Security Weekly
Paul's Security WeeklySubscribe

“Eavesdropping Cameras”, Ransomware Poll Results, Windows 11, & CVS Records Leak – PSW #699

This week in the Security News: Jeff, Larry, & Doug adjust to our Adrian Overlord! Ransomware galore, Ransomware Poll Results, Windows 11 & Windows 10's End-Of-Life, Drones that hunt for human screams, & more!

Full episode and show notes

Announcements

  • Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

Hosts

Principal Researcher at The Defenders Initiative
  1. 1. Puerto Rico’s Power Distributor Suffered a Cyberattack Hours Before a Devastating Fire
  2. 2. Ransomware attack hit Teamsters in 2019 — but they refused to pay
  3. 3. How Hackers Used Slack to Break into EA Games
  4. 4. IoT Security: IoT Needn’t Be the Internet of Threats
  5. 5. Keylime
  6. 6. SEC charges mortgage title issuer First American with cybersecurity vulnerability violation
  7. 7. Cyber insurance costs and terms spike as ransomware attacks multiply
Professor at Roger Williams University
  1. 1. REvil ransomware hits US nuclear weapons contractor
  2. 2. Microsoft Disrupts Large-Scale BEC Campaign Across Web Services
  3. 3. Peloton Bike+ vulnerability allowed complete takeover of devices
  4. 4. Bitcoin and Encryption: A Race Between Criminals and the F.B.I.
  5. 5. Scientists are teaching drones to hunt down human screams
  6. 6. Krebs on Security – In-depth security news and investigation
  7. 7. Ukrainian Police Nab Six Tied to CLOP Ransomware – Krebs on Security
  8. 8. Biden Tells Putin Critical Infrastructure Sectors ‘Off Limits’ to Russian Hacking
  9. 9. Required MFA Is Not Sufficient for Strong Security: Report
  10. 10. Exclusive Ransomware Poll: 80% of Victims Don’t Pay Up
  11. 11. Millions of Connected Cameras Open to Eavesdropping
Sr. InfoSec Consultant at Online Business Sytems
Product Security Research and Analysis Director at Finite State
  1. 1. Make way for Windows 11? Windows 10 end-of-life is October 2025
  2. 2. Certified Pre-Owned
  3. 3. CaribouLite: A 30-6000 MHz 13-bit 4MHz SDR HAT for the Raspberry Pi
  4. 4. How to hack a bicycle – Peloton Bike+ rooting bug patched
  5. 5. Taming iButton Keys with Flipper Zero
  6. 6. Ukrainian police arrest multiple Clop ransomware gang suspects – TechCrunch
  7. 7. CVS Accidentally Leaks 1 Billion Website Records—Including Covid-19 Vaccine Searches

Related

Threat Modeling and Understanding Inherent Threats – Adam Shostack – ESW #359

This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the subject. Adam recently released a whitepaper that focuses on and defines inherent threats. Resources: ...
How GenAI Can Improve SecOps – Ely Kahn – ESW #359

We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some of the use cases are obvious, while others were a complete surprise to me. Check out this episode if...