• Are we surprised that TikTok will sue the U.S. Government?
• Chinese banks hit again
• Jack Dorsey praises Twitter for being “freedom technology”
• Fake tech support scams and sponsored search results
• The Yahoo boys are people you need to be aware of: Scripts, scams and more await
• Notice from Dropbox

• Age Verification is lawful the technology blog and podcast
• Court makes it clear – age verification on adult sites is constitutional Cybernews

Open forum: A New Service

Recently, the Jared Rimer Network discovered a service in which we are happy to use. While haveibeenpwned.com is good, I do find some things that don't work well accessibly. While I got the domains to work, and those instructions were easy to follow, I did have issues with the service I'm about to recommend. I got it to work and it is more accessible. Even the exposed breaches may not be that extensive, both services get their breaches through verification. To learn more about the service Exposed or not, please view the latest blog post We have a new service up, accessible too for complete details. The service is spelled xposedornot. Drop the E.

Some of the newsy items

• Unconfirmed, trust wallet could be at risk with a zero day
• Bot attacks as a top threat this year was supposed to be posted earlier but it missed its schedule
• Sans News Bites for April 16, 2024
• Lawfirms now have AI Generated lawyers?

Some may bring these up, but may bring other things as well. We'll have to see. Keep on reading!

Topic: Our Drinking Water

I've never really liked the taste of water. Especially from our faucets. But this podcast isn't talking about whether we like water, which we're told we should drink to keep ourselves healthy.

I know, I know, I'm just as guilty as the rest when it comes to that. But this podcast isn't about whether we like the stuff, its about the security of how it gets to us. We know it goes through pipes, but do we honestly know how it gets to those pipes to how we drink it, cook with it, or use it in our coffee? There's an elaborate system, but is it as secure as it can be?

Apparently, hackers can get in to these systems, and this is where we could be in some real trouble. The latest blog post I penned on this subject is titled Hackers interrupting critical drinking water which links to the CyberNews article US officials warn of hackers disrupting the “critical lifeline” of drinking water which was an interesting read.

If you search for water by itself, you'll find other blogs like:

• Cyber Attack cuts off Water for 2 days
• Iran hits Pennsylvania water ]]> https://rss.com/podcasts/the-technology-blog/1894785 2437248a-2bbd-4e40-9164-1f52f9e1311a 13154 full true Thu, 18 Apr 2024 01:28:47 GMT https://rss.com/podcasts/the-technology-blog/1894786 5bc26ac5-4609-4411-88df-ab0cc4222139 11717 full true Thu, 11 Apr 2024 17:24:04 GMT Welcome to the security box, podcast 185. We have several things in Erata that we'll read, one coming in just before I was supposed to leave although that trip got postponed. While that thing we'll read is a week old, its still valuable. We also put in the Facebook thing I saw prior which might get people to chuckle. Our topic today is one dealing with Russia, and another Wiper Malware. The article we take from is from CyberNews, and we also blogged the thing. We'll have news, notes and more.

  
  

  ---

  
  

  Common Vector Tactics

  
  

  While I still seem to be a week behind, I'm going to sites on my own to find things of value so I can try to keep up.

  
  

  In my perusal of Mastodon, I found this, and thought it should be posted. Here are common vector attacks behind data breaches is the blog post, where Diva on Breaches takes us through 7 different items in her post.

  
  

  This is also in our show notes and will be read out for those who listen but do not read the blog on a regular. Thanks Devanand for continuing to share the knowledge we can share. We recently read one of her recent posts in a prior podcast.

  
  

  Knowledge is power!

  
  

  ---

  
  

  Our Topic: Acid Rain and Acid Pour

  
  

  Our blog post New Malware, AcidPour has a link to the Cybernews article. As usual, we'll take some of the paragraphs to aid in the discussion.If you just want the article without going to the blog, no problem. Russia unleashes dangerous new wiper is the article.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894789 93fccf99-be3e-4caa-87fe-cfc9c2d4b1c6 14139 full true Thu, 04 Apr 2024 00:27:26 GMT Welcome to the Security Box, podcast 184. On this edition of the podcast, we're going to talk about PixPirate. Its an Android application known as a Trojan. It is hard to detect, and its hard to get rid of. Besides this, we'll cover the news, notes and and questions and answers that we may need to take care of.

  
  

  PixPirate

  
  

  This time, we're talking about a piece of malware known as a trojan. The article comes from Bleeping Computer and is titled PixPirate Android malware uses new tactic to hide on phones. If you want to read my pick apart on this, this is the blog post that'll let you do that. Its titled: PixPirate uses new tactic to hide on phone.

  
  

  What do you think of the topic? Have you heard of it before?

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894790 ebc37985-75a2-4b84-92b7-7c440cfe978d 12354 full true Wed, 27 Mar 2024 23:04:19 GMT After a week off, we're back with another podcast. We hope you enjoy!

  
  

  Hello everyone, welcome to the Security Box, podcast 183. On this program, we're going to catch you up on the landscape from the last couple of weeks. We've also got an update on what's going on with our favorite topic called Pig Butchering. Of course we'll take your comments as well and of course those questions. Thanks so much for listening!

  
  

  ---

  
  

  Our topic: What's going on with Pig Butchering?

  
  

  Pig Butchering is not necessarily going anywhere, but there have been some studies and money recovered. The article US moves to recover $2.3 million from “pig butchers” on Binance is the latest article we've seen on the topic.

  
  

  Of course, we had a topic but seemed to have lost it, but that's what happens some times. This article will be taken apart to help the discussion and of course comments and questions are welcome.

  
  

  As a side note, we can probably tie this in to Phishing as a whole, as the deployment of the beginning of how this works is an email, text, or other platform of communication. What are your thoughts on that? We even talk about it as part of Throwback Saturdaynight for the 16th in our first segment.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894793 58036f23-e139-4abe-aaf2-54ff29ce8438 10206 full true Wed, 20 Mar 2024 21:36:00 GMT Hello folks, welcome to the security box, podcast 182. On this podcast, besides the news and notes of the week, we're going to learn about a new potential threat by a new potential actor called Savvy Seahorse. If you've read the blog, you'll already know, but if you only listen to the podcast, this is going to change the way malware is delivered. Of course we'll see what our participants want to talk about as well.

  
  

  Our Topic, Savvy Seahorse

  
  

  The article comes to us by our newest partner, Cybernews. Its titled Threat actor uses Facebook to lure victims, sends cash to Russia and covers Savvy Seahorse. This is going to be something we'll need to track, and we'll explain it all.

  
  

  Let's just say that it uses the Cname aspect of domain hosting. Stay tuned!

  
  

  If you want to read our blog post on it, Here is that post titled Savvy Seahorse uses facebook for investment scams.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894795 0a1fcc4e-0d79-4037-b422-0e5dfd799ced 12984 full true Thu, 07 Mar 2024 15:20:41 GMT Hello everyone, welcome to the Security Box, podcast 181. In Q4 of 2023, Phishlabs is reporting that a record of phishing sites impersonate social media to target victims. Question for the listener, what do you think you should look for when you get communication that talks about social media before you click, tap, double tap or press enter on a keyboard? We'll have the news and landscape as well as your comments and concerns. We hope you enjoy the show!

  
  

  ---

  
  

  News, notes and the landscape

  
  

  • You have to be kidding me, 1 year later and the DOD is sending out notifications?
  • 2.5 million private plane owners breached
  • 911 proxy is back, new name: cloud router: still dangerous
  • Avast caught collecting lots of info? Selling it to other companies?

  
  

  There are other smaller news items, but these might be the bigger ones. If yours isn't on this list, what fancies you? Contact me through jaredrimer.net and let me know. You can also send things to ponder files which can be played as well.

  
  

  ---

  
  

  Our Topic: Phishing Sites up and impersonating social media

  
  

  Record Number of Phishing Sites Impersonate Social Media to Target Victims in Q4 comes to us from Phishlabs this week. Let us know what you think good, bad or indifferent.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894798 ead8dd46-141d-4e2e-b607-233693745bb2 11116 full true Thu, 29 Feb 2024 01:38:24 GMT Hello everyone, welcome to the security box, podcast 180. On this podcast, Phishlabs will guide us through something I don't think we have ever seen. It talks about a service that is a web host service, but it is a completely different type of web host. They didn't classify it as bulletproof hosting, but something called phishing as a service. Two different companies are mentioned. Besides that, we've got news, notes, the landscape and your thoughts. Thanks so much for listening!

  
  

  
  

  
  

  Big News of the week, Lockbit

  
  

  The big news it seems that is coming out this week is talking about Lockbit. Looks like their infrastructure has been taken over by all kinds of law enforcement partners from all around the world. While we don't intend to give you an exhaustive list, here is some of the coverage we know about.

  
  

  • The Cyberwire Daily: February 20, 2024 will talk about this in their news notes for the episode. Here's a link to the Cyberwire.
  • Lockbit, your time is up! Now its time to go find real work is my blog post, leading to LockBit cartel disrupted “at every level” – Europol if you don't want to read mine. I am not offended. I do take this article apart though, so give mine a read if you wish.
  • Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates comes directly from Brian Krebs. At the time of Writeup, the JRN has not read this yet.

  
  

  ---

  
  

  Our topic: Phishing as a service

  
  

  This week, we're going to talk about Phishing as a service. It is a new concept, and you can probably say it is similar to Ransomware as a service. This week's article is titled Phishing-as-a-Service Profile: LabHost Threat Actor Group and it covers two different hosts. This, will get interesting.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894800 3862c2fe-57d8-4506-ad65-4dc814f3a462 11157 full true Thu, 22 Feb 2024 00:58:23 GMT Hello folks, welcome to the security box. This is program 179. This time, we'll venture off the path a bit and talk a little bit about romance scams. Instead of using the article as a guide, we'll talk about it in more general terms. Did you know that Valentines Day is one of the biggest times for this type of scam? Besides that, we'll have news, notes and the landscape as we always do. Thanks for listening and make it a great day!

  
  

  ---

  
  

  Our topic: romance scams

  
  

  With Valentines coming, romance scams are going to be on the rise. With Valentines Day coming, its time for the romance scams in full force is a blog post leading to the article we'll use for this discussion although we won't use it like we normally do. We'll use it as a starting point.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow

  ]]> https://rss.com/podcasts/the-technology-blog/1894802 85f684e2-80dc-4b09-81c5-16abf3abefa3 13706 full true Wed, 14 Feb 2024 23:49:15 GMT Hello everyone! Welcome to the security box, podcast 178. On this podcast, we're going to talk about the landscape, the news, and the crazy. We are also going to talk about the threats of Social Engineering as well. We give you the best blog posts of the week as well. We hope you enjoy the program, and make it a great day!

  
  

  ---

  
  

  Our topic and accompanying true story

  
  

  Today, Lastpass will lead the discussion with Unraveling the Threats of Social Engineering which was a great find. I don't know about you guys, but we need to be on guard and ready as much as we can. We can all be phished, scammed and Cory Doctorow's article is linked to Even the Best can be Scammed, check this article out which I wrote in my response to the article. So since we can all be targets, it starts with knowing what to look for by reading Lastpass's article and learning what we could do differently and learning by the other true story.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  
  

  For full show notes including things talked about, please see the blog.

  ]]> https://rss.com/podcasts/the-technology-blog/1894804 1ed70de4-7049-4ce8-a8f2-660366ebf370 14089 full true Thu, 08 Feb 2024 00:47:18 GMT Welcome to podcast 177 of the Security Box. On this podcast, we seem to be on a password discussion, as lots of articles have come out in regards to the subject. Our topic even will include talking about passwords. We'll also have things to ponder, possibly some morons, and a great time as always!

  
  

  These notes are annotated for RSS. Full notes on the blog.

  
  

  ---

  
  

  Our moron(s)

  
  

  Mercedes, its your turn. Apparently, you had something open on your Github account. The thing is, you're not the first car company to have issues, although you never said that there wasn't a problem, you did fix it with Github assisting as well. A password is mistakenly published, source code, blueprints and more once at risk is the blog post where you can read more about this one. Good job, guys!

  
  

  Microsoft, you aught to be ashamed of yourself. You decided to give a test account admin privelages, then let the account go to legacy status. Then, because its an administrative account, someone finds it and abuses your systems. Great job! Ars Technica has the complete details. In major gaffe, hacked Microsoft test account was assigned admin privileges is the article.

  
  

  ---

  
  

  Password reuse

  
  

  We haven't blogged this at the time of these notes, but this is a good topic. The Perils of Employee Password Reuse comes to us from Lastpass and Amber Steel. Let us know what you think.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894806 6c6555c5-dfe2-475a-9774-167c19ef0389 14089 full true Wed, 31 Jan 2024 23:49:19 GMT Hello folks, welcome to the security box, podcast 176. This podcast is mainly going to be an open forum, but we will have some topics coming. We might have some morons, some things to ponder, and whatever is on the minds of those that come on live.

  
  

  Things that might be talked about

  
  

  This is not meant to be exhaustive, but the following blog posts may be talked about in no particular order. Some may be talked about but not listed here, so check the blog for complete details.

  
  

  • 16.6 million people affected, no info on what was taken
  • Breach forums maintainer gets time served, never spent time in jail, lots of restrictions placed on him
  • Trezor gets owned for a second time
  • 15 million Trello users apparently breached
  • TA866 is back to sending out email
  • New sets of data, including have I been pwned data out in the wild (naz.api breach)
  • Sans news bites for January 19, 2024
  • Three are three domains that I wouldn’t buy
  • Sans news bites for January 23, 2024

  
  

  ---

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894808 56853e30-2dcb-48e4-876e-f6b8a63a0cd3 11683 full true Thu, 25 Jan 2024 01:58:43 GMT Hello folks, welcome to the security box, podcast 175. I've been out sick, and now we're back to bring you what we wanted to bring you this past week. We've got news, notes, the landscape, two morons, things to ponder and a topic dealing with dark web threats targeting the airline industry. Thanks so much for listening and make it a great day!

  
  

  ---

  
  

  Our Morons

  
  

  We have to start with the moron who thought it would be a good idea that a database be left wide open for people to peruse the data. This database is a Mongo DB database, its similar to SQL where data is held and can be gotten at when needed. While this is a real estate app, this was definitely not done with security in mind.

  blog post

  
  

  ---

  
  

  If we've not had enough with Chat GPT, this aught to stand your hair right up. This data breaches article talks about how Chat GPT was made to give out ransomware software and now 4 are arrested. This aught to get more interesting.

  ChatGPT-aided ransomware in China results in four arrests as AI raises cybersecurity concerns

  
  

  ---

  
  

  Things to ponder

  
  

  Carrying over some items that we just will run as part of this week's program, we've got some doozies. We'll blog anything we didn't yack about as I continue to recover.

  
  

  • 23 and me must be wanting to play the blame game. They claim that their incident is our fault, and they then are going to fix whatever security holes were caused by whathappened? Yes, we are at fault with reusable passwords, but you don't have two-factor on any accounts, so its a double whammy and part of it is yours. Here's my blog post from 2023 about this particular problem. I don't think its gotten any better there and they haven't really been better.
  • Sans News Bites is back, and I still need to blog some others. My goal was to get two done, but I have the one from the 5th of January. As we move forward from my illness, we'll record them as we get them. Check the blog for ones not covered in audio. Here's my blog post for Jan 5th for those who want to find it easily.
  • We're interested in audio dealing with predictions and Trend Micro has one for their predictions. This comes from their trend talks threats podcast series on their youtube channel.
  • We also have top breaches that I found from Have I been Poned that I recorded before my illness took over. This list changes, and we'll bring this to you each week.

  
  

  Find something that you want to talk about? Use a file sharing service to get us the audio and you'll be featured.

  
  

  ---

  
  

  Our topic

  
  

  Our topic this week comes to us from Phishlabs. Dark Web Threats Targeting the Airline Industry is the article and we'll step through this one. Hope you'll find it of interest as everyone travels.

  ]]> https://rss.com/podcasts/the-technology-blog/1894810 a7191e1e-61c4-4e6c-b717-1f0f84536c4b 10941 full true Wed, 17 Jan 2024 22:24:22 GMT Welcome to podcast 174. On this podcast, we're just traversing the landscape and some of our longer posts and things that caught our attention. In most ways, this isn't complete, but just some. Terry, Nick and I take you along for the ride. Enjoy!

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894813 908ed045-c39f-4120-829d-ece344d00500 8371 full true Wed, 03 Jan 2024 22:13:15 GMT Hello folks, welcome to podcast 173. This is going to be the last podcast of the year as it comes to live programming. Don't worry, we'll continue to blog things of importance, and I'll look through our podcast notations for some good things and put out a final podcast of the year. Our next live program will be on January 3, 2024. On this edition of the program, we'll have our news and notes segments, the moron, two things to ponder which are extended versions and of course our topic dealing with the HHS and their fine on an agency who got breached.

  
  

  Our Things to Ponder

  
  

  We have two things to ponder segments and both are extended versions and information packed. The first one is being cross posted through this podcast and our Security Hour which may air it any time it wishes. The segment talks about 1 in 4 people falling for scams and getting in to trouble. Besides falling for scams, there is one thing most people don't do and it'll shock you. Read More on the tech blog with the blog post titled 1 in 4 fall for scams to learn what is going on and what is recommended. The second talks about a very interesting email I got and how it could actually fool someone. At recording time, the domain was unreachable, although the group was given a different file which could not be resurrected for airplay here. Here is the blog post titled Did you think you were going to get me? You’ve got to try harder if you wish to read it. It too, will be crossposted, but I didn't mention that here.

  
  

  ---

  
  

  This is a complete set of morons

  
  

  Our set of morons are completely interesting. They thought they'd steal a car, taking everything from one person, but yet doing something that they weren't expecting. These guys were expecting an Iphone, found an Android and handed it back. They still took the car and possibly other items. Read the blog post with the accompanying article. You won't believe this one. Or will you?

  
  

  ---

  
  

  Our Topic: HHS settles with ransomware case

  
  

  You must be kidding me, right? Lots of breaches, ransomware cases and the like yet the HHS doesn't do much to enforce anything in my opinion. We have several articles on the HHS settling in certain cases like the Ransomware we're talking about today, or the HIPPA violations in another case, but most of the time its unchecked.

  
  

  This week, HHS announces settlement on ransomware case is our article. It is a good start, but as we've said, there have been a lot more. Let us know what you think.

  
  

  ---

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894814 e04a12f5-bd1b-4691-b614-01d6023fdb63 10867 full true Thu, 14 Dec 2023 03:58:19 GMT Hello folks, welcome to the Security Box, podcast 172. On this podcast, we've got two different morons, a look at the landscape, a few things to ponder and our topic dealing with the Q3 report on the landscape which includes QBot and other variants out there causing havoc.

  
  

  For things to ponder, check the blog.

  
  

  ---

  
  

  Our Morons

  
  

  These are the morons of the podcast.

  
  

  • Montana, you have got to be kidding me. We talked about this in May of this year, and now, it seems you lose. Seems like your law is unconstitutional and it questions what you're trying to do. While we support you, you've really got to prove why Montana should be allowed to ban the app as just banning it doesn't fix the overall problem. As we've asked, how are you going to enforce it? Here is the blog post titled Montana Loses battle to block Tiktok for now … still thinks they have a case which links to prior coverage and arguments. Have fun with this one.
  • We have two Ukraine stories in recent posts, but one of these is our moron. Ukrainian gets 8 years argues that 8 years is still not enough for stealing and selling personally identifiable information on the darkweb and profiting from it. At least this suspect got caught, and we can celebrate just a little bit. The JRN did not copy his name.

  
  

  ---

  
  

  Topic: The Q3 Payload report

  
  

  On this week's program, the Q3 Payload report is going to be the topic. Looks like QBot is still at the top, even though they were dismantled. This was quite interesting. There are two different Rats that are part of the problem now, and these aren't rodants. These are Trojans. In this terminology, Rat stands for Remote Access Trojan. Phishlabs has this article and its titled Q3 Payload Report and you should read it in full if you wish to do so. You'll thank us later.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894816 8017dd05-899e-48ae-900e-8db1d91315bd 10253 full true Thu, 07 Dec 2023 06:00:00 GMT Welcome to the Security box, podcast 171. We hope that each and every one of you have had a happy Thanksgiving and have recharged your batteries. On this edition, we're making it official and am bringing back the things to ponder. We'll explain what we're going to do and we put it in practice last podcast. If these things to ponder have blog posts, we'll link them from right within the program's show notes so you can read what we're talking about. We'll also have news, notes, any moron of the podcast and our topic talking about URL shorteners and a recent trend with them. We hope you enjoy the show as much as we have bringing the show for you!

  
  

  For full notations, please see The Blog as we'll link to other things we don't have room here to cover.

  
  

  ---

  
  

  The top level domain that harbors a malicious shortener is ...

  
  

  According to a recent article from Brian Krebs, the most prolific domain now that has a URL shortening service that pumps out scams, phishing and just all around bad is the TLD that belongs to the United States. Read my thoughts and find a link to the article right here. The Top level domain for the United States now harbors malicious URL shortening service is the article title, and I hope you give it a gander.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894818 4abd6934-0eec-42f7-a7c1-d819dfa3b775 12937 full true Thu, 30 Nov 2023 09:30:00 GMT Hello folks, welcome to the podcast. We're talking about password managers in a big way today. Links to the major managers are given. Its not a complete list, and there may be others I'm not aware of that may be trusted or we don't know much about. We bring back things to ponder in a different way and you'll get a taste of this in this podcast. I hope you enjoy the program as much as we have bringing it together for you. Happy holidays from all of us at the JRN!

  
  

  ---

  
  

  Things to ponder

  
  

  Today, we've got two for you and they're both blog posts.

  
  

  • How much does social media cost underground?
  • Cleanup on Isle 1! Really Experian? You still can sign up and take one’s account over?

  
  

  Want your opinion known in this segment? Send an audio file!

  
  

  ---

  
  

  Password managers

  
  

  Below, please find the list of managers we talked about. Again, this isn't a complete list. Make sure you listen to the first segment which explains why we decided to put this podcast together.

  • 1password
  • Lastpass
  • Keepass

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  Internet Radio affiliates airing our program

  
  

  Our Internet Radio stations that carry us include Blue Streak Radio and International Friends Radio Network. The program is also carried live through the Independent Channel which is part of 98.6 the mix, KKMX, International. If you want to carry us, please use the Jared Rimer Network site to do that and let me know about your station. Please allow 3-4 hours for airplay, although we try to go 3 hours for this program. Thanks so much!

