The Hackle Box

The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.With Oscar out traveling, Pinky and Eric lead the discussion this month. Together, they discuss: A worm-driven USB attack strategy, Microsoft's disclosure of four zero-days in their September update, and the Scattered Spider ransomware group's sophisticated smishing and vishing campaigns on cloud services. They also open up to the live audience for questions!Links: Mustang Panda Feeds Worm-Driven USB Attack Strategyhttps://www.darkreading.com/cyberattacks-data-breaches/mustang-panda-worm-driven-usb-attackMicrosoft Discloses 4 Zero-Days in September Updatehttps://www.darkreading.com/application-security/microsoft-discloses-4-zero-days-in-september-updateSocially Savvy Scattered Spider Traps Cloud Admins in Webhttps://www.darkreading.com/cloud-security/socially-savvy-scattered-spider-traps-cloud-admins-in-webPlease like, subscribe, and follow us on social!About FRSecurehttps://frsecure.com/ FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss critical Citrix flaws, fake journalists stealing data, Microsoft holding execs accountable for security, police trolling a ransomware gang, and more.Links: Citrix Addresses High-Severity Flaw in NetScaler ADC and Gatewayhttps://thehackernews.com/2023/10/critical-citrix-netscaler-flaw.htmlApt42 Pose As Journalists, Harvest Credentials, Access Cloud Datahttps://attackfeed.com/apt42-hackers-pose-as-journalists-to-harvest-credentials-and-access-cloud-data-infothehackernews-com-the-hacker-news/Microsoft Will Hold Execs Accountable for Cybersecurityhttps://www.darkreading.com/cloud-security/feds-microsoft-clean-up-cloud-security-actBurnout Is Pushing Workers to Use AI—Even If Their Boss Doesn’t Knowhttps://www.wired.com/story/ai-workers-burnout-microsoft-linkedin/Police Resurrect LockBit's Site and Troll the Ransomware Gang | TechCrunchhttps://techcrunch.com/2024/05/06/police-resurrect-lockbits-site-and-troll-the-ransomware-gang/US Indicts LockBit Ransomware Ringleader, Offers $10 Million Rewardhttps://www.theverge.com/2024/5/7/24151493/us-lockbit-ransomware-ringleader-indictment-rewardPlease like, subscribe, and follow us on social! Facebook: https://www.facebook.com/frsecure/ Twitter: https://twitter.com/frsecure/ Instagram: https://www.instagram.com/frsecureofficial/ LinkedIn: https://www.linkedin.com/company/frsecure/ About FRSecure https://frsecure.com/ FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.This time, they discuss security risks in ChatGPT plugins, a major flaw in Google's Gemini AI, typosquatting, and a worldwide vishing epidemic.Links:ChatGPT Plugin Securityhttps://www.infosecurity-magazine.com/news/security-risks-chatgpt-plugins/Gemini AI Vulnerabilityhttps://www.darkreading.com/cyber-risk/google-gemini-vulnerable-to-content-manipulation-researchers-sayWorldwide Vishing Epidemichttps://www.darkreading.com/endpoint-security/sophisticated-vishing-campaigns-take-world-by-stormTyposquattinghttps://www.darkreading.com/threat-intelligence/typosquatting-wave-shows-no-signs-of-abatingPlease like, subscribe, and follow us on social!Facebook: https://www.facebook.com/frsecure/Twitter: https://twitter.com/frsecure/Instagram: https://www.instagram.com/frsecureofficial/LinkedIn: https://www.linkedin.com/company/frsecure/About FRSecure https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss the reduced cybersecurity funding observed in 2023 as well as new vulnerabilities, patches, and more.Links: Cybersecurity Funding Reduced https://www.securityweek.com/cybersecurity-funding-dropped-40-in-2023-analysis/ Critical Flaws in Windows Kerberos and Hyper-V https://securityweek.com/microsoft-ships-urgent-fixes-for-critical-flaws-in-windows-kerberos-hyper-v/ Pikabot Malware https://www.darkreading.com/cyberattacks-data-breaches/pikabot-malware-qakbot-replacement-black-basta-attacks Decryptor for Black Basta and Babuk's Tortilla Ransomware https://thehackernews.com/2024/01/free-decryptor-released-for-black-basta.html Please like, subscribe, and follow us on social! Facebook: https://www.facebook.com/frsecure/ Twitter: https://twitter.com/frsecure/ Instagram: https://www.instagram.com/frsecureofficial/ LinkedIn: https://www.linkedin.com/company/frsecure/ About FRSecure https://frsecure.com/ FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.This time around, they discuss recent vulnerabilities in Confluence and Apache ActiveMQ.Follow us on social!Facebook: https://www.facebook.com/frsecure/Twitter: https://twitter.com/frsecure/Instagram: https://www.instagram.com/frsecureofficial/ LinkedIn: https://www.linkedin.com/company/frsecure/About FRSecure - https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

Oscar and Pinky are back for this month's session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits.DISCUSSED THIS MONTH:Scattered Spider (MGM attack)https://hackdojo.io/articles/E59P05LKQ/-scattered-spider-behind-mgm-cyberattack-targets-casinosCaesers confirms ransomwarehttps://hackdojo.io/articles/73WL5VP9N/caesars-confirms-ransomware-hack-stolen-loyalty-program-databaseMGM hackers branching outhttps://hackdojo.io/articles/AEWED5DK7/mgm-hackers-broadening-targets-monetization-strategiesUNC3944 Smishing Ransomwarehttps://www.mandiant.com/resources/blog/unc3944-sms-phishing-sim-swapping-ransomwareLastPass iOS vulnerability (BLASTPASS)https://hackdojo.io/articles/AEWEDLDK7/blastpass-government-agencies-told-to-secure-iphones-against-spyware-attacksFollow us on social!Facebook: https://www.facebook.com/frsecure/Twitter: https://twitter.com/frsecure/Instagram: https://www.instagram.com/frsecureofficial/ LinkedIn: https://www.linkedin.com/company/frsecure/

This month, we're doing a crossover episode with the Unsecurity Podcast!For those who are not yet aware, Unsecurity is another FRSecure podcast focused on the business impact of current events and happenings within the security industry. It's hosted several times a month by Oscar and Brad Nigh, FRSecure's Principal Information Security Consultant.Discussed this month: MOVEit AttacksMicrosoft Patch Tuesday: Six 0-DaysFortinet InfinityPlease like, subscribe, and follow us on social! Facebook: https://www.facebook.com/frsecure/Twitter: https://twitter.com/frsecure/Instagram: https://www.instagram.com/frsecureofficial/ LinkedIn: https://www.linkedin.com/company/frsecure/