Between Three Nerds: The evolution of Iranian cyber espionage
In this edition of Between Two Nerds Tom Uren and The Grugq talk to Hamid Kashfi, CEO and founder of DarkCell, talk about the Iranian cyber espionage scene.
Kashfi talks about how the regime once forced people to hack and crushed the domestic security research scene. He describes how and why the government has changed its approach and is now reaping the rewards of improved Iranian capabilities.
This episode is available on Youtube.
Show notes
The "Mossad or not" threat model by James Mickens
Shamoon wiper
iLO rootkit
--------
49:56
--------
49:56
Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns
Russia is hiring African freelancers for disinformation campaigns, the US is preparing to let contractors run offensive cyber operations, Germany blames Russia for the hack of its air traffic control agency, and Apple patches two WebKit zero-days.
Show notes
Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns
--------
7:51
--------
7:51
Sponsored: ConsentFix and Push Security's browser attack taxonomy
In this sponsored interview Casey Ellis is joined by Push Security’s Field CTO, Mark Orlando. They chat about the ways that browser-based attacks are evolving and how Push Security is finding and cataloging them.
Show notes
ConsentFix: Analysing a browser-native ClickFix-style attack that hijacks OAuth consent grants
Introducing our guide to phishing detection evasion techniques
--------
19:36
--------
19:36
Risky Bulletin: EU has a problem attracting and retaining cyber talent
The EU has a problem attracting and retaining cyber talent, the CEO of Coupang resigns following the company’s security breach, Microsoft expands its bug bounty program to cover third party code, and Chrome and Gogs patch zero-days.
Show notes
Risky Bulletin: EU has a problem attracting and retaining cyber talent
--------
9:22
--------
9:22
Risky Bulletin: Linux adds PCIe encryption to help secure cloud servers
Linux adds PCIe encryption to help secure cloud servers, Europol cracks down on Violence-as-a-Service providers, the International Criminal Court prepares for cyber-enabled genocide, and Cambodia busts a warehouse full of SMS blasters.
Show notes
Risky Bulletin: Linux adds PCIe encryption to help secure cloud servers