State of Cybercrime

Salt Typhoon Telecom Attack Dec 14, 2024

Show notes

In this episode, Matt and David delve into the evolving story of Salt Typhoon, a Chinese state-sponsored group, and their use of the innovative 'GhostSpider' backdoor to infiltrate telecommunication service providers. This sophisticated and far-reaching cyberattack, which is much larger than previously understood, has compromised sensitive cellular logs and data from government entities, telecom providers, and millions of Americans. Don’t miss this opportunity to stay informed and keep your organization safe!

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

Midnight Blizzard Nov 25, 2024

Show notes

Russia's APT29, a.k.a "Midnight Blizzard," is arguably one of the world's most notorious threat actors. You might recall their involvement in the 2019 SolarWinds attack where they operated under the alias "Cozy Bear."

The group is back with more relentless attacks—breaching cloud credentials and targeting over 100 organizations worldwide.

In this episode of State of Cybercrime, Matt and David dive into some of the hottest cybersecurity news and recent breaches, including Midnight Blizzard. Discover how these sophisticated attacks are happening and what you can do to stay a step ahead.

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

ChatGPT Memory Manipulation + Salt Typhoon Oct 16, 2024

Show notes

Hosts Matt Radolec and David Gibson explain how cybercriminals are manipulating AI models like ChatGPT to plant false memories and steal data, along with other cybercrime-related stories like Salt Typhoon.

Salt Typhoon is a Chinese hacking group that has reportedly breached multiple key U.S. broadband providers, raising significant concerns about the security of sensitive communications data.

The hackers may have had access to these networks for months, raising significant concerns about the security of sensitive communications data.

More from Varonis ⬇️

Visit our website: https://www.varonis.com

LinkedIn: https://www.linkedin.com/company/varonis

X/Twitter: https://twitter.com/varonis

Instagram: https://www.instagram.com/varonislife/

#Cybercrime #DataSecurity

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

The Return of Lazarus Sep 17, 2024

Show notes

The North Korean Lazarus group is running multiple high-risk campaigns: one exploiting Windows and another installing malware through fraudulent blockchain job offers.

State of Cybercrime hosts Matt Radolec and David Gibson discuss the various APT groups, including a prolific ransomware-as-a-service operation and a Chinese cyber espionage gang known as Volt Typhoon, and other vulnerable vulnerabilities in this episode, including:

+ Lazarus FudModule rootkit attacks and the concurrent Eager Crypto Beavers campaign

+ RansomHub attacks on Halliburton, Change Healthcare, and hundreds more

+ Large-scale extortion of AWS environments through exposed ENV files

+ Hundreds of exposed servers from Volt Typhoon’s ISP targeting

+ Payment gateway breach of over 1.7 million credit card owners

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

Proofpoint Spoofing Aug 16, 2024

Show notes

Matt Radolec and David Gibson discuss how an unknown attacker recently exploited a vulnerability in Proofpoint’s email routing system, allowing them to bypass security measures and send millions of spoofed emails on behalf of major companies.

The co-hosts also cover:

+ The North Korean threat actor hired using AI

+ The biggest ransomware payment ever made

+ How X is training its Grok AI LLM with your posts

+ The EU’s groundbreaking AI act

+ How anyone can access deleted and private repositories on GitHub

+ Updates on AMD's silicon-level "SinkClose" processor flaw

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

The Lockbit Bluff Jul 19, 2024

Show notes

In this episode of State of Cybercrime, co-hosts Matthew Radolec and David Gibson dive into the details around LockBit, and cover other news including:

+ The MOVEit authentication bypass flaw

+ Developments in the Polyfill supply chain attack affecting millions of websites

+ Updates on the targeted campaign against Snowflake

+A massive insider breach of a Pennsylvania healthcare system

+ Two new attack methods threat actors are adopting

+ The new OpenSSH unauthenticated RCE vuln that gives root privileges to + Linux systems

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

Snowflake Security Check Jun 14, 2024

Show notes

Snowflake, a cloud storage platform used by some of the largest companies in the world, is investigating a targeted attack on its users who lack multifactor authentication.

Join Matt Radolec and David Gibson for an episode of State of Cybercrime in which we discuss the increased attacks on Snowflake customers and share our five-point checklist for ensuring your cloud databases are properly configured and monitored.

WE’LL ALSO COVER:

The world’s largest botnet ever discovered
Google’s algorithm leak
The Black Basta ransomware-as-a-service (RaaS) operation
The cyberattack that destroyed over 600K U.S. routers
Sneaky new tactics used by emerging threat actors

...and more! More from Varonis

⬇️ Visit our website: https://www.varonis.com

LinkedIn: / varonis

X/Twitter: / varonis

Instagram: / varonislife

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

Inside China's APT Network Mar 01, 2024

Show notes

A new data leak of more than 500 documents published to GitHub reveals the big business behind China’s state-sponsored hacking groups — from top-secret surveillance tools to details of offensive cyber ops carried out on behalf of the Chinese government.

Join Matt and David for a special State of Cybercrime, which dives into China's espionage campaigns and complex network of resources.

We’ll also discuss:

- The massive cyberattack on Change Healthcare

- Zyndicate’s successful hack of the Danish government

- Apple Vision Pro’s launch day woes

- Multiple developments in AI risk/regulation

- How LockBit remains active after their servers and domains were seized

- And more!

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

Ivanti Zero-Days Feb 08, 2024

Show notes

CISA issued an emergency directive to mitigate Ivanti Connect Secure and Ivanti Policy Secure vulnerabilities after learning of malware targeting the software company, allowing unauthenticated threat actors to access Ivanti VPNs and steal sensitive data.

CISA is requiring all federal agencies to disconnect from affected Ivanti products by EOD February 2, 2024. The directive also warned that attackers had bypassed workarounds for current resolutions and detection methods.

Join Matt, David, and Dvir to learn more about the Ivanti vuln and other cyber threats.

More from Varonis ⬇️

Visit our website: https://www.varonis.com