00:00 - PreShow Banter™ — Yacht Doc 07:40 - BHIS - Talkin’ Bout [infosec] News 2024-11-18 08:49 - Story # 1: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit 16:02 - Story # 2: CISA Director Jen Easterly to depart agency on January 20 19:26 - Story # 3: Fake North Korean IT Worker Linked to BeaverTail Video Confer…

00:00 - PreShow Banter™ — The Old and The New 02:27 - BHIS - Talkin’ Bout [infosec] News 2024-11-11 03:44 - Story # 1: Mattel pulls thousands of ‘Wicked’ dolls off shelves after printing adult website on packaging 08:03 - Story # 2: Office apps crash on Windows 11 24H2 PCs with CrowdStrike antivirus 11:41 - Story # 3: Mislabeled patch sends Windows…

00:00:00 - PreShow Banter™ — The Grey Times 00:04:33 - BHIS - Talkin’ Bout [infosec] News 2024-11-04 00:05:54 - Story # 1: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files 00:16:45 - Story # 2: Follow Up - 5 Things To Know On Delta’s Lawsuit Against CrowdStrike 00:17:43 - Story # 2b: CrowdStrike Sues Delta: 5 Key Takea…

00:00:00 - PreShow Banter™ — Sarsaparilla 00:05:50 - BHIS - Talkin’ Bout [infosec] News 2024-10-28 00:06:46 - Story # 1: AWS, Azure auth keys found in Android and iOS apps used by millions 00:15:02 - Story # 2: Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs 00:29:03 - Story # 3: Delta officially l…

00:00:00 - PreShow Banter™ — Log Con 00:11:41 - BHIS - Talkin’ Bout [infosec] News 2024-10-21 00:12:51 - Story # 1: Internet Archive exposed again – this time through Zendesk 00:14:57 - Story # 1b: Hackers steal information from 31 million Internet Archive users 00:20:42 - Story # 2: Sophos buys Secureworks for $859 mln to beef up cybersecurity por…

00:00:00 - PreShow Banter™ — Cast of Special Characters 00:06:37 - BHIS - Talkin’ Bout [infosec] News 2024-09-30 00:08:06 - Story # 1: CUPS flaws enable Linux remote code execution, but there’s a catch 00:23:40 - Story # 2: US Capitol Hit by Massive Dark Web Cyber Attack - Newsweek 00:27:40 - Story # 2b: ‘I’m a black NAZI!’: NC GOP nominee for gove…

00:00 - PreShow Banter™ — Plane Talk 05:50 - BHIS - Talkin’ Bout [infosec] News 2024-09-23 06:16 - A SANS Difference Maker Award Finalist 09:47 - Story # 1: Pagers attack brings to life long-feared supply chain threat 24:08 - Story # 2: Recaptcha Phish - John Hammond 25:49 - Story # 2b: Clever ‘GitHub Scanner’ campaign abusing repos to push malware…

00:00 - PreShow Banter™ — Pour Over News 06:01 - BHIS - Talkin’ Bout [infosec] News 2024-09-16 07:14 - Story # 1: Fortinet confirms data breach after hacker claims to steal 440GB of files 15:37 - Story # 2: Snowflake slams ‘more MFA’ button again – months after Ticketmaster, Santander breaches 21:30 - Story # 3: Omnipresent AI cameras will ensure g…

00:00 - Introduction 01:22 - The Scenario 02:50 - First Steps 03:48 - Endpoint Analysis Roll 04:22 - Logon Scripts Were installed 05:09 - I.R. Team Introductions 07:17 - Second Step 10:32 - Network Threat Hunting Roll 11:36 - Third Step 15:12 - Anyway Here’s Firewall Roll 15:43 - Fourth Step 18:26 - SIEM Roll 19:41 - Fifth Step 20:47 - UEBA Roll 21…

00:00 - PreShow Banter™ — Revenge of the Nerds / More Chicken Related Crimes 05:19 - N.Y. Official Charged With Taking Money, Travel and Poultry to Aid China 09:23 - BHIS - Talkin’ Bout [infosec] News 2024-09-09 09:50 - Story # 1: YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel 20:35 - Story # 2: Therapy Sessions …

00:00 - PreShow Banter™ — Move to Signal 03:47 - BHIS - Talkin’ Bout [infosec] News 2024-08-26 04:37 - Story # 1: Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance 11:03 - Story # 1b: Moxie on X.com 23:17 - Story # 2: Unveiling “sedexp”: A Stealthy Linux Malware Exploiting udev Rules 29:39 - Story # 3: Seattle airport ‘possible cyberattac…

00:00:00 - PreShow Banter™ — Nine Years for Chicken Wings 00:08:19 - BHIS - Talkin’ Bout [infosec] News 2024-08-19 00:09:03 - Story # 1: NationalPublicData.com Hack Exposes a Nation’s Data 00:18:17 - Story # 1b: National Public Data Published Its Own Passwords 00:25:01 - Story # 2: RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attack…

00:00 - PreShow Banter™ — Scotty’s Pizza (Not Sponsored) 03:38 - BHIS - Talkin’ Bout [infosec] News 2024-08-12 03:59 - Hacker Summer Camp Report 2024 08:56 - Story # 1: ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections 14:26 - Story # 2: Black Hat USA 2024, DEF CON 32 attendees treated like children –…

00:00 - PreShow Banter™ — What’s the f___ 03:34 - BHIS - Talkin’ Bout [infosec] News 2024-08-05 06:57 - Story # 1: Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails 23:57 - Story # 2: Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say 36:47 - Story # 3: Eavesdropping on…

00:00 - PreShow Banter™ — Microsoft Sad Face 02:13 - BHIS - Talkin’ Bout [infosec] News 2024-07-29 03:08 - Story # 1: Fake CrowdStrike repair manual pushes new infostealer malware 15:26 - Story # 1b: 83-year-old man found safe a week after going missing when CrowdStrike outage canceled flight 20:39 - Story # 2: Multifactor Authentication Is Not Eno…

00:00 - PreShow Banter™ — CrowdStroke Memes 05:59 - BHIS - Talkin’ Bout [infosec] News 2024-07-22 07:01 - Story # 1: A Windows version from 1992 is saving Southwest’s butt right now 07:36 - Crowdstrike Global Outage - BHIS - Talkin’ Bout [infosec] #News 09:48 - Story # 1b: CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Micros…

The outage of the decade!Oleh Black Hills Information Security