-What-You-Can Training

Available live/virtual and on-demand