Cybersecurity News Byte with Jim Guckin

Welcome to CyberSecurity News Byte with Jim Guckin, your one-stop resource for the latest cybersecurity news, updates, and discussions. The podcast is a vital tool for CyberSecurity and IT professionals, as well as technology leaders, who need to stay on top of the ever-evolving digital landscape. Each week, we delve into the most significant cybersecurity stories from around the globe. Whether it's a new vulnerability discovered, a major data breach, or the rollout of a critical security patch, we aim to keep our listeners informed and prepared. We go beyond the headlines, breaking down complex issues into easy-to-understand segments, and providing insights into the potential implications and countermeasures that professionals can take.

Episode 80: May 13 2024 05/13/2024

Episode 80: May 13 2024 This week we talk about [00:36] how Citrix is warning its customers to be aware of this integrated third party tool, then [07:55] we finally learn the identity of the main member of LockBit, Then we talk about [14:04] Dell had one of their sites scraped and all it cost them was 49 million customers records and we round up this weeks discussion on [23:09] a wordpress plugin that is being actively exploited by hackers and how even if you don't use this plugin, you can protect yourself. /episode/index/show/cybersecuritynewsbyte/id/31254402

Episode 79: February 02 2024 02/06/2024

Episode 79: February 02 2024 This week we talk about [00:36] how a major player in the website protection game, get's hacked, [09:13] A Russian hacker group is using vulnerabilites from December to gain access to your account, [16:20] Mastadon has a critical vulnerability, can the admins patch their servers in time and finally [22:50] A popular remote access tool had their systems breach, and you should reset your account anyway. [00:36] Cloudflare Hacked [09:13] Russian Hackers using NTLM Relay Attacks [16:20] Critical vulnerability in Mastodon [22:50] AnyDesk breached, reset passwords /episode/index/show/cybersecuritynewsbyte/id/29815268

Episode 78: January 29 2023 01/29/2024

Episode 78: January 29 2023 This week we talk about [00:36] an Outlook vulnebility that leaks a hashed password to places it shouldn't, then [06:32] The US government doesn't need warrants for your information they just pay data brokers, [13:58] The NoName Ransomware group take target at industries around the work, and finally [20:31] the Trello data breach that wasn't really a data breach and why that doesn't make us feel any better. /episode/index/show/cybersecuritynewsbyte/id/29741758

Episode 77: January 22 2023 01/22/2024

Episode 77: January 22 2023 On my return for 2024, we talk about [00:36] how a Russia backed group hacked Microsoft's top leaders email account, [09:25] VMWare sounds the alarm about their latest critical vCenter vulnerability that's currently being used in attacks, [16:00] How a popular IT remote access tool is being exploited back hackers and what not to do, and finally [23:11] a long dormant group wakes back up and using email to create havoc. /episode/index/show/cybersecuritynewsbyte/id/29581878

Episode 76: November 27 2023 11/27/2023

Episode 76: November 27 2023 This week we talk about [00:36] ownCloud let's it users know it's found 3 critical vulnerabilites in some of it's software, [06:57] A school app based in India was leaking personal student data due to misconfiguration, [12:15] Microsoft takes a sucessful attack again it's Windows Hello service to break into computers and [18:49] BlackCat is back at it again, by claiming to hack a fortune 500 company. /episode/index/show/cybersecuritynewsbyte/id/28815858

Episode 75: November 20 2023 11/21/2023

Episode 75: November 20 2023 This week we talk about [00:36] We talk about how some security researchers were able to extract a RSA key from signing errors, [07:27] How a now defunt shadowy hack-for-hire group was behind a bunch of attacks, [15:11] Vulnerabilities in some AL and ML tools should they give you something to think about, [22:59] and an old tactic being used to extract money from those who care and reminder how it's the season for social engineering. /episode/index/show/cybersecuritynewsbyte/id/28739003

Episode 74: November 11 2023 11/13/2023

Episode 74: November 11 2023 This week we talk about [00:36] The Lace Tempest group seen exploiting a vulnerability in a popular IT Support Software, [06:46] Then we talk about how a company suffered a compromise, paid the attacker and the data was still leaked, [13:38] We talk about the new vulnerability that CISA is warning about, and finally [17:34] Sumo Logic urges it's users to change their credentials. /episode/index/show/cybersecuritynewsbyte/id/28738883

Episode 73: October 30 2023 10/30/2023

Episode 73: October 30 2023 This week we talk about [00:36] A zero-day in a popular webmail client that can be exploited without interaction, then [06:38] How Octo Tempest gang's new addition to social engineering is a little scary, [14:12] The Lockbit gang has claimed to have hacked Boeing, but is it true and finally [18:57] A social engineering tactic being used on LinkedIN to spread malware. /episode/index/show/cybersecuritynewsbyte/id/28456073

Episode 72: October 23 2023 10/23/2023

Episode 72: October 23 2023 This week we talk about [00:36] a new advertising campaign that is targeting Notepad++ to spread malware, then [00:36] a new cheaper malware avaialbe to cybercriminals that you need to be aware of, [00:36] a IT company's misconfiguration exposes 820,000 customers data, and Cisco has a new zero-day that's as severe as can be. /episode/index/show/cybersecuritynewsbyte/id/28454342

Episode 71: October 16 2023 10/17/2023

Episode 71: October 16 2023 This week we talk about [00:36] How the blockchain is being utilized to help the spread of malware, [08:18] How the ToddyCat malware is being improved upon and how it's being utilized for compromising exchange servers, [14:47] How ALPHV has stolen data from a hosptial and how their extortion techniques are getting worse, and [21:03] DarkGate malware is making a come-back and how it changed it's money making model. /episode/index/show/cybersecuritynewsbyte/id/28360397

Episode 70: October 09 2023 10/09/2023

Episode 70: October 09 2023 This week we talk about [00:36] how buying cheap android products on popular ecommerce sites may come preloaded with malware, then [07:16] we talk about how the curl library and command has 2 security patches that you need to make sure you update this week, [11:11] a popular DNA testing company has their data leaked on the internet and why that should concern you, and [16:25] Sony confirms another breach linked to the MoveIT vulernability. /episode/index/show/cybersecuritynewsbyte/id/28282544

Episode 69: September 25 2023 09/26/2023

Episode 69: September 25 2023 This week we talk about [00:36] a new phishing campaign that is using your reservations at hotels to target you from the hotel itself, then [08:20] how a proof on concept code that was released contained malware, [14:23] USDoD a notorious threat actor claims to have targeted TransUnion and claims to have their data and finally we talk about [21:18] how a bunch of npm packages are in the repository have malware to steal your information. /episode/index/show/cybersecuritynewsbyte/id/28453913

Episode 68: September 11 2023 09/12/2023

Episode 68: September 11 2023 This week we talk about how a new attack, is actually just hackers using the tools that security testers are using against us, Then we talk about how Apple has a new 0-day vulnerability that needs patching, and then to be fair we talk about the new Android vulnerability that is also being actively exploited, then we wrap it all up with a discussion about the Chinese hacker who gets access to Microsoft's encryption key and use it to breach the US government. /episode/index/show/cybersecuritynewsbyte/id/28027110

Episode 67: August 07 2023 08/07/2023

Episode 67: August 07 2023 We discuss a mistake that Burger King France had made that exposed database configuration information. We tell you why you need to be aware of LOLBAS (formerly LOLBins) and the danger to your network from your own devices. We talk about why properly disposing of your equipment is vital and even more vital with IoT devices, and wrap it up with the brawl between Tenable and Microsoft over a vulnerability and why you need to pay attention. /episode/index/show/cybersecuritynewsbyte/id/27681219

Episode 66: July 31 2023 07/31/2023

Episode 66: July 31 2023 We talk about a new exploit that abuses a computer search component that hopes to trick your users into clicking malware, Then a new malware with an older tactic, using ads for popular technology software to get you to download and install it, Then we talk about a new report that explains why the education sector is a high value hacker target and we round off the week talking about how a hacker forum, known to selling breach data, is having its data sold after a breach. /episode/index/show/cybersecuritynewsbyte/id/27607605

Episode 65: July 24 2023 07/24/2023

Episode 65: July 24 2023 /episode/index/show/cybersecuritynewsbyte/id/27544716

Episode 64: July 17 2023 07/18/2023

Episode 64: July 17 2023 Today's episode we talk about the recently uncovered 2-year-old botnet called AVrecon, Then talk about how criminals are making their own AI called WormGPT, How a recently busted cyber fraud market website announced a new owner is coming and finally we just back and give updates on SwingVPN and JumpCloud. [00:36] AVrecon infects 70,000 routers [09:56] WormGPT for clever phishing [15:51] Genesis Market sold despite FBI disruption [20:58] Story Updates, not update updates /episode/index/show/cybersecuritynewsbyte/id/27515814

Episode 63: July 10 2023 07/11/2023

Episode 63: July 10 2023 On this week’s show we talk about [00:36] Android security update patches 3 exploits that are being actively used, [08:05] A new technique that allows the successful tricking of voice authentication, [15:20] JumpCloud security incident that causes the reset of their APIs and [21:52] TeamPhisher tool exploits Microsoft Teams. /episode/index/show/cybersecuritynewsbyte/id/27427287

Episode 62: June 26 2023 06/26/2023

Episode 62: June 26 2023 This weeks show, we talk about a security researches discovery about Swing VPN, then the US Military is warning it's staff beware of unexpected smart watches, followed by the latest Mirai botnet campaign targeting IoT devices and finish the episode off with how a self propregrating malware found it's way to a healthcare network. [00:36] Popular Swing VPN Android App as DDoS Botnet [08:44] US Military warns of unexpected smart watches [13:46] Latest Mirai Campaign Leveraging Multiple IoT Exploits [19:09] Self-Propagating Malware Inadvertently Affects Networked Storage Devices /episode/index/show/cybersecuritynewsbyte/id/27282531

Episode 61: June 20 2023 06/21/2023

Episode 61: June 20 2023 On this week's show, we talk about the new threat group that is targetting SSH servers, Barracuda announces get rid of impacted appliances after a Zero-Day attack on their equipment, GravityRAT pretends to be messaging application to go after your WhatsApp backups, and MOVEit Transfer in the news again for a third vulnerability in a few weeks. [00:36] New Threat Group Targets SSH Servers [06:23] Barracuda Zero-Day Attacks [11:55] GravityRAT goes after WhatsApp backups [14:55] Third MOVEit Bug Discovered /episode/index/show/cybersecuritynewsbyte/id/27230724

Episode 60: June 12 2023 06/12/2023

Episode 60: June 12 2023 I talk about the [00:36] new easily exploitable Microsoft Visual Studio bug, [08:38] A new report that puts CyberSecurity awareness center stage, [19:15] A new “Picture in Picture” technique used in a new deceptive phishing attack, and [24:24] a security company releasing a PoC for Windows Win32k bug exploited in attacks, patch now! /episode/index/show/cybersecuritynewsbyte/id/27130947

Episode 59: June 05 2023 06/06/2023

Episode 59: June 05 2023 I talk this week about malware used for intelligence gathering that may have a state sponsor, New ransomware that copies a ton of stuff from an established group, Crypto's Discord admins compromised with a bookmark, and MOVEit transfer vulnerability! /episode/index/show/cybersecuritynewsbyte/id/27053619

Episode 58: May 28 2023 05/29/2023

Episode 58: May 28 2023 In this week's episode where [00:36] we talk about how summertime vacations can cause hackers to get some major wins, [12:02] how the size of your organization, does nothing to protect you from hackers, [21:43] then a new technique that allows malicious people to steal data from the heat, energy, and frequency of your computer chips and finally [29:44] the Legion credential harvester gets some scary new features /episode/index/show/cybersecuritynewsbyte/id/26980542

Episode 57: May 22 2023 05/22/2023

Episode 57: May 22 2023 We talk about how Cybersecurity firm Dragos discloses a security incident and extortion attempt, and what you can learn from it, DarkBERT darkweb search bot, New fingerprint vulnerability BrutePrint; and my new fear Voice Cloning-as-a-Service /episode/index/show/cybersecuritynewsbyte/id/26919873

Episode 56: May 15 2023 05/15/2023

Episode 56: May 15 2023 This week I talk about [00:36] how the car location data of 2 million customers was exposed for ten years, [06:54] the fact that millions of mobile phones come pre-infected with malware, [12:25] A phishing Campaign that distributes SmokeLoader via Fake Invoice, and [16:00] How crooks are using malicious QR codes to steal money /episode/index/show/cybersecuritynewsbyte/id/26849034

Episode 55: April 30 2023 05/02/2023

Episode 55: April 30 2023 I talk about the new tactics for extorting payments, RTM Group launches its Linux ransomware, Hackers breaking into AT&T email accounts to steal cryptocurrency, and the New macOS Info-stealer called Atomic /episode/index/show/cybersecuritynewsbyte/id/26713293

Episode 54: April 24 2023 04/24/2023

Episode 54: April 24 2023 This week, I talk about the new phishing scams that's targeting Microsoft Teams; how the LockBit Ransomware Group looking at Apple; that an employee at a company sent confidential data of 256,000 consumers to their personal email and the new wave of ChatGPT-Themed scam attacks that are on the Rise. /episode/index/show/cybersecuritynewsbyte/id/26713269

Episode 53: April 17 2023 04/17/2023

Episode 53: April 17 2023 Bullet points of key topics + chapter markers [00:36] Pentagon Document Leak [11:49] NCR was the victim of BlackCat ransomware gang [18:16] Free Movie Sites are a bad idea [24:14] Vice Society Ransomware Using Stealthy PowerShell Exfiltration /episode/index/show/cybersecuritynewsbyte/id/26571099

Episode 52: April 03 2023 04/03/2023

Episode 52: April 03 2023 Bullet points of key topics + chapter markers [00:36] Impersonating Ransomware Gangs for Extorsion [08:39] DISH slapped with multiple lawsuits after ransomware cyber attack. [15:20] Lazarus Group Linked to 3CX Supply Chain Hack [22:05] Ukrainian Hacktivists Trick Russian Military Wives for Personal Info /episode/index/show/cybersecuritynewsbyte/id/26434386

Episode 51: March 27 2023 03/27/2023

Episode 51: March 27 2023 Bullet points of key topics + chapter markers [00:36] Instagram scam uses fake SHEIN gift cards as lure [00:36] Linus Tech Tips Hacked [00:36] Another one bites the dust [00:36] Fake IRS tax email delivers Emotet malware /episode/index/show/cybersecuritynewsbyte/id/26360067

Cybersecurity News Byte with Jim Guckin

TOPICS