  ]]> https://rss.com/podcasts/the-technology-blog/1894821 6412c19f-9770-4607-a21e-ce7646be7688 5133 full false Thu, 23 Nov 2023 20:45:00 GMT Hello folks, welcome to the security box, podcast 168. On this program, we'll see if we've got any morons, a service that is a phishing service, news, notes and more.

  
  

  ---

  
  

  The "You Stupid fuck" awards of the podcast

  
  

  If this isn't a moron, I don't know what is. The blog post is titled Tech CEO sentenced to IP addressing scheme which is coming from our blog. It leads to the article we spotted talking about this guy. We may have talked about Micfo LLC before, but this is probably the end of this. Problem: the JRN thinks that 5 years isn't going to be enough and isn't a harsh sentence for the crime. Please sound off if you believe that this is the case.

  
  

  -----------------------------

  
  

  If you are prone to email scams, you might want to pay attention to this. One of my MENVI staff was smart enough to contact me to ask if they needed to do what the action in the email indicated. The bad news is that the site truly wasn't MENVI's, it looked nasty and never redirected as I thought it might. An email pretending to come from Cpanel, isn’t cpanel … can you smell trouble? has the complete details of this one. Sound off if you've seen something similar to this and whether you fell for it or not. Its OK if you did. There should be no shame!

  
  

  ----------------------------------------------------------

  
  

  Solar Winds is getting sued. Seems as though they were never as secure as they should have been, and the CEO among others are getting sued. We thought that something was wrong, seeing how we later found out about how that compromise was completely done. Whether they were compromised by Russia or not isn't the point of the lawsuit, says the article, but boy ... this is probably as bad as you get when it comes to a supply chain attack. Here is the blog post titled SEC sues Solar Winds for fraud, says they are secure and the charges are baseless for your perusal. It can't get any better than this, can it?

  
  

  ---

  
  

  Our topic: Phishing as a service

  
  

  Today, we are going to have a very interesting topic that might be known later as a threat. This comes from our friends at Phishlabs. The article is titled Threat Actor Profile: Strox Phishing-as-a-Service and it was a good one. We'll break this down, as phishing as a service now takes hold.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  
  

  ---

  
  

  
  

  ]]> https://rss.com/podcasts/the-technology-blog/1894823 a66a5368-f6f8-4820-ba82-d0692710017d 11501 full true Thu, 09 Nov 2023 02:13:52 GMT Hello folks, welcome to another technology podcast. On this podcast, we're going to listen to a story on how someone who is blind was looking for something and how he got taken for $1,000. It isn't as simple as it could be, seeing how he used the Twitter web site and we know how that could be since Twitter, know known as X, got rid of their accessibility team.

  
  

  Back in August, I blogged This is a true story of a blind man losing to a scam … this is a must read which links to a Wired article. The podcast you're about to hear comes from Discarded, a proofpoint podcast. It aired in October of this yeqar and I recently listened to it.

  
  

  For those who are Apple, here's a link to the podcast. DISCARDED: Tales From the Threat Research TrenchesProofpoint

  
  

  The podcast is also available through Overcast if you use that.

  
  

  I hope people find this story of interest, and thanks so much for listening! We'll see you next time.

  ]]> https://rss.com/podcasts/the-technology-blog/1894824 155f0c1f-94d0-4ef4-9f16-c335e799bb55 1938 full false Thu, 09 Nov 2023 02:09:09 GMT This webinar in July covered email impersonation and BEC things for 2023. Hope you enjoy this webinar from Fortra.
  ]]> https://rss.com/podcasts/the-technology-blog/1894826 c84ef35c-4c5d-4076-bb18-7a144190be20 3123 full false Thu, 02 Nov 2023 19:52:53 GMT Domains. They're everywhere! In podcast 376 of the tech podcast, we're going back to a webinar that talks about impersonation and look-alike domains. This still happens today, and while it is over 2 months old, it is still valuable. I hope you enjoy the program for this time, and we'll have another webinar next time talking about BEC attacks and domains and email and the like. I hope you'll enjoy. Thanks, Fortra/Phishlabs for putting this together.
  ]]> https://rss.com/podcasts/the-technology-blog/1894827 ff3b43bc-f61f-4899-8b60-9023794db358 3893 full false Fri, 27 Oct 2023 21:03:27 GMT While I love webinars, we must be mindful that they aren't mind and must give presenters the opportunity to distribute them. I believe this is Phishlab's webinar, although I could be wrong. Sorry about that if I am.

  
  

  ---

  
  

  Welcome to podcast 375. On this podcast, we're going to give you a webinar. This webinar is dealing with Chat GPT. You'll learn the good, the bad and the ugly. It was a very interesting webinar.

  
  

  Per usual, we give the presenters an opportunity to get it through their network. I believe this is a Phishlabs webinar but i could be wrong.

  
  

  If I am, I apologize.

  
  

  We hope you enjoy the program as much as I did listening to it and bringing it to you now. Contact info at the beginning.

  
  

  Sorry for any tech issue sounding, I'm getting it rectified.

  ]]> https://rss.com/podcasts/the-technology-blog/1894829 77ce24ba-d94e-4ba8-804e-5f77877b2d51 3970 full false Tue, 10 Oct 2023 00:35:00 GMT Hello folks, welcome to the Security Box, podcast 163. On this episode, we go through the news, talk about a very interesting interview and then tackle our first topic of NCSA

  
  

  We talk briefly about this blog post about passwords, the reason why it isn't a good idea to share passwords

  blog post

  and a bit about Multi Factor authentication. This blog post will talk more about multi factor authentication.

  
  

  You may see terms like two-step, two-factor or multi factor. All pretty much are the same thing.

  
  

  We hope you enjoy the program as much as we have bringing it together for you, and make it a great day!

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894830 8e9534e5-f91d-43ab-9b81-63f0a0d14262 10645 full true Thu, 05 Oct 2023 17:19:30 GMT Welcome to the security box, podcast 162. On this edition of the podcast, we'll run through the blog and list, anything else on audience insights and more. This is week 2 of the open forum. Hope you enjoy the program!
  ]]> https://rss.com/podcasts/the-technology-blog/1894832 82b9714b-273b-46f5-8bcf-d9c8f59de7d9 9716 full true Fri, 29 Sep 2023 16:20:58 GMT Welcome to the security box, podcast 161. On this podcast, we're covering a few notations of the recently released IOS 17, tons of articles from the blog, and having ourselves an open forum. We hope that you enjoy the program as much as we did putting it together for you.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894834 c3347feb-d519-4c94-b5f9-7a1526828105 9705 full true Thu, 21 Sep 2023 20:44:04 GMT Hello folks, welcome to podcast 160. On this week's edition, we'll reveal the sudden absence of TSB, we'll have news and notes from around the landscape that folks may have read, and aa very interesting topic that deals with Freenom and the phishing landscape. Apparently, Facebook is in this too. Of course, we'll have any questions answered that people have too. Thanks for your support of TSB and thanks so much for listening!

  
  

  The Absense of TSB

  
  

  The sudden departure of TSB was not one the JRN was necessarily prepared for. While we have from time to time rescheduled TSB, and/or took specific holidays off like the Christmas break, Thanksgiving week, and possibly others, this was so sudden.

  
  

  While working on TSB's release and catching up its EMHS page we got a message on Dice World. While that wasn't out of the ordinary, as I have gotten messages on Dice World before, the source and what the message contained was one of shock and grave concern.

  
  

  The short version is that the JRN's MENVI helper, Janet Quam, passed away on the 30th of the month of August. While I have been told numerous things, a letter which I published on September 10th goes in to what Janet did with the network from various podcasts which don't exist anymore, to tech skills and a willingness to learn.

  
  

  There was no health related stuff discussed except to state that we were aware of health concerns. To read the letter, please read the blog post titled A death across the network, here’s a letter.

  
  

  It links to a Youtube copy of the funeral. MENVI's links page also has a link to the Obituary. We thank you for your support! A song appropriate will be played at the end of the program when we play music.

  
  

  ---

  
  

  Meta, Freenom and phishing domains

  
  

  Our topic comes to us today from an article which was published to Krebs on Security on 5/31. Its titled Phishing Domains Tanked After Meta Sued Freenom. As we've talked about on Throwback, we've now got other issues because of this suit, and other top level domains that are now taking what the free domains did. We'll make sure to bring this up.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894836 624727e8-1ba0-4f3b-9189-a83ca506f3fc 7040 full true Thu, 14 Sep 2023 00:12:30 GMT Welcome to the security box, podcast 159. On this podcast, we're going to have a two-part article discussion dealing with fraudulent activity when it comes to retail and the dark web. This came to us via Phishlabs. Besides that, we may have some stupid fucks to talk about, the landscape as usual, and your comments and questions if any.

  
  

  ---

  
  

  The Stupid Fuck award

  
  

  I found an article I posted to the blog on August 30th that talks about the U.K. wanting to ban IOS updates unless its approved. Like that's going to solve anything except problems for us useers who may either travel to the UK or live there. Here's the blog post I wrote that posted before the show. Good job, UK government for earning the stupid fuck award.

  
  

  ---

  
  

  Fraudulent Activity on the dark web with retail

  
  

  This is a two part article coming to us from Phishlabs.

  
  

  • Top Fraudulent Activity Targeting Retail on the Dark Web
  • Top Fraudulent Activity Targeting Retail on the Dark Web – Part Two

  
  

  
  

  ]]> https://rss.com/podcasts/the-technology-blog/1894838 3d51c08d-ac12-498d-8b5e-882a9203383e 9955 full true Wed, 30 Aug 2023 22:08:12 GMT Welcome to podcast 158 of the Security Box. On today's podcast, we've got at least one moron, we've got an interesting topic that deals with Facebook getting fined, again, and of course we'll cover the landscape and what has been read and blogged as of late.

  
  

  ---

  
  

  The You Stupid Fuck award section

  1. Who the hell is Global phishing 16 service? Well, someone or multiple someones have been picked up. Karma Catches Up to Global Phishing Service 16Shop comes to us from Krebs on Security and was quite an interesting read. According to Krebs, this outfit has been around since 2017 and really had a name for itself when it came to having people pay on time, making sure their tools were not given to anyone who did not pay and more. While the concept was novel, people got caught, so please enjoy your stupid fuck award.
  2. Nice to see some arrests of a couple dozen more stupid fucks in this one. Two dozen arrested, hundreds of malicious IPs taken down in African cybercrime operation comes to us from Cyberscoop. While the article isn't long, we now learn there is a new threat that knows what they're doing. Better read this one!

  ---

  Topic: The 1.3 Billion dollar fine and what it means for privacy regulation

  
  

  The article we're going to take from is an article we posted back in May. The title of this article is What the record-breaking $1.3 billion Meta fine means for the US-EU clash over spying programs and it comes from Cyberscoop.

  
  

  I guess we'll have to see what happens with this, as I don't think we'll be done with this yet. If there are any updates, we'll be posting these updates to our list and blog where applicable.

  ---

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894840 e58b0ec4-58b7-4ed0-9472-cbc97be22dd5 9787 full true Thu, 24 Aug 2023 17:40:16 GMT Welcome to the security box, podcast 157. This week, we ay be talking about a very interesting topic coming out of connecticut which might or might be a moron. We'll talk about other news and notes from the landscape, and yes, today's topic is on ransomware groups and one which says you should pay the money to charity instead of the group itself.

  
  

  Morons of the podcast

  
  

  We are going to link to the stories that deal with our moron(s) of the podcast.

  
  

  • 10 people, including 16-year-old youth arrested for suspected involvement in malware scams Databreaches
  • Five arrested in Poland for running bulletproof hosting service for cybercrime gangs — Europol databreaches
  • Florida Healthy Kids notified by Maximus of MOVEit breach databreaches
  • Diligere, Equity-Invest Are New Firms of U.K. Con Man Krebs On Security

  
  

  Florida Healthy Kids is a very interesting story, mainly because of who they are partnering with. I guess we'll see what happens with them.

  
  

  Ransomware group says: Pay a Charity

  
  

  Today's topic comes to us from Cyberscoop way back in May. I've not seen another group do this, and I think its a one of a kind deal. I wish I were on that charity list, although I don't take crypto, but proof of donation would all that it would be.

  
  

  Today's article is titled A different kind of ransomware demand: Donate to charity to get your data back which should be read just the same. If someone you know was hit by this group, did they get their files back?

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894841 7ca01843-9a9d-4358-a4ea-73419ab82923 9595 full true Thu, 17 Aug 2023 21:09:19 GMT Hello folks, welcome to the Security Box. This is program number 156. On this episode of the program, we're going to talk about a very interesting article that was published back in April on what we've learned about stopping Russia's hackers since the war has started. Also, this program will have news, notes, the landscape and much more.

  
  

  Morons of thde podcast

  
  

  The following two articles are related and one may have more than the other. Is possible sentencing guidelines enough that fit the crimes?

  
  

  • NYC couple pleaded guilty to money laundering in Bitfinex hack Cyberscoop
  • Husband and Wife Plead Guilty to Money Laundering Conspiracy Involving the Hack and Theft of Billions in Cryptocurrency databreaches.net

  
  

  
  

  Topic: What we've learned from the war on Ukraine

  
  

  This is an April article titled What we know about Russian hackers — and how to stop them — after a year of cyberwar in Ukraine coming to us from Cyberscoop.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894843 ef6014bd-4200-4a47-a3fe-f46fe44996a1 8680 full true Thu, 10 Aug 2023 00:00:00 GMT Welcome to the Security box, podcast 155. On this program, we've got an update to Age Verification which we've not seen any update since. This Verge article may be something that could be of interest if it turns out to be true. We'll also talk about the news and notes from the landscape and much more.

  
  

  What's going on with Age Verification?

  
  

  We've covered age verification through the years, and this blog post from May 2023 covers the Verge's article in which we're going to take from. This is their article titled Online age verification is coming, and privacy is on the chopping block which I link to in my post. What do you guys think?

  ]]> https://rss.com/podcasts/the-technology-blog/1894845 68e358d0-bad0-4cfd-89c1-5df2ae3a962b 10959 full true Thu, 03 Aug 2023 16:03:33 GMT Hello folks, welcome to program 154. On this edition of the program, come with us for some news and notes, a recollection of someone who can change after making mistakes, and a topic talking about DDoS for hire services that have been shut down within recent times which could be a good thing.

  
  

  A Note on a passing of a recent Security Expert

  
  

  Kevin Mitnick recently passed away on July 16, 2023. He did have an interesting career, a criminal in his early years to a security consultant after the fact.

  
  

  Brian Krebs sent the news through on Mastodon, and we blogged about it on the same day ... July 20, 2023.

  
  

  Below, please find the books Kevin wrote. Note that the blog post does mention these and what is available also on BARD. I attended one of his webinars that KnowBe4 put on and it was excellent!

