The Cybersecurity Defenders Podcast

Latest Episodes:

#98 - Intel Chat: Midnight Blizzard, GKE vulnerability, NetSupport RAT & Cactus ransomware Feb 01, 2024

Show notes

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

Microsoft updated the public on their findings - apparently, the threat actors were able to gain persistent access to the privileged email accounts by abusing the OAuth authorization protocol.
Cybersecurity researchers have discovered a loophole impacting Google Kubernetes Engine that could be potentially exploited by threat actors to take control of a Kubernetes cluster.
A new campaign is using phishing emails to distribute malware and legitimate services to bypass email protection systems to install NetSupport RAT.
On January 20th the Cactus ransomware group attacked a number of victims across varying industries.

#97 - Cybersecurity threats to electric vehicles with Mike Pedrick, VP of Cybersecurity Consulting at Nuspire Jan 30, 2024

Show notes

On this episode of The Cybersecurity Defenders Podcast, we discuss some of the cybersecurity threats to electric vehicles with Mike Pedrick, VP of Cybersecurity Consulting at Nuspire.

Mike is currently serving as the Vice President of Cybersecurity Consulting at Nuspire. In his role over the past two years, Mike has focused on providing advisory services to mid-market clients in the areas of cybersecurity, governance, risk, and compliance with data security and privacy standards. His specialization lies in implementing mature cybersecurity programs tailored for small and medium-sized businesses. Mike is also actively involved with ISACA, where he currently serves as the Certification Coordinator for the Denver Chapter Board, managing certification-related activities.

Before joining Nuspire, Mike held positions such as Vice President of Consulting at Stealth - ISS Group Inc. and Director of Security Consulting at Synoptek. In these roles, he provided leadership and advisory services in the cybersecurity domain. With over a decade of self-employment as a Security, Compliance, and Risk Management Consultant, Mike has served as a trusted advisor to SMB/Midmarket organizations, offering guidance in cybersecurity, compliance, and risk management.

#96 - Intel Chat: iOS malware detection, credentials leaked, ColdRiver, & Midnight Blizzard Jan 25, 2024

Show notes

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

SecureList researchers from Kaspersky have come up with a lightweight method to detect iOS malware.
Nearly 71 million unique credentials that were leaked from websites such as Facebook, Roblox, eBay, Yahoo, and Coinbase have been circulating on the Internet.
Russian threat group COLDRIVER has expanded its targeting of Western officials to include the use of malware.
The Microsoft security team is reporting that it detected a nation-state attack on its corporate systems on January 12, 2024.

#95 - The SaaS Cyber Kill Chain with Luke Jennings, VP Research & Development at Push Security Jan 23, 2024

Show notes

On this episode of The Cybersecurity Defenders Podcast, we have a conversation about the SaaS Cyber Kill Chain with Luke Jennings, VP of Research & Development at Push Security.

In this interview, we explore the evolution of cyber attacks and the impact of the remote working and SaaS revolution on the cyber kill chain.

The SaaS Attack Matrix can be found here.

#94 - Intel Chat: Bandook, NoaBot, mandating 2FA & POST SMTP Jan 19, 2024

Show notes

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

A new Bandook variant has been distributed via a PDF since this past October.
Akami researchers have uncovered a new crypto-mining campaign that has been active since the start of 2023.
The Centres for Medicare and Medicaid Services will reportedly set out the proposed requirements that include two-factor authentication and maintaining a vulnerability-fixing program.
Two vulnerabilities were uncovered that impact the POST SMTP Mailer WordPress plugin, an email delivery tool used by 300,000 websites.

#93 - Poisoning Github's runner images with Adnan Khan, Lead Security Engineer at Praetorian Jan 16, 2024

Show notes

On this episode of The Cybersecurity Defenders Podcast we speak with Adnan Khan, Lead Security Engineer at Praetorian, about a supply chain attack that was successful in poisoning Gihub’s runner images.

Adnan is an Offensive Security Engineer and Security Researcher with a strong development background and passion for CI/CD and supply chain security.

Adnan’s research can be found here.

