Tony G and Aamir Lakhani discuss their long week of investigating remote work cyber attacks, the craziness of ransomware, the Colonial Pipeline attack, and a debate on Cobalt Strike being a tool made for attackers or being used by attackers. Our excitement leads to openly discussing the problems with paying for ransom or the consequences of making it illegal

A Long Week

Ransom payments are tax-deductible, and no one cares. Should we?

https://www.foxbusiness.com/lifestyle/ransomware-attack-payment-tax-deductible


North Korea exploits VPN vulnerabilities. Possibly gains nuclear research. Think about this; North Korea may achieve nuclear capabilities and advancements because someone did not patch their systems. 

https://thehackernews.com/2021/06/north-korea-exploited-vpn-flaw-to-hack.html

Eyes Wide Shut

Russian threat actor Conti has their data leaked. In this podcast, we will take a look at the leaked data and see what we can learn about one of the largest threat actors operating.

Conti Leaks

A Closer Look at the LAPSUS$ Data Extortion Group. In the latest edition, we talk about their latest attacks, some of the techniques being used, and how they are getting caught.

A Closer Look at the LAPSUS$ Data Extortion Group

Two UK teenagers were charged with hacking and being members of Lapsus$ the Dr. Chaos podcast discusses motivations around why teenagers and young adults may be motivated by cybercrime and how they might have gotten involved.

Child Of The Internet

The Onyx Group

We are back at Blackhat and Defcon 2022 Las Vegas. Aamir and Tony discuss the conference, what they enjoyed, and little nuggets of information they learned.

Blackhat And Defcon 2022

Janet Jackson is her CVE as Rhythm Malware Nation destroys hard drives. Log4J might be giving Iranian attackers the upper hand. Tony G and Aamir Lakhani discuss cyber news on the Dr. Chaos podcast.

Rhythm Malware Nation.4a

John Simmons joins the Dr. Chaos podcast. John is an IR specialist. He has worked with the United States White House, other government agencies, and many private organizations. He will walk us thru what he sees in the world and how he helps clients during attacks. Uber has a CSO problem as data breaches are paid thru bug bounty programs

Olympus Has Fallen

Tony G and Aamir discuss their frustrations in the world of cybersecurity. Join us as we discuss the multiple failures we have seen in the industry that keep repeating. Inspired by temporary guest news anchor Peter Griffin from Quahog News 5 let's find out What Really Grinds My (Our) Gears

What Really Grinds My Gears

Unpacking Cybersecurity Careers

Join us as we catch up on recent discussions highlighting the significant and evolving cyber threat posed by Iran, featuring insights from cybersecurity experts across the globe. This episode dives deep into Iran’s advanced capabilities, unconventional warfare tactics, and why U.S. companies must remain on heightened alert.

The Cyberwar with Iran

Aamir Lakhani and Tony G discuss how to start a threat hunting program within an organization.

Dr. Chaos Podcast - Creating a Threat Hunting Group

Organizations of all sizes continue to be targets of cyber criminals and the threats that they present. However, some organizations are taking a proactive approach and are hunting for these threats. But what exactly is “threat hunting"? How does it fit into the SOC? Should my organization be threat hunting? How could it help us? Do I leverage outside expertise to augment my staff?

Hunting the Hunter

Is CryptoJacking really that bad? What about sites that are asking for user's permission before they mine? Tony G and Dr. Chaos discuss CryptoJacking. Opening music: bensound - bensound-dubstep.mp3

Dr. Chaos Podcast - CryptoJacking

I sit down and talk to Keith Rayle around AI and Machine Learning

A talk around artificial intelligence in cyber security

Aamir Lakhani and Tony G talk around MITRE ATT&CK methodology and malware embedded in DLL

MITRE and RUNDLL

Tony G and Dr. Chaos discuss crypojacking - is it really a problem? How does it lead to greater security threats? What does it really mean for enterprise organizations? Join us for the Dr. Chaos podcast

Don't Jack my Crypto

Brandon Robinson discusses the next steps for the IT professional to elevate their career. Listen to his tips on how to think outside the box and map your career to the next level.

Coaches Corner with Brandon Robinson

Do you have what it takes to investigate cyber breaches, data exfiltration, and attacks? 

How does one get started in the career of incident response? Yakov Goldberg, Senior Director of Customer Investigations and Threat Intelligence at Fortinet, speaks to us around his career as an incident response specialist. 

He shares his favorite tools as resources such as the YouTube channel 13Cubed that he uses to keep up to date on the latest investigation techniques.

Incident Response Hunting

Cybersecurity startups are providing excellent opportunities for people who want to create and bring to market new products. 

They can also be financially rewarding. How do you decide if working for a startup is right for you? 

Do you understand the real risks and the benefits from a financial and career point of view? Join us as we talk with Jared Hufferd. Jared has made it a job in picking the right startups to work for as a cybersecurity account manager. 

Jared has had successful exits at Netscreen, Sourcefire, and several other successful organizations. We will discuss with him what he looks for in a cybersecurity startup and what he avoids.

Starting Up Wiith Startups

The Information Technology Disaster Resource Center harnesses the collective resources of the technology community to provide no-cost Information, Communications, and Technology (ICT) solutions that connect survivors and responders in crisis. 

Today's Dr. Chaos Podcast Anthony Giandomenico and I speak with Roger Rustad and Bryan Watson as they educate us on the ITDRC.

Cyber troops volunteering with the ITDRC

Researchers Aamir Lakhani and Anthony Giandomenico discuss the EKANS ransomware and why it was an effective and targetted attack.

EKANS, Green Eggs, and Ham

Industrial cybersecurity specialist James Cabe from CyberX, discusses ICS attacks, OT vs IT, and working for a startup that just got acquired by Microsoft.

800 - Pound Gorilla

The financial sector takes cybersecurity seriously, and almost no one takes it more seriously than Chris Konrad, World Wide Technology Director of Global Financial Security.

Join us as he discusses what makes the financial sector different, what products they are using to protect their environment, and the most significant cyber challenges he faces safeguarding the industry.

Join me and Anthony Giandomenico on the Dr. Chaos Podcast.

It's All About the Benjamins

We discuss online and free resources that are available to learn Cybersecurity skills. Special co-host Jonas Walker joins us as he discusses his Twitter kung-fu, favorite podcasts, and other tricks to stay ahead of the curve.

Learning Cyber online

Chris Louie (https://www.linkedin.com/in/chlouie/) blogger and security professional from zScaler speaks to us on today's podcast about all things security. Join Tony G and Dr. Chaos on our latest episode as we discuss ransomware, the US Presidential Elections, and all things security.

Passion For All Things Security

Tony G and Jonas Walker explain how ransomware negations occur between a victim and an attacker. Learn how a travel management company negotiated a $10 million ransom to a $4.5 million payout and got tips from the attackers to help them understand how they were attacked.

References:

https://siliconangle.com/2020/08/02/travel-management-company-cwt-hands-4-5m-following-ransomware-attack/

https://www.fortinet.com/blog/threat-research/offense-defense-a-tale-of-two-sides-group-policy-and-logon-scripts

Every Conversation Is A Negotiation

This week we conclude our exciting interview with Jim. This former US Intelligence cyber specialist discusses attribution challenges to State actors, US Election security, and a new superhero: Metrics Man! If you haven't heard part I, do so first, then listen to the conclusion only on the Dr. Chaos podcast.

Patriot Games Part II

Tony G and Dr. Chaos return to discuss what is XDR. Is it just hype? Is it more than repackaged tools? Let's break down the new industry buzzword.

Dr Chaos

Popular tracks