NPM packages are getting hacked – so naturally we get Kev on the case to explain the whole thing. If you didn’t know, NPM is the official package manager for Node libraries, a JavaScript language. We’ve seen a big uptake in recent weeks, and so

46: New Threats On The Block?

Oct 28th, 2021 49m 51s

A plethora of articles have been lighting up our newsfeeds and letting us know that there are new threats on the block: killware, RansomCloud, and extortion. Killware: the next thing we need to worry about. Apparently this is defined as anythin

45: Tales from the Crypto

Sep 29th, 2021 47m 59s

First story is about someone who was “relieved” of their Bitcoin by some kids wielding malware back in 2018, when it was worth an awful lot less than it is now. There are some techie bits to this, as well as a few ethical and legal issues with

44: Rotten Apples or Privacy Nuts?

Aug 20th, 2021 45m 17s

It's a tasty ransomware week this week! Conti face their own internal threat in the shape of a disgruntled affiliate and LockBit has its claws in Accenture.Apple have been fiddling with their privacy settings again which is sending privacy advo

43: Pegasus Project: Winged Horses for Spyware Courses

Jul 27th, 2021 36m 11s

As you probably guessed from the title of this episode, this week is all about spyware and the Pegasus project. This all kicked off when a consortium of 16 media outlets reported the alleged widespread and continuing abuse of NSO’s hacking spyw

42: Hey Ya Kaseya: MSPs as unwitting attackers

Jul 13th, 2021 46m 34s

Kaseya, Kaseya, Kaseya... How could we release an episode this week WITHOUT talking about the calamity at Kaseya? If you hadn't heard, the ransomware gang REvil has leveraged a vulnerability in Kaseya's VSA software against multiple MSPs and th

41: Cyber Wars: Revenge of the Printers

Jul 6th, 2021 43m 9s

There’s a lot to cover in this week’s episode, so brace yourself because we’ve got newsflashes and stone-cold facts flying your way. First up, despite what Chris thinks, people do still use printers. Now, researchers in China have found (and ac

40: Slack, Track and...Hack?

Jun 29th, 2021 55m 42s

EA have been hacked to the tune of 780GB of their source code which has now found itself for sale on various dark web forums. While they confirmed that they’d suffered a data breach, they’d offered no insight into how it happened. Until now…Mov

39: The Crime That Pays: Ransomware Special

Jun 22nd, 2021 47m 35s

From fake antivirus to scareware, ransomware has been around and evolving for…a while. But only now has it really hit the mainstream headlines, with attacks on critical infrastructure and "mega breaches" apparently becoming a weekly occurrence.

38: Ransom Laundering: Can We Ban Crypto?

Jun 15th, 2021 40m 8s

The topic of the day is cryptocurrency – and whether banning it could help fight ransomware. We know that criminal gangs (OCGs for all those Line of Duty fans out there) are big fans of crypto for their nefarious deeds, so the issue goes much f

37: Imperfect People, Vulnerable Applications

Jun 8th, 2021 52m 31s

So it turns out that 81% of developers have knowingly released vulnerable applications into the wild. Worrying, right? And that's the topic of conversation on today's episode: how do imperfect people lead to vulnerable applications and, most im

36: Hack Pipe: The Rise of DarkSide

May 27th, 2021 45m 4s

Welcome back to Cyber Humanity! We've got our shades on and we're ready for a busy summer of cyber. And what better way to herald our return than with a news story that's been hitting every headline? Unless you've been living under a rock, you

35: Exchange Hack: We don’t need no attribution

Mar 16th, 2021 35m 42s

We haf to talk about HAFNIUM.You can't have missed the news of the Exchange Server hack that's been running the InfoSec world in circles for the past few weeks. Of course we had to get the crew together to go through all things Exchange! From a

34: So you want to hack a car...

Mar 8th, 2021 48m 4s

We love looking at how to hack things you didn't think would or could be hacked. Last time, it was an election. This time, it's cars. We're joined by car hacking expert, Mark Adams, to help us navigate our way through these murky waters. From c

33: Parler’s proper privacy palaver

Feb 16th, 2021 49m 6s

Have you ever lost an irretrievable password? Max knows that pain – as does a certain programmer from San Francisco who is one lost password away from $250million in Bitcoin. Ouch...Next up, the Parler palaver. Trump has been 'de-platformed' an

32: Breaches, Damned Breaches, and Statistics

Jan 21st, 2021 53m 25s

SolarWinds and SUNBURST are still consuming the Infosec community and a few things have happened since our last episode. Since the Department of Justice has admitted that they were breached and that email inboxes were accessed, Kev tells us jus

31: Sunburst: Too Cozy To Bear

Dec 18th, 2020 48m 27s

Unless you’ve been living under a rock for the past few days, you would have heard about Sunburst – a sprawling cyberattack allegedly masterminded by Russian nation-state hackers, UNC2452 (also known as Cozy Bear). Because we love talking about

30: Cold Chain Hype Train.

Dec 15th, 2020 32m 59s

All aboard the hype train! We jump straight into the latest news that the supply "cold chain" for the much-awaited COVID vaccine could have been compromised. Apparently, a cyber espionage campaign has targeted the supply chain for the cold stor

29: A Cyber State of Mind

Dec 2nd, 2020 46m 7s

As part of our series on the Psychology of Cyber, we're joined by special guests, Rebecca McKeown and Swati Singh to discuss the human challenges that are inherent in cyber crises. We take a deep dive into how do organizations prepare for the w

28: So you want to hack an election...

Nov 24th, 2020 46m 16s

You might have guessed from the title, but in this episode, we’re looking at how to hack an election. It’s basically one long “hackers could…” feature. We cover everything from outright deception to social engineering to power cuts to…well, rea

27: Incubating Security: Cyber’s Thriving Startup Scene

Nov 18th, 2020 45m 37s

Things are a little different chez Cyber Humanity this week, as we're joined by cyber start-up savants, Grace Cassy of Cylon and Rob Newby of Procordr.We hear about how our guests fell into cybersecurity (always an interesting topic of conversa

26: Track & Trace: Spreadsheet Happens

Oct 29th, 2020 46m 45s

First up in today's episode: 16,000 confirmed COVID-19 cases mysteriously go missing from an Excel spreadsheet as part of the UK's 'track & trace' system. We don't like to speculate, but it looks like someone might have been using a legacy vers

25: How tutu dance into cyber

Oct 23rd, 2020 43m 7s

It's that time of the month: Patch Tuesday October 2020 has just passed so naturally we need to talk about it. Kev has clearly been bottling up some feelings about Bad Neighbor/ping of death attacks, and we wonder whether the hype is really mer

24: Next Stop: HackTown

Oct 14th, 2020 47m 28s

We love stories about the Dark Web – and we're apparently not alone in that. This week, we're talking about HackTown, which seems to be Hogwarts for wannabe hackers (just without the...magic). HackTown promises to teach registrants how to becom

23: Watch Your Wrist: The Fitbit Spyware Special

Oct 9th, 2020 45m 17s

This episode is a little different to normal – and all because Kev went poking around in Fitbit. Kev, doing what Kev does, found a flaw in the Fitbit App Store that allowed him to deliver a malicious application from fitbit.com. The spyware/sta