The Github Attack TOolkit can be found here.

And Adnan can be found on LinkedIn here.

#92 - Early cybersecurity career advice with Gerald Auger, Chief Content Creator at Simply Cyber Jan 12, 2024

Show notes

On today's episode of The Cybersecurity Defenders Podcast, we chat with Gerald Auger, Chief Content Creator at Simply Cyber.

Dr. Gerald Auger is deeply passionate about information security, holding a steadfast belief that there exists a bespoke information security program for every organization. This tailored approach, he contends, not only mitigates cybersecurity risks but also amplifies overall value, aligning harmoniously with the business mission. Through Coastal Information Security Group, Dr. Auger extends his consulting and advisory cybersecurity services to both large and small organizations. With a focus on guiding the implementation of robust information security programs, he strives to meet the unique needs of each client.

Gerald Auger's, 'Build an Elastic SIEM lab' video

Eric Capuano's, 'So you want to be a SOC Analyst?' Part 1 & Part 2

You can find Gerald on the various social media platforms as linked below.

YouTube

Twitter

#91 - Intel Chat: ALPHV, DanaBot?, Operation Triangulation, npm everything, & Sandworm? Jan 10, 2024

Show notes

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

An international group of law enforcement agencies has seized the dark web leak site of the notorious ransomware gang known as ALPHV, or BlackCat.
IBM Security Trusteer uncovered a new malware campaign using JavaScript web injections with a possible connection to DanaBot.
Kaspersky published some new research in which they have identified a vulnerability in Apple System on a chip - or SOC - that has played a critical role in the attacks they saw in Operation Triangulation.
NPM package “everything” downloads millions of packages and prevents all authors on npmjs.com from removing their packages.
Russian hackers were inside the Ukrainian telecom giant Kyivstar's system from at least May last year and recently caused a destructive outage.

And the Hacker History episodes, When the Lights Went Out in Ukraine Part 1 & Part 2.

#90 - The similarities between punk rock and cybersecurity with James McMurry, Founder & CEO of ThreatHunter.ai Jan 05, 2024

Show notes

On this episode of The Cybersecurity Defenders Podcast, we have a conversation with James McMurry, Founder and CEO of ThreatHunter.ai.

James is a cybersecurity veteran (and a veteran) with a career that spans over 30 years.

He's the problem-solver who sees complexity as a puzzle to unravel.

His approach goes beyond buzzwords; James transforms innovation into reality by blending AI, machine learning, and a team of human threat hunters into an effective cybersecurity strategy.

Beyond the office, James is a discerning whisk(e)y enthusiast, showcasing a refined taste that matches his coding finesse. He is also a philanthropist and the Founder of VETCON.

James can be found on Twitter here.

And on Instagram here.

#89 - Hard-won entrepreneurial lessons with JP Bourget, Founder and President of Blue Cycle Jan 03, 2024

Show notes

On this episode of The Cybersecurity Defenders Podcast, we have a conversation with JP Bourget, Founder and President of Blue Cycle, who shares some hard-won lessons from his entrepreneurial journey.

JP Bourget specializes in empowering Blue Teams and Security Operations Centers (SOCs) by implementing cutting-edge methodologies to enhance Cyber Maturity. His expertise spans automation, data engineering, API integration, and advocating security-as-code principles. Additionally, he holds the role of Entrepreneur in Residence (EIR) at Lytical Ventures.

Previously, JP was the Founder and Chief Security Officer (CSO) of Syncurity, a company acquired by Swimlane and an early pioneer in the Security Orchestration, Automation, and Response (SOAR) landscape. Syncurity's flagship product, IR-Flow, revolutionized alert triage, allowing organizations to optimize their security efforts efficiently.

Before co-founding Syncurity, JP honed his skills as the Network Security Manager at Arnold Magnetic Technologies, a prominent global manufacturing enterprise valued at $250 million.

JP can be found on LinkedIn here.

Our TOPPODCAST Picks

Follow Us

Stay Connected

The Cybersecurity Defenders Podcast

Related Podcasts

Links

Stay Connected