The Colonial Pipeline Hack, the SEC's X Account, and Special Agent Aron Mann on Homeland Security and Cyber
Jan 31, 2024
auto_awesome
Special Agent Aron Mann from Homeland Security Investigations Cyber Crime Center discusses the Colonial Pipeline hack, the dark web intensifying the insider threat, and the SEC's X account being hacked. They also explore the rise of insider threats, vulnerability of employees, and the importance of security measures.
Homeland Security Investigations Cybercrime Unit offers career opportunities in computer forensics, cyber operations, and cybersecurity.
The darknet is exacerbating the insider threat in cybersecurity, making it more challenging to detect and prevent insider attacks.
The Mother of All Breaches (Moab) is a massive leak containing billions of records from various past breaches, posing a significant risk to individuals and organizations.
The SEC's ex-account on Twitter was compromised through a sim swap attack, highlighting the vulnerability of social media accounts to unauthorized access.
Deep dives
Special Agent Aaron Mann discusses HSI's cyber role and career opportunities within HSI
Special Agent Aaron Mann is interviewed about Homeland Security Investigations Cybercrime Unit and the career opportunities within the agency.
The Colonial Pipeline hack and the darknet's intensifying insider threat
The podcast hosts break down the Colonial Pipeline hack and highlight how the darknet is intensifying the insider threat in cybersecurity.
The Mother of All Breaches: 26 billion records found in a massive leak
A massive leak, known as the Mother of All Breaches (Moab), is discovered containing billions of records from various past breaches, including government records and social media platforms.
Growing concern over insiders collaborating with cybercriminals
There is a rising trend of insiders collaborating with cybercriminals to carry out successful attacks on organizations, particularly through offering insider information and access in exchange for payment.
SEC's Ex-Account Compromised in a Sim Swap Attack
The SEC's ex-account on Twitter was compromised in a sim swap attack. The unauthorized party gained control of the SEC's phone number associated with the account, allowing them to reset the password. The attacker made two posts, one announcing the commission's approval of spot Bitcoin exchange-traded funds, and the other containing a dollar sign BTC. The second post was deleted, but not the first. The FBI is involved in the investigation, and it is likely that the attacker will be traced.
Opportunities for Non-1811 Positions in HSI
There are non-1811 positions available in HSI, including roles for computer forensic analysts (CFAs), cyber operations officers (COOs), and cybersecurity specialists (2210s). CFAs can apply through the HERO program, which offers opportunities to disabled veterans interested in becoming computer forensic analysts. COOs provide advanced technical support in criminal investigations, including incident response and forensic analysis. Cybersecurity specialists focus on website development, programming, and infrastructure, offering expertise in a blue-team capacity.
Opportunities for 1811 Positions in HSI
There are currently two open 1811 positions in HSI, specified as female-only and staff offices in Puerto Rico. Generally, HSI looks for candidates with a bachelor's degree, but significant law enforcement experience can sometimes be considered in place of a degree. Previous law enforcement experience may provide an advantage, but adaptability, quick thinking, and the ability to handle a variety of situations are important qualities for all 1811 positions. HSI offers training and the opportunity to specialize in cybercrime investigations for successful applicants.
On this episode of Hacker And The Fed we interview Special Agent Aron Mann with Homeland Security Investigations (HSI) Cyber Crime Center about their cyber role and career opportunities. We break down the Colonial Pipeline hack, how the dark web is intensifying the insider threat, and dig into the mother of all breaches. And finally, the SEC's X account was hacked.
NAXO is a premier cybersecurity and investigations firm, including blockchain forensics, whose mission to fight cybercrime aligns perfectly with Hacker and the Fed’s content.
Go to cloudsolvers.com tell them “Hacker and the Fed sent you” to get a free assessment of your current environment.
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode