Security Conversations cover image

Security Conversations

Latest episodes

undefined
Jan 3, 2025 • 1h 49min

US Treasury hacked via BeyondTrust, MISP and the threat actor naming mess

Discover the chaos surrounding threat actor naming conventions and the push for a standardization via MISP. Dive into the breach of BeyondTrust that compromised the US Treasury, illustrating the urgent need for improved cybersecurity. Unpack the emergence of the XDR33 CIA Hive malware variant and explore its low detection rates. With insights into the distrust surrounding corporate cybersecurity pledges, the discussion emphasizes accountability and transparency in the face of escalating threats.
undefined
Dec 27, 2024 • 1h 53min

Palo Alto network edge device backdoor, Cyberhaven browser extension hack, 2024 research highlights

Delve into the stealthy backdoor found in Palo Alto's network edge devices and the broader implications of the Cyberhaven browser extension hack. Explore the dangers of deepfake technology and its potential misuse in cyber threats. The discussion covers the pressing issues of browser extension security, phishing risks, and insider threats in today's landscape. Additionally, they highlight significant cybersecurity research from 2024, emphasizing the evolving tactics of state-sponsored cyber operations and the need for vigilance against increasing vulnerabilities.
undefined
Dec 23, 2024 • 1h 59min

US government's VPN advice, dropping bombs on ransomware gangs

The podcast dives into the controversial U.S. government VPN recommendations and their risks, including potential backdoor access. It uncovers the ethical implications of spyware like NoviSpy used against activists in Serbia. The discussion on Mossad's clever tactics with ransomware exposes the murky depths of cyber warfare. Additionally, it highlights critical cybersecurity vulnerabilities and the challenge of navigating international cooperation amidst an evolving threat landscape. Funny anecdotes and personal updates keep the tone light and engaging.
undefined
4 snips
Dec 13, 2024 • 2h 14min

Surveillance economics, Turla and Careto, and the AI screenshots nobody asked for

Dive into the fraught intersection of technology and democracy, as discussions reveal TikTok's potential to sway elections and amplify misinformation. Explore the dark underbelly of cyber operations with insights into Turla's manipulative tactics and Careto's latest hacking efforts. The ethical ramifications of surveillance capitalism and the covert data capture on macOS raise eyebrows. Plus, a glance at quantum computing’s role in security challenges and the complexities of cyber warfare add layers to this riveting conversation.
undefined
7 snips
Dec 7, 2024 • 1h 47min

Inside the Turla Playbook: Hijacking APTs and fourth-party espionage

Dive into the intriguing world of cyber espionage as experts unravel the tactics of Russia's Turla APT, including its surprising theft from Pakistani networks. Discover the complexities of threat attribution and the challenges of identifying cyber actors. The episode also scrutinizes the concerning rise of spyware in Russia and the implications of supply chain vulnerabilities in Web3 technologies. On a more political note, explore the alarming election interference in Romania fueled by misinformation and social media dynamics.
undefined
4 snips
Nov 30, 2024 • 1h 19min

Volexity’s Steven Adair on Russian Wi-Fi hacks, memory forensics, appliance 0days and network inspectability

Steven Adair, the founder of Volexity and a cybersecurity expert, shares insights on crucial topics in the field. He discusses innovative approaches to memory forensics, emphasizing their importance in incident response. The conversation dives into Volexity's discoveries regarding Wi-Fi hacks and the complexities of EDR systems. Adair also addresses the rise of professional ransomware attacks, highlighting a recent Firefox zero-day and the emergence of a Linux bootkit. His expertise sheds light on significant vulnerabilities and the urgent need for robust network security.
undefined
Nov 28, 2024 • 1h 1min

Sid Trivedi on the RSA Innovation Sandbox $5 million investment gambit

In this conversation, Sid Trivedi, a partner at Foundation Capital specializing in early-stage cybersecurity investments, discusses the RSA Innovation Sandbox's new $5 million investment requirement for finalists. He highlights red-flag concerns regarding pro-rata rights and ethical dilemmas facing CISOs involved with startups. The dialogue also delves into the challenges of funding seed-stage companies in a platform-driven market, while reflecting on the complex relationships between venture capitalists and groundbreaking innovations in cybersecurity.
undefined
7 snips
Nov 22, 2024 • 1h 28min

Russian APT weaponized nearby Wi-Fi networks in DC, new macOS zero-days, DOJ v Chrome

Join security experts Juan Andres Guerrero-Saade from SentinelLabs and Costin Raiu from Kaspersky as they dive into the fascinating world of cyber threats. They discuss alarming tactics used by Russian APTs to exploit nearby Wi-Fi networks and the urgent need for better Wi-Fi security measures. The conversation also covers the DOJ's push to break up Google and the implications for cybersecurity. They touch on the challenges of data sharing across sectors and the transformative impact of AI on coding practices, revealing both opportunities and risks.
undefined
34 snips
Nov 15, 2024 • 1h 54min

What happens to CISA now? Is deterrence in cyber possible?

In this discussion, Juan Andres Guerrero-Saade, a security researcher from SentinelLabs, and Costin Raiu, Director at Kaspersky, dive into the intricacies of cyber deterrence and the evolving threats from Iranian groups. They examine the implications of the FBI and CISA's investigation into recent cyber espionage incidents, including the Salt Typhoon hacks. The conversation also explores the uncertain future of CISA amid political changes and the impact of emerging cyber capabilities from China. Insights into corporate transparency and the role of cryptocurrency in cybersecurity round out this compelling dialogue.
undefined
35 snips
Nov 9, 2024 • 1h 37min

Mysterious rebooting iPhones, EDR vendors spying on hackers, Bitcoin 'meatspace' attacks

Join security experts Juan Andres Guerrero-Saade from SentinelLabs and Costin Raiu from Kaspersky as they dive into intriguing topics. They unravel the mystery of iPhones rebooting in law enforcement custody due to a new iOS feature. They discuss malware like GoblinRAT and North Korea's cunning cryptocurrency theft tactics. The conversation also touches on the ethics of EDR software transparency and the dangers of physical attacks in the crypto world, offering essential insights for enthusiasts and professionals alike.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode