https://frsecure.com/cyber-threat-intel-series/enTechnologyCopyright The InfoSec Missionhttps://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/a21dd90560fa74363f1561192aa07d37.jpghttps://frsecure.com/cyber-threat-intel-series/Fri, 08 May 2026 16:56:42 +0000The InfoSec MissionThe InfoSec Missionhacklebox@frsecure.comThe Hackle Box is a monthly cyber threat intel discussion where Oscar Minks and members of FRSecure's technical services team (Team Ambush) break down the latest trends in the information security industry involving hacking techniques,...falseepisodichttps://www.spreaker.com/episode/the-hackle-box-april-2026-eviltokens-vuln-management-for-iot-fbi-surveillance-breach--71926732

• New Evil Tokens attack and its implications for cybersecurity
• The importance of comprehensive vulnerability management programs for IoT devices
• Insights into the FBI surveillance system breach and what it means for global cybersecurity
• The rise of phishing-as-a-service and how attackers are evolving
• A special shout-out to Matthew Owens for discovering a CVE in IDrive for Windows

Tune in for insights on these topics, and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in real-world exploits and incidents.

• The Catch of the Month
• The Phishing Report
• Live Q&A
• Guest Speakers
• And more!

If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-int...

Please like, subscribe, and follow us on social!
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.




]]>https://api.spreaker.com/episode/71926732Fri, 08 May 2026 16:55:59 +0000The InfoSec MissionWe're BACK with another live Hackle Box episode to break down what's trending in cyber attacks and incident response. This month, the crew discussed: - New Evil Tokens attack and its implications for cybersecurity - The importance of comprehensive...

• New Evil Tokens attack and its implications for cybersecurity
• The importance of comprehensive vulnerability management programs for IoT devices
• Insights into the FBI surveillance system breach and what it means for global cybersecurity
• The rise of phishing-as-a-service and how attackers are evolving
• A special shout-out to Matthew Owens for discovering a CVE in IDrive for Windows

Tune in for insights on these topics, and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in real-world exploits and incidents.

• The Catch of the Month
• The Phishing Report
• Live Q&A
• Guest Speakers
• And more!

If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-int...

Please like, subscribe, and follow us on social!
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.




]]>3450breach,business,cyber,cybersecurity,data,eric_hanson,eviltokens,fbi,frsecure,hacklebox,infosec,iot,management,oscar_minks,phishing,pinky_thompson,privacy,security,surveillance,vulnerabilitiesfalsefullhttps://www.spreaker.com/episode/the-hackle-box-march-2026-arpa-cybersecurity-strategy-for-america-seedworm-iran-ai-red-team--70610413
This month, we're discussing:

• Hackers abusing .arpa domain to evade phishing detection
• President Trump's Cybersecurity Strategy for America
• Seedworm and Iranian APTs
• Armadin Series A Funding

Tune in for insights on these topics, and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in real-world exploits and incidents.

• The Catch of the Month
• The Phishing Report
• Live Q&A
• Guest Speakers
• And more!

If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social!
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

]]>https://api.spreaker.com/episode/70610413Thu, 12 Mar 2026 16:10:23 +0000The InfoSec MissionWe're BACK with another live Hackle Box episode to break down what's trending in cyber attacks and incident response. This month, we're discussing: - Hackers abusing .arpa domain to evade phishing detection - President Trump's Cybersecurity Strategy...
This month, we're discussing:

• Hackers abusing .arpa domain to evade phishing detection
• President Trump's Cybersecurity Strategy for America
• Seedworm and Iranian APTs
• Armadin Series A Funding

Tune in for insights on these topics, and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in real-world exploits and incidents.

• The Catch of the Month
• The Phishing Report
• Live Q&A
• Guest Speakers
• And more!

If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social!
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

]]>3424ai,apts,armadin,.arpa,business,cyber,cyberattack,cybersecurity,exfiltration,frsecure,hacking,hacklebox,infosec,iran,minks,netsec,phishing,seedworm,strategy,threatsfalsefullhttps://www.spreaker.com/episode/the-hackle-box-feb-2026-notepad-microsoft-phishing-solarwinds-ring--70049692
This month, Oscar, Eric, and special guest Matt Findlay discussed:

• Notepad++ Vulnerabilities
• Phishing from legitimate Microsoft inboxes
• Solarwinds Remote Code Execution
• Ring's New Surveillance Feature

Tune in every month for insights on similar topics and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in the real-world:

• The Catch of the Month
• The Phishing Report
• Live Q&A
• Guest Speakers
• And more!

If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow FRSecure on social!


]]>https://api.spreaker.com/episode/70049692Fri, 13 Feb 2026 21:36:46 +0000The InfoSec Mission2026 is off to quite the start! After a New Year's break, we're BACK with another Hackle Box episode to discuss what we've seen so far in the offensive services and incident response sides of the infosec industry!  This month, Oscar, Eric, and...
This month, Oscar, Eric, and special guest Matt Findlay discussed:

• Notepad++ Vulnerabilities
• Phishing from legitimate Microsoft inboxes
• Solarwinds Remote Code Execution
• Ring's New Surveillance Feature

Tune in every month for insights on similar topics and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in the real-world:

• The Catch of the Month
• The Phishing Report
• Live Q&A
• Guest Speakers
• And more!

If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow FRSecure on social!


]]>2937bi,breaches,business,camera,cve,cybersecurity,frsecure,hacklebox,infosec,kev,microsoft,notepad++,phishing,privacy,rce,ring,solarwinds,supplychain,surveillance,vulnerabilitiesfalsefullhttps://www.spreaker.com/episode/june-2025-q-a-session-cisa-updates--66481599
To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social! 
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure: https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/66481599Tue, 10 Jun 2025 15:14:22 +0000The InfoSec MissionIn this quarterly live Q&A session, the gang dives into the recent CISA budget cuts and hands it over to the audience for discussion. Tune in to get your updates, hear what folks are talking about, and a little on boats! To stay updated on all...
To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social! 
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure: https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>2889cisa,cyber,cybersecurity,ethical,frsecure,hacking,incident,information,infosec,intelligence,oscarminks,phishing,pinkythompson,response,security,threat,threatsfalsefullhttps://www.spreaker.com/episode/vibe-coding-malicious-ai-models-more--66075426
Links:
"AI-Hallucinated Code Dependencies Become New Supply Chain Risk" 

"Vehicles Face 45% More Attacks, 4 Times More Hackers" https://www.darkreading.com/vulnerabilities-threats/vehicles-45-more-attacks-4-times-more-hackers

"'Venom Spider' Targets Hiring Managers in Phishing Scheme"
https://www.darkreading.com/cyber-risk/venom-spider-phishing-scheme

"CISA Warns 2 SonicWall Vulnerabilities Under Active Exploitation" https://www.darkreading.com/threat-intelligence/two-sonicwall-vulnerabilities-under-exploitation

"Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach" https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html

Be sure to submit your questions for our quarterly Q&A Episodes!
Ask Our Security Experts Anything!

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social!

LinkedIn: frsecure
Instagram: @frsecureofficial
Facebook: frsecureBlueSky: @frsecure

About FRSecure:
https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/66075426Tue, 13 May 2025 19:19:59 +0000The InfoSec MissionJoin us for our May Hackle Box session! The crew explores the emerging concept of "vibe coding", also known as vulnerability as a service, and unpacks its implications for cybersecurity. The team discusses how large language models (LLMs) may...
Links:
"AI-Hallucinated Code Dependencies Become New Supply Chain Risk" 

"Vehicles Face 45% More Attacks, 4 Times More Hackers" https://www.darkreading.com/vulnerabilities-threats/vehicles-45-more-attacks-4-times-more-hackers

"'Venom Spider' Targets Hiring Managers in Phishing Scheme"
https://www.darkreading.com/cyber-risk/venom-spider-phishing-scheme

"CISA Warns 2 SonicWall Vulnerabilities Under Active Exploitation" https://www.darkreading.com/threat-intelligence/two-sonicwall-vulnerabilities-under-exploitation

"Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach" https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html

Be sure to submit your questions for our quarterly Q&A Episodes!
Ask Our Security Experts Anything!

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social!

LinkedIn: frsecure
Instagram: @frsecureofficial
Facebook: frsecureBlueSky: @frsecure

About FRSecure:
https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3606falsefullhttps://www.spreaker.com/episode/ai-driven-attack-platforms-record-breaking-ransoms-neptune-rat-more--65569964
Links:

• "Autonomous, GenAI-Driven Attacker Platform Enters the Chat"
  • https://www.darkreading.com/threat-intelligence/autonomous-genai-attacker-platform-chat 
• "Fortune 50 Co. Pays Record-Breaking $75M Ransomware Demand"
  • https://www.darkreading.com/threat-intelligence/fortune-50-company-pays-record-breaking-75m-ransomware-demand
• "Hackers lurked in Treasury OCC’s systems since June 2023 breach"
  • https://www.bleepingcomputer.com/news/security/hackers-lurked-in-treasury-occs-systems-since-june-2023-breach/
• "NEPTUNE RAT : An advanced Windows RAT with System Destruction Capabilities and Password Exfiltration from 270+ Applications"
  • https://www.cyfirma.com/research/neptune-rat-an-advanced-windows-rat-with-system-destruction-capabilities-and-password-exfiltration-from-270-applications/

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social!
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>https://api.spreaker.com/episode/65569964Mon, 14 Apr 2025 19:55:43 +0000The InfoSec MissionIn this month's edition of the Hackle Box, the guys are joined by Kevin Gunter, a penetration tester at FRSecure, to discuss "Xanthorox AI," a record-breaking $75M ransomware demand, a US Treasury breach going back to 2023, and Neptune RAT. Links: -...
Links:

• "Autonomous, GenAI-Driven Attacker Platform Enters the Chat"
  • https://www.darkreading.com/threat-intelligence/autonomous-genai-attacker-platform-chat 
• "Fortune 50 Co. Pays Record-Breaking $75M Ransomware Demand"
  • https://www.darkreading.com/threat-intelligence/fortune-50-company-pays-record-breaking-75m-ransomware-demand
• "Hackers lurked in Treasury OCC’s systems since June 2023 breach"
  • https://www.bleepingcomputer.com/news/security/hackers-lurked-in-treasury-occs-systems-since-june-2023-breach/
• "NEPTUNE RAT : An advanced Windows RAT with System Destruction Capabilities and Password Exfiltration from 270+ Applications"
  • https://www.cyfirma.com/research/neptune-rat-an-advanced-windows-rat-with-system-destruction-capabilities-and-password-exfiltration-from-270-applications/

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social!
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>3473ai,bcp,blueteam,breaches,cyber,cybersecurity,dr,exfiltration,frsecure,hacklebox,incident,infosec,ir,neptunerat,netsec,ransomware,redteam,threat,treasury,xanthoroxfalsefullhttps://www.spreaker.com/episode/march-2025-q-a-open-call--64959621
Now happening quarterly, listeners can ask all things security to our expert crew! The next Q & A Session will be held June 13th. Submit questions to our survey here: https://www.surveymonkey.com/r/thehacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social! 

LinkedIn: https://www.facebook.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/64959621Tue, 18 Mar 2025 18:35:20 +0000The InfoSec MissionApproaching the end of Q1, this special-edition episode answers questions from the audience including the U.S. Cyber Command's suspended operations against Russia and some essential beard maintenance. Security Analyst Tim Boyer sits in for Pinky to...
Now happening quarterly, listeners can ask all things security to our expert crew! The next Q & A Session will be held June 13th. Submit questions to our survey here: https://www.surveymonkey.com/r/thehacklebox

To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/

Please like, subscribe, and follow us on social! 

LinkedIn: https://www.facebook.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social

About FRSecure:
https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3267box,cisa,cyber,cybersecurity,ethical,frsecure,hacking,hackle,incident,information,infosec,intelligence,response,security,threat,threatsfalsefullhttps://www.spreaker.com/episode/deepseek-ransomware-decline-new-exploited-vulnerabilities-more--64440848
Links:
"DeepSeek App Transmits Sensitive User and Device Data Without Encryption" https://thehackernews.com/2025/02/deepseek-app-transmits-sensitive-user.html

"DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked" https://thehackernews.com/2025/01/deepseek-ai-database-exposed-over-1.html

"Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023" https://thehackernews.com/2025/02/ransomware-extortion-drops-to-8135m-in.html

"CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25" https://thehackernews.com/2025/02/cisa-adds-four-actively-exploited.html

"Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software" https://thehackernews.com/2025/02/palo-alto-networks-patches.html

Please like, subscribe, and follow us on social! 

• Facebook: https://www.facebook.com/frsecure/
• Twitter: https://twitter.com/frsecure/ 
• Instagram: https://www.instagram.com/frsecureofficial/ 
• LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure:
https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/64440848Tue, 18 Feb 2025 22:25:13 +0000The InfoSec MissionOscar, Pinky, and Eric dive into DeepSeek, the downward trend of Ransomware extortions, and new, actively exploited vulnerabilities. Links: "DeepSeek App Transmits Sensitive User and Device Data Without Encryption"...
Links:
"DeepSeek App Transmits Sensitive User and Device Data Without Encryption" https://thehackernews.com/2025/02/deepseek-app-transmits-sensitive-user.html

"DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked" https://thehackernews.com/2025/01/deepseek-ai-database-exposed-over-1.html

"Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023" https://thehackernews.com/2025/02/ransomware-extortion-drops-to-8135m-in.html

"CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25" https://thehackernews.com/2025/02/cisa-adds-four-actively-exploited.html

"Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software" https://thehackernews.com/2025/02/palo-alto-networks-patches.html

Please like, subscribe, and follow us on social! 

• Facebook: https://www.facebook.com/frsecure/
• Twitter: https://twitter.com/frsecure/ 
• Instagram: https://www.instagram.com/frsecureofficial/ 
• LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure:
https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3267box,cisa,cyber,cybersecurity,ethical,frsecure,hacking,hackle,incident,information,infosec,intelligence,minks,oscar,pinky,response,security,thompson,threat,threatsfalsefullhttps://www.spreaker.com/episode/rcs-authquake-the-night-before-breachmas--63478740
Links:
"FBI Warns iPhone And Android Users—Stop Sending Texts" https://www.forbes.com/sites/zakdoffman/2024/12/06/fbi-warns-iphone-and-android-users-stop-sending-texts/ 

"Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts" https://thehackernews.com/2024/12/microsoft-mfa-authquake-flaw-enabled.html?m=1

"Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections" https://thehackernews.com/2024/11/researchers-uncover-malware-using-byovd.html?m=1

Please like, subscribe, and follow us on social! 

Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure:
https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. 

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/63478740Thu, 26 Dec 2024 17:46:50 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.  This special holiday episode, Pinky shares a reading of "The Night Before Breachmas", the gang...
Links:
"FBI Warns iPhone And Android Users—Stop Sending Texts" https://www.forbes.com/sites/zakdoffman/2024/12/06/fbi-warns-iphone-and-android-users-stop-sending-texts/ 

"Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts" https://thehackernews.com/2024/12/microsoft-mfa-authquake-flaw-enabled.html?m=1

"Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections" https://thehackernews.com/2024/11/researchers-uncover-malware-using-byovd.html?m=1

Please like, subscribe, and follow us on social! 

Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure:
https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. 

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3555falsefullhttps://www.spreaker.com/episode/solarwinds-attack-disclosures-owasp-s-ai-security-guidance-more--62710236
This month, Oscar and the crew focus on SolarWinds cyber attack and the resulting charges from the SEC, guidance from OWASP on AI Security, and CISCO's security patch.

Links: "Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users" https://thehackernews.com/2024/11/goo...

"SEC Charges 4 Companies Over Misleading SolarWinds Cyber Attack Disclosures" https://thehackernews.com/2024/10/sec...

"OWASP Releases AI Security Guidance" https://www.darkreading.com/applicati...

"Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems" https://thehackernews.com/2024/11/cis...

Please like, subscribe, and follow us on social! 
Facebook: FRSecure LLC
Twitter: @FRSecure
Instagram: @FRSecureofficial
LinkedIn: FRSecure


About FRSecure: https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.

]]>https://api.spreaker.com/episode/62710236Wed, 13 Nov 2024 16:29:19 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.  This month, Oscar and the crew focus on SolarWinds cyber attack and the resulting charges from the...
This month, Oscar and the crew focus on SolarWinds cyber attack and the resulting charges from the SEC, guidance from OWASP on AI Security, and CISCO's security patch.

Links: "Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users" https://thehackernews.com/2024/11/goo...

"SEC Charges 4 Companies Over Misleading SolarWinds Cyber Attack Disclosures" https://thehackernews.com/2024/10/sec...

"OWASP Releases AI Security Guidance" https://www.darkreading.com/applicati...

"Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems" https://thehackernews.com/2024/11/cis...

Please like, subscribe, and follow us on social! 
Facebook: FRSecure LLC
Twitter: @FRSecure
Instagram: @FRSecureofficial
LinkedIn: FRSecure


About FRSecure: 3437breach,cisa,consulting,cyber,cybersecurity,ethical,frsecure,hacking,hacklebox,incident,information,infosec,intelligence,minks,network,response,sec,security,threat,threatsfalse36fullhttps://www.spreaker.com/episode/internet-archive-hacked-new-cisa-warnings-zero-day-alert--62507218
This month, the hosts talk about personal preparation for emergency events like natural disasters, the DDOS attacks of Internet Archive, newest CISA warnings, and Zero Day Alert for Ivanti exploitation. They also open up to the live audience for questions!

Links: "Internet Archive Hacked, Data Breach Impacts 31 Million Users" https://www.bleepingcomputer.com/news/security/internet-archive-hacked-data-breach-impacts-31-million-users/

"CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches" https://thehackernews.com/2024/10/cisa-warns-of-critical-fortinet-flaw-as.html

"Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited" https://thehackernews.com/2024/10/zero-day-alert-three-critical-ivanti.html

"N. Korean Hackers Use Fake Interviews to Infect Developers with Cross-Platform Malware" https://thehackernews.com/2024/10/n-korean-hackers-use-fake-interviews-to.html

Please like, subscribe, and follow us on social! 
Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure: https://frsecure.com/ 
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/62507218Mon, 28 Oct 2024 21:01:14 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.  This month, the hosts talk about personal preparation for emergency events like natural...
This month, the hosts talk about personal preparation for emergency events like natural disasters, the DDOS attacks of Internet Archive, newest CISA warnings, and Zero Day Alert for Ivanti exploitation. They also open up to the live audience for questions!

Links: "Internet Archive Hacked, Data Breach Impacts 31 Million Users" https://www.bleepingcomputer.com/news/security/internet-archive-hacked-data-breach-impacts-31-million-users/

"CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches" https://thehackernews.com/2024/10/cisa-warns-of-critical-fortinet-flaw-as.html

"Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited" https://thehackernews.com/2024/10/zero-day-alert-three-critical-ivanti.html

"N. Korean Hackers Use Fake Interviews to Infect Developers with Cross-Platform Malware" https://thehackernews.com/2024/10/n-korean-hackers-use-fake-interviews-to.html

Please like, subscribe, and follow us on social! 
Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure: https://frsecure.com/ 
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3523box,cisa,cyber,cybersecurity,ethical,frsecure,hacking,hackle,incident,information,infosec,intelligence,minks,oscar,pinky,response,security,thompson,threat,threatsfalsefullhttps://www.spreaker.com/episode/worm-driven-usb-attacks-microsoft-zero-days-scattered-spider-vishing-smishing--61869949
With Oscar out traveling, Pinky and Eric lead the discussion this month. Together, they discuss: A worm-driven USB attack strategy, Microsoft's disclosure of four zero-days in their September update, and the Scattered Spider ransomware group's sophisticated smishing and vishing campaigns on cloud services. They also open up to the live audience for questions!

Links: 
Mustang Panda Feeds Worm-Driven USB Attack Strategy
https://www.darkreading.com/cyberattacks-data-breaches/mustang-panda-worm-driven-usb-attack

Microsoft Discloses 4 Zero-Days in September Update
https://www.darkreading.com/application-security/microsoft-discloses-4-zero-days-in-september-update

Socially Savvy Scattered Spider Traps Cloud Admins in Web
https://www.darkreading.com/cloud-security/socially-savvy-scattered-spider-traps-cloud-admins-in-web


Please like, subscribe, and follow us on social!

About FRSecure
https://frsecure.com/ 
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/61869949Mon, 16 Sep 2024 21:54:03 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. With Oscar out traveling, Pinky and Eric lead the discussion this month. Together, they discuss: A...
With Oscar out traveling, Pinky and Eric lead the discussion this month. Together, they discuss: A worm-driven USB attack strategy, Microsoft's disclosure of four zero-days in their September update, and the Scattered Spider ransomware group's sophisticated smishing and vishing campaigns on cloud services. They also open up to the live audience for questions!

Links: 
Mustang Panda Feeds Worm-Driven USB Attack Strategy
https://www.darkreading.com/cyberattacks-data-breaches/mustang-panda-worm-driven-usb-attack

Microsoft Discloses 4 Zero-Days in September Update
https://www.darkreading.com/application-security/microsoft-discloses-4-zero-days-in-september-update

Socially Savvy Scattered Spider Traps Cloud Admins in Web
https://www.darkreading.com/cloud-security/socially-savvy-scattered-spider-traps-cloud-admins-in-web


Please like, subscribe, and follow us on social!

About FRSecure
https://frsecure.com/ 
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3579attacks,breaches,cloud,cyber,cybersecurity,exploits,frsecure,hacking,hacklebox,infosec,microsoft,minks,netsec,phishing,servers,smishing,usb,vishing,vulnerabilities,zero-dayfalse34fullhttps://www.spreaker.com/episode/teamviewer-apt29-attack-zero-click-outlook-rce-vulnerability-cisa-takedown-of-ivanti-systems--60699694
This time, they discuss Midnight Blizzard, a zero-click Outlook vulnerability, and CISA's takedown of Ivanti Systems.

Links: 
Network Segmentation Saved TeamViewer From APT29 Attack https://www.darkreading.com/cyberattacks-data-breaches/teamviewer-network-segmentation-apt29-attack

Zero-Click Outlook RCE Vulnerability - Project Hyphae
https://projecthyphae.com/threat/zero-click-outlook-rce-vulnerability/ 

CISA Takedown of Ivanti Systems Is a Wake-up Call
https://www.darkreading.com/vulnerabilities-threats/cisa-takedown-ivanti-systems-is-wake-up-call

Please like, subscribe, and follow us on social! 
Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure
https://frsecure.com/ 
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/60699694Tue, 16 Jul 2024 14:49:15 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.  This time, they discuss Midnight Blizzard, a zero-click Outlook vulnerability, and CISA's takedown...
This time, they discuss Midnight Blizzard, a zero-click Outlook vulnerability, and CISA's takedown of Ivanti Systems.

Links: 
Network Segmentation Saved TeamViewer From APT29 Attack https://www.darkreading.com/cyberattacks-data-breaches/teamviewer-network-segmentation-apt29-attack

Zero-Click Outlook RCE Vulnerability - Project Hyphae
https://projecthyphae.com/threat/zero-click-outlook-rce-vulnerability/ 

CISA Takedown of Ivanti Systems Is a Wake-up Call
https://www.darkreading.com/vulnerabilities-threats/cisa-takedown-ivanti-systems-is-wake-up-call

Please like, subscribe, and follow us on social! 
Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure
https://frsecure.com/ 
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.  These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3476apt29,blue-team,cisa,cyber,cybersecurity,data-security,frsecure,hacking,hackle-box,incident-response,infosec,ivanti,midnight-blizzard,minks,netsec,network-segmentation,outlook,rce,red-team,teamviewerfalsefullhttps://www.spreaker.com/episode/police-troll-lockbit-microsoft-holds-execs-accountable-for-security--60011305
This time, they discuss critical Citrix flaws, fake journalists stealing data, Microsoft holding execs accountable for security, police trolling a ransomware gang, and more.

Links: 

Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway
https://thehackernews.com/2023/10/critical-citrix-netscaler-flaw.html

Apt42 Pose As Journalists, Harvest Credentials, Access Cloud Data
https://attackfeed.com/apt42-hackers-pose-as-journalists-to-harvest-credentials-and-access-cloud-data-infothehackernews-com-the-hacker-news/

Microsoft Will Hold Execs Accountable for Cybersecurity
https://www.darkreading.com/cloud-security/feds-microsoft-clean-up-cloud-security-act

Burnout Is Pushing Workers to Use AI—Even If Their Boss Doesn’t Know
https://www.wired.com/story/ai-workers-burnout-microsoft-linkedin/

Police Resurrect LockBit's Site and Troll the Ransomware Gang | TechCrunch
https://techcrunch.com/2024/05/06/police-resurrect-lockbits-site-and-troll-the-ransomware-gang/

US Indicts LockBit Ransomware Ringleader, Offers $10 Million Reward
https://www.theverge.com/2024/5/7/24151493/us-lockbit-ransomware-ringleader-indictment-reward

Please like, subscribe, and follow us on social! 

Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. 

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>https://api.spreaker.com/episode/60011305Mon, 13 May 2024 21:22:34 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.  This time, they discuss critical Citrix flaws, fake journalists stealing data, Microsoft holding...
This time, they discuss critical Citrix flaws, fake journalists stealing data, Microsoft holding execs accountable for security, police trolling a ransomware gang, and more.

Links: 

Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway
https://thehackernews.com/2023/10/critical-citrix-netscaler-flaw.html

Apt42 Pose As Journalists, Harvest Credentials, Access Cloud Data
https://attackfeed.com/apt42-hackers-pose-as-journalists-to-harvest-credentials-and-access-cloud-data-infothehackernews-com-the-hacker-news/

Microsoft Will Hold Execs Accountable for Cybersecurity
https://www.darkreading.com/cloud-security/feds-microsoft-clean-up-cloud-security-act

Burnout Is Pushing Workers to Use AI—Even If Their Boss Doesn’t Know
https://www.wired.com/story/ai-workers-burnout-microsoft-linkedin/

Police Resurrect LockBit's Site and Troll the Ransomware Gang | TechCrunch
https://techcrunch.com/2024/05/06/police-resurrect-lockbits-site-and-troll-the-ransomware-gang/

US Indicts LockBit Ransomware Ringleader, Offers $10 Million Reward
https://www.theverge.com/2024/5/7/24151493/us-lockbit-ransomware-ringleader-indictment-reward

Please like, subscribe, and follow us on social! 

Facebook: https://www.facebook.com/frsecure/ 
Twitter: https://twitter.com/frsecure/ 
Instagram: https://www.instagram.com/frsecureofficial/  
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure https://frsecure.com/ 

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. 

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>3312falsefullhttps://www.spreaker.com/episode/ai-written-malware-xz-utils-attackers-target-hospital-help-desks--59495269
This time, they discuss AI-written malware, XZ Utils, and attackers targeting hospital IT help desks.

Links:

XZ Utils scare 
https://www.darkreading.com/application-security/xz-utils-scare-exposes-hard-truths-in-software-security

Change Healthcare hit with cyber extortion (again)
https://www.infosecurity-magazine.com/news/change-healthcare-double-cyber/

Health Department warns attackers targeting IT help desks https://www.bleepingcomputer.com/news/security/us-health-dept-warns-hospitals-of-hackers-targeting-it-help-desks/

Malicious PowerShell script appears to be AI-written 
https://www.bleepingcomputer.com/news/security/malicious-powershell-script-pushing-malware-looks-ai-written/

Please follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/59495269Tue, 16 Apr 2024 22:32:30 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss AI-written malware, XZ Utils, and attackers targeting hospital IT help...
This time, they discuss AI-written malware, XZ Utils, and attackers targeting hospital IT help desks.

Links:

XZ Utils scare 
https://www.darkreading.com/application-security/xz-utils-scare-exposes-hard-truths-in-software-security

Change Healthcare hit with cyber extortion (again)
https://www.infosecurity-magazine.com/news/change-healthcare-double-cyber/

Health Department warns attackers targeting IT help desks https://www.bleepingcomputer.com/news/security/us-health-dept-warns-hospitals-of-hackers-targeting-it-help-desks/

Malicious PowerShell script appears to be AI-written 
https://www.bleepingcomputer.com/news/security/malicious-powershell-script-pushing-malware-looks-ai-written/

Please follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/ 

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3201falsefullhttps://www.spreaker.com/episode/gemini-ai-vulnerability-chatgpt-plugins-typosquatting-vishing--59104316
This time, they discuss security risks in ChatGPT plugins, a major flaw in Google's Gemini AI, typosquatting, and a worldwide vishing epidemic.

Links:

ChatGPT Plugin Security
https://www.infosecurity-magazine.com/news/security-risks-chatgpt-plugins/

Gemini AI Vulnerability
https://www.darkreading.com/cyber-risk/google-gemini-vulnerable-to-content-manipulation-researchers-say

Worldwide Vishing Epidemic
https://www.darkreading.com/endpoint-security/sophisticated-vishing-campaigns-take-world-by-storm

Typosquatting
https://www.darkreading.com/threat-intelligence/typosquatting-wave-shows-no-signs-of-abating

Please like, subscribe, and follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/59104316Tue, 19 Mar 2024 19:13:19 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss security risks in ChatGPT plugins, a major flaw in Google's Gemini AI,...
This time, they discuss security risks in ChatGPT plugins, a major flaw in Google's Gemini AI, typosquatting, and a worldwide vishing epidemic.

Links:

ChatGPT Plugin Security
https://www.infosecurity-magazine.com/news/security-risks-chatgpt-plugins/

Gemini AI Vulnerability
https://www.darkreading.com/cyber-risk/google-gemini-vulnerable-to-content-manipulation-researchers-say

Worldwide Vishing Epidemic
https://www.darkreading.com/endpoint-security/sophisticated-vishing-campaigns-take-world-by-storm

Typosquatting
https://www.darkreading.com/threat-intelligence/typosquatting-wave-shows-no-signs-of-abating

Please like, subscribe, and follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3299falsefullhttps://www.spreaker.com/episode/anydesk-resumes-stolen-from-compromised-job-boards-industry-news--58664310
This time, they discuss compromised job boards where millions of resumes were stolen, AnyDesk's actions post-hack, an exploited SSRF flaw in Ivanti, and more.

Links:
Millions of resumes stolen via exploited job boards https://thehackernews.com/2024/02/hackers-exploit-job-boards-in-apac.html

AnyDesk resets passwords/revokes certificates after hack https://techcrunch.com/2024/02/05/remote-access-giant-anydesk-resets-passwords-and-revokes-certificates-after-hack/

SSRF flaw in Ivanti exploited https://thehackernews.com/2024/02/recently-disclosed-ssrf-flaw-in-ivanti.html

Fortinet reissues critical FortiSIEM vulnerabilities https://www.theregister.com/2024/02/06/fortinet_fortisiem_vulns/

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/58664310Mon, 12 Feb 2024 21:54:26 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss compromised job boards where millions of resumes were stolen, AnyDesk's...
This time, they discuss compromised job boards where millions of resumes were stolen, AnyDesk's actions post-hack, an exploited SSRF flaw in Ivanti, and more.

Links:
Millions of resumes stolen via exploited job boards https://thehackernews.com/2024/02/hackers-exploit-job-boards-in-apac.html

AnyDesk resets passwords/revokes certificates after hack https://techcrunch.com/2024/02/05/remote-access-giant-anydesk-resets-passwords-and-revokes-certificates-after-hack/

SSRF flaw in Ivanti exploited https://thehackernews.com/2024/02/recently-disclosed-ssrf-flaw-in-ivanti.html

Fortinet reissues critical FortiSIEM vulnerabilities https://www.theregister.com/2024/02/06/fortinet_fortisiem_vulns/

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>3232ai,cyber,cybersecurity,ethical,fr,frsecure,hacking,hacklebox,hunting,information,infosec,minks,news,oscar,podcast,secure,security,threat,todayfalsefullhttps://www.spreaker.com/episode/cybersecurity-funding-reduced-40-in-2023-vulnerability-patch-news--58357414
This time, they discuss the reduced cybersecurity funding observed in 2023 as well as new vulnerabilities, patches, and more.

Links:

Cybersecurity Funding Reduced
https://www.securityweek.com/cybersecurity-funding-dropped-40-in-2023-analysis/

Critical Flaws in Windows Kerberos and Hyper-V
https://securityweek.com/microsoft-ships-urgent-fixes-for-critical-flaws-in-windows-kerberos-hyper-v/

Pikabot Malware
https://www.darkreading.com/cyberattacks-data-breaches/pikabot-malware-qakbot-replacement-black-basta-attacks

Decryptor for Black Basta and Babuk's Tortilla Ransomware https://thehackernews.com/2024/01/free-decryptor-released-for-black-basta.html

Please like, subscribe, and follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>https://api.spreaker.com/episode/58357414Fri, 19 Jan 2024 20:52:26 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss the reduced cybersecurity funding observed in 2023 as well as new...
This time, they discuss the reduced cybersecurity funding observed in 2023 as well as new vulnerabilities, patches, and more.

Links:

Cybersecurity Funding Reduced
https://www.securityweek.com/cybersecurity-funding-dropped-40-in-2023-analysis/

Critical Flaws in Windows Kerberos and Hyper-V
https://securityweek.com/microsoft-ships-urgent-fixes-for-critical-flaws-in-windows-kerberos-hyper-v/

Pikabot Malware
https://www.darkreading.com/cyberattacks-data-breaches/pikabot-malware-qakbot-replacement-black-basta-attacks

Decryptor for Black Basta and Babuk's Tortilla Ransomware https://thehackernews.com/2024/01/free-decryptor-released-for-black-basta.html

Please like, subscribe, and follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>3201falsefullhttps://www.spreaker.com/episode/breachmas-common-social-engineering-attacks--57989105
This time, they discuss common social engineering attacks carried out around the holidays when key team members are out of the office or organizations are shut down for seasonal breaks.

Links
Social Engineering
https://thehackernews.com/2023/12/hacking-human-mind-exploiting.html

Cisco IOS XE Vuln Exploitation
https://www.securityweek.com/exploitation-of-recent-cisco-ios-xe-vulnerabilities-spikes/

Sierra:21 Attacks
https://thehackernews.com/2023/12/sierra21-flaws-in-sierra-wireless.html

Atlassian
https://www.darkreading.com/application-security/patch-now-critical-atlassian-bugs-endanger-enterprise-apps

Please follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure
https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>https://api.spreaker.com/episode/57989105Tue, 12 Dec 2023 21:21:17 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss common social engineering attacks carried out around the holidays when key...
This time, they discuss common social engineering attacks carried out around the holidays when key team members are out of the office or organizations are shut down for seasonal breaks.

Links
Social Engineering
https://thehackernews.com/2023/12/hacking-human-mind-exploiting.html

Cisco IOS XE Vuln Exploitation
https://www.securityweek.com/exploitation-of-recent-cisco-ios-xe-vulnerabilities-spikes/

Sierra:21 Attacks
https://thehackernews.com/2023/12/sierra21-flaws-in-sierra-wireless.html

Atlassian
https://www.darkreading.com/application-security/patch-now-critical-atlassian-bugs-endanger-enterprise-apps

Please follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure
https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
]]>2820falsefullhttps://www.spreaker.com/episode/recent-vulnerabilities-in-confluence-and-apache-activemq--57651786
This time around, they discuss recent vulnerabilities in Confluence and Apache ActiveMQ.

Follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure - https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>https://api.spreaker.com/episode/57651786Wed, 15 Nov 2023 18:29:28 +0000The InfoSec MissionThe guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time around, they discuss recent vulnerabilities in Confluence and Apache ActiveMQ. Follow us...
This time around, they discuss recent vulnerabilities in Confluence and Apache ActiveMQ.

Follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/

About FRSecure - https://frsecure.com/

FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.

These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.]]>2536ai,cyber,cybersecurity,ethical,fr,frsecure,hacking,hacklebox,hunting,information,infosec,minks,news,oscar,podcast,secure,security,threat,todayfalsefullhttps://www.spreaker.com/episode/incident-response-horror-stories--57261359
This time around, we're getting in the spooky spirit and telling scary stories from real-life IR cases. 🎃

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/
]]>https://api.spreaker.com/episode/57261359Mon, 16 Oct 2023 21:31:08 +0000The InfoSec MissionThe guys are back for a special, Friday the 13th episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time around, we're getting in the spooky spirit and telling scary stories...
This time around, we're getting in the spooky spirit and telling scary stories from real-life IR cases. 🎃

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/
]]>3275ai,cyber,cybersecurity,ethical,fr,frsecure,hacking,hacklebox,hunting,information,infosec,minks,news,oscar,podcast,secure,security,threat,todayfalsefullhttps://www.spreaker.com/episode/scattered-spider-the-mgm-hackers-infosec-news--56843385
DISCUSSED THIS MONTH:
Scattered Spider (MGM attack)
https://hackdojo.io/articles/E59P05LKQ/-scattered-spider-behind-mgm-cyberattack-targets-casinos

Caesers confirms ransomware
https://hackdojo.io/articles/73WL5VP9N/caesars-confirms-ransomware-hack-stolen-loyalty-program-database

MGM hackers branching out
https://hackdojo.io/articles/AEWED5DK7/mgm-hackers-broadening-targets-monetization-strategies

UNC3944 Smishing Ransomware
https://www.mandiant.com/resources/blog/unc3944-sms-phishing-sim-swapping-ransomware

LastPass iOS vulnerability (BLASTPASS)
https://hackdojo.io/articles/AEWEDLDK7/blastpass-government-agencies-told-to-secure-iphones-against-spyware-attacks

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/56843385Mon, 18 Sep 2023 16:14:16 +0000The InfoSec MissionOscar and Pinky are back for this month's session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. DISCUSSED THIS MONTH: Scattered Spider (MGM attack)...
DISCUSSED THIS MONTH:
Scattered Spider (MGM attack)
https://hackdojo.io/articles/E59P05LKQ/-scattered-spider-behind-mgm-cyberattack-targets-casinos

Caesers confirms ransomware
https://hackdojo.io/articles/73WL5VP9N/caesars-confirms-ransomware-hack-stolen-loyalty-program-database

MGM hackers branching out
https://hackdojo.io/articles/AEWED5DK7/mgm-hackers-broadening-targets-monetization-strategies

UNC3944 Smishing Ransomware
https://www.mandiant.com/resources/blog/unc3944-sms-phishing-sim-swapping-ransomware

LastPass iOS vulnerability (BLASTPASS)
https://hackdojo.io/articles/AEWEDLDK7/blastpass-government-agencies-told-to-secure-iphones-against-spyware-attacks

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>35392022,ai,cyber,cybersecurity,ethical,fr,frsecure,hacking,hacklebox,hunting,information,infosec,minks,news,oscar,podcast,secure,security,threat,todayfalsefullhttps://www.spreaker.com/episode/defcon-31-evilproxy-qr-code-credential-theft-ai-stealing-passwords--56555914
Discussed this month

• DEFCON Recap

• EvilProxy campaign
  • https://www.techrepublic.com/article/evilproxy-phishing-attack/

• QR Codes used for credential theft
  • https://www.darkreading.com/attacks-breaches/qr-code-phishing-campaign-targets-top-u-s-energy-company

• AI stealing passwords, listening to keystrokes
  • https://www.darkreading.com/attacks-breaches/ai-model-can-replicate-password-listening-to-keystrokes

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/56555914Tue, 22 Aug 2023 15:26:11 +0000The InfoSec MissionEric and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month - DEFCON Recap - EvilProxy campaign -...
Discussed this month

• DEFCON Recap

• EvilProxy campaign
  • https://www.techrepublic.com/article/evilproxy-phishing-attack/

• QR Codes used for credential theft
  • https://www.darkreading.com/attacks-breaches/qr-code-phishing-campaign-targets-top-u-s-energy-company

• AI stealing passwords, listening to keystrokes
  • https://www.darkreading.com/attacks-breaches/ai-model-can-replicate-password-listening-to-keystrokes

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>35452022,beginners,cyber,cybersecurity,ethical,for,fr,frsecure,hacking,hunting,information,infosec,minks,news,oscar,podcast,security,threat,tldr,todayfalsefullhttps://www.spreaker.com/episode/hacklebox-unsecurity-crossover-moveit-microsoft-patch-tuesday-and-fortinet-infinity--56141830
For those who are not yet aware, Unsecurity is another FRSecure podcast focused on the business impact of current events and happenings within the security industry. It's hosted several times a month by Oscar and Brad Nigh, FRSecure's Principal Information Security Consultant.

Discussed this month:

• MOVEit Attacks
• Microsoft Patch Tuesday: Six 0-Days
• Fortinet Infinity

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/
]]>https://api.spreaker.com/episode/56141830Tue, 18 Jul 2023 19:54:41 +0000The InfoSec MissionThis month, we're doing a crossover episode with the Unsecurity Podcast! For those who are not yet aware, Unsecurity is another FRSecure podcast focused on the business impact of current events and happenings within the security industry. It's hosted...
For those who are not yet aware, Unsecurity is another FRSecure podcast focused on the business impact of current events and happenings within the security industry. It's hosted several times a month by Oscar and Brad Nigh, FRSecure's Principal Information Security Consultant.

Discussed this month:

• MOVEit Attacks
• Microsoft Patch Tuesday: Six 0-Days
• Fortinet Infinity

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/
]]>32102022,beginners,cyber,cybersecurity,ethical,for,fr,frsecure,hacking,hunting,information,infosec,minks,news,oscar,podcast,security,threat,tldr,todayfalsefullhttps://www.spreaker.com/episode/dragos-incident-do-s-and-don-ts-of-siem-implementation--53878398
Discussed this month
Do's and don'ts of SIEM implementation

The recent Dragos incident
https://www.bleepingcomputer.com/news/security/cybersecurity-firm-dragos-discloses-cybersecurity-incident-extortion-attempt/



Please follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/53878398Mon, 15 May 2023 21:21:25 +0000The InfoSec MissionOscar, Eric, and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month Do's and don'ts of SIEM implementation The recent Dragos...
Discussed this month
Do's and don'ts of SIEM implementation

The recent Dragos incident
https://www.bleepingcomputer.com/news/security/cybersecurity-firm-dragos-discloses-cybersecurity-incident-extortion-attempt/



Please follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>34392022,beginners,cyber,cybersecurity,ethical,for,fr,frsecure,hacking,hunting,information,infosec,minks,news,oscar,podcast,security,threat,tldr,todayfalsefullhttps://www.spreaker.com/episode/3cx-supply-chain-attack-windows-0-day-yum-brands--53564882
Discussed this month:

Windows zero-day exploited in the wild https://projecthyphae.com/threat/windows-zero-day-being-exploited-in-ransomware-attacks/

3CX Supply Chain Attack https://thehackernews.com/2023/03/3cx-supply-chain-attack-heres-what-we.html

No evidence of…oh wait, your data was stolen (Yum! Brands breach) https://www.bleepingcomputer.com/news/security/kfc-pizza-hut-owner-discloses-data-breach-after-ransomware-attack/

Patch quick hits

Adobe: https://www.cisa.gov/news-events/alerts/2023/04/11/adobe-releases-security-updates-multiple-products

Apple: https://www.bleepingcomputer.com/news/security/cisa-orders-govt-agencies-to-update-iphones-macs-by-may-1st/

Cisco: https://www.cisa.gov/news-events/alerts/2023/03/23/cisco-releases-security-advisories-multiple-products

Fortinet: https://www.cisa.gov/news-events/alerts/2023/04/11/fortinet-releases-april-2023-vulnerability-advisories

Microsoft: https://www.bleepingcomputer.com/news/microsoft/microsoft-april-2023-patch-tuesday-fixes-1-zero-day-97-flaws/

SAP: https://www.bleepingcomputer.com/news/security/sap-releases-security-updates-for-two-critical-severity-flaws/

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/53564882Mon, 17 Apr 2023 22:42:01 +0000The InfoSec MissionEric and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month: Windows zero-day exploited in the wild...
Discussed this month:

Windows zero-day exploited in the wild https://projecthyphae.com/threat/windows-zero-day-being-exploited-in-ransomware-attacks/

3CX Supply Chain Attack https://thehackernews.com/2023/03/3cx-supply-chain-attack-heres-what-we.html

No evidence of…oh wait, your data was stolen (Yum! Brands breach) https://www.bleepingcomputer.com/news/security/kfc-pizza-hut-owner-discloses-data-breach-after-ransomware-attack/

Patch quick hits

Adobe: https://www.cisa.gov/news-events/alerts/2023/04/11/adobe-releases-security-updates-multiple-products

Apple: https://www.bleepingcomputer.com/news/security/cisa-orders-govt-agencies-to-update-iphones-macs-by-may-1st/

Cisco: https://www.cisa.gov/news-events/alerts/2023/03/23/cisco-releases-security-advisories-multiple-products

Fortinet: https://www.cisa.gov/news-events/alerts/2023/04/11/fortinet-releases-april-2023-vulnerability-advisories

Microsoft: https://www.bleepingcomputer.com/news/microsoft/microsoft-april-2023-patch-tuesday-fixes-1-zero-day-97-flaws/

SAP: https://www.bleepingcomputer.com/news/security/sap-releases-security-updates-for-two-critical-severity-flaws/

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>28452022,beginners,cyber,cybersecurity,ethical,for,fr,frsecure,hacking,hunting,information,infosec,minks,news,oscar,podcast,security,threat,tldr,todayfalsefullhttps://www.spreaker.com/episode/security-news-roundup--53474515
Links:

The Sound of Silence Critical Microsoft Outlook Vulnerability https://projecthyphae.com/threat/the-sound-of-silence-critical-microsoft-outlook-vulnerability/

Fastest Ransomware Encryption in History
https://gbhackers.com/rorschach/

'Operation Cookie Monster': International police action seizes dark web market https://www.reuters.com/world/uk/operation-cookie-monster-international-police-action-seizes-dark-web-market-2023-04-05/

Check your hack
https://www.politie.nl/en/information/checkyourhack.html

Send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!]]>https://api.spreaker.com/episode/53474515Fri, 07 Apr 2023 21:42:31 +0000The InfoSec MissionThis week, Oscar and Brad sit down to catch up on all the latest in security news. Links: The Sound of Silence Critical Microsoft Outlook Vulnerability https://projecthyphae.com/threat/the-sound-of-silence-critical-microsoft-outlook-vulnerability/...
Links:

The Sound of Silence Critical Microsoft Outlook Vulnerability https://projecthyphae.com/threat/the-sound-of-silence-critical-microsoft-outlook-vulnerability/

Fastest Ransomware Encryption in History
https://gbhackers.com/rorschach/

'Operation Cookie Monster': International police action seizes dark web market https://www.reuters.com/world/uk/operation-cookie-monster-international-police-action-seizes-dark-web-market-2023-04-05/

Check your hack
https://www.politie.nl/en/information/checkyourhack.html

Send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!]]>2042brad,ciso,cissp,cyber,cybersecurity,data,evan,francen,frsecure,information,minks,network,nigh,oscar,podcast,privacy,project,security,securitystudio,unsecurityfalsefullhttps://www.spreaker.com/episode/the-rise-of-exfil-only-ransom-attacks-new-threats--53186937
Discussed this month:

Microsoft Word vulnerability goes public
https://projecthyphae.com/threat/microsoft-word-vulnerability-goes-public-users-wondering-if-a-rtf-means-risky-text-file/

Emotet is back (again) after another hiatus
https://www.darkreading.com/threat-intelligence/emotet-resurfaces-yet-again-after-three-month-hiatus

Security concerns over employees feeding ChatGPT sensitive data
https://www.darkreading.com/risk/employees-feeding-sensitive-business-data-chatgpt-raising-security-fears

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/53186937Mon, 13 Mar 2023 19:27:44 +0000The InfoSec MissionEric and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month: Microsoft Word vulnerability goes public...
Discussed this month:

Microsoft Word vulnerability goes public
https://projecthyphae.com/threat/microsoft-word-vulnerability-goes-public-users-wondering-if-a-rtf-means-risky-text-file/

Emotet is back (again) after another hiatus
https://www.darkreading.com/threat-intelligence/emotet-resurfaces-yet-again-after-three-month-hiatus

Security concerns over employees feeding ChatGPT sensitive data
https://www.darkreading.com/risk/employees-feeding-sensitive-business-data-chatgpt-raising-security-fears

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>35582022,beginners,cyber,cybersecurity,ethical,for,fr,frsecure,hacking,hunting,information,infosec,minks,news,oscar,podcast,security,threat,tldr,todayfalsefullhttps://www.spreaker.com/episode/developer-pleads-guilty-to-hacking-his-own-company--52721266
Discussed this month:

Developer pleads guilty to hacking his own company https://www.theverge.com/2023/2/3/23584414/ubiquiti-developer-guilty-extortion-hack-security-breach-bitcoin-ransom

Google plagued with 'malvertisers' in January 2023 https://arstechnica.com/information-technology/2023/02/until-further-notice-think-twice-before-using-google-to-download-software/

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/52721266Mon, 13 Feb 2023 22:23:26 +0000The InfoSec MissionOscar and Pinky are back with another session of the Hackle Box—a monthly conversation between the information security experts about new and noteworthy exploits. Discussed this month: Developer pleads guilty to hacking his own company...
Discussed this month:

Developer pleads guilty to hacking his own company https://www.theverge.com/2023/2/3/23584414/ubiquiti-developer-guilty-extortion-hack-security-breach-bitcoin-ransom

Google plagued with 'malvertisers' in January 2023 https://arstechnica.com/information-technology/2023/02/until-further-notice-think-twice-before-using-google-to-download-software/

Follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3469falsefullhttps://www.spreaker.com/episode/rackspace-ransomware-98-microsoft-patches-more--52465792
Discussed this month:
Rackspace Ransomware Incident Highlights Risks of Relying on Mitigation Alone https://www.darkreading.com/vulnerabilities-threats/rackspace-ransomware-incident-highlights-risks-mitigation-alone

Attackers Are Already Exploiting ChatGPT to Write Malicious Code https://www.darkreading.com/attacks-breaches/attackers-are-already-exploiting-chatgpt-to-write-malicious-code

98 Patches: Microsoft Greets New Year With Zero-Day Security Fixes https://www.darkreading.com/vulnerabilities-threats/microsoft-new-year-patches-98-security-fixes

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/52465792Tue, 17 Jan 2023 18:05:53 +0000The InfoSec MissionOscar, Eric, and Pinky are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, security breaches, and exploits. Discussed this month: Rackspace...
Discussed this month:
Rackspace Ransomware Incident Highlights Risks of Relying on Mitigation Alone https://www.darkreading.com/vulnerabilities-threats/rackspace-ransomware-incident-highlights-risks-mitigation-alone

Attackers Are Already Exploiting ChatGPT to Write Malicious Code https://www.darkreading.com/attacks-breaches/attackers-are-already-exploiting-chatgpt-to-write-malicious-code

98 Patches: Microsoft Greets New Year With Zero-Day Security Fixes https://www.darkreading.com/vulnerabilities-threats/microsoft-new-year-patches-98-security-fixes

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>32232022,beginners,cyber,cybersecurity,ethical,for,fr,frsecure,hacking,hunting,information,infosec,minks,news,oscar,podcast,security,threat,tldr,todayfalsefullhttps://frsecure.com/cyber-threat-intel-series/
Discussed this month:

Russian Actors Use Compromised Healthcare Networks Against Ukrainian Orgs
https://www.darkreading.com/threat-intelligence/russian-actors-compromised-healthcare-networks-ukrainian-orgs

Malware Authors Inadvertently Take Down Own Botnet
https://www.darkreading.com/attacks-breaches/malware-authors-inadvertently-takdown-own-botnet

All You Need to Know About Emotet in 2022
https://thehackernews.com/2022/11/all-you-need-to-know-about-emotet-in.html

What the CISA Reporting Rule Means for Your IT Security Protocol
https://thehackernews.com/2022/12/what-cisa-reporting-rule-means-for-your.html

Rackspace Ransomware Attack Outage
https://www.bleepingcomputer.com/news/security/rackspace-confirms-outage-was-caused-by-ransomware-attack/

Report: Air-Gapped Networks Vulnerable to DNS Attacks
https://www.darkreading.com/attacks-breaches/report-air-gapped-networks-vulnerable-dns-attacks

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/52167379Mon, 12 Dec 2022 20:52:28 +0000The InfoSec MissionOscar and Pinky are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Discussed this month:...
Discussed this month:

Russian Actors Use Compromised Healthcare Networks Against Ukrainian Orgs
https://www.darkreading.com/threat-intelligence/russian-actors-compromised-healthcare-networks-ukrainian-orgs

Malware Authors Inadvertently Take Down Own Botnet
https://www.darkreading.com/attacks-breaches/malware-authors-inadvertently-takdown-own-botnet

All You Need to Know About Emotet in 2022
https://thehackernews.com/2022/11/all-you-need-to-know-about-emotet-in.html

What the CISA Reporting Rule Means for Your IT Security Protocol
https://thehackernews.com/2022/12/what-cisa-reporting-rule-means-for-your.html

Rackspace Ransomware Attack Outage
https://www.bleepingcomputer.com/news/security/rackspace-confirms-outage-was-caused-by-ransomware-attack/

Report: Air-Gapped Networks Vulnerable to DNS Attacks
https://www.darkreading.com/attacks-breaches/report-air-gapped-networks-vulnerable-dns-attacks

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3327ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/vmware-bugs-remote-workspaces-long-island-midterms-delayed-more--51902927
Discussed this month:

Critical Citrix, VMware Bugs threaten remote workspaces
https://www.darkreading.com/vulnerabilities-threats/patch-asap-critical-citrix-vmware-bugs-remote-workspaces-takeover

Long Island midterm votes delayed due to cyberattack
https://www.darkreading.com/attacks-breaches/long-island-midterm-votes-delayed-due-to-cyberattack-after-effects

Microsoft Exchange vulnerability update

Healthcare sector: Security threat landscape update

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/51902927Wed, 16 Nov 2022 16:55:25 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Discussed this...
Discussed this month:

Critical Citrix, VMware Bugs threaten remote workspaces
https://www.darkreading.com/vulnerabilities-threats/patch-asap-critical-citrix-vmware-bugs-remote-workspaces-takeover

Long Island midterm votes delayed due to cyberattack
https://www.darkreading.com/attacks-breaches/long-island-midterm-votes-delayed-due-to-cyberattack-after-effects

Microsoft Exchange vulnerability update

Healthcare sector: Security threat landscape update

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3615ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/fortinet-authentication-bypass-proxyshell-2-or-3-and-more--51601666
Discussed this month:

Fortinet Authentication Bypass
ZeroDay: ProxyShell 2 (or 3?)
Microsoft Addresses Zero-Days, Exchange Server Exploit Chain Remains Unpatched
Phishing Attacks Improving Dramatically
Emotet is Back

