In this episode of ShadowTalk, host Chris, along Kim and one of ReliaQuest's CISO's Rick, discuss the latest news in cyber security and threat research. Topics this week include:

• APT28 Exploit 6 year old CISCO vulnerability
• ReliaQuest research on Iran/Israel Tensions
• Ransomware Rebrands
• Apple notify users impacted by Spyware

Resources:

• https://www.reliaquest.com/blog/cyber-threats-linked-to-iran-israel-conflict/

In this episode of ShadowTalk, host Chris, along with Marken, discuss the latest news in cyber security and threat research. This weeks topics include:

• Palo Alto Critical Vulnerability under active exploitation 
• ReliaQuest research on VPN attack surface management
• Optum Healthcare data breached by RansomHub group

In this episode of ShadowTalk, host Chris, along with Gjergji and James, discuss the latest news in cyber security and threat research. Topics this week include:

• Health sector Cybersecurity Coordination Center (HC3) issues alert warning regarding attackers using social engineering to target IT helpdesk's across the health sector
• ReliaQuest releases it's findings from it's Q1 Phishing report
• How improper permissions can lead to problems with new Microsoft Copilot AI

Resources:

• https://www.reliaquest.com/blog/health-care-social-engineering-campaign/
• https://www.reliaquest.com/blog/phishing-tactics-and-trends-2024/

In this episode of ShadowTalk, host Kim, along with Brian, discuss the latest news in cyber security and threat research. Topics this week include:

• Sophisticated backdoor identified in XZ Utils
• Our Spotlight report on SEO poisoning
• Impersonation scams cost $1.1 billion in 2023

In this episode of ShadowTalk, host Chris, along with ReliaQuest Threat Hunter's Caroline and Corey discuss the latest news in cyber security and threat research. This week's topics include:

• Issues with Google AI-powered search generative experience recommending scam sites
• Spain high court judge issues temporary ban on messaging platform 'Telegram'
• Speculative Execution vulnerabilities found on Apple M Series and Intel Raptor Lake CPU's

In this episode of ShadowTalk, host Chris, along with Marken and ReliaQuest CISO Rick, discuss the latest news in cyber security and threat research. This week's topics include:

• 2021 AT&T breach released for free 
• Magnet Goblin threat group exploiting 1-day vulnerabilities
• An introduction to ReliaQuest's Annual Threat Report (ATR)

In this episode of ShadowTalk, host Chris, along with Corey and Caroline, discuss the latest news in cyber security and threat research. Topics this week include:

• TeamCity Server critical vulnerability leaves potential for supply chain risk
• ReliaQuest research into advanced business email compromise (BEC) detections
• Microsoft compromised by Midnight Blizzard password spraying attack

Resources: 

• https://www.rapid7.com/blog/post/2024/03/04/etr-cve-2024-27198-and-cve-2024-27199-jetbrains-teamcity-multiple-authentication-bypass-vulnerabilities-fixed/ 
• https://blog.jetbrains.com/teamcity/2024/03/our-approach-addressing-recently-discovered-vulnerabilities-in-teamcity-on-premises/ 
• https://blog.jetbrains.com/teamcity/2024/03/preventing-exploits-jetbrains-ethical-approach-to-vulnerability-disclosure/ 
• https://www.reliaquest.com/blog/business-email-compromise-detection/

In this episode of ShadowTalk, host Chris, along with Fearghal and Kim, discuss the latest news in cyber security and threat research. Topics include:

• An overview of the critical severity vulnerabilities affecting ConnectWise, patch now!
• ReliaQuest research into Browser Credential Dumping attacks
• The latest in the world of ransomware
• Update to National Institute of Standards and Technology (NIST) framework

Resources:

• https://www.reliaquest.com/blog/browser-credential-dumping/ 

In this episode of ShadowTalk, host Chris, along with Ivan, Caroline, and one of ReliaQuest's CISOs Rick, discuss the latest news in cyber security and threat research. This week's topics include:

• Lockbit return following law enforcement operation
• Recent Structured Analytical Technique (SAT) exercises ran by ReliaQuest
• The Optum Breach and what you need to know
• 'SubdoMailing' malvertising campaign leveraging compromised domains

Resources:

• https://www.reliaquest.com/blog/lockbit-taken-down-what-comes-next/
• https://www.reliaquest.com/blog/scattered-spider-attack-analysis-account-compromise/

In this episode of ShadowTalk, host Chris, along with Brian, Kim, and one of ReliaQuest's CISOs Rick, discuss the latest news in cyber security and threat research. Topics this week include:

• Lockbit taken down by NCA led operation. Does this spell the end for the ransomware group?
• ReliaQuest research into abuse of Remote monitoring and management (RMM) tools
• Insider leaks Chinese government documents on Github

Resources:

• https://www.reliaquest.com/blog/lockbit-taken-down-what-comes-next/

In this episode of ShadowTalk, host Chris, along with Marken and Corey, discuss the latest news in cyber security and threat research. Topics this week include:

• ReliaQuest research into changes observed on SocGholish infection chain
• Update to Volt Typhoon campaign affecting US CNI
• Furore over reporting on Toothbrush smart devices reportedly used in DDoS attacks
• Canada bans Flipper Zero consumer hacking device, over car theft concerns

 Resources:

• https://www.reliaquest.com/blog/new-python-socgholish-infection-chain/
• https://www.reliaquest.com/blog/socgholish-fakeupdates/