Couverture de Talkin' Bout [Infosec] News

Talkin' Bout [Infosec] News

Talkin' Bout [Infosec] News

De : Black Hills Information Security
Écouter gratuitement

Offres de saison | 0,99 € par mois pendant les 3 premiers mois

5,99 €/mois par la suite. Des conditions s’appliquent. Annulation mensuelle possible.
À propos de ce contenu audio
 A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. Join us live on YouTube, Monday's at 4:30PM ETCopyright 2025 Talkin' About [Infosec] News, Powered by Black Hills Information Security Politique et gouvernement
Épisodes
  • All Your RAM Now Belong to SAM - 2026-11-02

    All Your RAM Now Belong to SAM - 2026-11-02
    Nov 4 2026
    Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Shock Site Value(10:39) - All Your RAM Now Belong To Sam -2026-11-02(14:42) - Proton’s Reported “Loser Thinking” Response to Security Testing(21:04) - Linux MPTCP Vulnerability and Patching Concerns(24:16) - Telegram Android Flaw: Code Execution Through Voice Calls(24:56) - Reported Binance Hack: Hot Wallets and Exchange Security(34:20) - Sam Altman’s RAM Comments Spark Backlash(38:35) - Oracle Remote Code Execution & Cisco SD-WAN Flaw(38:52) - PHP2Shell and Node2Shell Follow-Up(39:12) - Windows Kerberos Delegation Abuse(39:53) - Pwn2Own: Chaining Four Microsoft Edge Logic Bugs(40:30) - AI-Assisted Vulnerability Research: Costs and Expertise(45:33) - Reddit’s Reported Move Toward Login-Required Access(46:31) - Google AI Summaries and Accuracy Concerns(49:00) - Data Center Cargo Theft and GPS Spoofing(54:35) - Repurposing Consumer GPUs for AI Infrastructure(55:43) - Doc Blackburn’s Introductory Cryptography Course — December 4(56:40) - Post-Quantum Cryptography and Long-Term Data Protection(59:12) - Election Day Reminder and Ballot Tracking(59:33) - Wade Wells’ Upcoming Conference Update(01:00:53) - John Strand’s Core Skills in the Age of AI — November 10–11(01:02:26) - Discord Message Discoverability and Privacy Settings(01:09:15) - Proposed EU Changes to AI Training and Data ConsentLinksProton’s Reported “Loser Thinking” Response to Security TestingLinux MPTCP Vulnerability and Patching ConcernsTelegram Android Flaw: Code Execution Through Voice CallsReported Binance Hack: Hot Wallets and Exchange SecuritySam Altman’s RAM Comments Spark BacklashOracle Remote Code Execution & Cisco SD-WAN FlawWindows Kerberos Delegation AbusePwn2Own: Chaining Four Microsoft Edge Logic BugsReddit’s Reported Move Toward Login-Required AccessGoogle AI Summaries and Accuracy ConcernsData Center Cargo Theft and GPS SpoofingRepurposing Consumer GPUs for AI InfrastructureDoc Blackburn’s Introductory Cryptography Course — December 4Post-Quantum Cryptography and Long-Term Data ProtectionJohn Strand’s Core Skills in the Age of AI — November 10–11Discord Message Discoverability and Privacy SettingsProposed EU Changes to AI Training and Data ConsentCreators & Guests Corey Ham - HostRalph May - HostWade Wells - HostBronwen Aker - HostDoc Blackburn - GuestAisling nic Lynne "siriciryel" - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 11 min
  • PHP2Shell Causes Hell on a Friday 2026-10-26

