Since the launch of ChatGPT in November 2022 the cybersecurity world has been abuzz with talk of AI and its usefulness as well as the threat it poses.

In this episode of the podcast the team discuss how cybersecurity vendors are leveraging AI, what threats AI has brought to the technology landscape and what to be cautious of when using large language models.

Beth Maundrill also sits down with Sergey Shykevich, Threat Intelligence Group Manager at Check Point Research, to dispel some of the myths around threat actors' use of AI and what Check Point has observed over the past six months. Shykevich also provides his thoughts on the future of AI in cybersecurity.

AI: The good, the bad and the ugly. The team discuss AI’s evolution over the past six months.

Join the Infosecurity Magazine team and guests as they plunge into the heart of a devastating cyber-attack that has impacted the likes of BBC, PwC, and Schneider Electric. In this episode, we delve deep into the world of supply chain attacks, and where the notorious Clop ransomware group capitalizes on a hidden weakness in MOVEit Transfer—a trusted file transfer solution used by thousands of companies.
In an interview with Secureworks, one of the first cybersecurity firms to sound the alarm, we examine the cloak-and-dagger tactics, techniques, and procedures (TTPs) employed by the audacious Clop. Our expert guests unravel the secrets behind the far-reaching impact of this hack, while offering invaluable insights into the crucial steps cybersecurity practitioners must take in the face of such a high-stakes incident.
Tune in now to stay one step ahead in the battle against the relentless forces of cybercrime.
Guests include: 
•	Rafe Pilling, Director of Threat Research at Secureworks Counter Threat Unit
•	William Thomas, CTI Researcher at Equinix Threat Analysis Center (ETAC) & co-founder of Curated Intelligence
•	Paul Watts, Distinguished Analyst at the Information Security Forum

This Podcast is sponsored by Mandiant’s mWISE Conference, click here to register.

Inside the MOVEit Attack: Decrypting Clop's TTPs and Empowering Cybersecurity Practitioners

Listen to insights from cybersecurity expert Michael Sieber on how cyber threat intelligence can help defense agencies to improve national security responses.

EP 9 - DoD Leverages Cyber Threat Intelligence for National Security

Threat intelligence covers many different aspects relevant to an organization, including strategic intelligence, operational intelligence, tactical intelligence, digital risk monitoring, and the people and process behind them. Despite being interconnected, they are often viewed individually within organizations, said SurfWatch Labs chief security strategist Adam Meyer. Meyer recently created a mind map to show how those different aspects tie together and should be viewed under one large threat intelligence banner.

On this episode of the Cyber Chat, we talk to Adam about the mind map and how it can help organizations better understand threat intelligence.

Download the free whitepaper, "Using a Cyber Threat Intelligence Mind Map to Visualize and Improve Your Cybersecurity Program": http://info.surfwatchlabs.com/How-to-Build-CTI-into-Your-Security-Program

Cyber Chat

Talking the Threat Intelligence Mind Map and How It Can Help Organizations

I’m joined by Jen Kolde of the Vertex project. Jen formerly served as an investigator for the federal government and was an analyst on Mandiant/FireEye’s intel team. Her background is interesting, as she actually came to investigative work from a technical writing background. We discussed her story, what it means for someone with technical skills to become a good intel analyst, and her experience testifying to congress about structured threats.

Source Code S2: Episode 6 - Jennifer Kolde

The Digital Shadows research team provides an overview of the latest news this week, including new SWIFT attacks, more Business Email Compromise activity, the return of extortionist “thedarkoverlord”, Sam Sam and Saturn ransomware variants, and new reporting on APT-37.

Episode 9: SWIFT Attacks, Business Email Compromise, Return Of Thedarkoverlord, And APT - 37

In this week’s Shadow Talk, the pod unpacks the reporting on VPN Filter, a malware affecting half a million network devices. Reports have suggested that the malware is being prepped to perform imminent large scale disruptive attacks against Ukrainian infrastructure. We also cover new research on the TRITON malware targeting industrial control and SCADA systems, as well as new techniques for the Roaming Mantis malware family. Finally, we bring you updates on vulnerabilities related to VBScript and the Spectre/Meltdown attacks.

