https://feeds.blubrry.com/feeds/the_443.xml https://www.watchguard.com/wgrd-security-hub/podcast-the-443 https://www.watchguard.com/wgrd-security-hub/podcast-the-443 Get inside the minds of leading white-hat hackers and security researchers. Each week, we’ll educate and entertain you by breaking down and simplifying the latest cyber security headlines and trends. Using our special blend of expertise, wit, and cynicism, we’ll turn complex security concepts into easily understood and actionable insights. episodic Secplicity Get inside the minds of leading white-hat hackers and security researchers. Each week, we’ll educate and entertain you by breaking down and simplifying the latest cyber security headlines and trends. Using our special blend of expertise, wit, and cynicism, we’ll turn complex security concepts into easily understood and actionable insights. podcast Daily en-us Copyright 2024 The 443 - Security Simplified Copyright 2024 The 443 - Security Simplified Secplicity webcommunications@watchguard.com https://www.watchguard.com/wgrd-security-hub/podcast-the-443 https://assets.blubrry.com/coverart/orig/577267.jpg Get inside the minds of leading white-hat hackers and security researchers. Each week, we’ll educate and entertain you by breaking down and simplifying the latest cyber security headlines and trends. Using our special blend of expertise, wit, and cynicism Blubrry Podcasting: https://www.blubrry.com/ no http://blogs.law.harvard.edu/tech/rss a5a3e2eb-8380-5fbf-bfd0-74787ec0b827 Introducing the 443 Podcast Wed, 06 Nov 2024 15:32:28 -0500 Wed, 06 Nov 2024 15:32:28 -0500 https://blubrry.com/the_443/138251625/the-age-of-ai-powered-scams/ https://blubrry.com/the_443/138251625/the-age-of-ai-powered-scams/ Secplicity Wed, 06 Nov 2024 15:32:28 -0500 This week on the podcast, we cover a research white paper that details how attackers could use AI to complete an entire money-theft or credential theft-scam from start to finish. Before that, we discus Sophos' 5 year battle with Chinese hackers targeting network devices followed by Microsoft's current battle with password spray attacks through compromised network devices.

]]> This week on the podcast, we cover a research white paper that details how attackers could use AI to complete an entire money-theft or credential theft-scam from start to finish. Before that, we discus Sophos' 5 year battle with Chinese hackers targeting network devices followed by Microsoft's current battle with password spray attacks through compromised network devices.

]]> 0:34:06 false Secplicity This week on the podcast, we cover a research white paper that details how attackers could use AI to complete an entire money-theft or credential theft-scam from start to finish. Before that, we discus Sophos' 5 year battle with Chinese hackers targeting network devices followed by Microsoft's current battle with password spray attacks through compromised network devices. 312 312 https://blubrry.com/the_443/138251599/the-fortimanager-rce-vulnerability/ https://blubrry.com/the_443/138251599/the-fortimanager-rce-vulnerability/ Secplicity Wed, 06 Nov 2024 15:29:59 -0500 This week on the podcast, we review Fortinet's recently-disclosed remote code execution vulnerability in the FortiManager system that has been under active exploit since at least June. After that, we discuss the SEC's recent action against 4 companies found at fault for misleading security incident disclosure statements.

]]> This week on the podcast, we review Fortinet's recently-disclosed remote code execution vulnerability in the FortiManager system that has been under active exploit since at least June. After that, we discuss the SEC's recent action against 4 companies found at fault for misleading security incident disclosure statements.

]]> 0:34:04 false Secplicity This week on the podcast, we review Fortinet's recently-disclosed remote code execution vulnerability in the FortiManager system that has been under active exploit since at least June. After that, we discuss the SEC's recent action against 4 companies found at fault for misleading security incident disclosure statements. 311 311 https://blubrry.com/the_443/138251258/taking-down-the-whole-internet-archive/ https://blubrry.com/the_443/138251258/taking-down-the-whole-internet-archive/ Secplicity Wed, 06 Nov 2024 15:29:45 -0500 This week on the podcast, we cover security incident that brought the Internet Archive and all of its services down, including the Way Back Machine. Before that, we discuss a Chinese nation-state backed threat actor that compromised three major American telecommunications providers and may have gained access to the US wiretapping system.

]]> This week on the podcast, we cover security incident that brought the Internet Archive and all of its services down, including the Way Back Machine. Before that, we discuss a Chinese nation-state backed threat actor that compromised three major American telecommunications providers and may have gained access to the US wiretapping system.

