Talkin' About [Infosec] News, Powered by Black Hills Information Security

Black Hills Information Security
  • 0.0 (0)
  • TECH NEWS
  • EVERY TWO WEEKS

Download and listen to our weekly infosec podcast where we discuss the latest attacks, breaches, and how they happened and why. We’re a team of penetration testers (ethical hackers) and friends that love how new technology can be broken and made to do things it was never intended to do.

  1. 20 AUG

    Cyberattack Bricks Speed Cameras – 2025-08-18

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — The gif that keeps on giffing 01:46 - Cyberattack Bricks Speed Cameras – BHIS - Talkin’ Bout [infosec] News 2025-08-18 02:39 - Story # 1: Perplexity made a sky-high $34.5 billion bid for Google Chrome — a bold and unusual move in the midst of antitrust scrutiny 07:16 - Story # 2: Exclusive: US embeds trackers in AI chip shipments to catch diversions to China, sources say 10:22 - Story # 3: How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes 12:17 - Story # 4: Cisco discloses maximum-severity defect in firewall software 13:56 - Story # 5: Data Dump From APT Actor Yields Clues to Attacker Capabilities 19:13 - Story # 6: Russian cyberattack in the Netherlands leaves speed cameras offline indefinitely 23:30 - Story # 7: HTTP/2 MadeYouReset Vulnerability Enables Massive DDoS Attacks 24:51 - Story # 8: LAPD Eyes ‘GeoSpy’, an AI Tool That Can Geolocate Photos in Seconds 29:05 - Story # 9: Manpower discloses data breach affecting nearly 145,000 people 34:51 - Story # 10: Hacker Offers to Sell 15.8 Million Plain-Text PayPal Credentials On Dark Web Forum 35:34 - Story # 11: The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived 40:54 - Story # 12: New Clever Phishing Attack Uses Japanese Character “ん” to Mimic Forward Slash “/” 46:28 - Story # 13: Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild 48:13 - Story # 14: Plex warns users to patch security vulnerability immediately 50:53 - ChickenSec: Noble Foods using soil mapping technology at organic egg farm

    58 min

  2. 14 AUG

    DEF CON RECAP – 2025-08-11

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — Wading Through Woods 06:06 - DEF CON RECAP - Talkin’ Bout [infosec] News 2025-08-11 09:16 - Story # 1: It’s time to acknowledge HTTP/1.1 is insecure 12:36 - Story # 2: Research reveals possible privacy gaps in Apple Intelligence’s data handling 17:51 - Story # 3: Federal court filing system hit in sweeping hack 21:09 - Story # 4: Cisco discloses data breach impacting Cisco.com user accounts 32:17 - Story # 5: Google says its AI-based bug hunter found 20 security vulnerabilities 34:20 - Story # 6: Automate security reviews with Claude Code 39:01 - Story # 7: Flipper Zero ‘DarkWeb’ Firmware Bypasses Rolling Code Security on Major Vehicle Brands 44:44 - Story # 7b: OnStar assists CHP in stopping fleeing SUV with toddler inside 47:12 - Story # 7c: That viral video of a ‘deactivated’ Tesla Cybertruck is a fake 49:37 - Story # 8: LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code 50:53 - Story # 9: Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools 53:08 - Story # 10: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT 58:10 - Story # 11: Millions of Dell Laptops Vulnerable to Device Takeover and Persistent Malware Attacks

    1 hr

  3. 7 AUG

    Perplexity Stealth Crawlers Evade No-Crawl Directives - 2025-08-04

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00:00 - PreShow Banter™ — Stop Asking Wade if he’s in Vegas 00:02:16 - Perplexity Uses Stealth Crawlers to Evade No-Crawl Directives – 2025-08-04 00:11:25 - Story # 1: Insurance won’t cover $5M in City of Hamilton claims for cyberattack, citing lack of log-in security 00:18:40 - Story # 2: States Enact Safe Harbor Laws that Provide Affirmative Defenses in Data Breach Litigation 00:26:45 - Story # 3: Hackers Destroy Aeroflot’s IT Infrastructure, Causing Over 42 Flight Cancellations 00:34:18 - Story # 4: Attackers exploit link-wrapping services to steal Microsoft 365 logins 00:40:09 - Story # 5: Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons 00:42:18 - Wade’s plugin recommendation 00:44:39 - Story # 6: Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives 00:51:11 - Story # 7: After Backlash, ChatGPT Removes Option to Have Private Chats Indexed by Google 00:55:21 - AI 2027 01:01:01 - What’s Ralph been up to?

    1h 3m

  4. 1 AUG

    UK Bans Ransomware Payments - 2025-07-28

    Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com 00:00 - PreShow Banter™ — National Chicken Wing Day 04:16 - BHIS - Talkin’ Bout [infosec] News 2025-07-28 05:30 - Story # 1: Bad vibes: How an AI agent coded its way to disaster 08:40 - Story # 1b: Replit goes rogue, deletes entire database. 15:44 - Story # 2: A major AI training data set contains millions of examples of personal data 26:05 - Story # 3: Women Dating Safety App ‘Tea’ Breached, Users’ IDs Posted to 4chan 33:19 - Story # 4:A Startup is Selling Data Hacked from Peoples’ Computers to Debt Collectors 40:28 - Story # 5: Clorox Sues IT Provider Cognizant For Simply Giving Employee Password to Hackers 49:46 - Story # 6: Businesses banned from paying hackers’ ransoms to target cybercrime 57:38 - SharePoint Follow Up

