Leaky Weekly

Flare
  • 5,0 (1)
  • NOTÍCIAS DE TECNOLOGIA

There’s so much happening in the world of cybercrime, it’s hard to keep up for anyone, including security practitioners. Dive in with security researcher Nick Ascoli as he covers the most pressing stories on data leaks, cybercrime, and the dark web. Tune in with short and sweet episodes in about 15 minutes.

  1. 8 DE OUT.

    NPM Supply Chain Attack, Fake Europol Bounty, and Operation Secure

    On this episode of Leaky Weekly, host and security researcher Nick Ascoli covers the NPM supply chain attack, fake Europol bounty, and Operation Secure. Here are the resources on the stories: Largest NPM attack in crypto history stole less than $50: SEAL (Cointelgraph)Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downloads at Risk (Palo Alto Networks)The largest supply-chain attack ever… (Fireship, The Code Report)2 Billion npm Downloads at Risk From Crypto Malware: A Wake-Up Call for Open-Source Supply Chain Security (OPSWAT) Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain Attack (The Hacker News)Europol confirms $50,000 Qilin ransomware reward is fake (BleepingComputer)20,000 malicious IPs and domains taken down in INTERPOL infostealer crackdown (INTERPOL)Operation Secure: Trend Micro's Threat Intelligence Fuels INTERPOL's Infostealer Infrastructure Takedown  (Trend Micro)Brought to you by Flare, Threat Exposure Management solution and industry-leading dataset on cybercrime that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Check out Flare Academy: Our free training series led by experts on critical topics such as threat intelligence, operational security, and advanced investigation techniques (earn CPE credits towards cybersecurity certifications)Our Discord community is a space to learn from and with cybersecurity professionals (including Nick!) and students, check out previous training resources, and keep up with upcoming training

    8min

  2. 10 DE SET.

    Spilling the Tea on the Tea App and TeaOnHer, and Salesforce Tenant Breaches

    On this episode of Leaky Weekly, host and security researcher Nick Ascoli spills the tea on data leaks from Tea and TeaOnHer, as well as attacks on Salesforce tenants. Here are the resources on the stories: The Cost of a Call: From Voice Phishing to Data Extortion (Google Threat Intelligence Group)ShinyHunters behind Salesforce data theft attacks at Qantas, Allianz Life, and LVMH (BleepingComputer)Hackers steal images from women's dating safety app that vets men (BBC)Tea app leak worsens with second database exposing user chats (BleepingComputer)TeaOnHer, a rival Tea app for men, is leaking users’ personal data and driver’s licenses (TechCrunch)Brought to you by Flare, Threat Exposure Management solution and industry-leading dataset on cybercrime that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Flare now offers Flare Academy training, which is our (free!) training series led by experts that cover critical topics such as threat intelligence, operational security, and advanced investigation techniques. You can also earn CPE credits toward your cybersecurity certifications. Sign up for your next training here. Join the Flare Academy Community Discord to keep up with upcoming training, check out previous training resources, chat with cybersecurity professionals (including Nick!), and more.

    10min

  3. 27 DE AGO.

    Use a Stealer Log, Go to Prison (Part 2): PowerSchool and Snowflake Tenant Breach Arrests

    On this episode of Leaky Weekly, host and security researcher Nick Ascoli gets into stealer logs and arrests in the last few weeks of the threat actors who targeted PowerSchool and Snowflake tenants. This is part 2 of a 2 part series, Use a Stealer Log, Go to Prison. Missed part 1? Check it out here on Apple Podcasts or Spotify. Here are the resources on the stories: Cybersecurity Incident Notice (PowerSchool)Matthew Lane Plea Deal (Thomson Reuters)United States v. Matthew D. Lane (U.S. Department of Justice)Update on New PowerSchool Data Breach and Ongoing Protection Measures (Union Intermediate School, Sampson County Schools)A hacker's ransom: Inside the cyberattack that compromised NC student and teacher records (WRAL)Leaky Weekly: PowerSchool Hack; Takedowns & Arrests & Leaks, Oh My!; and ITRC Breach Report (Flare)Hacker in Snowflake Extortions May Be a U.S. Soldier (Krebs on Security)United States v. Moucka (CourtListener)Former U.S. Soldier Pleads Guilty to Hacking and Extortion Scheme Involving Telecommunications Companies (U.S. Department of Justice)Leaky Weekly: Arrests, RedLine & META Infrastructure Takedown, and MOVEit Leaks (Flare)Brought to you by Flare, the world's easiest to use and most comprehensive cybercrime database that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Flare now offers Flare Academy training, which is our (free!) training series led by experts that cover critical cybersecurity topics. Check out Flare Academy to keep up with upcoming trainings, check out previous training resources, chat with cybersecurity professionals (including Nick!) in the Flare Academy Community Discord, and more.

    11min

  4. 13 DE AGO.

    Use a Stealer Log, Go to Prison (Part 1): IntelBroker and Scattered Spider(?) Arrests

    On this episode of Leaky Weekly, host and security researcher Nick Ascoli gets into stealer logs and arrests in the last few weeks of threat actor IntelBroker and threat actors who targeted retail companies in the U.K. using the DragonForce encryptor. This is part 1 of a 2 part series, Use a Stealer Log, Go to Prison. Here's part 2: on Apple Podcasts or Spotify. Here are the resources on the stories: 2025 Data Breach Investigations Report (DBIR) (Verizon)The Rising Role of Stolen Credentials in Cybercrime: 3 Insights from the 2025 Verizon DBIR (Flare)IntelBroker Threat Actor (TheSecMaster)Following the Bitcoin Trail: The IntelBroker Takedown (Chainalysis)United States of America v. Kai West (“IntelBroker,” “Kyle Northern”) Complaint (U.S. Department of Justice)Four arrested in connection with M&S and Co-op cyber-attacks (BBC)Retail cyber attacks: NCA arrest four for attacks on M&S, Co-op and Harrods (National Crime Agency)UK police arrest four over cyberattacks on M&S, Co-op and Harrods (Reuters)Inside DragonForce, the Group Tied to M&S, Co-op and Harrods Hacks (Infosecurity Magazine)Inside the Dragon: DragonForce Ransomware Group (Group-IB)Brought to you by Flare, the world's easiest to use and most comprehensive cybercrime database that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Flare now offers Flare Academy training, which is our (free!) training series led by experts that cover critical cybersecurity topics. Check out Flare Academy to keep up with upcoming trainings, check out previous training resources, chat with cybersecurity professionals (including Nick!) in the Flare Academy Community Discord, and more.

    15min

  5. 2 DE JUL.

    LockBit's Fall and the Rise of Ransomware Chaos 2025 with Tammy Harper

    On this episode of Leaky Weekly, Tammy Harper, Senior Threat Intelligence Researcher at Flare joins host and security researcher Nick Ascoli. Tammy explains: LockBit’s fall, the affiliate exodus, and rise of RansomHub“Ransomware without the ware” – cross-posting as the norm nowNoise in the ransomware undergroundMore episodes from Tammy and Nick’s conversation on ransomware will be coming in the following weeks. Brought to you by Flare, the world's easiest to use and most comprehensive cybercrime database that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Flare now offers Flare Academy training, which is our (free!) training series led by experts that cover critical topics such as threat intelligence, operational security, and advanced investigation techniques. You can also earn CPE credits toward your cybersecurity certifications. Sign up for Senior Threat Intelligence Researcher Tammy Harper’s Academy training, CRYPTOS: Hunting Adversaries in the Crypto Underground on Tuesday July 15, 2025 at 11:00-1:00 PM ET. Join the Flare Academy Community Discord to keep up with upcoming training, check out previous training resources, chat with cybersecurity professionals (including Nick and Tammy!), and more.

    16min

  6. 18 DE JUN.

