Weekly Update 380

Presently sponsored by: Unpatched devices keeping you up at night? Kolide can get your entire fleet updated in days. It’s Device Trust for Okta. Watch the demo!

We’re in Paris! And feeling proper relaxed after several days of wine and cheese too, I might add. This was a very impromptu end of 2023 weekly update as we balanced family time with doing the final video for the year. On the cyber side, the constant them

Continue reading Weekly Update 380

Weekly Update 379

Presently sponsored by: Unpatched devices keeping you up at night? Kolide can get your entire fleet updated in days. It’s Device Trust for Okta. Watch the demo!

It’s that time of the year again, time to head from the heat to the cold as we jump on the big plane(s) back to Europe. The next 4 weekly updates will all be from places of varying degrees colder than home, most of them done with

Continue reading Weekly Update 379

Weekly Update 378

Presently sponsored by: Identity theft isn’t cheap. Secure your family with Aura the #1 rated proactive protection that helps keep you safe online. Get started.

I’d say the balloon fetish segment was the highlight of this week’s video. No, seriously, it’s a moment of levity in an otherwise often serious industry. It’s still a bunch of personal info exposed publicly and that suchs regardless of the nature

Continue reading Weekly Update 378

A Decade of Have I Been Pwned

Presently sponsored by: Get insights into malware’s behavior with ANY.RUN: instant results, live VM interaction, fresh IOCs, and configs without limit.

A decade ago to the day, I published a tweet launching what would surely become yet another pet project that scratched an itch, was kinda useful to a few people but other than that, would shortly fade away into the same obscurity as all the other ones I’d

Continue reading A Decade of Have I Been Pwned

Weekly Update 376

Presently sponsored by: Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today!

I’m irrationally excited about the new Prusa 3D printer on order, and I think that’s mostly to do with planning for the NDC Oslo talk I plan to do with Elle, my 11-year old daughter. I’m all for getting the kids exposure not just

Continue reading Weekly Update 376

Weekly Update 375

Presently sponsored by: Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today!

For a weekly update with no real agenda, we sure did spend a lot of time talking about the ridiculous approach Harvey Norman took to dealing with heavy traffic on Black Friday. It was just… unfathomable. A bunch of people chimed into the tweet thread and suggested it may have

Continue reading Weekly Update 375

Weekly Update 374

Presently sponsored by: Identity theft isn’t cheap. Secure your family with Aura the #1 rated proactive protection that helps keep you safe online. Get started.

Think about it like this: in 2015, we all lost our proverbial minds at the idea of the Kazakhstan government mandating the installation of root certificates on their citizens’ devices. We were outraged at the premise of a government mandating the implementation of a model that could, at their

Continue reading Weekly Update 374

Acuity Who? Attempts and Failures to Attribute 437GB of Breached Data

Presently sponsored by: Identity theft isn’t cheap. Secure your family with Aura the #1 rated proactive protection that helps keep you safe online. Get started.

Allegedly, Acuity had a data breach. That’s the context that accompanied a massive trove of data that was sent to me 2 years ago now. I looked into it, tried to attribute and verify it then put it in the “too hard basket” and moved onto

Continue reading Acuity Who? Attempts and Failures to Attribute 437GB of Breached Data

Weekly Update 373

Presently sponsored by: Webinar: ‘How to Defend Against the Evilginx2.’ Kuba Gretzky (Evilginx2) & Marcin Szary (Secfense) show a tool that counters MFA bypass.

Most of this week’s video went on the scraped (and faked) LinkedIn data, but it’s the ransomware discussion that keeps coming back to mind. Even just this morning, 2 days after recording this live stream, I ended up on nation TV talking about the DP World

Continue reading Weekly Update 373

Hackers, Scrapers & Fakers: What’s Really Inside the Latest LinkedIn Dataset

Presently sponsored by: Webinar: ‘How to Defend Against the Evilginx2.’ Kuba Gretzky (Evilginx2) & Marcin Szary (Secfense) show a tool that counters MFA bypass.

I like to think of investigating data breaches as a sort of scientific search for truth. You start out with a theory (a set of data coming from an alleged source), but you don’t have a vested interested in whether the claim is true or not, rather you

Continue reading Hackers, Scrapers & Fakers: What’s Really Inside the Latest LinkedIn Dataset