  
  

  The books

  
  

  

  
  

  • Kevin Mitnick, Steve Wozniak and William L. Simon

  • Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
  • The Art of Deception: Controlling the Human Element of Security
  • The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders and Deceivers 1st Edition

  • Kevin Mitnick and Mikko Hypponnen

  • The Art of Invisibility: The World's Most Famous Hacker Teaches You How to Be Safe in the Age of Big Brother and Big Data

  
  

  DDos for hire services shut down

  
  

  We blogged about this on the blog, and now its time for it to be talked about. This is a Krebs on Security article titled Feds Take Down 13 More DDoS-for-Hire Services which I found was quite good. Let's see what you think and our contact info will be given throughout the program.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894846 f1a0593d-8d56-4280-992c-fd31e7cbf169 9046 full true Wed, 26 Jul 2023 21:42:26 GMT Hello folks, welcome to the Security box. This is program 153 and on this edition of the program, we're going to talk about a potential new threat that we might need to learn about. We'll also have potential morons that has crossed our desk, news and notes from around the landscape and more.

  
  

  If you don't read anything else, you should read this

  
  

  Think I’m harping too much on checking your stuff? Here’s why you really should … this is a true story shouldbe read. It links to a file which will only be available for a limited time which has the story. This came from Cybercrime radio and thanks to DJ Terry for giving us a heads up on this one. Now people should be happy that I harp on making sure that you are as safe and secure as possible. Thank me later!

  
  

  ---

  A Data Leak that went absolutely correct

  
  

  There's a difference between a data leak and a breach. A leak may in most parts be an accident, where a breach was intentional. My blog post Data Leak at Virus Total was only a subset, data removed has a link to the story. Let's just say that Google did everything as right as they could. Once notified, they removed said data an d launched an investigation on how the info got on the popular AntiVirus scanning application. You can't have it any other way. If a mistake happens, fix it as quickly as possible!

  
  

  ---

  Our Morons

  
  

  Our first moron today comes from a company called HikVision. This blog post titled: Use Hikvision cameras? You might want to be made aware of this goes in to the fact that this company just doesn't understand what might be going on with their network and their devices. Having QR codes to basicly log in to the camera yields very interesting results. Better read the accompanying article for more. You might want to be sitting down for this one.

  ---

  Second: From Cyber Crime radio: Magaine: Bangladesh Data Leak Exposes 50M Citizens. This is the topic for their July 13th airing and this has to be a complete joke. We'll play this file as part of the program.

  ---

  Our topic

  
  

  Move out the way … Bold Spy is right there with spy tools like Pegasus is the tech blog where you'll find commentary and an article that talks about something called Bold Spy. Its got tools that others are using and possibly more. Feel the threat yet?

  
  

  ---

  Finally an extra

  
  

  Did you read Think I’m harping too much on checking your stuff? Here’s why you really should … this is a true story yet? As an extra, we play the audio podcast from CyberCrime Radio which sparked the blog post. This is of course within the last music set. Listen to the Cybercrime Radio piece, it really hit home on why this accompanying blog post was written.

  
  

  
  

  ]]> https://rss.com/podcasts/the-technology-blog/1894848 5d338c7e-ad34-461a-9a3d-71894420e6a0 13517 full false Wed, 19 Jul 2023 22:33:45 GMT On this podcast, a great video that was posted to Mastodon talking about what's coming to Android in 2023. But then I have questions dealin with the abuse of accessibility tools. Using Yellow Camera as an example, are these changes meant that people might be safer if they make a mistake? Contact info at the end. Thanks for listening!
  ]]> https://rss.com/podcasts/the-technology-blog/1894849 40e58cb8-e72e-457e-81a0-969182c11ce5 2592 full false Tue, 18 Jul 2023 18:39:52 GMT On this edition of the program, we've got an open forum of topics. Lots of them have been covered through the years while others have been covered on the blog or TSB's email list. We hope that you enjoy the program as much as we put this together for you. See you next time!
  ]]> https://rss.com/podcasts/the-technology-blog/1894852 65742fff-a481-4329-a6e7-eece50fc17bd 12222 full true Sat, 15 Jul 2023 17:00:00 GMT Welcome to the security box, podcast 151. I hope that each and every one of you have had a great July 4th holiday. On today's podcast, we're going to have an updated discussion on BEC which stands for Business Email Compromise. On top of that, we'll see what else the landscape has to offer. We hope you enjoy the program and thanks for listening!

  
  

  Stitcher closing

  
  

  Stitcher is closing. If you are affected by the change, please contact me at jaredrimer at 986themix.com and let me know about it. Let me know what podcast you're coming from so I can get you a new link. They've let us know that they're shutting down as of August 29th, 2023. Thanks for your support of our podcast!

  
  

  Our Topic: update on BEC

  
  

  This time, our article comes from Phish Labs. Its a good one, and probably updates our stats on one of the businesses biggest problems, Business Email compromise. What to Know About Business Email Compromise (BEC) Scams was written in April.

  ]]> https://rss.com/podcasts/the-technology-blog/1894853 42e655a3-4871-4827-94a5-4038c50824e5 9741 full false Fri, 07 Jul 2023 20:10:42 GMT Hello folks, welcome to the Security Box, podcast 150. We're made it! On this podcast, we're going to talk about Ransomware gangs and the fact they're now using zero days. We may or may not have a moron, we'll cover the news and we'll see what else people have to say as the program progresses. Some Strong Language.

  
  

  Stitcher closing

  
  

  Stitcher is closing. If you are affected by the change, please contact me at jaredrimer at 986themix.com and let me know about it. Let me know what podcast you're coming from so I can get you a new link. They've let us know that they're shutting down as of August 29th, 2023. Thanks for your support of our podcast!

  
  

  Our topic, Ransomware gangs and zero days

  
  

  This week's article comes to us from Cyberscoop. Its titled Ransomware gangs increasingly deploy zero-days to maximize attacks and was tagged as a topic. For the 150th episode, this couldn't be more appropriate.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894856 86677e90-8763-4c0c-9f49-6d717e672524 11822 full false Thu, 29 Jun 2023 00:00:00 GMT We did have some participation, full notes are here. No replay on Clubhouse though, sorry about that!

  
  

  ---

  
  

  Welcome to the Security box, podcast 149. On this podcast, we may or may not have a moron, we'll definitely have news, notes and the landscape and a topic talking about a threat we thought was long gone.

  
  

  
  

  
  

  Good Job India, welcome to the moron of the podcast

  
  

  I stumbled across a video from a Youtube Channel which I am not familiar with. While Nick was in my JRN working room, I decided to see if there was an article about this. While the podcast gets a 9 minute video, check out this article titled India first democracy to ban encrypted messaging apps on massive scale. from a site called tutanota.com. They must be a news related site, name sounds familiar to me. Have fun with this one!

  
  

  Here's the youtube video from Mental Outlaw if you want to watch this instead of listening to it.

  
  

  Topic: Emotet is back, now a threat

  
  

  The article comes to us this time from Phishlabs. Emotet Returns from Hiatus, Trails QBot in Q1 Volume is the title.

  
  

  Are you surprised that this is the case? We know that Emotet was taken down in a crqackdown, but like most things, they come back in this industry. Feel free to view the article for complete details or download your copy of the show to hear our thoughts.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894857 3678acbd-ba82-4c44-bbc8-f8d1cd0398fa 7372 full false Wed, 21 Jun 2023 20:34:46 GMT Welcome to the security box, podcast 148. On this podcast, I may have a complete moron with a company, we'll have news, notes and more. The topic deals with passwords and it isn't looking that great.

  
  

  Morons

  
  

  We stand in solidarity with you, Reddit users. Reddit is taking advantage of the situation just like Twitter did so many months before.

  
  

  Apparently, Reddit has decided to do the same thing. One article says they're only charging $0.24 per 1,000 calls to their API, but people indicate its much different. The cost is $12,000 per month or roughly up to $20 million per year according to some estimates. Here are the blog posts as of writing in regards to Reddit.

  
  

  • Accessibility apps will be free for API use on Reddit
  • Reddit communities to go dark on June 12th, setting themselves to private
  • Reddit to charge $12k for 50k calls to API?
  • Its Official, Apollo shutting down
  • Here’s an ars article on Apollo

  
  

  Van Nuys is not too far from where I live in a town called Woodland Hills. I go through there every time I take the bus. According to a KNX article which is very short, it says a guy from there was caught selling drugs on the dark web. Here is the blog post from the tech blog titled Van Nuys man pleads Not Guilty to selling drugs online which links to the KNX article.

  
  

  In Case you Missed it

  
  

  In Case you missed it, I finished Tracers in the Dark. It was a very interesting book, one I didn't want to put down until I did. Book Review: Tracers in the dark, by Andy Greenberg is the blog post and I'm not giving anything away.

  
  

  Our Topic: Weak Passwords

  
  

  Our topic comes to us from Cyberscoop. It was an interesting read. The article is title Nation-state actors are taking advantage of weak passwords to go after cloud customers, Google says and I found it interesting. This proves again that we need to make sure that our users are using strong passwords or pass phraises. Don't worry, Cyber Security Awareness Month is coming up, so TSB will be starting all over again with basic stuff when it comes to your security.

  
  

  I hope that every single person will enjoy today's program, and thanks so much for listening!

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894859 46f8579d-6bc8-4d35-b283-b3011a726ea0 8734 full false Thu, 15 Jun 2023 02:01:09 GMT Welcome to the security box, podcast 147. On this edition of the program, I believe I have a very interesting but true story that must be told with the names being changed to protect the innocent, or is it guilty? We've got a very interesting article talking about the structure of ransomware groups, and no, we're not talking about specific named groups, just something that probably wouldn't surprise someone who reads this type of news. We'll see what else the landscape has to offer with news, notes, questions and more.

  
  

  A true story that might include a moron?

  
  

  Someone recently got someone fired as part of a grudge where someone heard something they said and decided to look them up and email a copy of what they said to the employer. This is the first time we've seen this in the phone world and we hope it isn't going to happen again. Live version with names changed to protect the innocent, or are we protecting the guilty?

  
  

  Topic: What's going on with Ransomware groups?

  
  

  The following is a Trend Micro article which we found very valuable. Unpacking the Structure of Modern Cybercrime Organizations is the title of this article and well worth the read. Question for readers and listeners to the live or podcast edition listeners, are you surprised? Let's discuss this one.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894862 54cea136-3568-4891-8acd-644d976de285 10014 full false Wed, 07 Jun 2023 22:01:57 GMT Welcome to the security box, podcast 146. On this podcast, we may have multiple morons; one is a definite, news, notes and a very interesting topic about the proxy services and what they're up to.

  
  

  Potential Morons

  
  

  • 48 States Sue Phone Company That Allegedly Catered To Needs of Robocallers talks about the majority of the U.S. and how they're suing a telephone company in Arizona who seems to be catering to the robocallers by allowing customers to spoof caller ID among other things.
  • Free VPN Service SuperVPN Exposes 360 Million User Records. was found on Monday, the 29th. Class, what can we learn from this article?

  
  

  Topic

  
  

  This time, we're going to talk about a very interesting KrebsOnSecurity article titled Giving a Face to the Malware Proxy Service ‘Faceless’ which was quite interesting.

  
  

  The first paragraph says:

  For the past seven years, a malware-based proxy service known as “Faceless” has sold anonymity to countless cybercriminals. For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems advertised on the service. In this post we’ll examine clues left behind over the past decade by the proprietor of Faceless, including some that may help put a face to the name.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894864 17d650aa-6932-48b5-863b-16af696b3a23 13524 full false Thu, 01 Jun 2023 03:40:40 GMT This program may contain some strong language.

  ---

  Welcome to the security box, podcast 145. On this podcast, we're going to talk about anothr Ransomware group that is out there that may be of value because while they may ot be targeting the states yet, they're attacking and we must be aware of what's happening.

  
  

  Besides this, we may have at least one moron, maybe more, we'll see what others have to say, we'll talk about the landscape and we'll also make sure you're informed the best we can.

  
  

  Topic

  
  

  Bablock is a very interesting piece of ransomware out there. The ransomware is based off of Lockbit, but may be different. Trend Micro will help us with this one. An Analysis of the BabLock (aka Rorschach) Ransomware is the article title and we hope you enjoy the program!

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894866 17bb733f-b9ed-4ebe-a9e3-13494c068aeb 11575 full false Thu, 25 May 2023 00:29:12 GMT Welcome to the security box, podcast 144. This show is an open forum. We had no particular topic in mind, but we talk about books, the landscape and more. The show may contain some adult themes, but it is very light at all. This may contain language or other situations. Please be aware of it. Thanks for participating and make it a great day!
  ]]> https://rss.com/podcasts/the-technology-blog/1894869 a45c9928-bc7d-43c9-b0ef-38f9a0537273 11219 full false Thu, 18 May 2023 15:15:48 GMT Welcome to the security box, podcast 143. Today, we're going to have a very interesting discussion about the Relationship between Ransomware and Phishing. We know of at least one moron of the podcast, and there is possibly going to be one more. Of course, we'll have news, notes and any questions from the Clubhouse audience.

  
  

  ---

  
  

  Morons of the Podcast

  
  

  First Moron, a Russian on the Run

  
  

  There are two different articles out there about this one. One from Krebs and the other from Cyberscoop.

  
  

  • $10M Is Yours If You Can Get This Guy to Leave Russia Krebs on Security
  • Russian national charged for role in stolen credit card verification scheme Cyberscoop

  
  

  How Not! to notify people of a databreach

  
  

  I saw a boost on Saturday about a breach with a company named Western Digital. That's nice, we have covered many breaches before. What I found was disturbing from Western Digital according to the boost. While they sent email out, the email was not accessible for those of us who use access technology; namely screen reading technology.

  
  

  I don't know about you, but I would expect the info not in graphical form, I would expect it in text just like you and I communicate already. Here is my blog post from May 6th that mentions this. As of show note creation time, we do not have any official articles from the tech press, but when we do, we'll be sure to pass it along. Don't put breach notifications in picture form! It doesn't do anyone with disabilities any good.

  
  

  ---

  
  

  Our main Topic

  
  

  The main topic comes from Phishlabs. The article is titled What is the Relationship Between Ransomware and Phishing? and was written at the end of March, 2023. This is going to get interesting.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894872 e15829b9-ee56-45a1-9c56-937b0265fe23 10317 full false Wed, 10 May 2023 23:22:12 GMT This show has sections of strong language, but not a lot. The disclaimer is in there just in case, but it is not much in the wake of strong language.

  
  

  ---

  
  

  Welcome to the Security box. This is program number 142 of the series and this time, we've got a topic which hasn't been covered before at least on our podcast. The topic covers a very interesting endeavor by the government to deal with Cybersecurity. Besides this, we'll see who gets a moron, we'll cover the landscape, and we'll see what else is of value. Hope you enjoy the program!

  
  

  Morons of the podcast

  
  

  One may not completely be a moron, but it qualifies as a group not just what the first item covers. The second, however, you'll just have to read to believe.

  ---

  
  

  1. I'll put this one as a moron, but I really don't understand what seems to be going on over at schools lately. Its ok to keep information on children that have nothing to do with you giving them an education, and that information may include behavioral issues, SSN's and more.

  blog post

  
  

  Brian Krebs boosted (retweeted) the following to his followers. Note that my blog post has the linked article, so I'm not going to link it within this section. It says:

  
  

  Doug Levin: NBC: Students’ psychological reports, abuse allegations leaked by ransomware hackers https://www.nbcnews.com/tech/security/students-psychological-reports-abuse-allegations-leaked-ransomware-hac-rcna79414 #edtech #databreach @brett via @kevincollier

  
  

  ---

  
  

  2. Our second moron is more of the moron than the first, but here's a blog post titled T-Mobile, do you still want me as a customer? I don’t think so! which has the latest on what they have been up to. It links to yet another article, talking about yet another breach. Should we be surprised in this industry?

  
  

  ---

  
  

  Topic: Highlights from the New U.S. Strategy

  
  

  This is a Krebs on Security article that we're taking from. He was tooting (tweeting) about this on Mastodon.

  
  

  The article is titled Highlights from the New U.S. Cybersecurity Strategy and it was interesting. I wonder what will eventually happen with this? Haven't seen anything since this article was written, but maybe they're working on it and we'll see something soon. Only time will tell.

  
  

  ---

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894874 77474897-208a-43d8-80ba-00e0e1aa9072 13160 full false Thu, 04 May 2023 04:19:56 GMT This is an episode that affiliates can run, and the program is under an hour. We'd like to thank the BBC for doing this research. Its definitely eye opening.

  
  

  The show notes, which include a link to the video on YouTube follows.

  
  

  ---

  
  

  Welcome to the security box, podcast 141A. On this podcast, we're going to provide you with a video. This video comes from the BBC, and it does leave some very interesting questions. Contact info is given at the end.

  
  

  What sparked this? This toot from Brian Krebs is what sparked this. It says:

  
  

  https://www.youtube.com/watch?v=w6JXZ3GzSCQBrianKrebs: Simona Weinglass of The Times of Israel is my new hero. Her video reporting on crypto investment scams is well worth watching.

  
  

  Tl;dw, it appears the biggest crypto investment scams targeting people in the UK were promoted by at least a half dozen of England's premiere football (soccer) leagues. These scammers managed to rake in at least a billion dollars, and could afford lucrative sponsorships that got their brand everywhere. As the former scammers explained, there's nothing real about the investment "earnings" shown to people who get roped into these scams: It's all just a digital mirage, and any money invested is gone.

  
  

  Her video series on the BBC zeroes in on who's responsible. Involves ride-alongs with German police as they worked w/ investigators in the country of Georgia to raid call centers working the phones for these fraudsters.

  
  

  https://www.youtube.com/watch?v=w6JXZ3GzSCQ

  
  

  If you're just here for the video, this is the youtube link to the video we give in audio.

  
  

  Thanks Brian for posting this! I found it very eye opening, and it even made me mad, but that's probably what we'd expect with what you'll hear. I don't blame them though, but you should hear or watch this and make up your own mind.

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894875 07572bd5-3848-49f2-acfb-6abc71f7d737 3106 full false Sun, 30 Apr 2023 23:49:37 GMT Welcome to the Security box, podcast 141. On this podcast, Cyberscoop is along to help us diagnose yet another ransomware group. They actually start by attacking Israeli schools, but will it stop there?

  
  

  Besides that, we'll have the news, notes from around the landscape, possibly some morons, and of course your thoughts.

  
  

  Our topic today comes from this Cyberscoop article titled New cybercrime group calling itself DarkBit attacks Israeli university which we sent to the list in mind February.

  
  

  While we've not seen anything else on this, it isn't for us to keep our mind down as they could attack anything they want.

  
  

  We hope to see you on the show, thanks so much for listening!

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894877 3e075de0-5c79-4a27-919a-de7a1297e303 13567 full false Wed, 26 Apr 2023 23:43:12 GMT This program may contain some infrequent occurences of strong language.

  ---

  Welcome to podcast 140 of the Security box. On this edition of the podcast, we've got two morons at least and a great topic that may still be relevant even though the SVB fiasco is now past us. We'll also have the landscape from people who found things of interest as well. We hope you enjoy the show!

  
  

  Morons of the podcast

  
  

  We have two morons of the podcast.

  
  

  • Trial and error in Kuwait tells the story of a cyber security expert who almost went to jail for tweeting on something he found which is part of protecting everyone. The article itself is quite interesting, but what is more interesting is the fact that the bank didn't want this info out there to begin with. This came from Cyberscoop.
  • Lawsuit Claims Mount Nittany Health Shared Private Patient Information with Facebook, Google (update1) comes to us from databreaches.net. The fact that you didn't even notify customers or anyone else about the issue is just mindblowing. This definitely doesn't make any sense.

  
  

  The FDIC and banks

  
  

  The FDIC did step up when it came to the SVB ordeal, but what about it and bank securituy? A watchdog says that they're not doing enough.

  
  

  The article Watchdog warns FDIC fails to test banks’ cyberdefenses effectively is one that you should read. We'll be taking this article apart as part of the discussion. Do you think they're doing enough?

  
  

  Supporting the podcast

  
  

  If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone.

  ]]> https://rss.com/podcasts/the-technology-blog/1894880 f78029f7-4dd7-4bbb-be74-ff3472027a93 14608 full false Fri, 21 Apr 2023 17:10:33 GMT go to the Metro Micro page on metro.net to learn more. While most people may not need this, I figured some might, and we reach a wide variety of people so I'm going to put it out there. ]]> https://rss.com/podcasts/the-technology-blog/1894881 39c58fd0-a2c3-4bf1-9eb9-ce9cc716e403 2145 full false Thu, 13 Apr 2023 19:49:16 GMT Ransomware Attacks: Why Email Is Still THE Most Common Delivery Method comes from Phishlabs. We'll step through this article and see what people think. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone. ]]> https://rss.com/podcasts/the-technology-blog/1894883 0152a08d-2bde-4370-91c8-67e111dd63a7 14232 full false Wed, 12 Apr 2023 23:46:20 GMT A very interesting musing thought piece is the article. The boost is quoted with the links linked as numbers for you. Maybe a Moron or just a news item? No April fools joke, man arrested for making swatting calls, faces 10 felony counts was the only post posted on April 1st. This was no April fools joke. The gentleman in question used Discord to post and share these videos and luckily nobody got hurt. You'll want to check out this article to determine what you think, and we'll determine where it goes and do it appropriately. Mimic ransomware New Mimic Ransomware Abuses Everything APIs for its Encryption Process comes from Trend Micro. This may be just as bad as Sandworm, if not worse. We'll discuss this Trend Micro article. Supporting the podcast If you'd like to support our efforts on what this podcast is doing, you can feel free to donate to the network, subscribing to the security box discussion list or sending us a note through contact information throughout the podcast. You can also find contact details on our blog page found here. Thanks so much for listening, reading and learning! We can't do this alone. ]]> https://rss.com/podcasts/the-technology-blog/1894886 0172add5-c424-4f3e-aa39-a93c622d3538 14256 full false Wed, 05 Apr 2023 23:42:39 GMT <
• Roger Grimes has written a bunch of books, and he's also taught for as long as I have if not longer. He has a webinar on Cyber Security, and yes, we could play it on TSB but TSB is more for you to communicate with us on what you have questions on and what things we see. Take a listen to this and see what might be of value to you.
• Los Angeles Metro and Transit App are ending their partnership. Is this a great move? I don't honestly know. Metro did have a pretty bad app which I hated to use. The data was the samem, but I really like Transit App's interface. Los Angeles Metro will be discontinuing partnership of Transit App as their official app is my blog post after reading the source's post on this.

• Opinion piece: article talks about how TikTok didn’t make a case for itself
• Move out of the way, 55 vulnerabilities tracked in 2022 and these are zero-days
• Another hacking forum shut down … this is the breach forums
• 306,000 plus out of 476,000 plus domains reported as phishing