The Threatpost Podcast

Latest Episodes:

Verizon Data Breach Report: Web Application Attacks Skyrocket, Espionage Dips May 20, 2020

Show notes

Verizon's 2020 Data Breach Investigations Report (DBIR), released Tuesday, analyzed 32,002 security incidents and 3,950 data breaches across 16 industry verticals. While cyber-espionage attacks and malware decreased, other trends, such as security "errors" (like misconfigurations, etc.), denial of service (DoS) attack and web application attacks saw startling growth.

News Wrap: New Ransomware Extortion Tactics, Contact-Tracing App Security Worries May 15, 2020

Show notes

Threatpost editors discuss the top news stories of the week ended May 15, including:

Recent ransomware attacks, including ones targeting healthcare giant Magellan, the IT office that supports Texas appellate courts and judicial agencies, and a popular law firm that works with several A-list celebrities, including Lady Gaga, Drake and Madonna.
"Double extortion" methods being increasingly used by ransomware actors - and new research that found paying a ransom to unlock systems can actually cost companies more financially than recovering data themselves in the long run.
The state of Utah announcing it has settled on a contact-tracing mobile app that collects detailed user location information to track the spread of COVID-19 among citizens – eschewing the API model proposed by Apple and Google in April.
The roadmap for a COVID-19 contact-tracing app, to be rolled out by the UK's National Health Service (NHS), thrust into the spotlight thanks to sensitive documents being leaked via a public Google Drive link.

Sponsored Podcast: Shifting Left With Infrastructure-as-Code May 08, 2020

Show notes

Companies are increasingly dealing with a slew of security and compliance issues across cloud services and containers – from AWS to Azure to GCP. Infrastructure as Code (IaC) security capabilities can help companies "shift left" to improve developer productivity, avoid misconfigurations and prevent policy violations.

Threatpost host Cody Hackett talks to Chris Hertz, vice president of cloud security sales at DivvyCloud by Rapid7, about the top trends he's seeing around cloud security and how IaC is helping companies handle security and compliancy.

News Wrap: Microsoft Sway Phish, Malicious GIF and Spyware Attacks May 01, 2020

Show notes

Threatpost editors Tom Spring, Tara Seals and Lindsey O'Donnell-Welch talk about the biggest news stories of the week ended May 1, including:

A "PhantomLance" espionage campaign discovered targeting specific Android victims, mainly in Southeast Asia — which could be the work of the OceanLotus APT.
A highly targeted phishing campaign, uncovered this week, with a Microsoft file platform twist, that successfully siphoned the Office 365 credentials of more than 150 executives since mid-2019.
A Microsoft vulnerability found in Microsoft Teams that could have allowed an inside attacker to weaponize a single GIF image and use it to pilfer data from targeted systems and take over all of an organization's Teams accounts.

Troves of Zoom Credentials Shared on Hacker Forums Apr 28, 2020

Show notes

Thousands of recycled Zoom credentials have been unearthed on underground forums as cybercriminals tap into remote workers. In this week's podcast, Threatpost does a deep dive into how these credentials are being collected, shared and used.

News Wrap: Nintendo Account Hacks, Apple Zero Days, NFL Security Apr 24, 2020

Show notes

For the week ended April 24, Threatpost editors discuss a bevy of recent cybersecurity news stories, including:

Apple zero days were disclosed in the iPhone iOS; researchers say they have been exploited for years, but Apple has pushed back and said there's no evidence to support such activity
Nintendo confirming that over 160,000 accounts have been hacked, due to attackers abusing a legacy login system
With the NFL's virtual draft kicking off this week, security researchers and teams have been sounding off on security issues leading to data theft or denial of service attacks

Work From Home Networks Plagued By Malware, Exposed Services Apr 14, 2020

Show notes

In this week's Threatpost Podcast, Threatpost talks to Dan Dahlberg, director of security research at BitSight, about new research that found that work from home remote office networks are 3.5 times more likely than corporate networks to have a malware infection present.

Bypassing Fingerprint Scanners With 3D Printing Apr 08, 2020

Show notes

Researchers with Cisco Talos created threat models outlining how fingerprint scanners could be bypassed utilizing 3D printing technology, and tested them on various mobile devices (including the iPhone 8 and Samsung S10), laptops (including the Samsung Note 9, Lenovo Yoga and HP Pavilion X360) and smart devices (a smart padlock and two USB encrypted pen drives). Craig Williams, director of Cisco Talos Outreach, walks through the results on the Threatpost podcast.

News Wrap: Coronavirus Scams, Work From Home Security Woes, Pwn2Own Mar 20, 2020

Show notes

For the week ended March 20, Threatpost editors break down the top security stories, including:

The various cybercriminal activity - from malware, phishing and other scams - tapping into the coronavirus pandemic
The security risks of businesses working from home due to the virus' spread
Privacy concerns as more governments use facial recognition and mobile apps for tracking the virus
The results of Pwn2Own, which took place this week

IoT Device Security: The Good, The Bad and The Ugly Mar 11, 2020

Show notes

A recent 2020 IoT report found that more than half of IoT devices are vulnerable to medium- or high-severity attacks, making IoT the low-hanging fruit for attackers.

Threatpost talks to Ryan Olson, vice president of Threat Intelligence for Unit 42 at Palo Alto Networks, and May Wang, senior distinguished engineer at Palo Alto Networks and former Zingbox CTO, about the top IoT threats.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected