Hacking Humans

View Top 200 Chart

Back to Rankings Page

News
**Hacking Humans**

Deception, influence, and social engineering in the world of cyber crime.

Latest Episodes:

OWASP software and data integrity failures (noun) [Word Notes] Mar 01, 2022

Show notes

Code and data repositories that don't protect against unauthorized changes.

A blurring of lines between nation states and criminals. Feb 24, 2022

Show notes

Guest Joshua Neil, the Chief Data Scientist for SecurOnix, joins Dave to talk about evasive techniques and identifying nation-state kill chains, Joe shares an update on his identity theft experience, the guys share some follow up from listener Benji who shares experiences of scammers changing the name on gmail accounts at the synagogue where he works saying they are the rabbi and emailing congregants asking for gift cards, Dave's story is about Apple's AirTags and how they led to the discovery of a German intelligence agency, Joe's got a story about the City of Baltimore falling victim to a phishing scam, and our Catch of the Day is from listener G about a compressed file attachment he received, but did not open.

Links to stories:

Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

OWASP server-side request forgery (noun) [Word Notes] Feb 22, 2022

Show notes

An attack technique that leverages an unprotected web server as a proxy for attackers to send commands through to other computers.

Hustling the hustlers. [Hacking Humans Goes to the Movies] Feb 20, 2022

Show notes

Thanks for joining us for the latest episode of our fun project brought to you by the team of Hacking Humans, the CyberWire's social engineering podcast. Co-hosts Dave Bittner and Joe Carrigan are joined by Rick Howard in this series where they view clips from their favorite movies with examples of the social engineering scams and schemes you hear about on Hacking Humans. In this episode, Dave, Joe and Rick are watching Joe's and Dave's scene picks. They watch each of the selected scenes, describe the on-screen action for you, and then the team deconstructs what they saw. Grab a bowl of popcorn and join us for some Hollywood scams and frauds.

Links to this episode's clips if you'd like to watch along:

Joe's scene from "The Hustle"
Dave's clip from "True Lies"

Vulnerabilities will be found. Feb 17, 2022

Show notes

Guest Deral Heiland from Rapid7 talks with our UK Correspondent Carole Theriault about the state of IOT, Joe shares a personal story about bank checks and a debit card received at his home that were in his name but not from his bank, Dave's got a story from an email he received from the PR department at TikTok about romance scams, and our Catch of the Day is from listener John about a friend who was harassed on Facebook to click a link and how John addressed it.

Links to stories:

#BeCyberSmart: Tips to protect your heart and wallet

Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

OWASP security logging and monitoring failures (noun) [Word Notes] Feb 15, 2022

Show notes

The absence of telemetry that could help network defenders detect and respond to hostile attempts to compromise a system.

If you wish for peace, prepare for cyberwar. Feb 10, 2022

Show notes

Guest Nick Shevelyov, Chief Security Officer for Silicon Valley Bank. joins Dave sharing some personal history around security, and discussing his book "Cyber War… and Peace," Dave and Joe have some follow up from an anonymous listener about mobile device management issue at their work, Dave has a story where a woman was scammed out of thousands while someone contacted her to "help" with a problem with their bank, Joe's got a few stories about Facebook and ad scams, and our Catch of the Day is from listener Jonathan with a Geek Squad subscription scam.

Links to stories:

Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

OWASP identification and authentication failures (noun) [Word Notes] Feb 08, 2022

Show notes

Ineffectual confirmation of a user's identity or authentication in session management.

How to talk your way in anywhere. [Hacking Humans Goes to the Movies] Feb 06, 2022

Show notes

Thanks for joining us for the latest episode of our fun project brought to you by the team of Hacking Humans, the CyberWire's social engineering podcast. Co-hosts Dave Bittner and Joe Carrigan are joined by Rick Howard in this series where they view clips from their favorite movies with examples of the social engineering scams and schemes you hear about on Hacking Humans. In this episode, Dave, Joe and Rick are watching Dave's and Rick's scene picks. They watch each of the selected scenes, describe the on-screen action for you, and then the team deconstructs what they saw. Grab a bowl of popcorn and join us for some Hollywood scams and frauds.

Links to this episode's clips if you'd like to watch along:

Dave's clip from the television show "Key & Peele"
Rick's pick from "Sneakers"

The ransomware game has evolved. Feb 03, 2022

Show notes

Guest Allan Liska from Recorded Future joins Dave to discuss the evolution of ransomware and his new book "Ransomware: Understand. Prevent. Recover," Joe shares a question from listener Joan about an email her father received from "MasterCard Fraud Department" asking photo/video and the last 4 of his Social Security Number, Joe has a story about scams to watch out for during tax time in the US, Dave's story is about ransomware operators trying to recruit company insiders, and our Catch of the Day is from listener Michael who had some acquaintances fall for a scam.

Links to stories:

Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected