Cybersecurity Today Cybersecurity Today Month In Review - December 5th, 2025
7 snips
Dec 6, 2025 Join David Shipley, a savvy security commentator from Beauceron Security, and Laura Payne, a nuanced threat modeler from White Tuque, as they dive into the evolving landscape of cybersecurity. They explore 'living off the land' tactics that hackers are using, the hidden dangers of public Wi-Fi, and the recent Oracle E-Business Suite breach. They also address the risks of social engineering through legitimate tools like Calendly and DocuSign. Plus, learn about vital security practices and the importance of clear communication in combating cyber threats.
AI Snips
Chapters
Books
Transcript
Episode notes
Living Off The Land Is Growing
- Living-off-the-land means attackers use built-in OS tools to blend in and avoid detection.
- David Shipley warns agentic AI plus Windows plumbing will make this approach far more effective.
Agentic AI Amplifies Risk
- Agentic AI could be instructed to sweet-talk other agents or systems into executing malicious PowerShell or scripts.
- David Shipley notes this increases network noise and pressures logging retention and detection costs.
Treat Trusted Platforms As Risk Vectors
- Treat freemium services like DocuSign as potential abuse vectors and monitor inbound messages accordingly.
- Educate staff to question legitimate-looking senders and context even when allowlisted.