]]> 0:24:11 false Secplicity This week on the podcast, we cover security incident that brought the Internet Archive and all of its services down, including the Way Back Machine. Before that, we discuss a Chinese nation-state backed threat actor that compromised three major American telecommunications providers and may have gained access to the US wiretapping system. 310 310 https://blubrry.com/the_443/138251240/llmhijacking/ https://blubrry.com/the_443/138251240/llmhijacking/ Secplicity Wed, 06 Nov 2024 15:29:32 -0500 This week we cover a research write up on a new technique to monetize stolen AWS credentials. Before that, we discuss a Linux malware variant that went unexposed until just recently and a story about a serial hacker that was caught because of opsec failures.

]]> This week we cover a research write up on a new technique to monetize stolen AWS credentials. Before that, we discuss a Linux malware variant that went unexposed until just recently and a story about a serial hacker that was caught because of opsec failures.

]]> 0:41:15 false Secplicity This week we cover a research write up on a new technique to monetize stolen AWS credentials. Before that, we discuss a Linux malware variant that went unexposed until just recently and a story about a serial hacker that was caught because of opsec failures. 309 309 https://blubrry.com/the_443/138251169/the-cups-vulnerability/ https://blubrry.com/the_443/138251169/the-cups-vulnerability/ Secplicity Wed, 06 Nov 2024 15:29:15 -0500 This week on the podcast, we cover the "9.9/10 severity vulnerability affecting most Linux systems" that a researcher disclosed last week and what it means for Linux systems administrators. We then discuss a research post into Kia's remote control systems that allowed one researcher to compromise any Kia in the last decade by just knowing their license plate number. We end with a new act that was just introduced into the US Senate with a goal to secure the healthcare industry.

]]> This week on the podcast, we cover the "9.9/10 severity vulnerability affecting most Linux systems" that a researcher disclosed last week and what it means for Linux systems administrators. We then discuss a research post into Kia's remote control systems that allowed one researcher to compromise any Kia in the last decade by just knowing their license plate number. We end with a new act that was just introduced into the US Senate with a goal to secure the healthcare industry.

]]> 0:47:09 false Secplicity This week on the podcast, we cover the "9.9/10 severity vulnerability affecting most Linux systems" that a researcher disclosed last week and what it means for Linux systems administrators. We then discuss a research post into Kia's remote control systems that allowed one researcher to compromise any Kia in the last decade by just knowing their license plate number. We end with a new act that was just introduced into the US Senate with a goal to secure the healthcare industry. 308 308 https://blubrry.com/the_443/138250972/how-to-deanonymize-the-tor-network/ https://blubrry.com/the_443/138250972/how-to-deanonymize-the-tor-network/ Secplicity Wed, 06 Nov 2024 15:18:24 -0500 This week on the podcast, we discuss how German law enforcement managed to deanonymize and arrest users on the TOR network. After that, we discuss why the US government is trying to ban Chinese-manufactured car hardware. We then end with a cool research article on chaining open redirect and iframe issues into a 1-click vulnerability that grants attackers access to arbitrary Google Docs files.

]]> This week on the podcast, we discuss how German law enforcement managed to deanonymize and arrest users on the TOR network. After that, we discuss why the US government is trying to ban Chinese-manufactured car hardware. We then end with a cool research article on chaining open redirect and iframe issues into a 1-click vulnerability that grants attackers access to arbitrary Google Docs files.

]]> 0:48:17 false Secplicity This week on the podcast, we discuss how German law enforcement managed to deanonymize and arrest users on the TOR network. After that, we discuss why the US government is trying to ban Chinese-manufactured car hardware. We then end with a cool research article on chaining open redirect and iframe issues into a 1-click vulnerability that grants attackers access to arbitrary Google Docs files. 307 307 https://blubrry.com/the_443/138250923/kicking-edr-out-of-the-kernel/ https://blubrry.com/the_443/138250923/kicking-edr-out-of-the-kernel/ Secplicity Wed, 06 Nov 2024 15:17:58 -0500 This week on the podcast, we discuss Microsoft's recent Windows Endpoint Security Ecosystem Summit and what it means for the future of endpoint security on the Windows platform. After that, we cover a research post on a malware campaign using Google Sheets as a command and control channel before ending with a chat about the US federal government's push to classify cybersecurity as a national service role.

]]> This week on the podcast, we discuss Microsoft's recent Windows Endpoint Security Ecosystem Summit and what it means for the future of endpoint security on the Windows platform. After that, we cover a research post on a malware campaign using Google Sheets as a command and control channel before ending with a chat about the US federal government's push to classify cybersecurity as a national service role.

