ShadowTalk hosts Sean, Ivan, Charles, and CISO Rick Holland bring you the latest in threat intelligence. This week they cover:
- CISO Rick Holland touches on the latest news on AlphaBay - could the forum be back? 

- The team chat about LockBit’s big hit on Accenture

- Charles runs through Krebs Security run-in with a scammer who had been targeted by a phishing site for BriansClub

- Ivan talks about the Chinese espionage group that pulled a false flag to Iran and Israel 

- Sean delves into the latest news on the $600 Million crypto hack

Get this week’s intelligence summary at: 
https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-13th-august


***Resources from this week’s podcast***

The State of APTs in 2021
https://www.digitalshadows.com/blog-and-research/the-nation-state-of-apts-in-2021/ 

Understanding Smishing Attacks
https://www.digitalshadows.com/blog-and-research/understanding-smishing-attacks/ 

Krebs Security Run-in with Scammed Scammer
 https://krebsonsecurity.com/2021/08/phishing-sites-targeting-scammers-and-thieves/

Chinese Espionage Campaign in Israel 
https://www.fireeye.com/blog/threat-research/2021/08/unc215-chinese-espionage-campaign-in-israel.html

$600 Million Crypto Hack
 https://www.bleepingcomputer.com/news/security/over-600-million-reportedly-stolen-in-cryptocurrency-hack/

Other Resources: 
 https://www.bbc.com/news/business-58180692

Weekly: Phishing Site Targets Scammers, China Pulls False Flag in Israel, $600 Million Crypto Hack

ShadowTalk host Nicole alongside CISO Rick Holland bring you the latest in threat intelligence. This week they cover: 

- BlackHat and Defcon recap
- Microsoft’s Patch Tuesday
- North Korea fake Coinbase jobs

Get this week’s intelligence summary at: 
https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-19-aug

***Resources from this week’s podcast***
Stop The Line: Cyber Threats Facing Manufacturing

https://www.digitalshadows.com/blog-and-research/stop-the-line-cyber-threats-facing-manufacturing/

Honker Union: Has The Grandfather Of Chinese Hacktivism Returned?

https://www.digitalshadows.com/blog-and-research/honker-union-has-the-grandfather-of-chinese-hacktivism-returned/

Weekly: BlackHat and Defcon Recap, Microsoft’s Patch Tuesday, North Korea Fake Coinbase Jobs

Weekly: Ukraine Activity Roundup, Vice Society Targeting Schools, Iranian Hacktivism

ShadowTalk host Chris alongside guests Stefano give you the latest in threat intelligence. This week they cover: 

-Ukraine Activity Roundup
-Vice Society Targeting Schools
-Iranian Hacktivism

Get this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-28-oct

***Resources from this week’s podcast***

Q3 2022 Vulnerability Roundup
https://www.digitalshadows.com/blog-and-research/q3-2022-vulnerability-roundup/ 

Have your Forgotten About Phishing?Ransomware in Q3 2022
https://www.digitalshadows.com/blog-and-research/cybersecurity-awareness-month-2022-have-you-forgotten-about-phishing/

Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html

Also, don’t forget to reach out to - shadowtalk@digitalshadows.com - if you have any questions, comments, or suggestions for the next episodes.

Weekly: Ukraine Activity Roundup, Vice Society Targeting Schools, Iranian Hacktivism

ShadowTalk host Nicole alongside guests Ivan, Rick and Andrew give you the latest in threat intelligence. This week they cover: 

-APT29 Windows Credential Roaming
-Russian Hacktivists Targeting Ukraine with New Somnia Ransomware
-LockBit Using Amadey Bot Malware, LockBit Affiliate Arrested

Get this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-18-nov 

***Resources from this week’s podcast***

Cyber Threats to the FIFA World Cup Qatar 2022
https://www.digitalshadows.com/blog-and-research/cyber-threats-to-the-fifa-world-cup-qatar-2022/ 

Keeping One Step Ahead of Black Friday Cyber Threats https://www.digitalshadows.com/blog-and-research/keeping-one-step-ahead-of-black-friday-cyber-threats/ 

Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html
Also, don’t forget to reach out to - shadowtalk@digitalshadows.com - if you have any questions, comments, or suggestions for the next episodes.