    1h 2m

  5. 23 JUL

    Microsoft's OverSharePoint 0-Day Exploit – 2025-07-21

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — PaintBallers 03:55 - BHIS - Talkin’ Bout [infosec] News 2025-07-21 04:21 - Story # 1: Microsoft 0-day Mass Exploitation 09:39 - Story # 2: Replit AI went rogue, deleted a company’s entire database, then hid it and lied about it 13:15 - Story # 3: ‘All US forces must now assume their networks are compromised’ after Salt Typhoon breach 18:08 - Story # 4: After FBI Warning, Alaska Airlines Grounded; Salt Typhoon Suspected 20:45 - Story # 5: FBI Cybersecurity Breach Led to Murders of Informants in El Chapo Case 21:54 - Story # 5b: FBI’s Report 29:57 - Story # 6: Google fixes actively exploited sandbox escape zero day in Chrome 31:30 - Story # 7: Exploited Wing file transfer bug risks ‘total server compromise,’ CISA warns 32:33 - Story # 8: CitrixBleed 2 situation update — everybody already got owned 33:01 - Story # 9: At Least 750 US Hospitals Faced Disruptions During Last Year’s CrowdStrike Outage, Study Finds 46:14 - Story # 10: Amazon Ring Doorbell May 28 Mass Hacking Claim Goes Viral 48:56 - jdbgmgr.exe virus hoax 51:52 - Story # 11: HPE warns of hardcoded passwords in Aruba access points

    1h 4m

  6. 16 JUL

    McDonald’s Over 64 Million Exposed Job Applicants - 2025-07-14

    Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com 00:00 - PreShow Banter™ — Traditional Finger 00:21 - BHIS - Talkin’ Bout [infosec] News 2025-07-14 01:29 - Story # 1: ‘123456’ password exposed chats for 64 million McDonald’s job chatbot applications 22:12 - Story # 2: Employee gets $920 for credentials used in $140 million bank heist 33:50 - Story # 3: Microsoft laying off about 9,000 employees in latest round of cuts 37:21 - Story # 5: Scammy YouTube Ads 46:31 - Story # 6: New ServiceNow flaw lets attackers enumerate restricted data

    55 min

  7. 9 JUL

    North Korean Remote Workers are at it Again! – BHIS - Talkin' Bout [infosec] News 2025-07-07

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — Pre Stream Appropriate 03:39 - N. Korean Remote Workers are at it Again! – BHIS - Talkin’ Bout [infosec] News 2025-07-07 05:41 - Story # 1: Fortune 500 Cyber Spending Pays Off: Large Enterprise Risk Falls 33% Despite Rising Threats 20:01 - Story # 2: Jasper Sleet: North Korean remote IT workers’ evolving tactics to infiltrate organizations 25:49 - Story # 2b: Engineer caught juggling multiple startup jobs is a cautionary tale of ‘extreme’ hustle culture, experts say 34:47 - Story # 3: Taking SHELLTER: a commercial evasion framework abused in- the- wild 42:15 - Story # 3b: Statement Regarding Recent Misuse of Shellter Elite and Elastic Security Labs’ Handling 46:58 - Story # 4: Ingram Micro outage caused by SafePay ransomware attack 49:45 - Story # 5: Germany asks Google, Apple to remove DeepSeek AI from app stores 53:13 - Story # 6: This Call of Duty game just hit Xbox Game Pass, but it’s infested with RCE hackers — I’d take cover and avoid playing until there’s a fix

    56 min

  8. 4 JUL

    Year of the [European Union] Linux Desktop Finally Arrives? | BHIS - Talkin' Bout [infosec] News 2025-06-30

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com Chapters: 00:00 - PreShow Banter™ — Names on Cups 01:39 - Year of the [European Union] Linux Desktop Finally Arrives? | BHIS - Talkin’ Bout [infosec] News 2025-06-30 03:34 - Story # 1: You should probably delete any sensitive screenshots you have in your phone right now. 10:55 - Story # 2: Ongoing Campaign Abuses Microsoft 365’s Direct Send to Deliver Phishing Emails 14:07 - Story # 3: The year of the European Union Linux desktop may finally arrive 24:46 - Story # 4: Restricted data once again leaked on War Thunder forums 27:04 - Story # 5: Scale AI Leaks Meta, Google, xAI Confidential Files Through ‘Incredibly Janky’ Document Practices 31:47 - Story # 6: French police reportedly arrest suspected BreachForums administrators 34:22 - Story # 7: Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages 39:41 - Story # 8: CitrixBleed 2: Electric Boogaloo — CVE-2025–5777 42:16 - Story # 9: Millions of Brother Printers Hit by Critical, Unpatchable Bug 47:05 - Story # 10: Canada orders China’s Hikvision to close Canadian operations 50:13 - Story # 11: US House bans WhatsApp on staff devices over security concerns 53:17 - ChickenSec: Chickens are becoming 3rd most popular pet: Tractor Supply CEO 56:34 - Story # 12: Norway Dam Hacked, Valve Opened But No Danger 58:11 - Review your calendar invites!

    59 min
See All (20)

About

Download and listen to our weekly infosec podcast where we discuss the latest attacks, breaches, and how they happened and why. We’re a team of penetration testers (ethical hackers) and friends that love how new technology can be broken and made to do things it was never intended to do.

Information

You Might Also Like