]]> 0:39:32 false Secplicity This week on the podcast, we discuss Microsoft's recent Windows Endpoint Security Ecosystem Summit and what it means for the future of endpoint security on the Windows platform. After that, we cover a research post on a malware campaign using Google Sheets as a command and control channel before ending with a chat about the US federal government's push to classify cybersecurity as a national service role. 306 306 https://blubrry.com/the_443/135993228/the-white-house-tackles-bgp-security/ https://www.secplicity.org/?p=20665 Secplicity Mon, 09 Sep 2024 12:50:37 -0400 0:42:53 false Secplicity https://youtu.be/rqJGPKJmbkc This week on the podcast, we discuss guidance published by the US White House Office of the National Cyber Director that lays out a roadmap for addressing key security concerns in the BGP routing protocol. Before that, https://youtu.be/rqJGPKJmbkc This week on the podcast, we discuss guidance published by the US White House Office of the National Cyber Director that lays out a roadmap for addressing key security concerns in the BGP routing protocol. Before that, we cover a security research post from Jfrog detailing a new python package hijacking method under active exploitation as well as an analysis of the Microsoft Windows Wi-Fi driver remote code execution vulnerability patched last June.   https://blubrry.com/the_443/135488282/are-tp-links-days-numbered/ https://www.secplicity.org/?p=20661 Secplicity Mon, 26 Aug 2024 17:57:15 -0400 0:40:31 false Secplicity https://youtu.be/jVSMBcT3GnI This week on the podcast, we cover the National Public Data breach that may have leaked every American's social security number. After that, we discuss research from TALOS on how attackers can abuse Microsoft applications ... https://youtu.be/jVSMBcT3GnI This week on the podcast, we cover the National Public Data breach that may have leaked every American's social security number. After that, we discuss research from TALOS on how attackers can abuse Microsoft applications on macOS to gain access to your camera and microphone. We end the episode by discussing recent research on how attackers are attempting to evade Endpoint Detection and Response (EDR) tools. https://blubrry.com/the_443/135126558/leaking-every-americans-ssn/ https://www.secplicity.org/?p=20656 Secplicity Mon, 19 Aug 2024 19:19:33 -0400 0:36:24 false Secplicity https://youtu.be/wft_hpC-_Wo This week on the podcast, we cover the National Public Data breach that may have leaked every American's social security number. After that, we discuss research from TALOS on how attackers can abuse Microsoft applications ... https://youtu.be/wft_hpC-_Wo This week on the podcast, we cover the National Public Data breach that may have leaked every American's social security number. After that, we discuss research from TALOS on how attackers can abuse Microsoft applications on macOS to gain access to your camera and microphone. We end the episode by discussing recent research on how attackers are attempting to evade Endpoint Detection and Response (EDR) tools. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://blubrry.com/the_443/134764662/summer-camp-2024-recap/ https://www.secplicity.org/?p=20653 Secplicity Mon, 12 Aug 2024 19:54:49 -0400 0:45:42 false Secplicity https://youtu.be/0jX-2UYlf8Q This week on the podcast, we round out our takeaways from the Black Hat and Def Con security conferences in Las Vegas. We go through 4 talks across both conferences that were especially interesting either for nostalgia or ... https://youtu.be/0jX-2UYlf8Q This week on the podcast, we round out our takeaways from the Black Hat and Def Con security conferences in Las Vegas. We go through 4 talks across both conferences that were especially interesting either for nostalgia or modern impact. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://blubrry.com/the_443/134654882/blackhat-2024-day-2-recap/ https://www.secplicity.org/?p=20649 Secplicity Fri, 09 Aug 2024 21:56:32 -0400 0:35:37 false Secplicity https://youtu.be/4IWdQ249z_M On this episode of the podcast, we have another recap from the BlackHat security conference in Las Vegas. This time we discuss a new initiative to protect the world from deepfakes, https://youtu.be/4IWdQ249z_M On this episode of the podcast, we have another recap from the BlackHat security conference in Las Vegas. This time we discuss a new initiative to protect the world from deepfakes, followed by a penetration testing engagement that proved immutable backups doesn't always mean available backups. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://blubrry.com/the_443/134585957/blackhat-2024-day-1-recap/ https://www.secplicity.org/?p=20645 Secplicity Thu, 08 Aug 2024 16:04:44 -0400 0:30:45 false Secplicity https://youtu.be/cEiPjW_STUU On this episode of the podcast, we cover our two favorite briefings from the first day at the Black Hat security conference. We start with our thoughts on "shadow resources" in cloud environments before giving an update to... https://youtu.be/cEiPjW_STUU On this episode of the podcast, we cover our two favorite briefings from the first day at the Black Hat security conference. We start with our thoughts on "shadow resources" in cloud environments before giving an update to last week's episode with additional research into AI-as-a-Service attacks. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://blubrry.com/the_443/134389262/stay-tuned-for-hacker-summer-camp-recaps/ https://www.secplicity.org/?p=20642 Secplicity Tue, 06 Aug 2024 15:36:59 -0400 0:00:30 false Secplicity https://youtu.be/PTm87MQS-Z8 This week we will be attending Hacker Summer camp in Las Vegas. We will be publishing a recap each day focusing on our key takeaways. https://youtu.be/PTm87MQS-Z8 This week we will be attending Hacker Summer camp in Las Vegas. We will be publishing a recap each day focusing on our key takeaways. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://www.secplicity.org/2024/07/29/crowdstrikes-incident-report/ https://www.secplicity.org/?p=20639 Secplicity Mon, 29 Jul 2024 04:00:24 -0400 0:47:51 false Secplicity https://youtu.be/AMwgW11DT1c This week on the episode, we walk through CrowdStrike's preliminary post incident report to understand exactly what happened during the July 19th outage and what all software vendors can learn from the event. After that, https://youtu.be/AMwgW11DT1c This week on the episode, we walk through CrowdStrike's preliminary post incident report to understand exactly what happened during the July 19th outage and what all software vendors can learn from the event. After that, we cover a clever plot that lead to KnowBe4 hiring a North Korean threat actor. We end with some research from Wiz on Artificial Intelligence tenant isolation. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://www.secplicity.org/2024/07/19/global-security-outage/ https://www.secplicity.org/?p=20634 Secplicity Fri, 19 Jul 2024 22:15:27 -0400 0:54:13 false Secplicity https://youtu.be/NgggZ_3ZBGg In this daily security byte with WatchGuard CSO, Corey Nachreiner, he explains the recent Global IT outage cause by a CrowdStrike update. We also follow-up on RockYou and the RockYou2024 data dump of 10 billion records https://youtu.be/NgggZ_3ZBGg In this daily security byte with WatchGuard CSO, Corey Nachreiner, he explains the recent Global IT outage cause by a CrowdStrike update. We also follow-up on RockYou and the RockYou2024 data dump of 10 billion records https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://www.secplicity.org/2024/07/15/blast-radius/ https://www.secplicity.org/?p=20628 Secplicity Mon, 15 Jul 2024 12:34:35 -0400 0:42:02 false Secplicity https://youtu.be/wozYlHlPPmE This week on the podcast we discover the newly-disclosed protocol vulnerability in certain RADIUS implementations. Before that, we give an update on the continued fallout from the Snowflake customer databreaches including ... https://youtu.be/wozYlHlPPmE This week on the podcast we discover the newly-disclosed protocol vulnerability in certain RADIUS implementations. Before that, we give an update on the continued fallout from the Snowflake customer databreaches including a new disclosure from AT&T. We also discuss a blog post from JFrog that details how they saved the world from what could have been the worst supply chain attack in history. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://www.secplicity.org/2024/07/02/openssh-regresshion-vulnerability/ https://www.secplicity.org/?p=20615 Secplicity Tue, 02 Jul 2024 13:23:35 -0400 0:45:25 false Secplicity https://youtu.be/p_zv9TEIZO0 This week on the podcast, we cover OpenSSH's recent critical vulnerability and what it means for systems administrators. Before that, we discuss the CDK Global ransomware attack impacting car dealerships across the us, https://youtu.be/p_zv9TEIZO0 This week on the podcast, we cover OpenSSH's recent critical vulnerability and what it means for systems administrators. Before that, we discuss the CDK Global ransomware attack impacting car dealerships across the us, a Korean internet service provider delivering malware to their customers, and a takeover of a popular JavaScript library gone hostile. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://www.secplicity.org/2024/06/24/snowflake-breach-campaign/ https://www.secplicity.org/?p=20610 Secplicity Mon, 24 Jun 2024 04:00:29 -0400 0:35:47 false Secplicity https://youtu.be/Pxh2VhwkHrE This week on the podcast we doscuss two issues from this month's Microsoft patch tuesday that deserve your attention. After that we discuss the recent data theft campain targeting Snowflake customers that has impacted over... https://youtu.be/Pxh2VhwkHrE This week on the podcast we doscuss two issues from this month's Microsoft patch tuesday that deserve your attention. After that we discuss the recent data theft campain targeting Snowflake customers that has impacted over 100 organizations. We end the episode with an update on the hackers behind the MGM and Caesar's Entertainment breaches last year. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg https://www.secplicity.org/2024/06/17/q1-2024-internet-security-report/ https://www.secplicity.org/?p=20606 Secplicity Mon, 17 Jun 2024 16:34:31 -0400 0:52:12 false Secplicity https://youtu.be/jE2m_BO_yyY This week on the podcast we cover the WatchGuard Threat Lab's Internet Security Report from Q1. In this episode, we discuss the latest trends in malware detections at the network and the endpoint, network attack trends, https://youtu.be/jE2m_BO_yyY This week on the podcast we cover the WatchGuard Threat Lab's Internet Security Report from Q1. In this episode, we discuss the latest trends in malware detections at the network and the endpoint, network attack trends, and malicious domains that targeted WatchGuard customers around the world. https://www.secplicity.org/wp-content/uploads/2018/06/the-443-security-simplified-cover-art.jpg