REKAST - Talkin' Bout [infosec] News 2024-11-25 #infosecnews #cybersecurity #podcast #podcastclips

The podcast discusses several recent cybersecurity news items, including a potential antitrust case against Google, the discovery of a web shell during a red team exercise, and the effectiveness of Microsoft Defender. It also covers the conviction of a Bitfinex hacker, a nearest neighbor attack, and a critical vulnerability in end-of-life VPN routers. The podcast highlights a variety of vulnerabilities and attacks that impact cybersecurity.

Google Search Engine Default

• 00:00:05 The Department of Justice is considering forcing Google to allow users to choose their default search engine, instead of Google Chrome. Google has publicly opposed this decision, arguing that it is unfair. The hearing on the matter is not scheduled until April 2024.

Red Team Exercise & Web Shell

• 00:00:30 A recent red team exercise highlighted the persistence of web shells as a threat vector. Attackers were unable to gain access through typical means, such as password spraying, but easily accessed a web shell, demonstrating the importance of thorough remediation. Companies should proactively review pentest reports and remove such artifacts.

Microsoft Defender & Malware

• 00:01:11 An article suggests that Microsoft Defender is insufficient protection against all malware, highlighting cases where it has been bypassed. This discussion emphasizes the continued reliance on traditional antivirus software like Malwarebytes and Bitdefender. However, the presenter believes Defender is adequate if used with caution and a focus on threat awareness.

Bitfinex Hack & Criminal Conviction

• 00:02:00 Rapper and hacker, 'Razzlekhan', and her partner were convicted of hacking Bitfinex and stealing a significant amount of money in 2016, which is now worth billions. They received 18-month sentences and the presenter noted that she creates music on YouTube.

Nearest Neighbor Attack

• 00:02:34 A 'nearest neighbor' attack involved exploiting the vulnerabilities of companies with weak security by identifying and gaining access to a nearby network. Attackers leveraged open guest Wi-Fi networks to gain access and perform malicious activities. The presenter expresses concern over the difficulty of detecting such attacks.