ShadowTalk: Powered by ReliaQuest

Latest Episodes:

Weekly: ConnectWise Critical Vulnerabilities , Credential Theft, NIST Frameworks Mar 06, 2024

Show notes

In this episode of ShadowTalk, host Chris, along with Fearghal and Kim, discuss the latest news in cyber security and threat research. Topics include:

An overview of the critical severity vulnerabilities affecting ConnectWise, patch now!
ReliaQuest research into Browser Credential Dumping attacks
The latest in the world of ransomware
Update to National Institute of Standards and Technology (NIST) framework

Resources:

https://www.reliaquest.com/blog/browser-credential-dumping/

Weekly: Lockbit Return, SAT Exercises, Optum Breach Feb 28, 2024

Show notes

In this episode of ShadowTalk, host Chris, along with Ivan, Caroline, and one of ReliaQuest's CISOs Rick, discuss the latest news in cyber security and threat research. This week's topics include:

Lockbit return following law enforcement operation
Recent Structured Analytical Technique (SAT) exercises ran by ReliaQuest
The Optum Breach and what you need to know
'SubdoMailing' malvertising campaign leveraging compromised domains

Resources:

Weekly: Lockbit Taken Down, RMM Tool Abuse, Chinese Gov't Documents Exposed Feb 21, 2024

Show notes

In this episode of ShadowTalk, host Chris, along with Brian, Kim, and one of ReliaQuest's CISOs Rick, discuss the latest news in cyber security and threat research. Topics this week include:

Lockbit taken down by NCA led operation. Does this spell the end for the ransomware group?
ReliaQuest research into abuse of Remote monitoring and management (RMM) tools
Insider leaks Chinese government documents on Github

Resources:

https://www.reliaquest.com/blog/lockbit-taken-down-what-comes-next/

Weekly: SocGholish, Volt Typhoon, ToothBrush DDoS' and Flipper Zero Feb 14, 2024

Show notes

In this episode of ShadowTalk, host Chris, along with Marken and Corey, discuss the latest news in cyber security and threat research. Topics this week include:

ReliaQuest research into changes observed on SocGholish infection chain
Update to Volt Typhoon campaign affecting US CNI
Furore over reporting on Toothbrush smart devices reportedly used in DDoS attacks
Canada bans Flipper Zero consumer hacking device, over car theft concerns

Resources:

Weekly: AnyDesk Breach, Deepfake Social Engineering, Q1 2024 Priorities Feb 07, 2024

Show notes

In this episode of ShadowTalk, host Chris Morgan is joined by ReliaQuest CISO Rick Holland, Director of Threat Research Brandon Tirado and Intelligence Collection Analyst Fearghal Hughes to discuss the latest news in cyber security and threat research. Topics this week include:

Breach of Remote Desktop Application 'AnyDesk' results
Continued Ivanti vulnerability exploitations
The rise of BEC deepfake social engineering attacks
ReliaQuest's top priorities for the remainder of Q1 2024

Resources:

Weekly: Killnet 2.0, Baselining Detection Rules, Ransomware in Q4 2023 Jan 31, 2024

Show notes

In this episode of ShadowTalk, host Chris, along with James and Ivan, discuss the latest news in cyber security and threat research. Topics this week include:

The emergence of Killnet 2.0
Best practices for Baselining Detection Rules
Insights from ReliaQuest's Q4 2023 Ransomware blog

Resources:

https://www.reliaquest.com/blog/q4-2023-ransomware/

Weekly: Midnight Blizzard Targets Microsoft, Recent Attacker Techniques, Citrix NetScaler Vulnerabilities Jan 24, 2024

Show notes

In this episode of ShadowTalk, host Corey, along with Kim and Caroline, discuss the latest news in cyber security and threat research. Topics this week include:

Midnight Blizzard Targeting Microsoft
Threat research on Attacker techniques observed from Customer incidents
Two new Citrix NetScaler vulnerabilities being exploited in the wild

Resources:

Weekly: Ivanti Zero-days, Valid Account Misuse, Emerging risk from (IoT) devices Jan 17, 2024

Show notes

In this episode of ShadowTalk, host Chris, along with Brian, Gjergji and ReliaQuest CISO Rick Holland, discuss the latest news in cyber security and threat research. Topics this week include:

Ivanti Zero-day vulnerabilities under mass exploitation
ReliaQuest research into misuse of Valid Accounts
Risk posed through emerging Internet of Things (IoT) devices

Resources:

https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US

Weekly: Cyber Threats Developments of 2023, Lockbit Targets Healthcare Jan 10, 2024

Show notes

In this episode of ShadowTalk, host Chris, along with Marken and Fearghal, discuss the latest news in cyber security and threat research. Topics this week include:

A recap of major developments in 2023: Ransomware, Business Email Compromise, Living off the land (LotL)
The influence of Generative AI on cyber threats
Lockbit targeting healthcare providers in Germany

Weekly: 2023 in Review, ALPHV Targeted by FBI, Predictions for 2024 Dec 20, 2023

Show notes

In this episode of ShadowTalk, host Chris, along with Rick and Kim, discuss the latest news in cyber security and threat research. Topics this week include: