Hacker And The Fed

A $4.6 million fine, a whistleblower payday, and a fake water plant hacked by mistake — this week, Chris and Hector dive into the DOJ’s first major cyber enforcement case against a defense contractor that lied about its security, the rise of insider recruitment by ransomware crews, and how Russian hacktivists got trolled by a honeypot. Plus, travel chaos, flu season, and the return of Puerto Rico challenge coins. Join our new Patreon! ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

Chris and Hector kick off Cybersecurity Awareness Month with stories of phishing gone wrong, data privacy disasters, and a new wave of AI-powered attacks. From “comment jacking” and vanishing government backups to China’s one-hour breach rule and a Florida kid flagged by ChatGPT, the guys break down what’s real, what’s ridiculous, and what it means for your security. Join our new Patreon! ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

Chris and Hector kick off Cybersecurity Awareness Month with big news—Hector announces the launch of his new company, SafeHill. The guys dig into continuous threat exposure management, the dangers of malicious Chrome extensions, why ransomware claims are dropping, and how free tools from CISA can strengthen defenses. Join our new Patreon! ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

Chris and Hector break down the coming CMMC crackdown and what it means for 220,000+ contractors, 60 days to comply or lose your government work. They debate the government's plan to cut cyber hiring timelines from 70 to 25 days, talk about the sloppy opsec that got a teen ransomware hacker arrested, and dig into the surge of supply chain attacks hammering developers worldwide. Join our new Patreon! ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

Chris and Hector call out Microsoft for “gross cybersecurity negligence,” explain Kerberoasting in plain English, and discuss CISA’s CVE overhaul. Plus, hackers on the battlefield, and how U.S. tech helped build China’s surveillance state. Join our new Patreon! ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

Chris and Hector break down the WhatsApp whistleblower lawsuit claiming 1,500 engineers had unchecked access to user data. They also cover hackers extorting Google after the Salesforce breach, OpenAI scanning ChatGPT conversations for police referrals, and a police bodycam app secretly sending data to China, and why 2.5 billion Gmail users need a password reset. Join our new Patreon! ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

Chris and Hector recap their first live show and dig into Google’s new Cybersecurity Disruption Unit, South Korea’s $97M fine, FEMA’s IT firings, a WhatsApp zero-day, a $1B senior scam, China’s Salt Typhoon campaign, and AI tools fueling cybercrime. Join our new Patreon! ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

The discussion dives into the risks of AI agents potentially causing breaches by clicking on malicious links. The hosts debate the implications of a new bill proposing 'cyber privateers' for hackback actions. They also dissect the DOJ's successful takedown of the RapperBot botnet, highlighting its capabilities. A concerning zero-day flaw affecting many password managers is examined, along with the dangers of hoarding vulnerabilities that can lead to catastrophic leaks. Essential insights into cybersecurity risks and defenses make this an engaging listen!

Explore the fierce AI talent war as tech giants vie for expertise, with a shocking offer of $1.25 billion from Meta to lure Apple's AI head. Dive into personal privacy issues stemming from AI chatbot data leaks, raising concerns over user security. Discover the urgency of multi-factor authentication and why it’s vital for protecting sensitive information. Also, gain insights on the vulnerabilities inherent in zero trust solutions and the critical need for better cybersecurity practices in a rapidly evolving tech landscape.

A critical zero-day exploit targeting WinRAR users reveals the risks of malicious RAR files in phishing scams. The impact of stolen browser cookies on security measures like MFA is discussed, shedding light on their economic motivations. Nostalgically, one host bids farewell to AOL dial-up, reminiscing about the excitement of early internet days. The complexities of cybersecurity regulations are also examined, especially their implications for collaboration with the Department of Defense. It's a blend of nostalgia, serious threats, and insightful discussions!