    To Extort or Not to Extort: Ransomware Group Tactics in 2025 with Tammy Harper

    On this episode of Leaky Weekly, Tammy Harper, Senior Threat Intelligence Researcher at Flare joins host and security researcher Nick Ascoli. They talk about shifts in the ransomware ecosystem in 2025. Tammy explains: Ransomware group adaptations based on 2024 eventsWhy data-only extortion isn’t catching onHow access to leaked data is shaping both victim decision-making and long-term exposureMore episodes from Tammy and Nick’s conversation on ransomware will be coming in the following weeks. Brought to you by Flare, the world's easiest to use and most comprehensive cybercrime database that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Flare now offers Flare Academy training, which is our (free!) training series led by experts that cover critical topics such as threat intelligence, operational security, and advanced investigation techniques. You can also earn CPE credits toward your cybersecurity certifications. Sign up for Senior Threat Intelligence Researcher Tammy Harper’s Academy training, CRYPTOS: Hunting Adversaries in the Crypto Underground on Tuesday July 15, 2025 at 11:00-1:00 PM ET. Join the Flare Academy Community Discord to keep up with upcoming training, check out previous training resources, chat with cybersecurity professionals (including Nick and Tammy!), and more.

    22min

  7. 3 DE JUN.

    Committing Cybercrime Gets 5% Easier Each Year?: Ransomware Recap 2024-2025 with Tammy Harper

    On this episode of Leaky Weekly, Tammy Harper, Senior Threat Intelligence Researcher at Flare joins host and security researcher Nick Ascoli. They discuss ransomware in 2024, and how that affects the ransomware ecosystem of 2025. Tammy goes over: 2024 ransomware ecosystem summary2025 disruptions in the wake of 2024 takedownsCompromised credentials’ growing role in cybercrimeMore episodes from Tammy and Nick’s conversation on ransomware will be coming in the following weeks. Brought to you by Flare, the world's easiest to use and most comprehensive cybercrime database that integrates into your security program in 30 minutes. Brought to you by Flare, the world's easiest to use and most comprehensive cybercrime database that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Flare now offers Flare Academy training, which is our (free!) training series led by experts that cover critical topics such as threat intelligence, operational security, and advanced investigation techniques. You can also earn CPE credits toward your cybersecurity certifications. Sign up for Senior Threat Intelligence Researcher Tammy Harper’s Academy training, CRYPTOS: Hunting Adversaries in the Crypto Underground on Tuesday July 15, 2025 at 11:00-1:00 PM ET. Join the Flare Academy Community Discord to keep up with upcoming training, check out previous training resources, chat with cybersecurity professionals (including Nick and Tammy!), and more.

    12min

  8. 20 DE FEV.

    PowerSchool Hack; Takedowns and Arrests and Leaks, Oh My!; and ITRC Breach Report Findings

    On this first episode of Leaky Weekly after our winter break, host and security researcher Nick Ascoli covers recent events in the cybercrime space the PowerSchool hack, Cracked & Nulled takedown & arrests, Otelier data leak, DeepSeek data leak, and Identity Theft Resource Center (ITRC) breach report findings. Here are the resources Nick mentions: Children’s data hacked after school software firm missed basic security step, internal report says (NBC News)PowerSchool Cybersecurity Incident (PowerSchool)AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records (WIRED)FBI has warned agents it believes hackers stole their call logs (Fortune)Law enforcement takes down two largest cybercrime forums in the world (Europol)Otelier data breach exposes info, hotel reservations of millions (Bleeping Computer)Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History (Wiz)ITRC Annual Data Breach Report (Identity Theft Resource Center)Canadian Man Arrested in Snowflake Data Extortions (Krebs On Security)Brought to you by Flare, the world's easiest to use and most comprehensive cybercrime database that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization. Flare now offers Flare Academy training, which is our (free!) training series led by experts that cover critical topics such as threat intelligence, operational security, and advanced investigation techniques. You can also earn CPE credits toward your cybersecurity certifications. Join the Flare Academy Community Discord to keep up with upcoming training, check out previous training resources, chat with cybersecurity professionals (including Nick!), and more.

    24min
Ver tudo (13)

Sobre

There’s so much happening in the world of cybercrime, it’s hard to keep up for anyone, including security practitioners. Dive in with security researcher Nick Ascoli as he covers the most pressing stories on data leaks, cybercrime, and the dark web. Tune in with short and sweet episodes in about 15 minutes.

Informações

  • Criado por
    Flare
  • Anos de atividade
    2024 - 2025
  • Episódios
    13
  • Classificação
    Livre
  • Site do podcast
    Leaky Weekly

Você também pode gostar de