Take 1 Security Podcast: Episode 4

Take 1 Security Podcast: Episode 4



START CONTENT


* Ghost bug in PHP could affect millions of servers


* Flaw is in glibc, which is extensively by all Linux distributions
* Patch and reboot using yum or aptitude

* The US Army Released DShell, a malware forensics tool


* This is an interesting trend where we see tons of formerly secret groups flock to Github. Great to see

* Reddit released its first transparency report last week


* Says it received 55 requests for user information
* Says it complied with 64% of state and federal requests
* Says it received 218 requests for content removal, and complied with 31 percent of those
* I am pleased to see them releasing these numbers, and I hope more organizations do the same

* The GHCQ was using a program called BADASS to collect data leaked by games such as Angry Birds


* Luckily it only affected the 11 people still playing that game

* Russian dating site, Topface, got hacked for 20 million usernames
* The FBI busted up a Tom Clancy book plot in New York City


* The plan was to get information about wall street trading algorithms and hopefully destabilize the markets
* All they managed to do was embarrass themselves by commenting on how they couldn’t recruit young women

* China is demanding to be able to build backdoors into any code sold to its banking sector


* Some people call this news, but with China we just call this Wednesday

* Apple released a Yosemite update that fixed Thunderstrike, among other things
* Anonymous and Lizard Squad are going after each other


* Anonymous is the famous hacking group known for all sorts of things
* Lizard Squad is known for taking down the XBox and Playstation networks around Christmas time
* Anonymous DDoS’d the Lizard Squad website, and then Twitter suspended a couple of their handles
* Interesting to see these groups going after each other

* BMW and the internet of things is in the news, with BMW owners receiving an automatic push to around 2 million cars


* A vulnerability was present that could allow attacks to spoof cell towers and possibly control onboard systems
* BMW pushed a patch that ensures all such communications go over HTTPS
* It’s interesting that, like printers, cars are likely to become a primary IoT platform just because there are so many of them
* The key is to figure out what normal things exist in the world today en mass, and then imagine those things being connected
* Printers, cars, furniture, clothing, etc. It’s the regular stuff that makes it interesting because of how much attack surface they represent, and how prevalent the perspective they’ll offer into our daily lives



END CONTENT

Play Podcast

Notes


* Intro is from Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you like chill EDM.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Episoder(532)

A Conversation with Christine Gadsby from BlackBerry

A Conversation with Christine Gadsby from BlackBerry

In this conversation, I speak with Christine Gadsby, Head of Product Security Operations Team at BlackBerry. We talk about: The Role of AI in Cybersecurity:  AI's real advancements, practical applications, and associated challenges, moving beyond the hype.  Enhancing Incident Response and Threat Hunting Christine highlights AI's significant impact on enhancing incident response and threat hunting, how AI quickly analyzes vast data to identify Indicators of Compromise (IoCs), automates routine tasks, and improves decision-making with actionable insights.  The Evolution of Blackberry in Cybersecurity Christine discusses Blackberry's shift from mobile devices to cybersecurity, emphasizing their focus on highly regulated environment and how the acquisition of Silence brought advanced AI capabilities, enhancing their security solutions.  Among other topics.  Intro (00:00:00)AI in Cybersecurity: Hype or Reality? (00:00:06)Incident Response and Threat Hunting (00:01:12)Automation in Security Programs (00:02:08)Industry-Specific AI Needs (00:03:20)AI's Role in Regulated Environments (00:04:23)Blackberry's AI Integration (00:04:50)Perceptions of Blackberry's Evolution (00:06:51)Trust in Vendor Relationships (00:09:11)AI's Potential in Monitoring (00:11:12)Challenges of Staffing in Cybersecurity (00:13:18)Staff Turnover in Cybersecurity (00:13:54)Burnout and Job Satisfaction (00:14:18)Hiring Challenges in Security (00:15:17)Confusion in Cyber Job Market (00:16:10)Job Changes Among Cyber Leaders (00:17:10)Outsourcing Security Functions (00:18:09)Pressure from Boards (00:18:57)Evolving Security Needs (00:19:40)Human Element in Cybersecurity (00:20:46)Talent Pipeline Issues (00:21:40)Challenges of Smaller Companies (00:22:32)Job Satisfaction and Workload (00:24:03)Pressure Cooker Environment (00:24:43)Crypto Attacks Resurgence (00:26:16)Crypto Mining Discussion (00:26:33)APT 32 Insights (00:27:22)Employee Training Importance (00:28:41)Indicators of Crypto Mining (00:29:45)Detection Challenges (00:30:30)Normal System Behavior (00:32:13)Looking Ahead to 2025 (00:32:44)*Supply Chain Pressures (00:35:08)Arms Race in Security (00:35:27)Liability Hot Potato (00:36:27)Managed Services Growth (00:36:44)Cyber Insurance Trends (00:37:52)CISO Evolution (00:39:10)The Importance of Trust in Supply Chain (00:39:56)Predictions for Cybersecurity Roles (00:40:46)Following Blackberry's Work (00:41:00)Networking and Future Conversations (00:41:05)Conclusion (00:41:37)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

5 Aug 202441min

UL NO. 442: Crowdstrike Analysis, Cannabis=Soma?, NK Github SE, AI Weaponry

UL NO. 442: Crowdstrike Analysis, Cannabis=Soma?, NK Github SE, AI Weaponry

Chinese Solar Builds, DOJ Domain Seizures, Scattered Spider Arrest, Kaiser AI, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Discussed in this episode:Intro (00:00:00)CrowdStrike Incident Discussion (00:01:49)Threat Actor and Social Engineering (00:03:49)AI Weapons for Ukraine (00:04:56)China's Energy Expansion (00:06:09)Foreign Influence and Disinformation (00:07:30)AI Race and China's Restrictions (00:08:33)Healthcare Innovations with AI (00:10:20)Nvidia's Potential Losses (00:11:19)Google's URL Shortening Service Shutdown (00:14:36)Tech Startup Challenges (00:14:36)Meta Analysis on Toothbrushing (00:16:43)Young Adulthood and Happiness Crisis (00:17:53)AI's Impact on Employment (00:19:08)The Impact of UBI on Ambition (00:20:11)The Nature of Ambition (00:21:18)Cultural Influence on Drive (00:23:14)Addressing Societal Issues (00:24:16)Mental Models for Success (00:24:16)Cannabis and Mediocrity (00:25:25)Conspiracy Culture Commentary (00:26:28)AI in Security (00:27:39)Silicon Valley Political Movements (00:27:39)Discovery Dilemma Tool (00:28:52)Emergency Preparedness (00:28:52)Constructive Political Conversations (00:29:48)Finding Common Ground (00:30:49)Wisdom in Silence (00:31:43)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

24 Jul 202432min

UL NO. 441: Substrate, OpenAIs AGI Levels, US Literacy Rates

UL NO. 441: Substrate, OpenAIs AGI Levels, US Literacy Rates

HackerCamp Approaches, Introducing Substrate, Kaspersky--, Exim/Gitlab Vulns, Personal/Business Branding, and more… ➡ Check out the Autonomous IT Podcast:https://community.automox.com/autonomous-it-podcasts-144 Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one! Discussed on this episode: Intro (00:00:00)AGI Definitions (00:01:29)Pinnacle Human Employees (00:02:36)Transition to ASI (00:03:18)Dynamic Content Summaries (00:03:48)Deepfakes in Education (00:04:43)AI and Disinformation (00:09:04)Manipulation and Inequality (00:11:01)Internet Trust and Content Verification (00:11:01)Concerns Over AI's Impact on Society (00:12:09)OpenAI's AGI Levels (00:13:08)AI Startups and Future Predictions (00:15:24)Technological Innovations (00:16:24)Literacy Crisis in the U.S. (00:17:29)Public Reaction to Health Risks (00:18:35)Search for Extraterrestrial Life (00:19:19)Exoplanets and the Drake Equation (00:19:37)VCs in Medical Practices (00:19:57)Conspiracies and Failures (00:20:48)Therapy and Rumination (00:20:57)Discovery Fluff on Lambda (00:21:12)Securing Workflows with GitHub Actions (00:21:22)Employee Disposability (00:21:32)Correlation of Smoking and Lung Cancer (00:21:48)AI in Satellite Imagery (00:22:04)Git Commits Insights (00:22:49)Check on Friends (00:23:12)Judgment as a Key Skill (00:23:22)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

21 Jul 202424min

UL NO. 440: RAID (Real World AI Definitions)

UL NO. 440: RAID (Real World AI Definitions)

