[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Risky Business
Risky Biz Feature Interview: Mark Dowd on the 0day market and future of exceptional access
Risky Business #642 -- Brits, Dutch and Aussies embrace Hounds Doctrine
Risky Business #641 -- Lawsuit: Ransomware contributed to baby's death
Risky Biz Snake Oilers: Mike Wiacek launches Stairwell, Red Canary on modern MDR and Datadog pitches full stack monitoring
Risky Business #640 -- Huh. The CIA really was out to neck Assange
Risky Business #639 -- USA's ransomware non-policy fails to meet its unstated objective
Risky Business #638 -- Licensed to Pwn
Snake Oilers: Get Signal Sciences in your CDN, automate canary generation and cloud your SIEM!
Risky Business #637 -- Infosec's bigfoot
Risky Business #636 -- Victims are shunning data extortion payments
Application Security Weekly (Video)
View Source, Bindiff for Vuln Analysis, Bypass with GitHub Actions, & NIST DevSecOps - ASW #170
Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170
Twitch Breach, HTTPd Path Traversal, Disabling Macros, & Great Cybersecurity Programs - ASW #169
Modernizing the Management of Your Software Supply Chain - Tom Gibson - ASW #169
Prototype Pollution, Funding Open Source Security, Expiring Root CA, Mariana Trench - ASW #168
The Power of Developer-First Security - Hillary Benson - ASW #168
AppSec Orchestration/Correlation & DevSecOps Efficiency - Anita D'Amico, Patrick Carey - ASW #167
Exchange's Great Leak, RCE in VMware, IoT Bug in MQTT, & Chrome's Memory Safety Nets - ASW #167
OMIGOD, FORCEDENTRY, Code Ownership, Security as a Product, & IoT Device Criteria - ASW #166
Transforming Modern Software Development with Developer-First AppSec - Jeff Williams - ASW #166
Enterprise Security Weekly (Video)
What We've Learned From Interviewing Cybercriminals - Adam Janofsky - ESW #247
Query.AI, Tenchi Security, HelpSystems, CrowdStrike, & Snowcat Scanner for Istio - ESW #247
First Jobs in Cybersecurity: The Analyst Role - Joshua Copeland - ESW #247
Wiz Valuation, Facebook OSS Tools, Gretel.ai, & Yubico Biometric Keys - ESW #246
Why Less Is More for Static Application Scanning - Surag Patel - ESW #246
A Plea for Better Press Releases - ESW #246
Privacy Engineering Firms, Facebook Outages, Orca Series C, & Gravwell - ESW #245
Shifty Adversaries, Shifting Tactics - Ryan Kalember - ESW #245
Better Sales, Worse Relationships? - Richard Reinders - ESW #245
Startup Post Mortems, Live Security Statuses, LG Acquires Cybellum, & Coalition - ESW #244
Tradecraft Security Weekly (Video)
Evilginx2 Man-in-the-Middle Attacks - Tradecraft Security Weekly #29
Black Hat & DEF CON 2018 - Tradecraft Security Weekly #28
PXE Boot Attacks - Tradecraft Security Weekly #27
OSINT & External Recon Pt. 2: Contact Discovery - Tradecraft Security Weekly #26
Phishing 2FA Tokens with CredSniper - Tradecraft Security Weekly #25
Evading Network-Based Detection Mechanisms - Tradecraft Security Weekly #24
HTML5 Storage Exfil via XSS - Tradecraft Security Weekly #23
Linux Privilege Escalation - Tradecraft Security Weekly #22
Leaking Windows Creds Externally Via MS Office - Tradecraft Security Weekly #21
Google Event Injection - Tradecraft Security Weekly #20
InfoSecSync
InfoSecSync Weekly News Week Ending 22 October 2021
InfoSecSync Interview – Myles Brown
InfoSecSync Weekly News Week Ending 15 October 2021
InfoSecSync Weekly News Week Ending 8 October 2021
InfoSecSync Weekly News Week Ending 17 September 2021
InfoSecSync Weekly News Week Ending 10 September 2021
InfoSecSync Weekly News Week Ending 3 September 2021
InfoSecSync Weekly News Week Ending 27 August 2021
InfoSecSync Weekly News Week Ending 20 August 2021
InfoSecSync Weekly News Week Ending 13 August 2021
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
ISC StormCast for Friday, October 22nd, 2021
ISC StormCast for Thursday, October 21st, 2021
ISC StormCast for Wednesday, October 20th, 2021
ISC StormCast for Tuesday, October 19th, 2021
ISC StormCast for Monday, October 18th, 2021
ISC StormCast for Friday, October 15th, 2021
ISC StormCast for Wednesday, October 13th, 2021
ISC StormCast for Tuesday, October 12th, 2021
ISC StormCast for Monday, October 11th, 2021
ISC StormCast for Friday, October 8th, 2021
CyberWire Daily
Mark Nunnikhoven: Providing clarity about security. [Cloud strategy] [Career Notes]
When big ransomware goes away, where should affiliates go? [Research Saturday]
Counting coup against REvil (and other gangs are taking note). Export controls and dual use. A timing bug will surface this weekend.
Evil Corp identified as the threat actor behind ransomware attacks on Sinclair and Olympus. Privateering. Fin7’s front company. Sentencing in a bulletproof hosting case.
Cyberespionage campaign looks a lot like SIGINT collection. Magnitude gets more capable. VPN exploits solicited. Ransomware trends. Seven years for UPMC hacker. Plenty of Candy Corn coming.
TA505’s recent activity. Advice on defending organizations from BlackMatter. CISA RFI seeks EDR information. REvil’s halting attempts to return. Sinclair’s incident response.
A US broadcaster sustains a ransomware attack. North Korean catphis expelled from Twitter. REvil’s Tor sites are hijacked. Hacking back. Prosecution and responsible disclosure?
Ell Marquez: It's okay to be new. [Linux] [Career Notes]
Groove Gang making a name for themselves. [Research Saturday]
CISA and its partners warn of threats to water and wastewater treatment facilities. The curious case of Missouri teachers’ Social Security Numbers.
Unsupervised Learning
News & Analysis | No. 303
News & Analysis | No. 302
Weakness and Evil
Vendor Security 2.0
News & Analysis | No. 301
News & Analysis | No. 300
News & Analysis | No. 299
News & Analysis | No. 298
News & Analysis | No. 297
News & Analysis | No. 296
Paul's Security Weekly (Video-Only)
Wild Hippos, Chrome FTP, L0phtCrack Is Open-Source, Win 11 Pentium, & Legacy Systems - PSW #715
Scanning For Default Credentials With Python - PSW #715
Evolution & Maturity of the Cybersecurity Industry - Maxime Lamothe-Brassard - PSW #715
IoT Rickroll, Suing Over Disclosures, K-12 Cybersecurity Act, & SS7 Signaling - PSW #714
GraphQL - Sven Morgenroth - PSW #714
Open Source Endpoint Security with Osquery & Fleet - Zach Wasserman - PSW #714
LANtennas, ESXi & Python, Twitch Leaks, Facebook BGP, & iPhone Is Always On - PSW #713
Up & Running With Security Onion - PSW #713
Survey Says: Improve Your Security Posture by Purple Teaming - Dan DeCloss - PSW #713
Pickpocketing Apple Pay, Mandatory Breach Reporting, Huawei Fears, & Cyber Criminals - PSW #712
Business Security Weekly (Video)
Building Your Zero Trust Architecture: Stronger, Simpler Access Controls - Jason Garbis - BSW #236
Security Money - The Index Hits a Turkey (3 Records in a Row) - BSW #236
Top Cybersecurity Statistics/Trends/Facts, Zero Trust, & Hiring Strategies - BSW #235
The Human Element of Security Awareness - Brian Reed - BSW #235
CISA's Initiatives, Partnerships, and Cybersecurity Awareness Month - Alaina Clark - BSW #234
Medical Device Security - Dan Purvis - BSW #234
CISO vs. CIO, CISO & the C-Suite, & How the CISO Works With the CPO - BSW #233
Building Security from Scratch: One Year as CISO at a Start-up - Guillaume Ross - BSW #233
Boards Rethink Incident Response, CISOs & CIOs Share, & Stay True to Ethics - BSW #232
Accelerate 0-Trust Adoption W/ End2End Visibility & Increased Collaboration - Tom Roeh - BSW #232
CoinSec Podcast
CoinSec Podcast Episode 45
Episode 44: Bitcoin.org, pNetwork, and VeeFinance Hacks, Malicious Wallet, Compound Bug, & Puzzles
Episode 43: MISO Supply Chain Hack, Gelato Front-Run, NowSwap & Zabu Hacks, Solana DoS & ETH Attack
Episode 42: Track Transactions With BitQuery, MEV Protections, DAOMaker Hack, & Token Sniffer
Episode 41: CREAM, Bilaxy, & X-Token Hacks, PancakeSwap Prediction Bot, & A Blockchain Hacking Guide
Episode 40: Geth Vuln Causes Eth Fork, Poly Hack Update, Antinalysis, OpenZeppelin Vuln & Rug Pulls
Episode 39: SushiSwap Fix Vuln, Liquid Global Hack, Ransomware Bribes & a Flash Loan Exploit Demo
Episode 38: Poly Network Hack, Popsicle Finance Hack, DAO Maker Hack, and the Infrastructure Bill
Episode 37: Coinnest Accidental Airdrop, KYC Data For Sale, Mining Rig Ransomware, and Fake IOTA...
Episode 36: Grin, Cryptopia Hacked, Critical Beam Vuln, and Pirate Bay Torrent Malware
Down the Security Rabbithole Podcast
DtSR Episode 469 - YGHT They Hacked Ransomware
DtSR Episode 468 - TPA Another Journey Into Security
DtSR Episode 467 - TPA Chips and SLSA
DtSR Episode 466 - TPA Vulnerability Manageement Goat Rodeo
DtSR Episode 465 - TPA Nic-NAC-Security-is-Whack
Where to find DtSR on the Internet
DtSR Episode 464 - TPA An Empowering Discussion on the Grid
DtSR Episode 463 - TPA Human Security Engineering
DtSR Episode 462 - TPA Aki Peritz on Open Source Intel
DtSR Episode 461 - TPA Peacocking Without PCAPS
Task Force 7 Cyber Security Radio
Ep. #196: Cyber Security Sales: A Buyers and Sellers Guide
Encore: Ep. 169: Securely Making the Move to the Cloud
Ep. 195: Changing the 3rd Party Risk Management Game
EP 194
EP: 193
Encore: Ep: 155: You Can't Be Successful In Cyber Security Without Understanding Risk
Encore: Ep. 168: A CISO's Insights on Global Trust
Ep. 192: Why Are Ransomware Attacks So Successful
Encore: Ep: 182: How Recent Cyber Attacks Will Shape The Next 5 Years
Ep. 191: Cyber War or Cyber Competition
Security Now (Audio)
SN 841: Minh Duong's Epic Rickroll - REvil Gone for Good? Tianfu Cup 2021, Patch Tuesday Aftermath
SN 840: 0-Day Angst - Windows 11 Watch, Google's Universal 2SV, Twitch Hack, Patch Tuesday
SN 839: “Something Went Wrong” - Windows 11 Released, New Android Trojan, Windows Explorer Memory Leak
SN 838: autodiscover.fiasco - Epik Confirms Hack, Apple Annoys Bug Reporters, Chrome's 12th 0-Day in 2021
SN 837: Cobalt Strike - Android Auto-Revokes Permissions, DDoS on VoIP.ms, Patch Tuesday, Was GRC Pwned?
SN 836: The Mēris Botnet - 0-Day Attack on Office Docs, WFH and Security, Return of REvil
SN 835: TPM v1.2 vs 2.0 - BlueTooth Troubles, Internet Anonymity, Apple CSAM, Light Chaser
SN 834: Life: Hanging by a PIN - Credit Freeze vs. Credit Lock, SSD Bait & Switch, ProxyToken, Windows 11
SN 833: Microsoft's Reasoned Neglect - T-Mobile's Major Data Leak, Razer Mouse Hack, Overlay Networks
SN 832: Microsoft's Culpable Negligence - Firefox Update, Magniber, Merger of Avast and NortonLifeLock
The Charles Tendell Show
S2E1 - Lord Bezos Got Hacked - The Eoin Keary Interview
Privacy, Invasions and @vetconactual after Defcon 2018
Keep Your Hands To Yourself at @2600 #hopeconf & Making Hacker Kool With Keenan Skelly @KeenanSkelly
Security Weekly News (Video)
Cyber-Training, Bye-Bye FTP, Quickfox, FIN7, Truth Social, & GPS Chaos - Wrap Up - SWN #160
Sinclair Outage, ISC Squared, TianFu Winnings, Faux FBI Sites, & Phishing For 0-Days - SWN #159
Juniper Networks, Wastewater Ransoms, South Korea, & Acer Hack - Wrap Up - SWN #158
SnapMC, NSA Warnings, Olympus Hacked, Brother Printers, & Android Lists Malware - SWN #157
Twitch Leaks, Canopy Unpatched XSS, LANtenna, Apache, & Excel Macros - Wrap Up - SWN #156
Facebook BGP, Python Ransomware, Coinbase MFA, & Windows 11 Release - SWN #155
Google 0-Days, CISOs in Organizations, GiantPay, & CISA Tools - Wrap Up - SWN #154
Side Eye Toddler NFT, Zix Phishing, VCenter Redux, Auntie M, & Safepal Fraud - SWN #153
