The 443 - Security Simplified

Secplicity

Get inside the minds of leading white-hat hackers and security researchers. Each week, we’ll educate and entertain you by breaking down and simplifying the latest cybersecurity headlines and trends. Using our special blend of expertise, wit, and cynicism, we’ll turn complex security concepts into easily understood and actionable insights.

Subscribe Listen in podnod RSS feed Show website

386 episodes
Updated Yesterday

Episodes386

Newest first

Nov 16, 2020 · 33 min
Getting SASE with John Grady
This week on the podcast we sit down with John Grady, analyst at Enterprise Strategy Group, to break down the latest industry industry terms Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA). We'll dive in to exactly what they encompass and then get John's thoughts on where they stand in small and medium enterprises.
Nov 9, 2020 · 20 min
Packaged Attacks
This week on the podcast we discuss a previously unsolved mystery from the dark web that was just solved with a little help from the IRS. We'll then discuss the growing issue of malicious opensource packages and libraries after researchers last week discovered a malicious package masquerading as a popular communications service.
Nov 2, 2020 · 50 min
Healthcare Hacking
This week on the podcast, we'll discuss an alert from US-CERT and the FBI that details an "imminent threat" to hospitals and other healthcare facilities, as well as some recently disclosed critical vulnerabilities in a popular healthcare records software. After that, we'll give you your (hopefully) last dose of election security news with some election related hacking from the past week.
Oct 29, 2020 · 38 min
Top Election Security Threats
With the US elections only a week away, we're talking election security on this week's episode. We'll cover what we do and don't think attackers will target in the coming week and what we can do as a country to improve our security posture.
Oct 22, 2020 · 25 min
Trickbot Takedown
This week on the podcast, we discuss the latest round of indictments against foreign intelligence agents for cyber espionage. After that, we cover a Microsoft-lead coalition that has so far made a significant impact in taking down the infrastructure behind one of the largest active botnets. Finally, we highlight key takeaways from the latest Google Threat Analysis Group update on foreign hacking efforts.
Oct 12, 2020 · 42 min
Android Ransomware Evolution
This week on The 443, we cover research from Microsoft's security team on a new Android ransomware variant that gets around Google's latest protections. We also cover a UEFI malware loader discovered by Kaspersky and the US Department of Justice's actions against a popular video game console mod chip manufacturer.
Oct 5, 2020 · 33 min
ZeroLogon
This week on the podcast we circle back to cover a critical vulnerability in Windows Server, that could allow an attacker to obtain the keys to the kingdom with minimal effort. After that, we discuss a pair of alerts from the US Department of Treasury Office of Foreign Assets Control and Financial Crimes Enforcement Network on the topic of ransomware payments.
Sep 28, 2020 · 33 min
Q2 2020 Internet Security Report
This week on the podcast, we cover the latest internet security report from WatchGuard Threat Lab. We'll go over the key takeaways from the Q2 2020 report including malware and network attacks that targeted WatchGuard customer networks. Before that though, we'll discuss an alert from the US Cybersecurity and Infrastructure Security Agency (CISA) that detailed a successful cyber attack against an unnamed federal agency.
Sep 21, 2020 · 51 min
Combating Disinformation with Nina Jankowicz
This week on The 443 – Security Simplified, we sit down for a chat on disinformation with Nina Jankowicz, author of How to Lose the Information War. From the US to Estonia, we’ll discuss how nation states are weaponizing social discussion against their adversaries to sow discord and advance their own influence and agenda, in some cases without even having to pick a side.
Sep 14, 2020 · 34 min
Election Security Update
This week on the podcast, we cover the city of Portland's ban on facial recognition technology for both public and private organizations, malware targeting VOIP soft switches, and an update from Microsoft on foreign hacking attempts into entities involved in this year's US elections.
Sep 10, 2020 · 39 min
Snowden Vindication?
This week on the podcast we cover an update on the MYSTIC surveillance platform, one of several covert and potentially illegal spying programs that former NSA contractor Edward Snowden leaked the existence of in 2014. Additionally, we'll discus an update on the payment card skimming malware MageCart and a Python Remote Access Trojan. Episode Note: Yes, we posted this episode a bit late but we'll be back to our normal Monday episodes next week!
Aug 31, 2020 · 34 min
Uber Cover Up
This week on the podcast we cover the latest updates on Uber’s cover up of their 2016 data breach that impacted 57 million customers and employees. After that, we discuss a DDoS attack against the New Zealand Stock Exchange and an interesting malware delivery technique that researchers at ProofPoint recently disclosed.
Aug 24, 2020 · 44 min
AI Bloggers
This week on the podcast, we cover Generative Pre-trained Transformer 3 or GPT-3, an AI model that a UC Berkeley student recently used to generate blog posts that fooled humans enough to propel one of them to the top of Hacker News. Additionally, we'll discuss a P2P botnet that has been targeting SSH servers on the internet.
Aug 17, 2020 · 32 min
The Dark Web Rewind
This week on the podcast, we’re bringing back a favorite episode from the very beginnings of The 443 – Security Simplified where we dove in to the Dark Web and discussed how It works, where it came from, and who uses it now. This episode originally aired in 2018.
Aug 10, 2020 · 53 min
BlackHat 2020 Recap
With BlackHat’s online-only 2020 edition conference in the bag we take a look back at a few of our favorite briefings and discuss the takeaways as they apply to our industry. From a penetration test gone wrong to what security professionals can learn from an EMT, we cover the best talks from this year’s event.
Aug 3, 2020 · 40 min
BlackHat and DEF CON Online
With the Black Hat and DEF CON security conferences starting this week, albeit in an online-only mode, we decided to take a look through this year’s agenda and pick some of the talks we are most looking forward to. We’ve picked out talks ranging from new research to updates on recent vulnerabilities to discuss on this week’s episode. Be sure to check out defcon.org this weekend since the conference is entirely free this year.
Jul 27, 2020 · 36 min
Meowing Databases
This week on The 443 – Security Simplified we discuss yet another alert from the UK National Cyber Security Center, this time on cyber-attacks targeting sporting organizations. We also take a quick dive into Meowing, a wave of destructive hacking that’s been targeting exposed databases online. Finally, with only a few weeks to go before the online-only editions of Black Hat and DEF CON, we chat about our annual Capture the Flag contest and how to participate this year. fls bxeu ee [[auyfj-8o1z1p9hq7]]
Jul 20, 2020 · 36 min
Twoops
This week on The 443 – Security Simplified we cover a massive security breach at Twitter that resulted in an attacker taking over dozens of high-profile accounts ranging from former presidents to Apple. We also discuss the latest Microsoft patch Tuesday which included a fix for a critical security vulnerability in Windows DNS Server.
Jul 13, 2020 · 41 min
Can We Trust Facial Recognition?
Welcome back to another episode of The 443 – Security Simplified. This week in the news, we cover an open source vulnerability scanner from Google and phishing campaign that combines Microsoft 365 and Zoom. After that, we dive in to the world of facial recognition and discuss recent research from WatchGuard Threat Lab and other concerns about the technology.
Jul 6, 2020 · 33 min
Don’t Trust the App
This week on The 443 – Security Simplified, we discuss the latest out-of-band security patch from Microsoft solving two potentially serious vulnerabilities, a cryptocurrency phishing campaign that made its way on to the Google Play app store, and a neat way that payment card skimming malware hide’s its malicious code.