Talkin' About [Infosec] News, Powered by Black Hills Information Security

Black Hills Information Security
  • 4,8 (91)
  • TIN TỨC CÔNG NGHỆ
  • HẰNG TUẦN

Download and listen to our weekly infosec podcast where we discuss the latest attacks, breaches, and how they happened and why. We’re a team of penetration testers (ethical hackers) and friends that love how new technology can be broken and made to do things it was never intended to do.

  1. 3 NGÀY TRƯỚC

    2 Million Cisco Devices Targeted by Exploited 0-Day – 2025-09-29

    Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com 00:00 - PreShow Banter™ — A little radiation never hurt anybody. 03:07 - BHIS - Talkin’ Bout [infosec] News 2025-09-29 03:29 - Story # 1: As many as 2 million Cisco devices affected by actively exploited 0-day 19:07 - Story # 2: Viral call-recording app Neon goes dark after exposing users’ phone numbers, call recordings, and transcripts | TechCrunch 24:25 - Story # 3: AI Darwin Awards Show AI’s Biggest Problem Is Human 29:32 - Story # 4: Nikon revokes all C2PA image authenticity certificates after major vulnerability exposed 34:14 - Story # 5: ‘You’ll never need to work again’: Criminals offer reporter money to hack BBC 38:18 - Story # 6: Cybersecurity Training Programs Don’t Prevent Employees from Falling for Phishing Scams 46:48 - Mini CTF Walkthrough 56:03 - Story # 7: U.S. Secret Service dismantles imminent telecommunications threat in New York tristate area

    1 giờ 1 phút

  2. 25 THG 9

    Dirk-Jan Mollema Walks Us Through the Entra ID Cross-Tenant Vulnerability Discovery– 2025-09-22

    Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com 00:00 - PreShow Banter™ — Unnatural European Fridges 03:34 - The Entra ID Cross-Tenant Vulnerability Discovery – BHIS - Talkin’ Bout [infosec] News 2025-09-22 04:14 - Story # 1: One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens 21:32 - Story # 2: Shai-Hulud: Self-Replicating Worm Compromises 500+ NPM Packages 40:50 - OSSPREY – NPM Package @Ctrl/Tinycolor Compromised: Shai Hulud Malware Targets Secrets and Persistence 51:41 - Story # 3: Verified Steam game steals streamer’s cancer treatment donations 57:16 - Story # 4: Heathrow warns of second day of disruption after cyber-attack

    1 giờ

  3. 20 THG 9

    Kerberoasting Goes to Washington – 2025-09-15

    ???? Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com 00:00 - PreShow Banter™ — Enter Dark John 03:15 - Kerberoasting Goes to Washington – BHIS - Talkin’ Bout [infosec] News 2025-09-15 03:49 - Story # 1: Senator blasts Microsoft for making default Windows vulnerable to “Kerberoasting” 12:46 - Story # 2: How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations 32:42 - Story # 3: Some JLR suppliers ‘face bankruptcy’ due to hack crisis 41:30 - Story # 4: AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns 46:07 - Story # 5: All your vulns are belong to us! CISA wants to maintain gov control of CVE program 49:55 - Story # 6: Qantas penalizes executives for July cyberattack 51:15 - Story # 7: America’s second largest egg producer breached, claim hackers 54:55 - Story # 8: Undocumented Radios Found in Solar-Powered Devices

    1 giờ 3 phút

  4. 10 THG 9

    Anthropic 1.5 Billion © Settlement - 2025-09-08

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — If I Were French 04:35 - Anthropic 1.5 Billion © Settlement - BHIS - Talkin’ Bout [infosec] News 2025-09-08 05:48 - Hackers Threaten to Submit Artists’ Data to AI Models If Art Site Doesn’t Pay Up 08:40 - Anthropic Agrees to Pay Authors at Least $1.5 Billion in AI Copyright Settlement 23:58 - This Company Turns Dashcams into ‘Virtual CCTV Cameras.’ Then Hackers Got In 33:38 - Ice obtains access to Israeli-made spyware that can hack phones and encrypted apps 40:07 - Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack 44:27 - npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack 46:38 - Update on Mandiant Drift and Salesloft Application Investigations 51:04 - M&S hackers claim to be behind Jaguar Land Rover cyber attack 51:55 - New TP-Link zero-day surfaces as CISA warns other flaws are exploited 54:52 - ChickenSec: US turns to Russia for chicken eggs for the first time in 32 years, despite sanctions to cripple its economy 57:58 - Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions

    1 giờ

  5. 6 THG 9

    Chinese agent tried to recruit Stanford Student - 2025-09-02

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — It’s 8ft skeleton season. 02:18 - BHIS - Talkin’ Bout [infosec] News 2025-09-02 03:07 - Story # 1: Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks 07:35 - Story # 2: DSLRoot, Proxies, and the Threat of ‘Legal Botnets’ 13:46 - Story # 3: Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling 17:44 - Story # 4: Ransomware crooks knock Swedish municipalities offline for measly sum of $168K 19:39 - Story # 5: As crippling cyberattack against Nevada continues, Lombardo says ‘we’re working through it.’ 20:56 - Story # 6: Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025 22:43 - Story # 7: NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-7775, CVE-2025-7776 and CVE-2025-8424 25:20 - Story # 8: First known AI-powered ransomware uncovered by ESET Research 30:00 - Story # 9: In the rush to adopt hot new tech, security is often forgotten. AI is no exception 32:06 - Story # 10: TransUnion suffers data breach impacting over 4.4 million people 34:17 - Story # 11: ChickenSec FollowUp: Artificial Intelligence: The other AI 35:20 - Story # 12: They weren’t lovin’ it - hacker cracks McDonald’s security in quest for free nuggets, and it was apparently not too tricky 39:29 - Identify the birds you see or hear with Merlin Bird ID 40:04 - Story # 13: Detecting and countering misuse of AI: August 2025 51:31 - Story # 14: I’m a Stanford student. A Chinese agent tried to recruit me as a spy

    56 phút

  6. 30 THG 8

    The Impending AI Bubble 2025-08-25

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — Canadian Chicken 02:01 - The AI Bubble BHIS - Talkin’ Bout [infosec] News 2025-08-25 02:23 - Story # 1: Congressman proposes bringing back letters of marque for cyber privateers 09:27 - Story # 2: SIM-Swapper, Scattered Spider Hacker Gets 10 Years 12:43 - Story # 3: Developer jailed for taking down employer’s network with kill switch malware 16:33 - Story # 4: Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet 20:42 - The Utopia Chronicles 23:20 - Story # 5: “Unstoppable Power Surges”: China’s Quantum Processor Outspeeds Supercomputers by 1 Quadrillion and Triggers US Intelligence Panic 28:47 - Story # 6: Bank forced to rehire workers after lying about chatbot productivity, union says 41:21 - Story # 7: It Took Many Years And Billions Of Dollars, But Microsoft Finally Invented A Calculator That Is Wrong Sometimes 43:41 - Story # 8: Copilot Broke Your Audit Log, but Microsoft Won’t Tell You 46:33 - Story # 9: Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices 49:24 - Story # 10 : Zero-Day Clickjacking Flaws Found in Password Managers Used by Millions 53:12 - Story # 11: Cybersecurity training doesn’t work: time wasted with no impact, study finds 59:07 - ChickenSec: Artificial Intelligence: The other AI

    1 giờ 4 phút

  7. 20 THG 8

    Cyberattack Bricks Speed Cameras – 2025-08-18

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — The gif that keeps on giffing 01:46 - Cyberattack Bricks Speed Cameras – BHIS - Talkin’ Bout [infosec] News 2025-08-18 02:39 - Story # 1: Perplexity made a sky-high $34.5 billion bid for Google Chrome — a bold and unusual move in the midst of antitrust scrutiny 07:16 - Story # 2: Exclusive: US embeds trackers in AI chip shipments to catch diversions to China, sources say 10:22 - Story # 3: How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes 12:17 - Story # 4: Cisco discloses maximum-severity defect in firewall software 13:56 - Story # 5: Data Dump From APT Actor Yields Clues to Attacker Capabilities 19:13 - Story # 6: Russian cyberattack in the Netherlands leaves speed cameras offline indefinitely 23:30 - Story # 7: HTTP/2 MadeYouReset Vulnerability Enables Massive DDoS Attacks 24:51 - Story # 8: LAPD Eyes ‘GeoSpy’, an AI Tool That Can Geolocate Photos in Seconds 29:05 - Story # 9: Manpower discloses data breach affecting nearly 145,000 people 34:51 - Story # 10: Hacker Offers to Sell 15.8 Million Plain-Text PayPal Credentials On Dark Web Forum 35:34 - Story # 11: The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived 40:54 - Story # 12: New Clever Phishing Attack Uses Japanese Character “ん” to Mimic Forward Slash “/” 46:28 - Story # 13: Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild 48:13 - Story # 14: Plex warns users to patch security vulnerability immediately 50:53 - ChickenSec: Noble Foods using soil mapping technology at organic egg farm

    58 phút

  8. 14 THG 8

    DEF CON RECAP – 2025-08-11

    Register for FREE Infosec Webcasts, Anti-casts & Summits –  https://poweredbybhis.com 00:00 - PreShow Banter™ — Wading Through Woods 06:06 - DEF CON RECAP - Talkin’ Bout [infosec] News 2025-08-11 09:16 - Story # 1: It’s time to acknowledge HTTP/1.1 is insecure 12:36 - Story # 2: Research reveals possible privacy gaps in Apple Intelligence’s data handling 17:51 - Story # 3: Federal court filing system hit in sweeping hack 21:09 - Story # 4: Cisco discloses data breach impacting Cisco.com user accounts 32:17 - Story # 5: Google says its AI-based bug hunter found 20 security vulnerabilities 34:20 - Story # 6: Automate security reviews with Claude Code 39:01 - Story # 7: Flipper Zero ‘DarkWeb’ Firmware Bypasses Rolling Code Security on Major Vehicle Brands 44:44 - Story # 7b: OnStar assists CHP in stopping fleeing SUV with toddler inside 47:12 - Story # 7c: That viral video of a ‘deactivated’ Tesla Cybertruck is a fake 49:37 - Story # 8: LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code 50:53 - Story # 9: Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools 53:08 - Story # 10: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT 58:10 - Story # 11: Millions of Dell Laptops Vulnerable to Device Takeover and Persistent Malware Attacks

    1 giờ
Xem tất cả (20)

4,8
/5
91 Xếp hạng

Giới Thiệu

Download and listen to our weekly infosec podcast where we discuss the latest attacks, breaches, and how they happened and why. We’re a team of penetration testers (ethical hackers) and friends that love how new technology can be broken and made to do things it was never intended to do.

Thông Tin

Có Thể Bạn Cũng Thích