Paul's Security Weekly (Audio)

Latest Episodes:

A Million Voices - Paul's Security Weekly #582 Nov 10, 2018

Show notes

This week, we welcome Corin Imai, Senior Security Advisor for DomainTools! She joins Paul and the crew to talk about DNS, phishing tools, and tease what DomainTools has in store for 2019! In our Technical Segment, we welcome back Eyal Neemany, Senior Security Researcher at Javelin Networks to talk about securing remote administration, remote credentials, why Jump Servers aren't as good, and he shows that you have to connect to remote machines using AD! In the Security News, Cisco accidentally released Dirty Cow exploit code, Apache Struts Vulnerabilities, Zero Day exploit published for VM Escape flaw, Spam spewing IoT botnet infects 100,000 routers, some of these vibrating apps turn your phone into a sex toy, and more on this episode of Paul's Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/Episode582

Visit https://www.securityweekly.com/psw for all the latest episodes!

Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!

Like us on Facebook: https://www.facebook.com/secweekly

Buckle Up! - Paul's Security Weekly #581 Nov 03, 2018

Show notes

This week, we welcome Aleksei Tiurin, Senior Security Researcher at Acunteix for a Technical Segment on Insecure Deserialization in Java/JVM! In our second Technical Segment, we welcome Matt Toussain, Security Analyst at Black Hills Information Security to talk about RAS! In the security news, Bleedingbit Vulnerabilities, Cisco Zero-Day exploited in the wild, Researchers find Flaws in chips used in hospitals, US Governments network infected with Russian Malware, and the Weird Trick that turns your Google Home Hub into a Doorstep!

Full Show Notes: https://wiki.securityweekly.com/Episode581

Visit https://www.securityweekly.com/psw for all the latest episodes!

→Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!!

→Follow us on Twitter: https://www.twitter.com/securityweekly

→Like us on Facebook: https://www.facebook.com/secweekly

Smash The Van - Paul's Security Weekly #577 Nov 02, 2018

Show notes

This week, Paul interviews Mike Nichols of Endgame, Keith McCammon of Red Canary, & Shawn Smith of Panhandle Educators Federal Credit Union! Carlos Perez delivers the Technical Segment on How to Operate Offensively Against SysMon, and the crew will wrap the show with the Security News!

Full Show Notes: https://wiki.securityweekly.com/Episode577

Visit https://www.securityweekly.com/psw for all the latest episodes!

There's Always Scotch - Paul's Security Weekly #580 Oct 26, 2018

Show notes

This week, we welcome Veronica Schmitt, Senior Digital Forensic Scientist for DFIRLABS! Veronica explains what SRUM is in Windows 10, and how SRUM can be a valuable tool in Digital Forensics! In the Technical Segment, we welcome Yossi Sassi, the Co-Founder and Cybersecurity Researcher at CyberArtSecurity.com and Advisory Board member at Javelin Networks! Yossi joins us to discuss using Windows Powershell, discussing DCSync, DCShadow, creative Event Log manipulation & thoughts about persistence! In the Security News, Fear of AI attacks, the FDA releases cybersecurity guidance, watch hackers steal a Tesla, serious D-Link router security flaw may never be patched, and California addresses default passwords! All that and more, on this episode of Paul's Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/Episode580

Visit https://www.securityweekly.com/psw for all the latest episodes!

To learn more about Javelin Networks, Go To: www.javelin-networks.com

Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!!

Like us on Facebook: https://www.facebook.com/secweekly

48 Hours - Paul's Security Weekly #579 Oct 20, 2018

Show notes

This week, we welcome Mark Dufresne, VP of Threat Research at Endgame for an interview, to talk about how MITRE created their tool and what the MITRE attack framework is! In our second feature interview, we welcome John Walsh, DevOps Evangelist at CyberArk to talk about Kubernetes, DevSecOps, and how to strengthen your container authentication with CyberArk! In the security news, how to use the Shodan search engine to secure an enterprise's internet presence, Apache access vulnerability could affect thousands of applications, vulnerable controllers could allow attackers to manipulate marine diesel engines, & ICS Security Plagued with basic, and avoidable mistakes! All that and more, on this episode of Paul's Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/Episode579

Visit https://www.securityweekly.com/psw for all the latest episodes!

Sponsor Landing Page: www.endgame.com

Sponsor Landing Page: www.conjure.org/asw

Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!

