Catch Me If You Can is the Social Engineeer’s Playbook
The reality is that a lot of what hackers actually do is just social engineering in one form or another.
All topics
Video
66 Posts
Edge Devices Under Attack, a Threatcon Preview, and Communication Breakdowns
Today we have for you a buffet of zero days being exploited in edge security products, including Citrix and Fortinet, then we discuss the importance of communications from vendors when bad things happen, and finally we preview VulnCheck’s THREATCON1, which takes place next week.
Inside the Citrix NetScaler Zero Day Saga
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
The Malware That Asks AI What to Do Next | Ryan Fetterman
Ryan Fetterman from Cisco Talos sits down with Decipher’s Lindsey O’Donnell-Welch to talk about ClosedQuorum, the first reported malware binary with an autonomous command-and-control. They talk about the wide range of ways threat actors are using AI, and useful detection strategies for AI-assisted attacks.
FBI Hack Fallout, EvilTokens Takedown, and the F5 Zero Day
This week we dig into the ShinyHunters hack of the FBI and what it means not just for the FBI personnel but for the attackers, then we discuss the disruption of the EvilTokens phishing operation by Microsoft, and finally we talk about the F5 BIG-IP zero day and some odds and ends from LabsCon. Note: […]
Assessing AI Model Security From the Outside In | Matt Fredrikson
The security and reliability of the code in AI models is a huge question mark, because the models are black boxes that aren’t accessible to outsiders. Matt Fredrikson, professor at Carnegie Mellon University and founder of Gray Swan AI, joins Dennis to talk about the challenge of assessing these models and how a community of […]