

Hacking Humans
N2K Networks
Deception, influence, and social engineering in the world of cyber crime.
Episodes
Mentioned books

Aug 12, 2021 • 45min
The attackers keep coming every single day.
Guest Andrew Rubin, CEO and co-founder of Illumio, joins Dave to discuss Zero Trust, Dave and Joe share some follow-up from several listeners including one with a variation on prison pen pals we discussed some time ago and some advice on Dave's Google Authenticator issue he mentioned last week, Dave's story is about non-delivery scams, Joe's got a story on Imperial Kitten doing some catphishing, and our Catch of the Day comes from listener Timothy about with a sextortion campaign.Links to stories:
5 reasons non-delivery scams work
I Knew You Were Trouble: TA456 Targets Defense Contractor with Alluring Social Media Persona
Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

Aug 10, 2021 • 6min
security orchestration, automation, and response (SOAR) (noun) [Word Notes]
A stack of security software solutions and tools that allow organizations to orchestrate disparate internal and external tools which feed pre-built automation playbooks that respond to events or alert analysts if an event meets a certain threshold.

Aug 5, 2021 • 44min
Acceleration of our digital lives and impacts on cybercrime.
Guest Darren Shou, Chief Technology Officer of NortonLifeLock, shares insight on some of the scams he and his colleagues have been tracking, Joe and Dave share some follow up from listener Robert about free learning resources, Joe's story comes from listener Sedric who is new to real estate Investing and was looking for a hard money loan, rather than a story, Dave continues the conversation on passwords and multi-factor authentication with comments from listener Coinsigliere, and our Catch of the Day, well "catches" of the day since we have two, include one from Pryce on a smishing scam and the second from Ronald with a subscription email scam..Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

Aug 3, 2021 • 7min
personally identifiable information (PII) (noun) [Word Notes]
A term of legal art that defines the types of data and circumstances that permits a third party to directly or indirectly identify an individual with collected data.

Jul 29, 2021 • 47min
What are our devices doing to our compassion?
Guest Dr. Charles Chaffin, author of the book "Numb: How the Information Age Dulls Our Senses and How We Can Get them Back," joins Dave this week, we have some listener follow up from John with a tip on ATM security, Dave's got a two-fer this week including a useful site called www.shouldiclick.org and a Twitter report on multi-factor authentication thanks Rachel Tobac for calling our attention to it, Joe's story is from Microsoft on trends in tech support scams, and our Catch of the Day is from a listener on Twitter called @DoNoEvilMan about a payout from the Federal Reserve via the FBI.Links to stories:
Should I click or not?
Twitter Account Security report
Tech support scams adapt and persist in 2021, per new Microsoft research
Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

Jul 27, 2021 • 8min
secure access service edge (SASE) (noun) [Word Notes]
A security architecture that incorporates the cloud shared responsibility model, a vendor provided security stack, an SD-WAN abstraction layer, and network peering with one or more of the big content providers and their associated fiber networks.

Jul 22, 2021 • 42min
It's ok to be trusting, just be careful.
Guest Gil Friedrich from Avanan joins Dave to talk about how bad actors are infiltrating organizations using collaboration apps, we have two pieces of listener follow up from Michael and Tobias, Joe has a story about fake information, Dave's story is about message spam on LinkedIn, and our Catch of the Day is from a listener named Lucio with a questionable Reddit communication.Links to stories:
Propaganda as a Social Engineering Tool
Annoying LinkedIn Networkers Actually Russian Hackers Spreading Zero-Days, Google Says
Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

Jul 20, 2021 • 6min
red teaming (noun) [Word Notes]
The practice of emulating known adversary behavior against an organization's actual defensive posture.

Jul 15, 2021 • 41min
Threat actors changing ransomware tactics.
Guest Kurtis Minder from GroupSense joins Dave to discuss divergent ransomware trends, the guys have a listener reminder about it being CompTIA, Joe, Dave has a story about a coupon scam in the Houston area, Joe's story is about a real estate rental scam and a scammer who likes to talk about his work, and our Catch of the Day is from a listener named Craig with an email about an unprofessional colleague and a questionable attachment.Links to stories:
A ‘dark-side coupon group’ scammed stores out of millions, police say. ‘They were just going through the ink.’
Housing scams abundant in Jackson. This scammer is proud of it
Have a Catch of the Day you'd like to share? Email it to us at hackinghumans@thecyberwire.com or hit us up on Twitter.

Jul 13, 2021 • 7min
next generation firewall (noun) [Word Notes]
A layer seven security orchestration platform deployed at the boundary between internal workloads slash data storage and untrusted sources that blocks incoming and outgoing network traffic with rules that tie applications to the authenticated user and provides most of the traditional security stack functions in one device or software application.