Channel Title: Black Hills Information Security Channel Description: We were once brand new to infosec too! With that in mind we want to help educate everyone in this rapidly evolving cybersecurity industry! Resources We Offer: – Free Webcasts – Free Infosec Tools – Thriving Discord Community – Website Blogs – Backdoors & Breaches - Incident Response Card Game – REKCAH Comics! – Prompt# Zine – INFOSEC Survival Guide – Fashionable Merch & Cool Swag BHIS Services: – Incident Response – Pentesting – Continuous Pentesting (ANTI-SOC) – Active SOC – Blue Team Services – High Profile Risk Assestments – Hunt Team Operations – Blockchain Security Sister Tribes: – Antisyphon Training – Active Countermeasures – Wild West Hackin' Fest – REKCAH Publishing “Study hard what interests you the most in the most undisciplined, irreverent and original manner possible.” - Richard Feynman <video> There's Zero-Click Bugs In Your Photos! #bugs #photo #podcast #infosec #security Description: /// 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training Discord: https://discord.gg/ffzdt3WUDe ///Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.myshopify.com/collections/bhis-shirt-collections ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ Incident Response: https://www.blackhillsinfosec.com/services/incident-response/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pay-what-you-can/ Live Training: https://www.antisyphontraining.com/course-catalog/ On Demand Training: https://www.antisyphontraining.com/on-demand-course-catalog/ Antisyphon Discord: https://discord.gg/antisyphon Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/ </video> <video> REKAST - Talkin' Bout [infosec] News 2024-11-25 #infosecnews #cybersecurity #podcast #podcastclips Description: Join us LIVE on Mondays, 4:430pm EST. Here's a byte-sized highlight reel of our weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories. (https://blubrry.com/bhis/) Chat with us on Discord! - https://discord.gg/bhis Brought to you by Antisyphon Training https://www.antisyphontraining.com/ ▶️ This FULL EPISODE: https://youtube.com/live/aabgK9MCXko ▶️ The next EPISODE: https://youtube.com/live/gjwHz7Kv3l4 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com /// All Stories From the Full Episode # 1: DOJ says Google must sell Chrome to crack open its search monopoly https://www.theverge.com/2024/11/20/24300617/doj-google-search-antitrust-chrome-breakup # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership https://blog.google/outreach-initiatives/public-policy/doj-search-remedies-nov-2024/ # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/ # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches https://www.theregister.com/2024/11/19/palo_alto_networks_patches/ # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a # 5: Fintech giant Finastra investigates data breach after SFTP hack https://www.bleepingcomputer.com/news/security/fintech-giant-finastra-investigates-data-breach-after-sftp-hack/ # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking” https://www.consumerfinance.gov/about-us/newsroom/cfpb-finalizes-rule-on-federal-oversight-of-popular-digital-payment-apps-to-protect-personal-data-reduce-fraud-and-stop-illegal-debanking/ # 7: T-Mobile finally managed to thwart a data breach before it occurred https://www.androidpolice.com/t-mobile-thwarts-data-breach-2024/ # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw https://www.bleepingcomputer.com/news/security/d-link-urges-users-to-retire-vpn-routers-impacted-by-unfixed-rce-flaw/ # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators https://www.bleepingcomputer.com/news/legal/us-seizes-popeyetools-cybercrime-marketplace-charges-administrators/ # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison https://www.theverge.com/2024/11/18/24299934/razzlekhan-crypto-bitfinex-hack-heather-morgan # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December https://www.theverge.com/2024/11/19/24300651/netflix-razzlekhan-documentary-trailer-release-date # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It https://www.pcmag.com/news/microsoft-defender-not-enough-this-malware-gets-around-it # 12: Microsoft president asks Trump to “push harder” against Russian hacks https://arstechnica.com/security/2024/11/microsoft-president-asks-trump-to-push-harder-against-russian-hacks/ # 13: Hackers Breach Andrew Tate’s Online ‘University,’ Exposing 800,000 Users https://www.pcmag.com/news/hackers-breach-andrew-tate-university-exposing-800000 # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually https://cybernews.com/security/7-zip-affected-by-dangerous-vulnerability/ # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure https://www.bleepingcomputer.com/news/security/microsoft-disrupts-onnx-phishing-as-a-service-infrastructure/ # 16: US charges five linked to Scattered Spider cybercrime gang https://www.bleepingcomputer.com/news/security/us-charges-five-linked-to-scattered-spider-cybercrime-gang/ ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at Wild West Hackin' Fest: https://wildwesthackinfest.com/ #infosecnews #cybersecurity #podcast #podcastclips </video> <video> REKAST - Talkin' Bout [infosec] News 2024-12-02 #infosecnews #cybersecurity #podcast #podcastclips Description: Join us LIVE on Mondays, 4:430pm EST. Here's a byte-sized highlight reel of our weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories. (https://blubrry.com/bhis/) Chat with us on Discord! - https://discord.gg/bhis Brought to you by Antisyphon Training https://www.antisyphontraining.com/ ▶️ This FULL EPISODE: https://youtube.com/live/gjwHz7Kv3l4 ▶️ The next EPISODE: https://youtube.com/live/uKUy9ZdXGuc 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com /// All Stories From the Full Episode Story # 1: Gaming Engines: An Undetected Playground for Malware Loaders - Check Point Research https://research.checkpoint.com/2024/gaming-engines-an-undetected-playground-for-malware-loaders/ Story # 2: FTC finds that smart-device makers fail to make clear how long their products will be supported https://techcrunch.com/2024/11/26/ftc-finds-that-smart-device-makers-fail-to-make-clear-how-long-their-products-will-be-supported/ Story # 3: US senators propose law to require bare minimum security standards https://www.theregister.com/2024/11/26/us_senators_healthcare_cybersecurity/ Story # 4: Starbucks baristas can’t view their schedules after ransomware attack on vendor https://www.cnbc.com/2024/11/25/starbucks-vendor-hit-by-ransomware-attack-affecting-pay-and-schedules.html Story # 5: Volunteer DEF CON hackers dive into America’s leaky water infrastructure https://www.theregister.com/2024/11/24/water_defcon_hacker/ ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at Wild West Hackin' Fest: https://wildwesthackinfest.com/ #infosecnews #cybersecurity #podcast #podcastclips </video> <video> BHIS - Talkin' Bout [infosec] News 2024-11-25 #livestream #infosec #infosecnews Description: Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔴live-casts-chat Brought to you by: 📄 Black Hills Information Security https://www.blackhillsinfosec.com/ 📄 Antisyphon Training https://www.antisyphontraining.com/ 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com Chapters and News Stories 00:00:00 - PreShow Banter™ — Discordgate 00:10:38 - BHIS - Talkin’ Bout [infosec] News 2024-11-25 00:12:01 - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly https://www.theverge.com/2024/11/20/24300617/doj-google-search-antitrust-chrome-breakup 00:13:28 - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership https://blog.google/outreach-initiatives/public-policy/doj-search-remedies-nov-2024/ 00:20:54 - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/ 00:26:20 - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches https://www.theregister.com/2024/11/19/palo_alto_networks_patches/ 00:27:32 - Discordgate Follow Up 00:28:13 - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a 00:33:11 - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack https://www.bleepingcomputer.com/news/security/fintech-giant-finastra-investigates-data-breach-after-sftp-hack/ 00:36:09 - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking” https://www.consumerfinance.gov/about-us/newsroom/cfpb-finalizes-rule-on-federal-oversight-of-popular-digital-payment-apps-to-protect-personal-data-reduce-fraud-and-stop-illegal-debanking/ 00:41:13 - Story # 7: T-Mobile finally managed to thwart a data breach before it occured https://www.androidpolice.com/t-mobile-thwarts-data-breach-2024/ 00:43:00 - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw https://www.bleepingcomputer.com/news/security/d-link-urges-users-to-retire-vpn-routers-impacted-by-unfixed-rce-flaw/ 00:45:51 - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators https://www.bleepingcomputer.com/news/legal/us-seizes-popeyetools-cybercrime-marketplace-charges-administrators/ 00:49:07 - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison https://www.theverge.com/2024/11/18/24299934/razzlekhan-crypto-bitfinex-hack-heather-morgan 00:51:29 - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December https://www.theverge.com/2024/11/19/24300651/netflix-razzlekhan-documentary-trailer-release-date 00:53:13 - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It https://www.pcmag.com/news/microsoft-defender-not-enough-this-malware-gets-around-it 00:58:22 - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks https://arstechnica.com/security/2024/11/microsoft-president-asks-trump-to-push-harder-against-russian-hacks/ 01:00:14 - Story # 13: Hackers Breach Andrew Tate’s Online ‘University,’ Exposing 800,000 Users https://www.pcmag.com/news/hackers-breach-andrew-tate-university-exposing-800000 01:03:56 - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually https://cybernews.com/security/7-zip-affected-by-dangerous-vulnerability/ 01:05:02 - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure https://www.bleepingcomputer.com/news/security/microsoft-disrupts-onnx-phishing-as-a-service-infrastructure/ 01:06:40 - Story # 16: US charges five linked to Scattered Spider cybercrime gang https://www.bleepingcomputer.com/news/security/us-charges-five-linked-to-scattered-spider-cybercrime-gang/ 01:07:60 - Plug: Secure Code Summit 2024 https://www.antisyphontraining.com/event/secure-code-summit/ #livestream #infosec #news #BHIS #podcast #Cybersecurity #infosecnews </video> <video> REKAST - Talkin' Bout [infosec] News 2024-11-04 #infosecnews #cybersecurity #podcast #podcastclips Description: Join us LIVE on Mondays, 4:430pm EST. Here's a byte-sized highlight reel of our weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔴webcast-live-chat Brought to you by: 📄 Antisyphon Training https://www.antisyphontraining.com/ ▶️ This FULL EPISODE: https://youtube.com/live/ojxy8zC0guw ▶️ The next EPISODE: https://youtube.com/live/LW81lBFX-Tw 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com /// All News Stories From the Full Episode Story # 1: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files https://www.microsoft.com/en-us/security/blog/2024/10/29/midnight-blizzard-conducts-large-scale-spear-phishing-campaign-using-rdp-files/ Story # 2: Follow Up - 5 Things To Know On Delta’s Lawsuit Against CrowdStrike https://www.crn.com/news/security/2024/5-things-to-know-on-delta-s-lawsuit-against-crowdstrike?itc=refresh Story # 2b: CrowdStrike Sues Delta: 5 Key Takeaways https://www.crn.com/news/security/2024/crowdstrike-sues-delta-5-key-takeaways?itc=refresh Story # 3: Russian charged by U.S. for creating RedLine infostealer malware https://www.bleepingcomputer.com/news/security/russian-charged-by-us-for-creating-redline-infostealer-malware/ Story # 3b: How a series of opsec failures led US authorities to the alleged developer of the Redline password-stealing malware https://techcrunch.com/2024/10/29/how-a-series-of-opsec-failures-led-us-authorities-to-the-alleged-developer-of-the-redline-password-stealing-malware/?guccounter=1 Story # 4: Fired Disney staffer accused of hacking menu to add profanity, wingdings, removes allergen info https://www.theregister.com/2024/10/30/fired_disney_employee_hacks_menu/ Story # 4b: ‘We strive to put humanity above all’: Disney drops arbitration demand over wrongful death lawsuit after woman died from fatal food allergy https://lawandcrime.com/lawsuit/we-strive-to-put-humanity-above-all-disney-drops-arbitration-demand-over-wrongful-death-lawsuit-after-woman-died-from-fatal-food-allergy/ Story # 5: OCR Announces First Financial Penalty Under HIPAA Risk