Like us on Facebook: https://www.facebook.com/secweekly

Get the Wagyu - Paul's Security Weekly #578 Oct 13, 2018

Show notes

This week, we welcome Lee Neely, Senior Cyber Analyst at Lawrence Livermore National Lab for an interview! In the Technical Segment, Omer Yair from Javelin Networks brings us through his talk he presented at DerbyCon entitled: "Goodbye Obfuscation, Hello Invisi-Shell"! In the security news, new Apple and Microsoft security flaws at Black Hat Europe, CCTV makers leaves at least 9 million cameras public, upset Google+ users are suing Google, US weapons systems apparently can be easily hacked, Not all multifactor Authentication is created equal, and Kanye's '000000' password makes iPhone security Great again! All that and more, on this episode of Paul's Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/Episode578

Visit https://www.securityweekly.com/psw for all the latest episodes!

→Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!

→Follow us on Twitter: https://www.twitter.com/securityweekly

→Like us on Facebook: https://www.facebook.com/secweekly

An Infinite Door - Paul's Security Weekly #576 Sep 22, 2018

Show notes

This week, Paul interviews Mike Ahmadi, Global Director of IoT Security Solutions at DigiCert! Apollo Clark delivers the Technical Segment on Threat Hunting in the Cloud! In the Security News this week, Senate can't protect senators staff from Cyber Attacks, Equifax fined by ICO over data breach that hit Britons, US judge allows e-voting despite hack fears, Zero Day in Internet connected cameras, US Military given the power to hack back and defend forward, and AmazonBasics Microwave works with Alexa!

Presentation Link: https://www.slideshare.net/ApolloClark/threat-hunting-in-the-cloud

Project: https://github.com/apolloclark/tf-aws

Commands: https://gist.github.com/apolloclark/35cb4a7501ac41df763bc45860fbd406

Full Show Notes: https://wiki.securityweekly.com/Episode576

Visit https://www.securityweekly.com/psw for all the latest episodes!

→Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!!

→Follow us on Twitter: https://www.twitter.com/securityweekly

→Like us on Facebook: https://www.facebook.com/secweekly

Technical Heavy Lifting - Paul's Security Weekly #575 Sep 14, 2018

Show notes

This week, Paul interviews Brian Coulson, Sr. Threat Research Engineer at LogRhythm! Eyal Neemany, Sr. Cyber Security Researcher at Javelin Networks delivers the Technical Segment on Bypassing PAM! In the Security News, Microsoft accidentally let encrypted Windows 10 out into the world, Kernel exploit discovered in macOS Webroot SecureAnywhere antivirus software, PowerShell obfuscation ups the ante on antivirus, Bomgar Buys BeyondTrust, and a low cost rubber ducky!

Full Show Notes: https://wiki.securityweekly.com/Episode575

Visit https://www.securityweekly.com/psw for all the latest episodes!

→Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!!

→Follow us on Twitter: https://www.twitter.com/securityweekly

→Like us on Facebook: https://www.facebook.com/secweekly

Angry Floppy Birds - Paul's Security Weekly #574 Sep 08, 2018

Show notes

This week, Paul and the crew sit down with Wim Remes, Founder and Principal Consultant at Wire Security! In our Technical Segment, we welcome back Chris Brenton, Chief Operating Officer for Active Countermeasures, in which he explains why Beacon Analysis in an integral part of threat hunting! In the Security News this week, Vulnerabilities found in remote management interface of Supermicro servers, Google fixes Chrome issue that allowed theft of WiFi logins, U.S. to charge North Korean spy over WannaCry and Sony Pictures hack, how to manipulate Apple's podcast charts, and a Spanish driver that tests positive for every drug on the test. All that and more, on this episode of Paul's Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/Episode574

** Link to slides for the Technical Segment can be found in the show notes!

Visit https://www.securityweekly.com/psw for all the latest episodes!

→Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!!

→Follow us on Twitter: https://www.twitter.com/securityweekly

→Like us on Facebook: https://www.facebook.com/secweekly

The Word You're Looking for Is Sodomized - Paul's Security Weekly #573 Sep 01, 2018

Show notes

This week, Paul and the crew sit down with Jayson Street, VP of Infosec at SphereNY for an interview! John Moran, Senior Project Manager of DFLabs delivers the Technical Segment on a new No-Script Automation Tool! In the Security News this week, 0-Day Windows exploits, How to hide sensitive files in encrypted containers, Misfortune Cookie vulnerability returns, and bank robbers faked Cosmos backend to steal 13.5$ million! All that and more on this episode of Paul's Security Weekly!

Full Show Notes: https://wiki.securityweekly.com/Episode573

Visit https://www.securityweekly.com/psw for all the latest episodes!

→Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!!

→Follow us on Twitter: https://www.twitter.com/securityweekly

→Like us on Facebook: https://www.facebook.com/secweekly