Take 1 Security Podcast: Episode 11

Take 1 Security Podcast: Episode 11



Play Podcast

START CONTENT


* Twitch, a game streaming service owned by Amazon, was hacked last week


* Passwords, emails, usernames, addresses, phone numbers, dates of birth
* Amazon bought them last year for almost 1 billion dollars

* Bar Mitzvah attack on TLS


* Requires that you can sniff traffic
* Basically an RC4 problem
* Solution is to remove it from your supported algorithms

* GitHub Has been hit by a massive DDoS attack


* Apparently from China

* CSRF vulnerability found in a wind turbine


* Allowed you to pull usernames and passwords
* Also allowed the password to be changed for the default user, which had admin access

* CSRF vulnerability exposes Hilton customer accounts


* There was an account rotation issue where you could gain access to their account as long as you could guess their 9-digit username

* Snowden says IT workers now the targets of spies


* They’re not going after their information, but to use them for access to networks

* Premera hacked on same day as Blue Cross (January 29th)


* Same story: encryption, know your network, etc.
* Also same story: health data is harder to clean up from because it involves PII that cannot easily be changed
* More speculation around these attacks is that they’re data gathering for larger attacks on government networks

* Apple Acquires FoundationDB


* Fast NoSQL database probably to be used for its increasing entry into the services market

* Researchers use heat to breach air-gapped systems


* Everyone knows that an airgap is the best defense
* Ben-Gurion University came out with BitWhisper
* Now bidirectional using malware on both systems that controlled heat creation and detection
* Only 8-bits per hour

* BioCatch, Zumigo, Alibaba release tools to identify users


* I used to work with a technology called BioPass
* Uses what you do with your mouse, scrolling, how you smile via selfie, compares habits, your current location, etc. Similar to existing fraud detection just with more data points
* Really cool tech, needs to be used with the right authentication level

* Korea investing 5B in IoT and Smart Cars
* Bring Your Own IoT


* Recording audio and video are getting increasingly easy
* Sensitive meetings might become dead zones soon, and perhaps even sensitive work areas
* Some people will say that we already have this risk, but they key is the ease with which it can be done



END CONTENT

Play Podcast

Notes


* I skipped a week due to travel in Asia.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Episoder(532)

A Conversation with Christine Gadsby from BlackBerry

A Conversation with Christine Gadsby from BlackBerry

In this conversation, I speak with Christine Gadsby, Head of Product Security Operations Team at BlackBerry. We talk about: The Role of AI in Cybersecurity:  AI's real advancements, practical applications, and associated challenges, moving beyond the hype.  Enhancing Incident Response and Threat Hunting Christine highlights AI's significant impact on enhancing incident response and threat hunting, how AI quickly analyzes vast data to identify Indicators of Compromise (IoCs), automates routine tasks, and improves decision-making with actionable insights.  The Evolution of Blackberry in Cybersecurity Christine discusses Blackberry's shift from mobile devices to cybersecurity, emphasizing their focus on highly regulated environment and how the acquisition of Silence brought advanced AI capabilities, enhancing their security solutions.  Among other topics.  Intro (00:00:00)AI in Cybersecurity: Hype or Reality? (00:00:06)Incident Response and Threat Hunting (00:01:12)Automation in Security Programs (00:02:08)Industry-Specific AI Needs (00:03:20)AI's Role in Regulated Environments (00:04:23)Blackberry's AI Integration (00:04:50)Perceptions of Blackberry's Evolution (00:06:51)Trust in Vendor Relationships (00:09:11)AI's Potential in Monitoring (00:11:12)Challenges of Staffing in Cybersecurity (00:13:18)Staff Turnover in Cybersecurity (00:13:54)Burnout and Job Satisfaction (00:14:18)Hiring Challenges in Security (00:15:17)Confusion in Cyber Job Market (00:16:10)Job Changes Among Cyber Leaders (00:17:10)Outsourcing Security Functions (00:18:09)Pressure from Boards (00:18:57)Evolving Security Needs (00:19:40)Human Element in Cybersecurity (00:20:46)Talent Pipeline Issues (00:21:40)Challenges of Smaller Companies (00:22:32)Job Satisfaction and Workload (00:24:03)Pressure Cooker Environment (00:24:43)Crypto Attacks Resurgence (00:26:16)Crypto Mining Discussion (00:26:33)APT 32 Insights (00:27:22)Employee Training Importance (00:28:41)Indicators of Crypto Mining (00:29:45)Detection Challenges (00:30:30)Normal System Behavior (00:32:13)Looking Ahead to 2025 (00:32:44)*Supply Chain Pressures (00:35:08)Arms Race in Security (00:35:27)Liability Hot Potato (00:36:27)Managed Services Growth (00:36:44)Cyber Insurance Trends (00:37:52)CISO Evolution (00:39:10)The Importance of Trust in Supply Chain (00:39:56)Predictions for Cybersecurity Roles (00:40:46)Following Blackberry's Work (00:41:00)Networking and Future Conversations (00:41:05)Conclusion (00:41:37)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

5 Aug 202441min

UL NO. 442: Crowdstrike Analysis, Cannabis=Soma?, NK Github SE, AI Weaponry

UL NO. 442: Crowdstrike Analysis, Cannabis=Soma?, NK Github SE, AI Weaponry

Chinese Solar Builds, DOJ Domain Seizures, Scattered Spider Arrest, Kaiser AI, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Discussed in this episode:Intro (00:00:00)CrowdStrike Incident Discussion (00:01:49)Threat Actor and Social Engineering (00:03:49)AI Weapons for Ukraine (00:04:56)China's Energy Expansion (00:06:09)Foreign Influence and Disinformation (00:07:30)AI Race and China's Restrictions (00:08:33)Healthcare Innovations with AI (00:10:20)Nvidia's Potential Losses (00:11:19)Google's URL Shortening Service Shutdown (00:14:36)Tech Startup Challenges (00:14:36)Meta Analysis on Toothbrushing (00:16:43)Young Adulthood and Happiness Crisis (00:17:53)AI's Impact on Employment (00:19:08)The Impact of UBI on Ambition (00:20:11)The Nature of Ambition (00:21:18)Cultural Influence on Drive (00:23:14)Addressing Societal Issues (00:24:16)Mental Models for Success (00:24:16)Cannabis and Mediocrity (00:25:25)Conspiracy Culture Commentary (00:26:28)AI in Security (00:27:39)Silicon Valley Political Movements (00:27:39)Discovery Dilemma Tool (00:28:52)Emergency Preparedness (00:28:52)Constructive Political Conversations (00:29:48)Finding Common Ground (00:30:49)Wisdom in Silence (00:31:43)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

24 Jul 202432min

UL NO. 441: Substrate, OpenAIs AGI Levels, US Literacy Rates

UL NO. 441: Substrate, OpenAIs AGI Levels, US Literacy Rates

HackerCamp Approaches, Introducing Substrate, Kaspersky--, Exim/Gitlab Vulns, Personal/Business Branding, and more… ➡ Check out the Autonomous IT Podcast:https://community.automox.com/autonomous-it-podcasts-144 Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one! Discussed on this episode: Intro (00:00:00)AGI Definitions (00:01:29)Pinnacle Human Employees (00:02:36)Transition to ASI (00:03:18)Dynamic Content Summaries (00:03:48)Deepfakes in Education (00:04:43)AI and Disinformation (00:09:04)Manipulation and Inequality (00:11:01)Internet Trust and Content Verification (00:11:01)Concerns Over AI's Impact on Society (00:12:09)OpenAI's AGI Levels (00:13:08)AI Startups and Future Predictions (00:15:24)Technological Innovations (00:16:24)Literacy Crisis in the U.S. (00:17:29)Public Reaction to Health Risks (00:18:35)Search for Extraterrestrial Life (00:19:19)Exoplanets and the Drake Equation (00:19:37)VCs in Medical Practices (00:19:57)Conspiracies and Failures (00:20:48)Therapy and Rumination (00:20:57)Discovery Fluff on Lambda (00:21:12)Securing Workflows with GitHub Actions (00:21:22)Employee Disposability (00:21:32)Correlation of Smoking and Lung Cancer (00:21:48)AI in Satellite Imagery (00:22:04)Git Commits Insights (00:22:49)Check on Friends (00:23:12)Judgment as a Key Skill (00:23:22)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

21 Jul 202424min

UL NO. 440: RAID (Real World AI Definitions)

UL NO. 440: RAID (Real World AI Definitions)