Weekly: APT29 Credential Roaming, Russian Hacktivists Use Somnia Ransomware, Recent LockBit Activity

ShadowTalk host Chris alongside guests Ivan give you the latest in threat intelligence. This week they cover: 

-Recent Vulnerabilities
-Clop Ransomware
-New Year's Resolutions

Get this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-16-dec


***Resources from this week’s podcast***
Payment Declined: Carding Cyber Criminals Fears for Their Future
https://www.reliaquest.com/blog/web-carding-future/ 

Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html

Also, don’t forget to reach out to - shadowtalk@digitalshadows.com - if you have any questions, comments, or suggestions for the next episodes.

Weekly: Recent Vulnerabilities, Clop Ransomware, New Year's Resolutions

In this week’s episode of Shadow Talk, Digital Shadows’ Head of Security Engineering, Dr Richard Gold, joins the pod to explain the EFAIL vulnerability affecting Open PGP and S-MIME, as well as other flaws identified in encrypted messaging platforms. Dr Gold also outlines the the factors you should be considering to prioritize your patching. 
 
In part two, we look at the $15 million theft in Mexico and outline the risks facing interbank payment systems.

Episode 21: eFail vulns affecting Open PGP and S-MIME, and interbank payment systems risks

In this bonus edition of ShadowTalk, Dr Richard Gold and Rafael Amado discuss the recent BBC Russian Service investigation into Facebook accounts being sold online. As reported on Friday, at least 81,000 accounts with private messages were being advertised online. Digital Shadows assisted the BBC with its investigation. Richard and Rafael outline what we know so far, as well as answering some of the key questions raised by this story. For more, see our recent blog available at https://www.digitalshadows.com/blog-and-research/81000-hacked-facebook-accounts-for-sale-5-things-to-know/.

Episode 49: 81,000 Hacked Facebook Accounts For Sale

Harrison interviews Deputy CISO at Accenture, Jason Lewkowicz, and CISO at Digital Shadows, Rick Holland. The group discusses the importance of working functionally as a security team, cyber response plans, and how to keep your security playbooks up to date. Jason also discusses how his team uses Digital Shadows SearchLight™ within their day to day processes. 

Heading to Black Hat and/or DefCon? Meet the ShadowTalk team at our party Wednesday night at Eyecandy Sound Lounge. Details and guest list here: https://info.digitalshadows.com/BlackHat-SecurityLeadersParty2019.html?SourceCode=shadowtalk

Interview With Deputy CISO At Accenture, Jason Lewkowicz

Viktoria Austin is joined by Adam Cook and Phil Dohetry this week in the London office to talk about the top story this week: Metasploit Project publishes exploit for Bluekeep bug. Our Photon Research Team tested the Metasploit exploit in their lab environment and has successfully exploited an unpatched Windows 7 machine. “The exploit not only gives the attacker remote access to a target system, but also gives the attacker the highest level of privilege on the target.” - Dr. Richard Gold

The team then shares updates around APT3 and the Silence cybercrime group.

To learn more, check out the full weekly intelligence report at https://resources.digitalshadows.com/weekly-intelligence-summary. 

Interested in more threat intelligence updates? Sign up to receive our weekly updates at https://info.digitalshadows.com/EmailSubscription-Podcast_Reg.html.

Metasploit Project Publishes Exploit For Bluekeep, plus APT3 and Silence Cybercrime Group Updates

This week the team looks at some Coronavirus threat intel updates including a Threat Model of the Remote Worker and the top businesses and industries most likely to be targeted by cyber attacks. 

Then the team looks at some cybercrime stories including how the Kapusta service is using marketing tactics, and a story around FSB arresting a cybercrime group. Finally … an advanced persistent… cow?

Hear this and more from Kacey, Alex, Harrison, and Rick in this week’s episode!

***Resources from this week***
COVID-19 (Coronavirus) Resources: https://resources.digitalshadows.com/coronavirus-threat-intelligence-resources

Threat Model of a Remote Worker: https://www.digitalshadows.com/blog-and-research/threat-model-of-a-remote-worker/

Phishing Research Webinar Recording: https://resources.digitalshadows.com/webinars/beware-of-phishers-research-webinar

Kapusta: https://www.digitalshadows.com/blog-and-research/kapusta-world-exemplifying-cybercriminal-marketing-in-the-modern-era/

FSB Arrests Cybercrime Group: https://www.cyberscoop.com/buybest-hackers-arrested-fsb-russia/

WEEKLY: Remote Worker Threat Model And Cybercrime Updates

ShadowTalk powered by ReliaQuest, discusses the latest threat intelligence and cybersecurity news with our panel of threat intelligence experts, security engineers, security researchers, and more.

New tracks tagged #threat intel