Episode 22: VPN Filter targeting Ukraine, TRITON malware, Roaming Mantis, VBScript & Spectre vulns

Rafael Amado and Michael Marriott discuss how the criminal underground has evolved since the demise of AlphaBay and Hansa. No single marketplace has managed to fill the AlphaBay-shaped gap left behind, at least among the English-speaking community. Existing sites such as Dream and Trade Route have failed to consolidate this empty space, hampered by a combination of poor communication by administrators and suspicion that these sites could be police honeypots like Hansa had been. Grab a copy of our report to read more: https://info.digitalshadows.com/SeizeandDesistReport-Podcast.html

Episode 24: Seize and Desist: Changes in the cybercriminal underground

Flashpoint is a business risk intelligence provider who has been protecting government and private sector assets for a long time. In fact to paraphrase Jack Nicholson in A Few Good Men, "we have been sleeping under the blanket of their security" for a while now.

I had a chance to catch up with co-founder and CEO Josh Lefkowitz and discuss Flashpoint's offerings.  They recently upgraded their dashboards to give users more info tailored to their specific verticals and greater insight into risk intelligence.  Have a listen

DevOps Chat

Flashpoint Upgrades Your Security Intelligence

Alex, Harrison, Kacey, and Charles chat this week on some dark web and cybercriminal updates, data leakage stories that have hit the news, plus a GDPR story where an ISP was hit with a €9.6 Million Fine.

We’ve got a new format for our weekly intelligence summary report. Check it out at https://resources.digitalshadows.com/weekly-intelligence-summary

Thanks for listening and look out for our special (holiday-themed) final ShadowTalk episode of the year next week! 

***More Resources This Week***
TMI blog on data leakage: https://www.digitalshadows.com/blog-and-research/2-billion-files-exposed-across-online-file-storage-technologies/
 
Over One Billion Email-Password Combos Leaked Online: -	https://www.infosecurity-magazine.com/news/one-billion-email-password-combos/ 

Data Leak Exposes 750K Birth Certificate Applications https://www.infosecurity-magazine.com/news/data-leak-exposes-750k-birth-cert/ 

Microsoft: 44 Million User Passwords Have Been Breached https://www.infosecurity-magazine.com/news/microsoft-44-million-passwords/ 

ISP 1&1 Hit With €9.6 Million GDPR Fine: https://www.infosecurity-magazine.com/news/isp-11-hit-with-96-million-gdpr/

Tochka Dark Web Market Offline, Market.ms Closes, And Data Leakage Stories

The SurfWatch Cyber Chat podcast includes interviews with experts on all things related to cyber risk. Learn what cybercriminals are up to and how it’s impacting businesses from those in the trenches. 

SurfWatch Labs helps organizations and service providers quickly establish a strategic cyber threat intelligence operation that drives more effective use of their tactical defenses. For more information, visit www.surfwatchlabs.com.

DevOps.com for the best chats on DevOps, Cyber, Cloud Native & Digital Transformation.

DevOps Chats is brought you by MediaOps https://mediaops.io, the people behind DevOps.com, Security Boulevard, Container Journal, Digital Anarchist and more. Featuring CEO, editor in chief, Alan Shimel, talking with leading lights of the industry

Source Code is an information security podcast that’s all about education. Rather than simply providing technical segments or news, Source Code is focused on the people that push information security forward and battle in the trenches every day. We interview practitioners from every facet of information security about their origin story. This includes how they go their start, how they got into the field, what makes them tick, and the career decisions that made them successful (or slowed them down) along their path. We also talk about current opinions on the state of security education to include what we're doing right and what we're doing wrong. You'll hear from plenty of household names you've heard of, as well as some people you should know about with interesting back stories and unique contributions to the field. Source Code celebrates the diversity of backgrounds that makes information security a unique place to exist.

ShadowTalk powered by ReliaQuest, discusses the latest threat intelligence and cybersecurity news with our panel of threat intelligence experts, security engineers, security researchers, and more.

The Government Technology Insider Podcast brings together the insights of thought leaders and experts across all IT fields that influence how public sector agencies can leverage next-generation IT solutions to deliver on the mission. Our experts use this space to explore the latest innovations and most pressing tech-related issues faced by Chief Information Officers, Chief Technology Officers and their teams. You can find out more at

Interested in the latest news from the Infosecurity sector and want to hear from the industry’s leading cybersecurity experts?

Listen to our monthly podcasts to hear our award-winning editorial team discuss the latest trends and issues in information security. The team is regularly joined by cybersecurity experts who take a deep dive into the most important issues of the day and provide you with solutions and practices to help your business stay secure.

Popular tracks tagged #threat intelligence