Twillio API Dump, North Korea Russia, Funny AI Memes, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!   Discussed on this episode: Intro (00:00:01)Rebranding of Al Qaeda (00:01:06)Reading Alex Ramos's Business Books (00:01:14)Supporting a Struggling Army Veteran (00:01:54)In-person Sessions with Entrepreneurs (00:02:36)Real World AI Definitions Resource (00:03:00)Defining AI (00:04:08)Machine Learning Definition (00:06:15)Prompt Engineering (00:08:18)Retrieval Augmented Generation (00:09:22)AI Agent Definition (00:10:20)Chain of Thought (00:11:30)Prompt Injection vs. Jailbreaking (00:12:23)Artificial General Intelligence (00:13:24)Sample Efficient AI (00:14:26)Levels of AGI (00:15:25)Artificial Super Intelligence (00:17:21)The Levels of AI (00:19:40)Real World AI Definitions (00:21:49)Cloudflare's New Tool (00:23:51)Emerging AI Capabilities (00:26:00)Technology and Business Updates (00:27:54)Impact of AI on Society (00:32:12)Ground News Recommendation (00:34:29)Aphorism of the Week (00:34:29)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

11 Jul 202435min

UL NO. 439: Humans vs. AI in Prediction Markets

UL NO. 439: Humans vs. AI in Prediction Markets

Project Metaculus, SSH and Juniper 0-Day, China v. Taiwan, R1 Leaks, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one! Discussed in this episode: Updates on Courses and Fabric Introduction (00:00:43)Cracking Trump's Popularity and Security Vulnerabilities (00:01:48)Snowflake Data Breach and AI Security Concerns (00:02:42)APT29 Breach and Consulting Firms' Embrace of AI (00:04:58)AI Forecasting and Chinese Models' Performance (00:06:04)Impact of AI on Vulnerability Research and Automation (00:11:25)New Features in AI Frameworks and Podcast Recommendations (00:14:26)Reflections on Waymo Experience and Epictetus' Aphorism (00:15:26)  Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

4 Jul 202418min

UL NO. 438: Confusion is a Muse

UL NO. 438: Confusion is a Muse

Sonnet 3.5 Support in Fabric, CISA AI Tabletop exercise, Kaspersky ban, China Invasion Scenario, Langchain disilussionment, more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!   Discussed on this episode: Introduction (00:00:00) Augmented V2 Registration (00:01:37) Fabric Update and Sonnet 35 (00:01:56) Personal Development and Authenticity (00:03:17) Failures and Authentic Pursuits (00:04:32) Chasing Personal Goals (00:05:30) Articulating and Emoting (00:07:35) Security Updates (00:08:33) Tech Industry Developments (00:09:44) Results as a Service (00:13:11) Intelligence as a Service (00:14:21) Structured Output from LMMS (00:16:38) Innovative Projects (00:17:42) Kludgy first generation AI frameworks (00:18:47) Building a dependable AI stack (00:20:06) Results as a service and trust in AI (00:21:34) Solar energy vs. nuclear power (00:22:36) Smartphone-free schools and societal impact (00:25:02) Sun exposure and its health effects (00:26:04) Intelligence collection and analysis (00:29:26) Future of AI and automation (00:31:32) Tech tools and discoveries (00:33:33) Stoicism and gratitude (00:34:53)    Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

27 Jun 202436min

UL NO. 437: My List of Hard-won Life Lessons

UL NO. 437: My List of Hard-won Life Lessons

New AUGMENTED Course Date, 3 New Essays, Disgruntled deletions, Scale and Merit, Russia moves to Yuan, and more… ➡ Check out the Autonomous IT Podcast:https://community.automox.com/autonomous-it-podcasts-144 Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

21 Jun 202427min

UL NO. 436: Thoughts on the Future of AI & Societal Stability

UL NO. 436: Thoughts on the Future of AI & Societal Stability

When SuperIntelligence? Apple's WWDC updates, new Fabric pattern, GPT-4 Hacking Paper, China/Russia Using OpenAI for Misinformation, and more… ➡ Check out Kolide:kolide.com/unsupervisedlearning Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

14 Jun 202453min

Populært innen Teknologi

romkapsel
rss-avskiltet
teknisk-sett
tomprat-med-gunnar-tjomlid
energi-og-klima
rss-impressions-2
shifter
nasjonal-sikkerhetsmyndighet-nsm
elektropodden
fornybaren
rss-alt-vi-kan
rss-alt-som-gar-pa-strom
smart-forklart
rss-snakk-om-sikkerhet
teknologi-og-mennesker
kunstig-intelligens-med-morten-goodwin
rss-bouvet-bobler
i-loopen
pedagogisk-intelligens
rss-digitaliseringspadden