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/51601666Mon, 17 Oct 2022 19:53:25 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Discussed this...
Discussed this month:

Fortinet Authentication Bypass
ZeroDay: ProxyShell 2 (or 3?)
Microsoft Addresses Zero-Days, Exchange Server Exploit Chain Remains Unpatched
Phishing Attacks Improving Dramatically
Emotet is Back

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3617ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/defcon-recap-evilproxy-teslagun-broken-ice-cream-machines--51247001
This month's episode includes:
Defcon Recap
EvilProxy
TeslaGun
Broken Ice Cream Machines and McDonalds

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/51247001Tue, 13 Sep 2022 19:51:05 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's...
This month's episode includes:
Defcon Recap
EvilProxy
TeslaGun
Broken Ice Cream Machines and McDonalds

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3183ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-july-2022-npm-all-over-the-news-apt-targeting-healthcare-sector-and-more--50540055
This month's episode includes:

NPM supply chain attack impacts hundreds of websites and apps
https://www.bleepingcomputer.com/news/security/npm-supply-chain-attack-impacts-hundreds-of-websites-and-apps/

PyPi sending stolen AWS keys to unsecured sites
https://www.bleepingcomputer.com/news/security/pypi-python-packages-caught-sending-stolen-aws-keys-to-unsecured-sites/

NPM packages involved in crypto mining
https://thehackernews.com/2022/07/over-1200-npm-packages-found-involved.html

CISA alert for North Korean APT targeting the healthcare sector
https://www.cisa.gov/uscert/ncas/current-activity/2022/07/06/north-korean-state-sponsored-cyber-actors-use-maui-ransomware

https://thehackernews.com/2022/07/north-korean-maui-ransomware-actively.html

Microsoft Edge WebView2 manipulated for cookie theft
https://projecthyphae.com/threat/microsoft-edge-webview2-manipulated-for-theft-of-cookies/

Criminals are filling job applicant pools with deepfakes
https://projecthyphae.com/threat/criminals-are-filling-tech-job-applicant-pools-with-deepfakes/

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/50540055Mon, 11 Jul 2022 20:40:57 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's...
This month's episode includes:

NPM supply chain attack impacts hundreds of websites and apps
https://www.bleepingcomputer.com/news/security/npm-supply-chain-attack-impacts-hundreds-of-websites-and-apps/

PyPi sending stolen AWS keys to unsecured sites
https://www.bleepingcomputer.com/news/security/pypi-python-packages-caught-sending-stolen-aws-keys-to-unsecured-sites/

NPM packages involved in crypto mining
https://thehackernews.com/2022/07/over-1200-npm-packages-found-involved.html

CISA alert for North Korean APT targeting the healthcare sector
https://www.cisa.gov/uscert/ncas/current-activity/2022/07/06/north-korean-state-sponsored-cyber-actors-use-maui-ransomware

https://thehackernews.com/2022/07/north-korean-maui-ransomware-actively.html

Microsoft Edge WebView2 manipulated for cookie theft
https://projecthyphae.com/threat/microsoft-edge-webview2-manipulated-for-theft-of-cookies/

Criminals are filling job applicant pools with deepfakes
https://projecthyphae.com/threat/criminals-are-filling-tech-job-applicant-pools-with-deepfakes/

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3269ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-june-2022-atlassian-confluence-follina-chinese-attackers-breach-telcos-and-more--50188972
This month's episode includes:

02:14 Atlassian Confluence – CVE-2022-26134
https://packetstormsecurity.com/files/167430/Confluence-OGNL-Injection-Remote-Code-Execution.html

13:25 Follina
https://threatpost.com/follina-exploited-by-state-sponsored-hackers/179890/

32:40 Paid a ransom? Now you’re a target.
https://threatpost.com/paying-ransomware-bullseye-back/179915/

47:30 Chinese State Attackers Breached Telcos
https://www.bleepingcomputer.com/news/security/us-chinese-govt-hackers-breached-telcos-to-snoop-on-network-traffic/

52:50 Kali team offering free penetration testing course on Twitch!
https://www.bleepingcomputer.com/news/security/kali-linux-team-to-stream-free-penetration-testing-course-on-twitch/

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/50188972Mon, 13 Jun 2022 19:08:22 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's...
This month's episode includes:

02:14 Atlassian Confluence – CVE-2022-26134
https://packetstormsecurity.com/files/167430/Confluence-OGNL-Injection-Remote-Code-Execution.html

13:25 Follina
https://threatpost.com/follina-exploited-by-state-sponsored-hackers/179890/

32:40 Paid a ransom? Now you’re a target.
https://threatpost.com/paying-ransomware-bullseye-back/179915/

47:30 Chinese State Attackers Breached Telcos
https://www.bleepingcomputer.com/news/security/us-chinese-govt-hackers-breached-telcos-to-snoop-on-network-traffic/

52:50 Kali team offering free penetration testing course on Twitch!
https://www.bleepingcomputer.com/news/security/kali-linux-team-to-stream-free-penetration-testing-course-on-twitch/

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3370ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-may-2022-f5-big-ip-fileless-malware-hides-shellcode-in-windows-event-logs-and-more--49821730
Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/49821730Mon, 16 May 2022 20:35:12 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. Please like,...
Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3310ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-april-2022-fake-emergency-data-requests-critical-spring4shell-vulnerability-more--49401896
This month's episode includes:

- Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”
- Forged Signatures: Not Just For Troubled Youths Anymore. #Nvidia
- Sophos firewalls require an URGENT new flame shield
- CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/49401896Mon, 11 Apr 2022 21:00:47 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's...
This month's episode includes:

- Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”
- Forged Signatures: Not Just For Troubled Youths Anymore. #Nvidia
- Sophos firewalls require an URGENT new flame shield
- CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3203ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-march-2022-autowarp-vulnerability-apc-burning-down-dirty-pipe-exploit--49060798
This month's episode includes:

- AutoWarp vulnerability in Microsoft Azure
- APC's Burning Down
- Dirty Pipe
- Russian Attack on Ukraine

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/49060798Mon, 14 Mar 2022 19:53:02 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's...
This month's episode includes:

- AutoWarp vulnerability in Microsoft Azure
- APC's Burning Down
- Dirty Pipe
- Russian Attack on Ukraine

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3597ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-february-2022-eyemed-breach-data-exfil-using-powerautomate-google-mfa--48745501
This month's episode includes:

- EyeMed fined $600k in data breach
- Attackers reviving a 20-year-old tactic in Microsoft 365 phishing campaigns
- Google auto-enables two-step verification for more than 150 Million users
- A new tactic for data exfil using Power Automate in Microsoft 365

Please like, subscribe, and follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/48745501Wed, 16 Feb 2022 17:27:44 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month's...
This month's episode includes:

- EyeMed fined $600k in data breach
- Attackers reviving a 20-year-old tactic in Microsoft 365 phishing campaigns
- Google auto-enables two-step verification for more than 150 Million users
- A new tactic for data exfil using Power Automate in Microsoft 365

Please like, subscribe, and follow us on social!

Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3509ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-january-2022-log4j-russian-cyber-threat-av-cryptominers-patch-tuesday--48351090
This month, the trio dives into:

• Log4j Overview and updates
• CSA advisory on Russian Cyber Threat to US Critical Infrastructure.
• Norton and Cryptominers in your AV
• Patch Tuesday: 96 patches to start 2022

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>https://api.spreaker.com/episode/48351090Tue, 18 Jan 2022 19:10:01 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month, the...
This month, the trio dives into:

• Log4j Overview and updates
• CSA advisory on Russian Cyber Threat to US Critical Infrastructure.
• Norton and Cryptominers in your AV
• Patch Tuesday: 96 patches to start 2022

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure/
Twitter: https://twitter.com/frsecure/
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure/]]>3405ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-december-2021-microsoft-exchange-exploit-fbi-website-hack-quaknightmare--47921737
This month, the trio dives into:

• Cyber Actors Exploiting Microsoft Exchange in Furtherance of Malicious Activities
• FBI Website exploited resulting in hoax email blast
• Quakbot strikes again with QuakNightmare Exploitation

In addition to the newsworthy topics, they also have a couple of recurring segments:

Phishing Report - ACH Fraud in Proxylogon attack chain
Hacker Tip of the Month

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure
Twitter: https://twitter.com/FRSecure
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frse...]]>https://api.spreaker.com/episode/47921737Tue, 14 Dec 2021 19:32:26 +0000The InfoSec MissionOscar, Pinky, and Eric are back with another session of the Hackle Box—a monthly conversation between the three cybersecurity experts about new and noteworthy threats, attacks, breaches, exploits, and (of course) how to avoid them. This month, the...
This month, the trio dives into:

• Cyber Actors Exploiting Microsoft Exchange in Furtherance of Malicious Activities
• FBI Website exploited resulting in hoax email blast
• Quakbot strikes again with QuakNightmare Exploitation

In addition to the newsworthy topics, they also have a couple of recurring segments:

Phishing Report - ACH Fraud in Proxylogon attack chain
Hacker Tip of the Month

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure
Twitter: https://twitter.com/FRSecure
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frse...]]>3554ambush,box,breaches,data,day,email,frsecure,hacking,hackle,information,infosec,minks,oscar,phishing,ransomware,security,servers,team,vulnerabilities,zerofalsefullhttps://www.spreaker.com/episode/the-hackle-box-november-2021-holiday-phishing-scams-solarwinds-fallout-microsoft-exchange-ryuk--47525288
Phishing Report – Holiday Phishing Trends
Hacker Tip of the Month

