2024-11-25 - Discordgate

Talkin' About [Infosec] News, Powered by Black Hills Information Security

00:00:00 - PreShow Banter™ — Discordgate

00:09:24 - BHIS - Talkin’ Bout [infosec] News 2024-11-25

00:10:46 - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly

00:12:08 - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership

00:19:16 - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

00:24:37 - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches

00:25:46 - Discordgate Follow Up

00:26:26 - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

00:31:08 - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack

00:34:01 - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking”

00:38:49 - Story # 7: T-Mobile finally managed to thwart a data breach before it occured

00:40:22 - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw

00:43:07 - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators

00:46:19 - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison

00:48:31 - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December

00:50:10 - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It

00:55:11 - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks

00:57:02 - Story # 13: Hackers Breach Andrew Tate’s Online ‘University,’ Exposing 800,000 Users

01:00:36 - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually

01:01:31 - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure

01:03:07 - Story # 16: US charges five linked to Scattered Spider cybercrime gang

01:04:25 - Plug: Secure Code Summit 2024