Twillio API Dump, North Korea Russia, Funny AI Memes, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!   Discussed on this episode: Intro (00:00:01)Rebranding of Al Qaeda (00:01:06)Reading Alex Ramos's Business Books (00:01:14)Supporting a Struggling Army Veteran (00:01:54)In-person Sessions with Entrepreneurs (00:02:36)Real World AI Definitions Resource (00:03:00)Defining AI (00:04:08)Machine Learning Definition (00:06:15)Prompt Engineering (00:08:18)Retrieval Augmented Generation (00:09:22)AI Agent Definition (00:10:20)Chain of Thought (00:11:30)Prompt Injection vs. Jailbreaking (00:12:23)Artificial General Intelligence (00:13:24)Sample Efficient AI (00:14:26)Levels of AGI (00:15:25)Artificial Super Intelligence (00:17:21)The Levels of AI (00:19:40)Real World AI Definitions (00:21:49)Cloudflare's New Tool (00:23:51)Emerging AI Capabilities (00:26:00)Technology and Business Updates (00:27:54)Impact of AI on Society (00:32:12)Ground News Recommendation (00:34:29)Aphorism of the Week (00:34:29)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

11 Jul 202435min

UL NO. 439: Humans vs. AI in Prediction Markets

UL NO. 439: Humans vs. AI in Prediction Markets

Project Metaculus, SSH and Juniper 0-Day, China v. Taiwan, R1 Leaks, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one! Discussed in this episode: Updates on Courses and Fabric Introduction (00:00:43)Cracking Trump's Popularity and Security Vulnerabilities (00:01:48)Snowflake Data Breach and AI Security Concerns (00:02:42)APT29 Breach and Consulting Firms' Embrace of AI (00:04:58)AI Forecasting and Chinese Models' Performance (00:06:04)Impact of AI on Vulnerability Research and Automation (00:11:25)New Features in AI Frameworks and Podcast Recommendations (00:14:26)Reflections on Waymo Experience and Epictetus' Aphorism (00:15:26)  Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

4 Jul 202418min

UL NO. 438: Confusion is a Muse

UL NO. 438: Confusion is a Muse

Sonnet 3.5 Support in Fabric, CISA AI Tabletop exercise, Kaspersky ban, China Invasion Scenario, Langchain disilussionment, more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!   Discussed on this episode: Introduction (00:00:00) Augmented V2 Registration (00:01:37) Fabric Update and Sonnet 35 (00:01:56) Personal Development and Authenticity (00:03:17) Failures and Authentic Pursuits (00:04:32) Chasing Personal Goals (00:05:30) Articulating and Emoting (00:07:35) Security Updates (00:08:33) Tech Industry Developments (00:09:44) Results as a Service (00:13:11) Intelligence as a Service (00:14:21) Structured Output from LMMS (00:16:38) Innovative Projects (00:17:42) Kludgy first generation AI frameworks (00:18:47) Building a dependable AI stack (00:20:06) Results as a service and trust in AI (00:21:34) Solar energy vs. nuclear power (00:22:36) Smartphone-free schools and societal impact (00:25:02) Sun exposure and its health effects (00:26:04) Intelligence collection and analysis (00:29:26) Future of AI and automation (00:31:32) Tech tools and discoveries (00:33:33) Stoicism and gratitude (00:34:53)    Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

27 Jun 202436min

UL NO. 437: My List of Hard-won Life Lessons

UL NO. 437: My List of Hard-won Life Lessons

New AUGMENTED Course Date, 3 New Essays, Disgruntled deletions, Scale and Merit, Russia moves to Yuan, and more… ➡ Check out the Autonomous IT Podcast:https://community.automox.com/autonomous-it-podcasts-144 Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

21 Jun 202427min

UL NO. 436: Thoughts on the Future of AI & Societal Stability

UL NO. 436: Thoughts on the Future of AI & Societal Stability

When SuperIntelligence? Apple's WWDC updates, new Fabric pattern, GPT-4 Hacking Paper, China/Russia Using OpenAI for Misinformation, and more… ➡ Check out Kolide:kolide.com/unsupervisedlearning Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

14 Jun 202453min

Populært innen Teknologi

romkapsel
rss-avskiltet
teknisk-sett
tomprat-med-gunnar-tjomlid
energi-og-klima
shifter
rss-impressions-2
elektropodden
fornybaren
smart-forklart
nasjonal-sikkerhetsmyndighet-nsm
rss-alt-som-gar-pa-strom
rss-alt-vi-kan
teknologi-og-mennesker
kunstig-intelligens-med-morten-goodwin
rss-snakk-om-sikkerhet
rss-bouvet-bobler
rss-digitaliseringspadden
rss-teams-cast-away
rss-bits-and-bytes-for-advokater