[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Risky Business
Risky Biz News: FSB-linked DDoS tool could also be used for disinformation campaigns
SAMPLE PODCAST: Risky Biz News: FSB-linked DDoS tool could also be used for disinformation campaigns
Risky Biz News: New Bluetooth relay attack bypasses current defenses
Risky Biz Soap Box: While you're watching a quiet one a noisy one will kill you
Risky Biz News: Zyxel firewalls and VPN devices come under attack
Risky Biz News: Musk says Russia has ramped up efforts to hack Starlink
Risky Biz News: EU, Five Eyes condemn Russia's Viasat hack
Risky Biz News: Costa Rica declares national emergency after ransomware attack
Risky Biz News: Apple, Google, and Microsoft commit to passwordless logins
Risky Biz News: SEC expands crypto cyber fraud team
Security Nation
Jim O’Gorman and g0tmi1k on Kali Linux
Whitney Merrill on the Crypto & Privacy Village (and the Latest in Data Privacy)
Kate Stewart on Open-Source Projects at the Linux Foundation
David Rogers on IoT Security Legislation
Bob Lord on Securing the DNC
Matthew Kienow on Open-Source Security and the Recog Framework
Amit Serper on Finding Leaks in Autodiscover
John Rouffas on Building a Security Function
Mike Hanley of GitHub on the Log4j Vulnerability
Chris John Riley on Minimum Viable Secure Product (MVSP)
Application Security Weekly (Video)
Developing Future Cybersecurity Contributors - Brian Glas - ASW #197
Typosquatting, Curl's Security Update, & OpenSSF's 10 Point Mobilization Plan - ASW #197
Smart Contract Security, Heroku Breach, & Real World Crypto Highlights - ASW #196
Securing SAP: Addressing the Critical & Complex Challenge - Christoph Nagy - ASW #196
ExtraReplica, Document.domain Disfavored, & Highlights From Thinkst Quarterly - ASW #195
Bad Bots - Automated Threat Targeting Your Websites, Mobile Apps, & APIs - Lynn Marks - ASW #195
Java's ECDSA for Nought, Writing a Kernel RCE, Okta's Conclusion, Log4Shell Hot Patch - ASW #194
What Does Software Supply Chain Security Threat Mean to Developers? - Dr. Chenxi Wang - ASW #194
OAuth Tokens Taken, Vulns in Medical IoT, Scoring a Proactive Security Culture - ASW #193
Appsec (and adjacent) Metrics - ASW #193
Enterprise Security Weekly (Video)
Evil Encryption, CyberSec Funding, Market Downturns, & Crypto Muggings - ESW #274
Where to Start Your Passwordless Journey? - Jackie Comp, Rolf Lindermann - ESW #274
Attack Intelligence, Collective Defense, & Trends to Watch - Michael Ehrlich - ESW #274
Becoming a Year Younger, Material Security, Tailscale, Radiflow, & Artic Wolf - ESW #273
Overcoming Challenges in Multinational Phishing Simulations - Omer Taran - ESW #273
Protecting Your Environment with Intel vPro® Platform - Yasser Rasheed - ESW #273
Getting Value From SOAR Beyond Phishing Workflows - Ryan Fried - ESW #272
WeHackPurple, DevSecOps Evolution, Product-Led Growth, & 10 Security Startups - ESW #272
Security Orchestration & Automation Simplified - Prashasth Baliga - ESW #272
Austin Peay State, Basis Theory, Authtech, Hivemapper Dashcam, & Devo Autonomous SOC - ESW #271
Tradecraft Security Weekly (Video)
Evilginx2 Man-in-the-Middle Attacks - Tradecraft Security Weekly #29
Black Hat & DEF CON 2018 - Tradecraft Security Weekly #28
PXE Boot Attacks - Tradecraft Security Weekly #27
OSINT & External Recon Pt. 2: Contact Discovery - Tradecraft Security Weekly #26
Phishing 2FA Tokens with CredSniper - Tradecraft Security Weekly #25
Evading Network-Based Detection Mechanisms - Tradecraft Security Weekly #24
HTML5 Storage Exfil via XSS - Tradecraft Security Weekly #23
Linux Privilege Escalation - Tradecraft Security Weekly #22
Leaking Windows Creds Externally Via MS Office - Tradecraft Security Weekly #21
Google Event Injection - Tradecraft Security Weekly #20
InfoSecSync
InfoSecSync is Becoming the Military Cyber Professional Association (MCPA) Podcast
InfoSecSync Weekly News Week Ending 11 February 2022
InfoSecSync Weekly News Week Ending 4 February 2022
InfoSecSync Weekly News Week Ending 28 January 2022
InfoSecSync Weekly News Week Ending 21 January 2022
InfoSecSync Weekly News Week Ending 14 January 2022
InfoSecSync Weekly News Week Ending 17 December 2021
InfoSecSync Weekly News Week Ending 10 December 2021
InfoSecSync Weekly News Week Ending 3 December 2021
InfoSecSync Weekly News Week Ending 26 November 2021
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
ISC StormCast for Friday, May 20th, 2022
ISC StormCast for Thursday, May 19th, 2022
ISC StormCast for Wednesday, May 18th, 2022
ISC StormCast for Tuesday, May 17th, 2022
ISC StormCast for Monday, May 16th, 2022
ISC StormCast for Friday, May 13th, 2022
ISC StormCast for Thursday, May 12th, 2022
ISC StormCast for Wednesday, May 11th, 2022
ISC StormCast for Tuesday, May 10th, 2022
ISC StormCast for Monday, May 9th, 2022
CyberWire Daily
Charity Wright: Pursue what you love [Threat intelligence] [Career Notes]
AutoWarp bug leads to Automation headaches. [Research Saturday]
Is Conti rebranding? Commercial spyware scrutinized. Notes from the cyber phases of a hybrid war. Notes on the underworld. Software supply chain attack. Canada will exclude Huawei from 5G.
CISA Alert AA22-138B – Threat actors chaining unpatched VMware vulnerabilities for full system control. [CISA Alerts]
Information operations and the invasion of Ukraine. VMware patches vulnerabilities. F5 BIG-IP vulnerabilities atively exploited. TDI clarifies data incident. Robo-calling the Kremlin.
CISA Alert AA22-138A – Threat Actors Exploiting F5 BIG-IP CVE-2022-1388.
Privateering goes fully political. Compromised robots? Conti’s campaign against Costa Rica. Cyberconflict along the Nile. A reset in the cyber insurance market.
CISA Alert AA22-137A – Weak security controls and practices routinely exploited for initial access. [CISA Alerts]
Russian cyber threats and NATO’s Article 5. Conti says it’s going to bring Cost Rica to its knees. BLE proof-of-concept hack. CISA warns of initial access methods. Thanos proprietor indicted.
Users advised to patch actively exploited Zyxel vulnerability. Hacktivism and influence ops in Russia’s hybrid war. Ransomware notes. Indiscriminate hacktivism? Alt-coin sanctions case will proceed.
Unsupervised Learning
News & Analysis | NO. 331
News & Analysis | NO. 330
Why I'm Not Worried About Elon Musk Buying Twitter
News & Analysis: NO. 329
A Conversation with Paul Zimski from Automox
News & Analysis | NO. 328
News & Analysis | NO. 327
News & Analysis | NO. 326
News & Analysis | NO. 325
News & Analysis | NO. 324
Paul's Security Weekly (Video-Only)
Windows GPU Display Vulns, NFT Discord Hack, Costa Rica Vs. Hackers, & Initial Access - PSW #741
Firmware Security - Saumil Shah - PSW #741
Year in Cyber Review 2021 - Robert Lee - PSW #741
Public Entities & Ransomware, Colonial Pipeline Fine, Nvidia's LHR Limiter, & BIG-IP - PSW #740
Destructive Malware & Other Threats to Watch - Fleming Shi - PSW #740
Lots of Star Wars, David Walden, Vulnerable Contractors, & Pirate Streaming - PSW #739
Risk Transfer With Engineering Based Cyber Insurance - Fatih Karayumak - PSW #739
Silk Road Seizure, Psychic Signatures, Twitter Algorithms, & Linux Desktops - PSW #738
Cryptography Collecting & Japanese Typewriters - Marcus Sachs - PSW #738
Security Blind Spots: Are You Protected? - Michael Aminov - PSW #738
Business Security Weekly (Video)
5 Demands, 6 Best Practices, & 7 Deadly Sins - BSW #262
Cyber: The Fifth Domain of War - Mike Ernst - BSW #262
Lessons From Breach Lawsuits, 5 Leadership Principles, & Express More Gratitude - BSW #261
Extended Security Posture Management - Dave Klein - BSW #261
Cybersecurity Metrics, Litigation Risks, and 10 Critical People Skills for CISOs - BSW #260
Forrester's Top Security Program Recommendations for 2022 - Jess Burn - BSW #260
10 Signs, 4 Horsemen, and 3 Ways to Control Your Career - BSW #259
Navigating the Complexities of Policy and Compliance in Hybrid Clouds - Tim Woods - BSW #259
Cybersecurity is IT's Job, Why CISOs Fail, & Create a Culture of Security - BSW #258
Actionable High Resolution Threat Intelligence - Derek Manky - BSW #258
CoinSec Podcast
CoinSec Podcast Episode 62
Episode 61: UST Depeg, FEI Rari, Saddle Finance, Deus DAO, MMFinance, & Fortress Protocol Hacks
Episode 60: Ronin Bridge Hack, Sanctions, Elephant Money Hack, Beanstalk Hack, Metamask Phishing
Episode 59: Agave, Hundred, Deus Finance, & Paraluni hacks, CoinJoin Blocking Illicit Transactions
Episode 58: Executive Crypto Order, Bacon Protocol Hack, Fantasm Finance Hack & Mining Malware
Episode 57: DAO Hacker Identified, OpenSea Phishing, and Geopolitical Crypto Issues
Episode 56: Optimism Bounty, BGP Hijack, IRA Trust Financial Hack, Elaborate Scams and More Vulns
Episode 55: Bitfinex Hack Funds Seized and Arrests Made, MeterIO, Superfluid, & Dego Finance Hacked
Episode 54: Wormhole Hack, Qubit Finance Hack, SMS Phishing, $5 Wrench Attacks, & Token Approvals
Episode 53: Tal Be'ery, Multichain Hack, Crypto.com Hack, & Float Protocol Oracle Manipulation
Down the Security Rabbithole Podcast
DtSR Episode 501 - Netskope's Bad SaaS Report
DtSR Episode 500 - Looking Back to Look Forward - Part 2
DtSR Episode 500 - Looking Back to Look Forward - Part 1
DtSR Episode 499 - Four Hundred Ninety Nine and Counting
DtSR Episode 498 - Living in the Tornado
DtSR Episode 497 - Security Buzzword Bingo
DtSR Episode 496 - How to Win Friends and Influence CISOs
DtSR Episode 495 - Analyzing Russia's Offensive Cyber Ops
DtSR Episode 494 - Forensics The Art of the Science Plus a Cat
DtSR Episode 493 - Breaches: Is Anyone Learning Anything
Task Force 7 Cyber Security Radio
Ep. 214: A View Into Disruptive Technology for Cyber Defenders
Encore: Ep. 212: Communication and Psychology Are The Keys To Success
Ep. 213: The Past, Present, & Future of Vulnerability Management
Encore: Ep. 208: Starting Your Own Cyber Security Company
Encore: Ep. 209: Lesson From A Ransomeware Negotiator
Encore: Ep. 190: When Risk Taking Pays Off
Ep. 212: Communication and Psychology Are The Keys To Success
Ep. 211:
Encore: Ep. 205: Demystifying Systemic Cyber Risk
Ep. 210: Russia and Ukraine: A Cyber Intelligence Perspective
Security Now (Audio)
SN 871: The New EU Surveillance State - Eventful Patch Tuesday, Open Source Maintenance Crew, BIG-IP Boxes
SN 870: That "Passkeys" Thing - White House and Quantum Computers, Android 0-day, Ransomware snapshot
SN 869: Global Privacy Control - DoD DIB-VDP, OpenSSF's Package Analysis Project, Connecticut Privacy
SN 868: The 0-Day Explosion - Lenovo EUFI Firmware, Everscale Blockchain Wallet, Major Java Update
SN 867: A Critical Windows RPC RCE - Another Chrome 0-day, MS Patch-Fest, US Nuclear Systems Unhackable?
SN 866: Spring4Shell - Patch Tuesday, Microsoft's Autopatch System, NGINX 0-Day
SN 865: Port Knocking - Wyze Gets Spanked, FinFisher Bites the Dust, Spring4Shell, LAPSUS$ Update
SN 864: Targeted Exploitation - Ukrainian ISP Challenges, Kaspersky Labs Banned in the US, Chrome 0-Day
SN 863: Use After Free - OpenSSL Bug, Cybercrime Reporting Law, Node.js Supply Chain Compromise
SN 862: QWACs on? or QWACs off? - Patch Tuesday Recap, NVIDIA Hacked, EUFI Firmware Flaw, ProtonMail
The Charles Tendell Show
S2E1 - Lord Bezos Got Hacked - The Eoin Keary Interview
Privacy, Invasions and @vetconactual after Defcon 2018
Keep Your Hands To Yourself at @2600 #hopeconf & Making Hacker Kool With Keenan Skelly @KeenanSkelly
Security Weekly News (Video)
Elon Balks, CISA, Nebuchadnezzar, Lianjia, iPhone, Leaky Sites, & "Brushing" - SWN #213
DEA Hacked, Sidewinder, Memory Bugs, US Bioeconomy, & Russian Cyber-threat - Wrap Up - SWN #212
Renting Rats, Ransomware, Event Logs, Big IP, Clearview, & Cybercrime Law - SWN #211
Cuckoo Bees, Dental Bots, Password Day, Sheetjs, F5, & Vodka - Wrap Up - SWN #210
Aruba/Avaya, DoD, Cyber Forced Labor, Google, Github, & Apple Obsolescence - SWN #209
Owl Grease, Docker, Nimbuspwn, Edge, Emotet, & NPM - Wrap Up - SWN #208
Hare, Quantum, VMWARE, APT 34, Brakes, Elon Buys Twitter, Lapsus, & BlackCat - SWN #207
Lemon Duck, Crypto Theft, Pwn2Own, Google, Microsoft, & Sinclair - Wrap Up - SWN #206
Win 11, iPhone Zero Clicks, LinkedIn, Scraping, Conti Lies, & Webex Mics - SWN #205
Zero-Days, Management Networks, Elon Spits in My Soup, & Struts - Wrap Up - SWN #204
Secure Digital Life (Video)
Mock Interview, Q&A - Secure Digital Life #114
Producing A Podcast - Secure Digital Life #113
Game Consoles - Secure Digital Life #112
Mistakes In Your Career Search , RWU - Secure Digital Life #111
Preparing & Dealing with Ransomware - Secure Digital Life #110
The Lair of the White Worm - Secure Digital Life #109
Spy Cameras - Secure Digital Life #108
Getting Started: Dark Web - Secure Digital Life #107
When The Lights Go Out - Secure Digital Life #106
HateStream: Social Media - Secure Digital Life #105
TAG Cyber
Madison Horn - US Senate Candidate (Full Interview)
Corey White - Co-Founder & CEO of Cyvatar (Full Interview)
Network Security in the Organization with Rudolph Araujo and Ed Amoroso
Integrating Security into Network Infrastructure Rudolph Araujo and Ed Amoroso
Network Visibility with Prashant Gandhi and Ed Amoroso
Network Segmentation with Jeff Raymond and Ed Amoroso
Network Detection and Response with Rahul Kashyap and Ed Amoroso
Arista's Security Solutions with Rahul Kashyap and Ed Amoroso
Incident Response and Network Security with Jason Bevis and Ed Amoroso
Introduction to Network Security with Ed Amoroso
Down the Security Rabbithole Podcast
DtSR Episode 501 - Netskope's Bad SaaS Report
DtSR Episode 500 - Looking Back to Look Forward - Part 2
DtSR Episode 500 - Looking Back to Look Forward - Part 1
DtSR Episode 499 - Four Hundred Ninety Nine and Counting
DtSR Episode 498 - Living in the Tornado
DtSR Episode 497 - Security Buzzword Bingo
DtSR Episode 496 - How to Win Friends and Influence CISOs
DtSR Episode 495 - Analyzing Russia's Offensive Cyber Ops
DtSR Episode 494 - Forensics The Art of the Science Plus a Cat
DtSR Episode 493 - Breaches: Is Anyone Learning Anything
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
Defensive Security Podcast Episode 265
Defensive Security Podcast Episode 264
Defensive Security Podcast Episode 263
Defensive Security Podcast Episode 262
Defensive Security Podcast Episode 261
Defensive Security Podcast Episode 260
Defensive Security Podcast Episode 259
Defensive Security Podcast Episode 258
Defensive Security Podcast Episode 257
Defensive Security Podcast Episode 256
Data Security and Privacy with the Privacy Professor
How Stalkers & Assaulters Track & Find Victims with IoT Tech
What Do UNIX, Linux & Dirty Pipe Have in Common? Listen To Hear!
Transportation Cybersecurity & Privacy: Highway to Digital Hell?
A Synthetic Data Deep Dive: Privacy Protector, Foe or Other?
How to Fix the Log4j Problem & Prevent Similar Types of Incidents
Who's Responsible for BPO Contact Center Privacy & Cybersecurity?
Protecting Aviation Critical Infrastructure from Cyber Attacks
Software Development Security Practices Suck! Wise Up Now!
Demystifying Cyber Insurance: Facts to Get the Right Coverage!
The BOM Episode! DBOMs! SBOMs! And...Supply Chain Cybersecurity!
Defense in Depth
Who Investigates Cyber Solutions?
Does the Cybersecurity Industry Suck?
Are We Taking Zero Trust Too Far?
Is Shift Left Working?
Technical vs. Compliance Professionals
Why Do So Many Cybersecurity Products Suck?
Training for a Cyber Disaster
Virtual Patching
Start a Cybersecurity Department from Scratch
How to Think Like a Cybercrook