BHIS – Talkin' Bout [infosec] News 2023-07-24

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories.

Brought to you by:

/// 📄 Antisyphon Training August 2023 Blue Team Summit:
https://www.antisyphontraining.com/training/blue-team/2023/06/blue-team-summit-coming-in-august-2023/

/// 📄 Black Hills Information Security
https://www.blackhillsinfosec.com/

/// 📄 Antisyphon Training
https://www.antisyphontraining.com/

///Chapters
00:00 – PreShow Banter™ — Now That’s What I call News Stories
04:50 – BHIS – Talkin’ Bout [infosec] News 2023-07-24
07:19 – Story # 1: Kevin Mitnick, formerly the world’s ‘most-wanted’ hacker, has passed away
https://www.engadget.com/kevin-mitnick-formerly-the-worlds-most-wanted-hacker-has-passed-away-084912966.html

12:44 – Story # 2: Critical ColdFusion flaws exploited in attacks to drop webshells
https://www.bleepingcomputer.com/news/security/critical-coldfusion-flaws-exploited-in-attacks-to-drop-webshells/

17:44 – Story # 3: Microsoft Exchange Online hit by new outage blocking emails
https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-online-hit-by-new-outage-blocking-emails/

25:36 – Story # 4: Meta faces a $100,000 daily fine if it doesn’t fix privacy issues in Norway
https://www.engadget.com/meta-facing-a-100000-daily-fine-if-it-doesnt-fix-privacy-issues-in-norway-102557370.html

29:48 – Story # 5: New critical Citrix ADC and Gateway flaw exploited as zero-day
https://www.bleepingcomputer.com/news/security/new-critical-citrix-adc-and-gateway-flaw-exploited-as-zero-day/

31:54 – Story # 6: Twitter is being rebranded as X
https://www.theverge.com/2023/7/23/23804629/twitters-rebrand-to-x-may-actually-be-happening-soon

34:42 – Story # 6b: Elon Musk Wrecked an Uninsured McLaren F1
https://www.thedrive.com/news/32191/did-you-know-elon-musk-wrecked-an-uninsured-mclaren-f1

37:00 – Story # 7: Cybersecurity labeling program for internet-connected devices to be launched next year, White House says
https://therecord.media/cybersecurity-labelling-program-for-internet-connected-devices-to-launch-in-2024

40:42 – Story # 8: VirusTotal Data Leak Exposes Some Registered Customers’ Details
https://thehackernews.com/2023/07/virustotal-data-leak-exposes-some.html?m=1

45:07 – Story # 9: Chinese hackers breach US ambassador’s emails, Wall Street Journal reports
https://www.reuters.com/world/us-ambassador-china-hacked-china-linked-spying-operation-wsj-2023-07-20/#:~:text=WASHINGTON%2C%20July%2020%20(Reuters),(WSJ

50:26 – Story # 10: Pentagon AI more ethical than adversaries’ because of ‘Judeo-Christian society,’ USAF general says
https://www.defenseone.com/technology/2023/07/pentagon-ai-more-ethical-adversaries-because-judeo-christian-society-usaf-general-says/388711/

///Black Hills Infosec Socials
Twitter: https://twitter.com/BHinfoSecurity
Mastodon: https://infosec.exchange/@blackhillsinfosec
LinkedIn: https://www.linkedin.com/company/antisyphon-training
Discord: https://discord.gg/ffzdt3WUDe

///Black Hills Infosec Shirts & Hoodies
https://spearphish-general-store.myshopify.com/collections/bhis-shirt-collections

///Black Hills Infosec Services
Active SOC: https://www.blackhillsinfosec.com/services/active-soc/
Penetration Testing: https://www.blackhillsinfosec.com/services/
Incident Response: https://www.blackhillsinfosec.com/services/incident-response/

///Backdoors & Breaches – Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com/

///Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pay-what-you-can/
Live Training: https://www.antisyphontraining.com/course-catalog/
On Demand Training: https://www.antisyphontraining.com/on-demand-course-catalog/
Antisyphon Discord: https://discord.gg/antisyphon
Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training

///Educational Infosec Content
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin’ Fest YouTube: https://www.youtube.com/wildwesthackinfest
Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining
Active Countermeasures YouTube: https://youtube.com/activecountermeasures
Threat Hunter Community Discord: https://discord.gg/threathunter

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin’ Fest: https://wildwesthackinfest.com/