    PHP2Shell Causes Hell on a Friday 2026-10-26
    Oct 29 2026
    The BHIS crew breaks down PHP2Shell, the challenges of emergency patching, and how AI-assisted vulnerability discovery is changing incident response. They discuss weak eMudhra certificate keys, Node2Shell and Brotli vulnerabilities, and security issues involving Plex, LiteLLM, GitLab, Broadcom Wi-Fi, and Popcorn Time. Other topics include AI agent frameworks used in attacks, research into self-propagating agents, context bombing as a defensive tactic, and the security and privacy implications of AI-assisted smart TV hacking.Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Ryan Fixes Audio(04:57) - PHP2Shell Causes Hell on a Friday 2026-10-26(07:12) - PHP2Shell: AI-discovered vulnerabilities and emergency patching(16:47) - Azure incident response workshop and Denver training(25:19) - Weak eMudhra certificate keys and certificate trust failures(31:08) - Doc Blackburn’s encryption fundamentals workshop — December 4(37:13) - Rapid-fire roundup: Plex, LiteLLM, and GitLab(38:37) - Storm-0940: AI agent frameworks and the ConnectWise compromise(40:23) - Research into self-propagating AI agents and botnets(42:34) - AI-assisted smart TV hacking and restrictions on security research(47:59) - Context bombing: Triggering AI guardrails to disrupt attacks(51:46) - John Strand’s Information Security Core Skills in the Era of AI — November 10–11(52:02) - December Antisyphon summit: What in the Actual Cyber(52:46) - Broadcom Wi-Fi flaw: WPS memory exposure and stolen passwords(54:15) - OpenAI agent incidents and containment challenges(56:54) - Popcorn Time updater and supply chain attack risksLinksPHP2Shell: AI-discovered vulnerabilities and emergency patchingAzure incident response workshop...and Denver trainingWeak eMudhra certificate keys and certificate trust failuresDoc Blackburn’s encryption fundamentals workshop — December 4Node2Shell: Brotli vulnerabilities and downstream patchingRapid-fire roundup: Plex, LiteLLM, and GitLabStorm-0940: AI agent frameworks and the ConnectWise compromiseResearch into self-propagating AI agents and botnetsPeople are vibe coding their way to better TVsContext bombing: Triggering AI guardrails to disrupt attacksJohn Strand’s Information Security Core Skills in the Era of AI — November 10–11December Antisyphon summit: What in the Actual CyberBroadcom Wi-Fi flaw: WPS memory exposure and stolen passwordsOpenAI agent incidents and containment challengesPopcorn Time updater and supply chain attack risksCreators & Guests Corey Ham - HostChed "cheddar" Wiggins - GuestRalph May - HostBronwen Aker - HostDoc Blackburn - GuestGerard Johansen - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    59 min
  • ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19

    ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19
    Oct 21 2026
    The BHIS crew examines the ConnectWise/SkyKick compromise, its implications for Microsoft Entra tenants, and the consequences for MSPs and their customers. They discuss privileged application access, attacker persistence, and why clear incident communication matters. Other stories include the Cairn framework’s use of AI agents against retail websites, research into prompt injection in HTTP headers, exposed MCP servers, Citizen Lab’s reporting on advertising-delivered zero-click spyware, and an alleged listening device installation at OpenAI. Along the way, the team explores deception, proactive security assessments, and reducing attack surface as automated attacks become cheaper and easier to scale.Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — One decent flying car.(06:55) - ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19(10:22) - ConnectWise/SkyKick Compromise and Microsoft Entra Tenant Access(41:23) - Cairn: AI Agents Automating Attacks Against Retail Websites(53:41) - Research: Prompt Injection in HTTP Response Headers(55:06) - Exposed MCP Servers and the Risk of AI Inference Theft(58:09) - Adfection: Zero-Click Spyware Delivered Through AdvertisementsLinksConnectWise/SkyKick Compromise and Microsoft Entra Tenant AccessCairn: AI Agents Automating Attacks Against Retail WebsitesResearch: Prompt Injection in HTTP Response HeadersExposed MCP Servers and the Risk of AI Inference TheftAdfection: Zero-Click Spyware Delivered Through AdvertisementsAlleged Listening Device Installation at OpenAIAntisyphon Pay What You Can Training: November 10–11DeathCon Tickets in San DiegoCreators & Guests Alex Minster "Belouve" - GuestJohn Strand - HostBronwen Aker - HostWade Wells - HostCorey Ham - HostHayden Covington - HostEric Capuano - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 10 min
adbl_web_anon_alc_button_suppression_t1
Aucun commentaire pour le moment