iOS Patches, NanoMQ 0-Day, GeoFencing, & FamousSparrow APT- Wrap Up - SWN #152
Amazon AI, Healthcare Policy, Google OSTIF, OMIGOD Vuln, iOS 15, & Time Crystals - SWN #151
Secure Digital Life (Video)
Mock Interview, Q&A - Secure Digital Life #114
Producing A Podcast - Secure Digital Life #113
Game Consoles - Secure Digital Life #112
Mistakes In Your Career Search , RWU - Secure Digital Life #111
Preparing & Dealing with Ransomware - Secure Digital Life #110
The Lair of the White Worm - Secure Digital Life #109
Spy Cameras - Secure Digital Life #108
Getting Started: Dark Web - Secure Digital Life #107
When The Lights Go Out - Secure Digital Life #106
HateStream: Social Media - Secure Digital Life #105
TAG Cyber
David Ratner - CEO of HYAS (Full Interview)
Andy Geisse - Operating Partner at Bessemer Venture Partners (Full Interview)
Tim Wainwright - CEO of SRA (Full Interview)
Kailash Ambwani, CEO of Constella (Full Interview)
Kevin Lynch - CEO of Optiv (Full Interview)
Tushar Kothari - CEO of Attivo Netwroks (Full Interview)
Stuart Wilson - CEO of Endace (Full Interview)
Dean Sysman - CEO and Co-Founder of Axonius (Full Interview)
Debbie Gordon - CEO of Cloud Range (Full Interview) 2021
OT Roundtable: One Suggestion to Improve the Situation
Down the Security Rabbithole Podcast
DtSR Episode 469 - YGHT They Hacked Ransomware
DtSR Episode 468 - TPA Another Journey Into Security
DtSR Episode 467 - TPA Chips and SLSA
DtSR Episode 466 - TPA Vulnerability Manageement Goat Rodeo
DtSR Episode 465 - TPA Nic-NAC-Security-is-Whack
Where to find DtSR on the Internet
DtSR Episode 464 - TPA An Empowering Discussion on the Grid
DtSR Episode 463 - TPA Human Security Engineering
DtSR Episode 462 - TPA Aki Peritz on Open Source Intel
DtSR Episode 461 - TPA Peacocking Without PCAPS
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
Defensive Security Podcast Episode 258
Defensive Security Podcast Episode 257
Defensive Security Podcast Episode 256
Defensive Security Podcast Episode 255
Defensive Security Podcast Episode 254
Defensive Security Podcast Episode 253
Defensive Security Podcast Episode 252
Defensive Security Podcast Episode 251
Defensive Security Podcast Episode 250
Defensive Security Podcast Episode 249
Data Security and Privacy with the Privacy Professor
Software Development Security Practices Suck! Wise Up Now!
Demystifying Cyber Insurance: Facts to Get the Right Coverage!
The BOM Episode! DBOMs! SBOMs! And...Supply Chain Cybersecurity!
4th Amendment Does Not Give LE the Right to Access Encrypted Data
Data Pipelines & Data Lakes Security & Compliance Answers & Info
Defending Against Nation-State Hacking & Cyber Warfare Attacks
Voter Fraud Facts No One is Talking About…Until Now
Fighting US Elections & Campaigns Interference with Cybersecurity
Healthcare CISOs: Securing Patient Data & HIPAA Compliance
Holding Privacy Events in a Pandemic World
Defense in Depth
Why Is Security Recruiting So Broken?
How to Be a Vendor that CISOs Love
The "Are We Secure?" Question
Ransomware Kill Chain
Can Technology Solve Phishing?
Convergence of SIEM and SOAR
Cybersecurity Is Not Easy to Get Into
Preventing Ransomware
Managing Lateral Movement
First Steps as a CISO