2024-11-25 - Discordgate
S:E1

2024-11-25 - Discordgate

Summary

00:00:00 - PreShow Banter™ — Discordgate00:09:24 - BHIS - Talkin’ Bout [infosec] News 2024-11-2500:10:46 - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly00:12:08 - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership00:19:16 - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access00:24:37 - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches00:25:46 - Discordgate Follow Up00:26:26 - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization00:31:08 - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack00:34:01 - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking”00:38:49 - Story # 7: T-Mobile finally managed to thwart a data breach before it occured00:40:22 - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw00:43:07 - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators00:46:19 - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison00:48:31 - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December00:50:10 - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It00:55:11 - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks00:57:02 - Story # 13: Hackers Breach Andrew Tate’s Online ‘University,’ Exposing 800,000 Users01:00:36 - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually01:01:31 - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure01:03:07 - Story # 16: US charges five linked to Scattered Spider cybercrime gang01:04:25 - Plug: Secure Code Summit 2024

00:00:00 - PreShow Banter™ — Discordgate

00:09:24 - BHIS - Talkin’ Bout [infosec] News 2024-11-25

00:10:46 - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly

00:12:08 - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership

00:19:16 - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

00:24:37 - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches

00:25:46 - Discordgate Follow Up

00:26:26 - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

00:31:08 - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack

00:34:01 - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking”

00:38:49 - Story # 7: T-Mobile finally managed to thwart a data breach before it occured

00:40:22 - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw

00:43:07 - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators

00:46:19 - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison

00:48:31 - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December

00:50:10 - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It

00:55:11 - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks

00:57:02 - Story # 13: Hackers Breach Andrew Tate’s Online ‘University,’ Exposing 800,000 Users

01:00:36 - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually

01:01:31 - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure

01:03:07 - Story # 16: US charges five linked to Scattered Spider cybercrime gang

01:04:25 - Plug: Secure Code Summit 2024

  • (00:00) - PreShow Banter™ — Discordgate
  • (09:23) - BHIS - Talkin' Bout [infosec] News 2024-11-25
  • (10:45) - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly
  • (12:07) - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership
  • (19:15) - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access
  • (24:37) - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches
  • (25:46) - Discordgate Follow Up
  • (26:25) - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
  • (31:07) - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack
  • (34:01) - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking”
  • (38:49) - Story # 7: T-Mobile finally managed to thwart a data breach before it occured
  • (40:21) - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw
  • (43:06) - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators
  • (46:19) - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison
  • (48:31) - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December
  • (50:10) - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It
  • (55:11) - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks
  • (57:02) - Story # 13: Hackers Breach Andrew Tate's Online 'University,' Exposing 800,000 Users
  • (01:00:36) - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually
  • (01:01:31) - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure
  • (01:03:06) - Story # 16: US charges five linked to Scattered Spider cybercrime gang
  • (01:04:25) - Plug: Secure Code Summit 2024