News Topics:

‘Trojan Source’ Bug Threatens the Security of All Code
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/

FBI Raids Chinese Point-of-Sale Giant PAX Technology
https://krebsonsecurity.com/2021/10/fbi-raids-chinese-point-of-sale-giant-pax-technology/

Microsoft Fixes Exchange Server Zero-Day
https://www.darkreading.com/vulnerabilities-threats/microsoft-s-nov-security-update-contains-fix-for-exchange-server-0-day

SolarWinds Vulnerability Exploited in First Stage of Clop Ransomware Attacks
https://www.darkreading.com/attacks-breaches/rise-in-clop-ransomware-attacks-tied-to

Researcher Details Vulnerabilities Found in AWS API Gateway
https://www.darkreading.com/vulnerabilities-threats/researcher-details-vulnerabilities-found-in-aws-api-gateway

RYUK is back!
https://thedfirreport.com/2020/10/08/ryuks-return/
https://thedfirreport.com/2020/10/18/ryuk-in-5-hours/

QR Codes Help Attackers Sneak Emails Past Security Controls
https://www.darkreading.com/attacks-breaches/qr-codes-help-attackers-sneak-emails-past-security-controls

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure
Twitter: https://twitter.com/FRSecure
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure]]>https://api.spreaker.com/episode/47525288Wed, 17 Nov 2021 19:57:39 +0000The InfoSec MissionOscar, Eric, and Pinky are back with another session of the Hackle Box, a series where they break down current cybersecurity threats, breaches, vulnerabilities, and more. This month, the trio discusses: Phishing Report – Holiday Phishing Trends...
Phishing Report – Holiday Phishing Trends
Hacker Tip of the Month

News Topics:

‘Trojan Source’ Bug Threatens the Security of All Code
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/

FBI Raids Chinese Point-of-Sale Giant PAX Technology
https://krebsonsecurity.com/2021/10/fbi-raids-chinese-point-of-sale-giant-pax-technology/

Microsoft Fixes Exchange Server Zero-Day
https://www.darkreading.com/vulnerabilities-threats/microsoft-s-nov-security-update-contains-fix-for-exchange-server-0-day

SolarWinds Vulnerability Exploited in First Stage of Clop Ransomware Attacks
https://www.darkreading.com/attacks-breaches/rise-in-clop-ransomware-attacks-tied-to

Researcher Details Vulnerabilities Found in AWS API Gateway
https://www.darkreading.com/vulnerabilities-threats/researcher-details-vulnerabilities-found-in-aws-api-gateway

RYUK is back!
https://thedfirreport.com/2020/10/08/ryuks-return/
https://thedfirreport.com/2020/10/18/ryuk-in-5-hours/

QR Codes Help Attackers Sneak Emails Past Security Controls
https://www.darkreading.com/attacks-breaches/qr-codes-help-attackers-sneak-emails-past-security-controls

Please like, subscribe, and follow us on social!
Facebook: https://www.facebook.com/frsecure
Twitter: https://twitter.com/FRSecure
Instagram: https://www.instagram.com/frsecure/
LinkedIn: https://www.linkedin.com/company/frsecure]]>3400ambush,box,breaches,bug,data,frsecure,hacking,hackle,information,infosec,microsoft,minks,oscar,pax,phishing,security,team,technology,trojan,vulnerabilitiesfalsefullhttps://www.spreaker.com/episode/the-hackle-box-october-2021-rebol-yell-microsoft-going-password-less-omigod-microsoft-azure--46928521
This month's topics:

Microsoft going “passwordless”
https://arstechnica.com/gadgets/2021/09/starting-today-you-can-remove-your-password-from-your-microsoft-account/

OMIGOD—an exploitable hole in Microsoft open-source code
https://nakedsecurity.sophos.com/2021/09/16/omigod-an-exploitable-hole-in-microsoft-open-source-code/

New Azure Active Directory password brute-forcing flaw has no fix
https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/?amp=1

Does your organization have a Security.txt file?
https://krebsonsecurity.com/2021/09/does-your-organization-have-a-security-txt-file/

CISA releases tool to help orgs fend off insider threat risks
https://www.bleepingcomputer.com/news/security/cisa-releases-tool-to-help-orgs-fend-off-insider-threat-risks/?utm_content=182136940&utm_medium=social&utm_source=twitter&hss_channel=tw-71605818

The REBOL Yell—novel exploit using REBOL for command-and-control
https://frsecure.com/blog/the-rebol-yell-new-rebol-exploit/

Teasing Project Hyphae

As always, the session ends with the Hacker Tip of the Month from Eric and the Phishing Report with Pinky.

Give this session a watch or listen, and feel free to send any comments, questions, or topic suggestions to hacklebox@frsecure.com.

And please like and subscribe!]]>https://api.spreaker.com/episode/46928521Mon, 11 Oct 2021 22:28:46 +0000The InfoSec MissionTeam Ambush members Oscar, Eric, and Pinky are back with another session of the Hackle Box—a series where they break down new and noteworthy breaches, vulnerabilities, exploits, and more over the last month. This month's topics: Microsoft going...
This month's topics:

Microsoft going “passwordless”
https://arstechnica.com/gadgets/2021/09/starting-today-you-can-remove-your-password-from-your-microsoft-account/

OMIGOD—an exploitable hole in Microsoft open-source code
https://nakedsecurity.sophos.com/2021/09/16/omigod-an-exploitable-hole-in-microsoft-open-source-code/

New Azure Active Directory password brute-forcing flaw has no fix
https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/?amp=1

Does your organization have a Security.txt file?
https://krebsonsecurity.com/2021/09/does-your-organization-have-a-security-txt-file/

CISA releases tool to help orgs fend off insider threat risks
https://www.bleepingcomputer.com/news/security/cisa-releases-tool-to-help-orgs-fend-off-insider-threat-risks/?utm_content=182136940&utm_medium=social&utm_source=twitter&hss_channel=tw-71605818

The REBOL Yell—novel exploit using REBOL for command-and-control
https://frsecure.com/blog/the-rebol-yell-new-rebol-exploit/

Teasing Project Hyphae

As always, the session ends with the Hacker Tip of the Month from Eric and the Phishing Report with Pinky.

Give this session a watch or listen, and feel free to send any comments, questions, or topic suggestions to hacklebox@frsecure.com.

And please like and subscribe!]]>3701active,ambush,azure,box,brute,cyber,cybersecurity,data,directory,force,hacking,hackle,microsoft,omigod,passwords,privacy,security,team,the,threatsfalsefullhttps://www.spreaker.com/episode/the-hackle-box-september-2021-idn-phishing-razer-mouse-t-mobile-cobalt-strike-and-oauth-2-0--46502172
IDN Phishing — Outlook emails showing legitimate contact cards from lookalike domains
https://arstechnica.com/information-technology/2021/09/microsoft-outlook-shows-real-persons-contact-info-for-idn-phishing-emails/

Razer Mouse Bug — The bug allows admin privileges in Windows 10
https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/

T-Mobile Breach — 48 million social security numbers accessed from a pool of 50 million affected customers
https://www.zdnet.com/article/t-mobile-hack-everything-you-need-to-know/

Hacking the Hackers — New exploit available for download lets hackers crash Cobalt Strike team servers
https://arstechnica.com/gadgets/2021/08/critical-cobalt-strike-bug-leaves-botnet-servers-vulnerable-to-takedown/

As always, the session ends with the Hacker Tip of the Month from Eric and the Phishing Report with Pinky.

Give this session a watch or listen, and feel free to send any comments, questions, or topic suggestions to hacklebox@frsecure.com.

And please like and subscribe!]]>https://api.spreaker.com/episode/46502172Mon, 13 Sep 2021 18:19:05 +0000The InfoSec MissionThe boys are back with another session of the Hackle Box. This month features in-depth discussion on four vulnerabilities/exploits that have gained the attention of Oscar, Pinky, and Eric over the last month or so. IDN Phishing — Outlook emails...
IDN Phishing — Outlook emails showing legitimate contact cards from lookalike domains
https://arstechnica.com/information-technology/2021/09/microsoft-outlook-shows-real-persons-contact-info-for-idn-phishing-emails/

Razer Mouse Bug — The bug allows admin privileges in Windows 10
https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/

T-Mobile Breach — 48 million social security numbers accessed from a pool of 50 million affected customers
https://www.zdnet.com/article/t-mobile-hack-everything-you-need-to-know/

Hacking the Hackers — New exploit available for download lets hackers crash Cobalt Strike team servers
https://arstechnica.com/gadgets/2021/08/critical-cobalt-strike-bug-leaves-botnet-servers-vulnerable-to-takedown/

As always, the session ends with the Hacker Tip of the Month from Eric and the Phishing Report with Pinky.

Give this session a watch or listen, and feel free to send any comments, questions, or topic suggestions to hacklebox@frsecure.com.

And please like and subscribe!]]>3526ambush,box,cobalt,cyber,cybersecurity,exploits,frsecure,hacking,hackle,hanson,information,intel,minks,oauth,owasp,security,thompson,threat,tmobile,vulnerabilitiesfalsefull