https://youtu.be/3fX7LRXi74IThis week on the podcast, we cover a research post that describes a code injection vulnerability caused by the way nearly every high level programming language runs on Windows. We also discuss a series of vulnerabi

Bad Month for Software Supply Chains

24 days ago 40m 52s

https://youtu.be/0860ZmM1vgEThis week on the podcast, we cover a software supply chain attack years in the making that was days away from a devastating global impact. After that, we cover Facebook's Project Ghostbusters and its impact on user

Trucking Worms

1 month ago 45m 7s

https://youtu.be/VqFnomsJzdAThis week on the podcast we discuss a vulnerability in required commercial truck hardware that could enable an automatically propagating worm across the entire US. Before that, we cover Apple's "un-patchable" vulne

A Wild Month in Ransomware

Mar 11th, 2024 29m 15s

https://youtu.be/iYM3y85hEkMThis week on the podcast, we're joined by Ryan Estes, a member of WatchGuard's Zero-Trust Application Service classification team and resident ransomware expert to discuss the wild month in ransomware news. We star

Locking Up LockBit

Feb 26th, 2024 31m 50s

https://youtu.be/GaX_8NOoq7wThis week on the podcast, we cover an international law enforcement takedown of the LokBit ransomware group's infrastructure. After that, we cover a novel malware delivery vector involving an IoT "toy." We end the

Flipping Out Over Flipper Zero

Feb 20th, 2024 47m 49s

https://youtu.be/3SY1sDF-BA0This week on the podcast we cover Canada's attempt to ban the Flipper Zero. Before that, we review a recent research post on a new class of vulnerability on the Ubuntu operating system. We end the episode with a ch

Could a Toothbrush Botnet Happen?

Feb 12th, 2024 50m 11s

https://youtu.be/VfKlq6DisLYThis week on the podcast, we cover a recent news post about an army of 3 million compromised toothbrushes taking down a Swiss website, causing millions in damages. After that, we discuss the United States DOJ's lat

A Door in Apple’s Walled Garden

Feb 5th, 2024 51m 36s

https://youtu.be/MY4TpiL76gYThis week on the podcast, we cover Apple's recent announcement describing how they will comply with the European Union's new Digital Markets Act and what that means for the iPhone walled garden. Before that, we cov

A Blizzard of Threats

Jan 29th, 2024 37m 18s

https://youtu.be/fdAjMPAV6CMThis week on the podcast, we cover two "Blizzard" threat actors targeting governments and private organizations. We also give an update to the SEC's compromised Twitter/X Account, and then end with a discussion of

Androxgh0st Analysis

Jan 22nd, 2024 34m 12s

https://youtu.be/jG3mwjCLpJQThis week on the podcast, we review a CISA and FBI joint advisory on the Androxgh0st malware. Before that we cover recent Volt Typhoon activity targeting SMB routers exposed on the internet. We end the episode with

NIST Tackles Adversarial AI

Jan 16th, 2024 51m 6s

https://youtu.be/3E_Ei9hgNzAThis week on the podcast, we review NIST's new publication that defines a taxonomy for how we talk about Adversarial Machine Learning. Before that, we cover a recent discovery of threat actors retaining access to G

RIPE for the Taking

Jan 8th, 2024 37m 38s

https://youtu.be/VK1QoxLP16YThis week, we cover a password compromise that lead to a mobile telco in Spain losing control of their IP address space. We also give a quick update on the Lapsus$ ringleader's court case before discussing a recent

Hacking the Crypto Supply Chain

Dec 19th, 2023 38m 38s

https://youtu.be/YZLayuDJyykThis week on the podcast, we cover a supply chain attack against one of the largest hardware cryptocurrency wallet manufacturers. After that, we discuss the latest Apache Struts vulnerability under active exploit b

Bluetooth Busted

Dec 13th, 2023 36m 19s

https://youtu.be/sbc2U4WYrngThis week on the podcast, we cover a new unauthenticated keystroke injection vulnerability in the Bluetooth implementation on nearly every type of device. After that we discuss Logofail, a suite of vulnerabilities

Our 2024 Security Predictions

Dec 4th, 2023 55m 13s

https://youtu.be/BHsow5qnmHwThis week on the podcast we discuss our cybersecurity predictions for 2024. We'll cover each of the 6 predictions for the coming year including the trends behind them and how to protect your organization if they co

Grading our 2023 Security Predictions

Nov 27th, 2023 59m 13s

https://youtu.be/Eai8tYnU2I0This week on the podcast, we look back to our 2023 security predictions and grade ourselves on how well we were able to see the future. We'll go through each of our 6 predictions, explain the trends that fueled the

What to Expect from NIS2

Nov 20th, 2023 50m 59s

https://youtu.be/RrKozKuhhcwThis week on the podcast, we dive in to the EU's Network and Information Security directive update, aka NIS2. We'll cover who might be impacted and what to expect in terms of requirements in the coming year. Before

Combined Cyber and Kinetic Warfare

Nov 13th, 2023 31m 56s

https://youtu.be/GaTUPZ2RMK0This week on the podcast, we cover an analysis from Mandiant on an attack lead by the Russian state-sponsored threat actor Sandworm that came alongside missiles strikes against Ukraine. Before that, we review Okta'

The White House Tackles AI

Nov 6th, 2023 59m 43s

https://youtu.be/67SMv6JtJbcThis week on the podcast we cover an Executive Order from the US White House on the topic of Artificial Intelligence. After that, we discuss the latest CISO that has found themselves in hot water with the law. We t

The Threat Actor That Hacked MGM

Oct 30th, 2023 49m 19s

https://youtu.be/kvSA53ncRlgThis week on the podcast, we review a thorough unmasking of Octa Tempest, the threat actor beind the MGM and Caesars Entertainment attacks in September. Before that, we give an update on the Cisco IOS XE vulnerabil

CISA’s Secure by Design Whitepaper

Oct 23rd, 2023 49m 3s

https://youtu.be/GYoWiEKod38This week on the podcast, we cover CISA's newly updated whitepaper on guidance for both software manufacturers and customers on the principals of secure-by-design and secure-by-default. Before that, we cover the Ci

Microsoft is Killing NTLM

Oct 16th, 2023 40m 9s

https://youtu.be/dSUkvBUDum4This week on the podcast, we cover the recent HTTP/2 protocol vulnerability that lead to the largest DDoS attack ever recorded by CloudFlare. After that, we discuss Microsoft's announcement about the deprecation of

Q2 2023 Internet Security Report

Oct 9th, 2023 49m 53s

https://youtu.be/NVvX02rwlEAThis week on the podcast, we go through the latest Internet Security Report from the WatchGuard Threat Lab. We'll cover the top malware and network attack trends from Q2 2023 impacting small and mid-market organiza

Bing Chat Malvertising

Oct 3rd, 2023 30m 2s

https://youtu.be/Io_lubfJgKEThis week on the podcast, we discuss an alert from CISA on nation state threat actors embedding malware into legacy Cisco router firmware. After that, we cover a research post on malicious advertisements served up

Meta’ One Good Deed

Sep 18th, 2023 42m 39s

https://youtu.be/Yo5GO14F5N0This week on the podcast, we get up to speed on the MGM and Caesars Entertainment ransomware incidents from the previous week. After that, we take a deep dive into a blog post from Meta's application security team