2024-11-25 - Discordgate

00:00:00 - PreShow Banter™ — Discordgate 00:09:24 - BHIS - Talkin’ Bout [infosec] News 2024-11-25 00:10:46 - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly 00:12:08 - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership 00:19:16 - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access 00:24:37 - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches 00:25:46 - Discordgate Follow Up 00:26:26 - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization 00:31:08 - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack 00:34:01 - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking” 00:38:49 - Story # 7: T-Mobile finally managed to thwart a data breach before it occured 00:40:22 - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw 00:43:07 - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators 00:46:19 - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison 00:48:31 - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December 00:50:10 - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It 00:55:11 - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks 00:57:02 - Story # 13: Hackers Breach Andrew Tate’s Online ‘University,’ Exposing 800,000 Users 01:00:36 - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually 01:01:31 - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure 01:03:07 - Story # 16: US charges five linked to Scattered Spider cybercrime gang 01:04:25 - Plug: Secure Code Summit 2024 (00:00) - PreShow Banter™ — Discordgate (09:23) - BHIS - Talkin' Bout [infosec] News 2024-11-25 (10:45) - Story # 1: DOJ says Google must sell Chrome to crack open its search monopoly (12:07) - Story # 1b: DOJ’s staggering proposal would hurt consumers and America’s global technological leadership (19:15) - Story # 2: The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access (24:37) - Story # 3: Palo Alto Networks tackles firewall-busting zero-days with critical patches (25:46) - Discordgate Follow Up (26:25) - Story # 4: Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization (31:07) - Story # 5: Fintech giant Finastra investigates data breach after SFTP hack (34:01) - Story # 6: CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data, Reduce Fraud, and Stop Illegal “Debanking” (38:49) - Story # 7: T-Mobile finally managed to thwart a data breach before it occured (40:21) - Story # 8: D-Link urges users to retire VPN routers impacted by unfixed RCE flaw (43:06) - Story # 9: US seizes PopeyeTools cybercrime marketplace, charges administrators (46:19) - Story # 10: Razzlekhan, crypto’s most embarrassing rapper, is going to prison (48:31) - Story # 10b: Netflix has a perfectly timed Razzlekhan doc coming out in December (50:10) - Story # 11: Microsoft Defender Is Not Enough Anymore—This Malware Gets Around It (55:11) - Story # 12: Microsoft president asks Trump to “push harder” against Russian hacks (57:02) - Story # 13: Hackers Breach Andrew Tate's Online 'University,' Exposing 800,000 Users (01:00:36) - Story # 14: 7-Zip affected by dangerous vulnerability: users must update the app manually (01:01:31) - Story # 15: Microsoft disrupts ONNX phishing-as-a-service infrastructure (01:03:06) - Story # 16: US charges five linked to Scattered Spider cybercrime gang (01:04:25) - Plug: Secure Code Summit 2024