Analysis Enforcement Initiative https://www.hipaajournal.com/ocr-first-financial-penalty-hipaa-risk-analysis-enforcement-initiative/ Story # 6: Security researchers found a serious zero-click bug in Synology’s Photos app https://www.engadget.com/computing/security-researchers-found-a-serious-zero-click-bug-in-synologys-photos-app-145147159.html Story # 7: Inside a Firewall Vendor’s 5-Year War With the Chinese Hackers Hijacking Its Devices https://www.wired.com/story/sophos-chengdu-china-five-year-hacker-war/ Story # 8: Microsoft wants $30 if you want to delay Windows 11 switch https://www.bleepingcomputer.com/news/microsoft/microsoft-wants-30-if-you-want-to-delay-windows-11-switch/ Story # 9: Colorado Secretary of State posted spreadsheet with voting system passwords https://www.9news.com/article/news/politics/elections/colorado-secretary-of-state-posted-voting-system-passwords/73-c9264216-7a0a-4d5b-9f64-60a28eb57e4d ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training Discord: https://discord.gg/ffzdt3WUDe ///Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.myshopify.com/collections/bhis-shirt-collections ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ Incident Response: https://www.blackhillsinfosec.com/services/incident-response/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pay-what-you-can/ Live Training: https://www.antisyphontraining.com/course-catalog/ On Demand Training: https://www.antisyphontraining.com/on-demand-course-catalog/ Antisyphon Discord: https://discord.gg/antisyphon Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/ #infosecnews #cybersecurity #podcast #podcastclips </video> <video> REKAST - Talkin' Bout [infosec] News 2024-11-18 #infosecnews #cybersecurity #podcast #podcastclips Description: Join us LIVE on Mondays, 4:430pm EST. Here's a byte-sized highlight reel of our weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔴webcast-live-chat Brought to you by: 📄 Antisyphon Training https://www.antisyphontraining.com/ ▶️ This FULL EPISODE: https://youtube.com/live/lDxeLdpLx5U ▶️ The next EPISODE: https://youtube.com/live/aabgK9MCXko 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com /// All News Stories From the Full Episode Story # 1: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit https://www.theregister.com/2024/11/15/palo_alto_networks_firewall_zeroday/ Story # 2: CISA Director Jen Easterly to depart agency on January 20 https://techcrunch.com/2024/11/18/cisa-director-jen-easterly-to-depart-agency-on-january-20/ Story # 3: Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/ Story # 4: T-Mobile hacked in massive Chinese breach of telecom networks, WSJ reports https://www.reuters.com/technology/cybersecurity/t-mobile-hacked-massive-chinese-breach-telecom-networks-wsj-reports-2024-11-16/ Story # 4b: T-Mobile confirms it was hacked in recent wave of telecom breaches https://www.bleepingcomputer.com/news/security/t-mobile-confirms-it-was-hacked-in-recent-wave-of-telecom-breaches/ Story # 5: An Interview With the Target & Home Depot Hacker https://krebsonsecurity.com/2024/11/an-interview-with-the-target-home-depot-hacker/ Story # 6: Hacker gets 10 years in prison for extorting US healthcare provider https://www.bleepingcomputer.com/news/legal/hacker-gets-10-years-in-prison-for-extorting-us-healthcare-provider/ Story # 7: Ransomware fiends boast they’ve stolen 1.4TB from US pharmacy network https://www.theregister.com/2024/11/13/embargo_ransomware_breach_aap/ Story # 8: A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine https://securityaffairs.com/170779/hacking/south-korea-claims-pro-russia-actors-ddos-attacks.html Story # 9: 23andMe cuts 40% of its workforce and discontinues therapeutics division https://apnews.com/article/23andme-layoffs-discontinues-drug-development-f1356699312d1e5c3915cf4fbc400374 Story # 10: FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023 https://www.bleepingcomputer.com/news/security/fbi-cisa-and-nsa-reveal-most-exploited-vulnerabilities-of-2023/ SANS Holiday Hack Challenge™ 2024 https://www.sans.org/mlp/holiday-hack-challenge-2024/ ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training Discord: https://discord.gg/ffzdt3WUDe ///Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.myshopify.com/collections/bhis-shirt-collections ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ Incident Response: https://www.blackhillsinfosec.com/services/incident-response/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pay-what-you-can/ Live Training: https://www.antisyphontraining.com/course-catalog/ On Demand Training: https://www.antisyphontraining.com/on-demand-course-catalog/ Antisyphon Discord: https://discord.gg/antisyphon Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/ #infosecnews #cybersecurity #podcast #podcastclips </video> <video> REKAST - Talkin' Bout [infosec] News 2024-11-11 #infosecnews #cybersecurity #podcast #podcastclips Description: Join us LIVE on Mondays, 4:430pm EST. Here's a byte-sized highlight reel of our weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔴webcast-live-chat Brought to you by: 📄 Antisyphon Training https://www.antisyphontraining.com/ ▶️ This FULL EPISODE: https://youtube.com/live/LW81lBFX-Tw ▶️ The next EPISODE: https://youtube.com/live/lDxeLdpLx5U 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com /// All News Stories From the Full Episode Story # 1: Mattel pulls thousands of ‘Wicked’ dolls off shelves after printing adult website on packaging https://www.nbcnews.com/business/business-news/mattel-pulls-thousands-wicked-dolls-shelves-printing-adult-website-pac-rcna179665 Story # 2: Office apps crash on Windows 11 24H2 PCs with CrowdStrike antivirus https://www.pcworld.com/article/2511174/crowdstrike-strikes-again-this-time-crashing-office-apps-in-windows-11.html Story # 3: Mislabeled patch sends Windows Server 2022 admins on unwanted upgrade to 2025 https://www.techspot.com/news/105508-mislabeled-patch-sends-windows-server-2022-users-unwanted.html Story # 4: Suspected Snowflake Hacker Arrested in Canada https://www.404media.co/suspected-snowflake-hacker-arrested-in-canada/ Story # 5: Interpol Cybercrime Sweep Takes Down 22,000 IP Addresses, Arrests 41 https://www.pcmag.com/news/interpol-cybercrime-sweep-takes-down-22000-ip-addresses-arrests-41 Story # 6: Google Cloud to mandate MFA for all users in 2025 https://www.cybersecuritydive.com/news/google-cloud-mandate-multifactor-authentication/732141/ Story # 7: Cisco scores a perfect CVSS 10 with critical flaw in its wireless system https://www.theregister.com/2024/11/07/cisco_uiws_flaw/ Story # 8: H.I.G. Capital and Thoma Bravo to Acquire CompTIA Brand and Products https://www.prnewswire.com/news-releases/hig-capital-and-thoma-bravo-to-acquire-comptia-brand-and-products-302294943.html SANS Holiday Hack Challenge™ 2024 https://www.sans.org/mlp/holiday-hack-challenge-2024/ ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training Discord: https://discord.gg/ffzdt3WUDe ///Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.myshopify.com/collections/bhis-shirt-collections ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ Incident Response: https://www.blackhillsinfosec.com/services/incident-response/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pay-what-you-can/ Live Training: https://www.antisyphontraining.com/course-catalog/ On Demand Training: https://www.antisyphontraining.com/on-demand-course-catalog/ Antisyphon Discord: https://discord.gg/antisyphon Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/ #infosecnews #cybersecurity #podcast #podcastclips </video> <video> Intro to Data Analytics using SQL -Ethan Robish #livestream #infosec Description: 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com Intro to Data Analytics using SQL -Ethan Robish 🛝 Webcast Slides - https://www.blackhillsinfosec.com/wp-content/uploads/2024/11/BHIS_PRESENTATION_Intro-to-Data-Analytics-using-SQL-w-Ethan-Robish.pdf What is SQL and why is it worth learning? Come join a former SQL-hater to learn the capabilities of the universal data query language and how you can use it for more than just databases. Join us for a free one-hour Black Hills Information Security (BHIS) webcast with Security Analyst - Ethan Robish, about Intro to Data Analytics using SQL Ethan will cover a broad swath of both introductory and advanced SQL features. If you're looking to push beyond the boundaries of spreadsheets or command line kung fu this webcast is for you. By attending, you'll gain an understanding of the types of problems that SQL excels at along with examples using DuckDB, a modern Swiss army knife of data analytics. Chat with your fellow attendees in the Black Hills Infosec Discord server: https://discord.gg/BHIS in the #🔴webcast-live-chat channel. </video> <video> BHIS - Talkin' Bout [infosec] News 2024-12-02 #livestream #infosec #infosecnews Description: Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔵live-news-chat Brought to you by: 📄 Black Hills Information Security https://www.blackhillsinfosec.com/ 📄 Antisyphon Training https://www.antisyphontraining.com/ 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com Chapters and News Stories 00:00:00 - PreShow Banter™ — C Squad 00:11:34 - BHIS - Talkin’ Bout [infosec] News 2024-12-02 00:16:26 - Story # 1: Gaming Engines: An Undetected Playground for Malware Loaders - Check Point Research https://research.checkpoint.com/2024/gaming-engines-an-undetected-playground-for-malware-loaders/ 00:31:39 - Story # 2: FTC finds that smart-device makers fail to make clear how long their products will be supported https://techcrunch.com/2024/11/26/ftc-finds-that-smart-device-makers-fail-to-make-clear-how-long-their-products-will-be-supported/ 00:45:56 - Story # 3: US senators propose law to require bare minimum security standards https://www.theregister.com/2024/11/26/us_senators_healthcare_cybersecurity/ 00:47:47 - Story # 4: Starbucks baristas can’t view their schedules after ransomware attack on vendor https://www.cnbc.com/2024/11/25/starbucks-vendor-hit-by-ransomware-attack-affecting-pay-and-schedules.html 01:05:48 - Story # 5: Volunteer DEF CON hackers dive into America’s leaky water infrastructure https://www.theregister.com/2024/11/24/water_defcon_hacker/ 01:10:15 - Shameless Plugs #livestream #infosec #news #BHIS #podcast #Cybersecurity #infosecnews </video> <video> The Detection Engineering Process w/ Hayden Covington #livestream Description: 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com 🛝 Webcast Slides - https://www.blackhillsinfosec.com/wp-content/uploads/2024/11/SLIDES_The-Detection-Engineering-Process.pdf The Detection Engineering Process w/ Hayden Covington Want to elevate your detection engineering process—and by extension, your threat detections?    Join us for a free one-hour Black Hills Information Security (BHIS) webcast by Hayden Covington - SOC Team on -- The Detection Engineering Process.   He'll teach how applying scientific principles to detection engineering can dramatically improve your threat detection program, processes, and results. You'll learn: –The foundational elements of a scientific approach to detection engineering –How to approach each step with a clear purpose from the start –Strategies for continuous improvement and advanced detection techniques Hayden is an advocate for scientific rigor in cybersecurity; he'll share insights and personal experiences about how a structured process leads to higher-quality threat detections and happier SOC analysts. Chat with your fellow attendees in the Black Hills Infosec Discord server: https://discord.gg/BHIS in the #🔴webcast-live-chat channel. </video> <video> BHIS - Talkin' Bout [infosec] News 2024-11-18 #livestream #infosec #infosecnews Description: Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔴webcast-live-chat Brought to you by: 📄 Black Hills Information Security https://www.blackhillsinfosec.com/ 📄 Antisyphon Training https://www.antisyphontraining.com/ 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com Chapters and News Stories 00:00 - PreShow Banter™ — Yacht Doc 08:25 - BHIS - Talkin’ Bout [infosec] News 2024-11-18 09:37 - Story # 1: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit https://www.theregister.com/2024/11/15/palo_alto_networks_firewall_zeroday/ 16:54 - Story # 2: CISA Director Jen Easterly to depart agency on January 20 https://techcrunch.com/2024/11/18/cisa-director-jen-easterly-to-depart-agency-on-january-20/ 20:22 - Story # 3: Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/ 29:40 - Story # 4: T-Mobile hacked in massive Chinese breach of telecom networks, WSJ reports https://www.reuters.com/technology/cybersecurity/t-mobile-hacked-massive-chinese-breach-telecom-networks-wsj-reports-2024-11-16/ 31:54 - Story # 4b: T-Mobile confirms it was hacked in recent wave of telecom breaches https://www.bleepingcomputer.com/news/security/t-mobile-confirms-it-was-hacked-in-recent-wave-of-telecom-breaches/ 34:14 - Story # 5: An Interview With the Target & Home Depot Hacker https://krebsonsecurity.com/2024/11/an-interview-with-the-target-home-depot-hacker/ 41:24 - Story # 6: Hacker gets 10 years in prison for extorting US healthcare provider https://www.bleepingcomputer.com/news/legal/hacker-gets-10-years-in-prison-for-extorting-us-healthcare-provider/ 44:18 - Story # 7: Ransomware fiends boast they’ve stolen 1.4TB from US pharmacy network https://www.theregister.com/2024/11/13/embargo_ransomware_breach_aap/ 45:59 - Story # 8: A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine https://securityaffairs.com/170779/hacking/south-korea-claims-pro-russia-actors-ddos-attacks.html 47:02 - Story # 9: 23andMe cuts 40% of its workforce and discontinues therapeutics division https://apnews.com/article/23andme-layoffs-discontinues-drug-development-f1356699312d1e5c3915cf4fbc400374 52:26 - Story # 10: FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023 https://www.bleepingcomputer.com/news/security/fbi-cisa-and-nsa-reveal-most-exploited-vulnerabilities-of-2023/ 58:38 - CPTC - Education Through Competition #livestream #infosec #news #BHIS #podcast #Cybersecurity #infosecnews </video> <video> BHIS - Talkin' Bout [infosec] News 2024-11-11 #livestream #infosec #infosecnews Description: Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔴webcast-live-chat Brought to you by: 📄 Black Hills Information Security https://www.blackhillsinfosec.com/ 📄 Antisyphon Training https://www.antisyphontraining.com/ 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com Chapters and News Stories 00:00:00 - PreShow Banter™ — The Old and The New 00:02:30 - BHIS - Talkin’ Bout [infosec] News 2024-11-11 00:03:52 - Story # 1: Mattel pulls thousands of ‘Wicked’ dolls off shelves after printing adult website on packaging https://www.nbcnews.com/business/business-news/mattel-pulls-thousands-wicked-dolls-shelves-printing-adult-website-pac-rcna179665 00:08:14 - Story # 2: Office apps crash on Windows 11 24H2 PCs with CrowdStrike antivirus https://www.pcworld.com/article/2511174/crowdstrike-strikes-again-this-time-crashing-office-apps-in-windows-11.html 00:11:52 - Story # 3: Mislabeled patch sends Windows Server 2022 admins on unwanted upgrade to 2025 https://www.techspot.com/news/105508-mislabeled-patch-sends-windows-server-2022-users-unwanted.html 00:17:04 - Story # 4: Suspected Snowflake Hacker Arrested in Canada https://www.404media.co/suspected-snowflake-hacker-arrested-in-canada/ 00:18:41 - Story # 5: Interpol Cybercrime Sweep Takes Down 22,000 IP Addresses, Arrests 41 https://www.pcmag.com/news/interpol-cybercrime-sweep-takes-down-22000-ip-addresses-arrests-41 00:30:10 - Story # 6: Google Cloud to mandate MFA for all users in 2025 https://www.cybersecuritydive.com/news/google-cloud-mandate-multifactor-authentication/732141/ 00:42:10 - Story # 7: Cisco scores a perfect CVSS 10 with critical flaw in its wireless system https://www.theregister.com/2024/11/07/cisco_uiws_flaw/ 00:50:54 - Story # 8: H.I.G. Capital and Thoma Bravo to Acquire CompTIA Brand and Products https://www.prnewswire.com/news-releases/hig-capital-and-thoma-bravo-to-acquire-comptia-brand-and-products-302294943.html 01:00:48 - SANS Holiday Hack Challenge™ 2024 https://www.sans.org/mlp/holiday-hack-challenge-2024/ #livestream #infosec #news #BHIS #podcast #Cybersecurity #infosecnews </video> <video> Ransomware Gang Scattered Spider Chared! #ransomeware #gang #infosec #podcast #hacker Description: /// 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training Discord: https://discord.gg/ffzdt3WUDe ///Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.myshopify.com/collections/bhis-shirt-collections ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ Incident Response: https://www.blackhillsinfosec.com/services/incident-response/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pay-what-you-can/ Live Training: https://www.antisyphontraining.com/course-catalog/ On Demand Training: https://www.antisyphontraining.com/on-demand-course-catalog/ Antisyphon Discord: https://discord.gg/antisyphon Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/ </video> <video> BHIS - Talkin' Bout [infosec] News 2024-12-09 #livestream #infosec #infosecnews Description: Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. stories. (https://blubrry.com/bhis/) We discuss notable Infosec, and infosec-adjacent news stories. Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat Brought to you by: 📄 Black Hills Information Security https://www.blackhillsinfosec.com/ 📄 Antisyphon Training https://www.antisyphontraining.com/ 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com News Stories and Chapters 00:00 - PreShow Banter™ — Mike Problems 05:30 - BHIS - Talkin’ Bout [infosec] News 2024-12-09 06:28 - Story # 1: FBI Warns iPhone And Android Users—Stop Sending Texts https://www.forbes.com/sites/zakdoffman/2024/12/06/fbi-warns-iphone-and-android-users-stop-sending-texts/ 24:43 - Story # 2: US agency proposes new rule blocking data brokers from selling Americans’ sensitive personal data https://techcrunch.com/2024/12/03/us-agency-proposes-new-rule-blocking-data-brokers-from-selling-americans-sensitive-personal-data/ 44:25 - Story # 3: Vodka maker Stoli files for bankruptcy in US after ransomware attack https://www.bleepingcomputer.com/news/security/vodka-maker-stoli-files-for-bankruptcy-in-us-after-ransomware-attack/ 48:23 - Story # 4: British hospitals hit by cyberattacks still battling to get systems back online https://www.theregister.com/2024/12/05/hospital_cyberattack/ #livestream #infosec #news #BHIS #podcast #Cybersecurity #infosecnews </video> <video> Check Out This Hacker 5 Floor Plan! #russia #hacker #exposedtruth #cybersecurity Description: /// 🔗 Register for webcasts, summits, and workshops - https://poweredbybhis.com ///Black Hills Infosec Socials Twitter: https://twitter.com/BHinfoSecurity Mastodon: https://infosec.exchange/@blackhillsinfosec LinkedIn: https://www.linkedin.com/company/antisyphon-training Discord: https://discord.gg/ffzdt3WUDe ///Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.myshopify.com/collections/bhis-shirt-collections ///Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/services/active-soc/ Penetration Testing: https://www.blackhillsinfosec.com/services/ Incident Response: https://www.blackhillsinfosec.com/services/incident-response/ ///Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ ///Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pay-what-you-can/ Live Training: https://www.antisyphontraining.com/course-catalog/ On Demand Training: https://www.antisyphontraining.com/on-demand-course-catalog/ Antisyphon Discord: https://discord.gg/antisyphon Antisyphon Mastodon: https://infosec.exchange/@Antisy_Training ///Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube: https://www.youtube.com/wildwesthackinfest Antisyphon Training YouTube: https://www.youtube.com/antisyphontraining Active Countermeasures YouTube: https://youtube.com/activecountermeasures Threat Hunter Community Discord: https://discord.gg/threathunter Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/ </video>

Contacts and Links

Description

We were once brand new to infosec too! With that in mind we want to help educate everyone in this rapidly evolving cybersecurity industry!

Resources We Offer:
– Free Webcasts
– Free Infosec Tools
– Thriving Discord Community
– Website Blogs
– Backdoors & Breaches - Incident Response Card Game
– REKCAH Comics!
– Prompt# Zine
– INFOSEC Survival Guide
– Fashionable Merch & Cool Swag

BHIS Services:
– Incident Response
– Pentesting
– Continuous Pentesting (ANTI-SOC)
– Active SOC
– Blue Team Services
– High Profile Risk Assestments
– Hunt Team Operations
– Blockchain Security

Sister Tribes:
– Antisyphon Training
– Active Countermeasures
– Wild West Hackin' Fest
– REKCAH Publishing

“Study hard what interests you the most in the most undisciplined, irreverent and original manner possible.” - Richard Feynman

Videos from channel