Advertise on podcast: ShadoSec Cyber Security Podcast

Important Microsoft patch coming soon so make sure to patch your systems soon

A short form version of the main stories of the week

Jorge and Neema do Kaseya and we talk ICloud Max Max baby!

Neema and Jorge pretend it's may. Jorge edits audio for the first time.  - Ransomware trends ~ 4:30 - WhatsApp for criminals ~15:00 (because WhatsApp wasn't bad enough..) - Jorge babbles about privacy, Neema is a total trooper about it. ~ 22:10 - SITA data breach. Neema calls Xi the W word.  ~ 37:45 - Android Security and the Google IO presentation ~ 43:20 - BSC! ~ 1:21:00 Topic Links https://thehackernews.com/2021/06/emerging-ransomware-targets-dozens-of.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29 https://nymag.com/intelligencer/2021/06/fbi-snooped-on-criminals-using-encrypted-messaging-app.html https://threatpost.com/supply-chain-attack-airlines-state-actor/166842/ Android stuff Links Android & RUST - https://security.googleblog.com/2021/05/integrating-rust-into-android-open.html Android Ready SE  - https://security.googleblog.com/2021/03/announcing-android-ready-se-alliance.html - https://source.android.com/compatibility/9/android-9-cdd.pdf?hl=sv IOXT Alliance https://www.ioxtalliance.org/ BSC Links https://nickjanetakis.com/blog/best-practices-around-production-ready-web-apps-with-docker-compose https://github.com/dineshsonachalam/Lucid-Dynamodb https://github.com/muc-dev/linked https://github.com/ProtonMail/WebClient/issues/242 https://www.indiegogo.com/projects/paperd-ink--2#/ https://www.infoq.com/news/2021/05/grain-web-assembly-first/ https://github.com/google/zx

Jorge is away on holiday and Neema steers the cyber ship! Stories: https://www.computerweekly.com/news/252501665/Exagrid-pays-26m-to-Conti-ransomware-attackers https://www.computerweekly.com/news/252501665/Exagrid-pays-26m-to-Conti-ransomware-attackers https://www.securityweek.com/kenyan-arrested-qatar-first-targeted-phishing-attack?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+securityweek+%28SecurityWeek+RSS+Feed%29 https://techcrunch.com/2021/06/02/stack-overflow-acquired-by-prosus-for-a-reported-1-8-billion/

Jorge and Neema blasting cyber security to ashes Stories:  https://japantoday.com/category/crime/people-in-japan-can-now-earn-%C2%A510-000-bounties-for-scamming-scammers https://www.zdnet.com/article/colonial-pipeline-ransomware-attack-everything-you-need-to-know/ https://www.pcmag.com/news/darkside-ransomware-group-loses-server-access-after-us-moves-to-disrupt https://www.flurry.com/blog/ios-14-5-opt-in-rate-att-restricted-app-tracking-transparency-worldwide-us-daily-latest-update/ https://blog.mozilla.org/security/2021/05/18/introducing-site-isolation-in-firefox/ https://blog.ethereum.org/2021/05/18/country-power-no-more/ https://blog.1password.com/welcoming-linux-to-the-1password-family/

Jorge and Neema doing their Cyber thang Stories:  https://www.bleepingcomputer.com/news/security/hashicorp-is-the-latest-victim-of-codecov-supply-chain-attack/amp/ https://www.securemac.com/news/facebook-finds-new-ios-spyware-phenakite https://www.eff.org/press/releases/eff-and-aclu-ask-supreme-court-review-case-against-warrantless-searches-international https://www.unibw.de/patch/papers/usenixsecurity20-wasm.pdf https://www.cnbc.com/2021/04/30/eu-says-apples-app-store-breaches-competition-rules.html

Jorge and Neema spice things up with some Dual Core luvin!  Stories:  https://www.securityweek.com/us-expels-russian-diplomats-imposes-new-round-sanctions?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Securityweek+%28SecurityWeek+RSS+Feed%29 https://threatpost.com/attackers-target-proxylogon-cryptojacker/165418/1 https://techcrunch.com/2021/04/13/fbi-launches-operation-to-remotely-remove-microsoft-exchange-server-backdoors/ https://www.theregister.com/2021/04/21/signal_cellebrite/ Useful links  https://www.apple.com/privacy/docs/A_Day_in_the_Life_of_Your_Data.pdf https://github.com/WICG/floc/issues/100 https://techcrunch.com/2021/04/13/fortnite-maker-epic-completes-1b-funding-round

Just when you thought we were gone ..... Jorge and Neema return with a BANG!  Defenders perspective on Azure!  Useful links: https://threatpost.com/cna-hit-novel-ransomware/165044/ https://adsecurity.org/?p=4277 https://dirkjanm.io/ https://www.pentestpartners.com/security-blog/azure-ad-attack-of-the-default-config/

Jorge and Neema hitchhike the open plains of cyber security!  News stories https://gizmodo.com/this-mom-allegedly-created-deepfakes-to-bully-her-daugh-1846471615 https://thehackernews.com/2021/03/google-to-reveals-what-personal-data.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29 https://www.zdnet.com/article/apple-developers-targeted-by-new-malware-eggshell-backdoor/ https://medium.com/nextdns/cname-cloaking-the-dangerous-disguise-of-third-party-trackers-195205dc522a https://www.zdnet.com/article/google-cloud-here-are-the-six-best-vulnerabilities-security-researchers-found-last-year/ https://www.nytimes.com/interactive/2021/03/18/magazine/facial-recognition-clearview-ai.html Bitsized chuncks  https://slack.engineering/migrating-millions-of-concurrent-websockets-to-envoy/  https://www.learnlatex.org/en/  https://www.audacityteam.org/audacity-3-0-0-released/  https://symflower.com/en/company/blog/2021/git-autofixup/  https://lwn.net/SubscriberLink/849125/c4422a7c318a5a17/ 

Neema ans Jorge blow up the complex world of Cyber Security!  Stories:  https://www.zdnet.com/article/this-malware-was-written-in-an-unusual-programming-language-to-stop-it-from-being-detected/ https://www.wired.com/story/privacy-first-browser-brave-launching-search-engine/ https://www.infosecurity-magazine.com/news/ransomware-paralyzes-spanish/ https://www.proofpoint.com/uk/blog/threat-insight/nimzaloader-ta800s-new-initial-access-malware

Jorge and Neema ride the wavelength of Cyber. Spoiler: It was too big to handle!  Stories https://krebsonsecurity.com/2021/03/is-your-browser-extension-a-botnet-backdoor/ https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software/ https://thehackernews.com/2021/03/why-do-companies-fail-to-stop-breaches.html https://www.macrumors.com/2021/03/04/eu-prepares-to-charge-apple-in-spotify-dispute/ https://www.gov.uk/government/news/cma-investigates-apple-over-suspected-anti-competitive-behaviour https://www.reuters.com/article/us-eu-apple-epic-games-antitrust/epic-games-takes-apple-fight-to-eu-antitrust-regulators-idUSKBN2AH0MO https://www.coindesk.com/amazon-digital-currency-mexico MS exchange bug Hunting recommendations https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/#scan-log https://github.com/microsoft/CSS-Exchange/tree/main/Security NSE script to test your instance https://github.com/microsoft/CSS-Exchange/blob/main/Security/http-vuln-cve2021-26855.nse Mitigations https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021/