RECAST - Talkin' Bout [infosec] News 2024-01-29

Here's a byte-sized highlight reel of our weekly Podcast with BHIS and Friends. stories. https://www.blackhillsinfosec.com/pod... We discuss notable Infosec, and infosec-adjacent news stories. Catch us LIVE on Mondays, 4:430pm EST.

Brought to you by:
/// 📄 Antisyphon Training
https://www.antisyphontraining.com/

Story # 1: SEC confirms X account was hacked in SIM swapping attack
https://www.bleepingcomputer.com/news...

Story # 2: MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries
https://thehackernews.com/2024/01/hac...

Story # 3: Fortra warns of new critical GoAnywhere MFT auth bypass, patch now
https://www.bleepingcomputer.com/news...

Story # 4: Tesla hacked, 24 zero-days demoed at Pwn2Own Automotive 2024
https://www.bleepingcomputer.com/news...

Story # 5: Election cybersecurity director was a victim of a ‘swatting’ attack in her home
https://www.popsci.com/technology/cis...

Story # 6: Ring will no longer allow police to request users’ doorbell camera footage
https://www.npr.org/2024/01/25/122694...

Story # 7: Group permission misconfiguration exposes Google Kubernetes Engine clusters
https://www.csoonline.com/article/129...

REPRISE STORY: Mega-Breach Database Exposes 26 Billion Records
https://www.infosecurity-magazine.com...


///Black Hills Infosec Socials
Twitter:   / bhinfosecurity  
Mastodon: https://infosec.exchange/@blackhillsi...
LinkedIn:   / antisyphon-training  
Discord:   / discord  

///Black Hills Infosec Shirts & Hoodies
https://spearphish-general-store.mysh...

///Black Hills Infosec Services
Active SOC: https://www.blackhillsinfosec.com/ser...
Penetration Testing: https://www.blackhillsinfosec.com/ser...
Incident Response: https://www.blackhillsinfosec.com/ser...

///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com/

///Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pa...
Live Training: https://www.antisyphontraining.com/co...
On Demand Training: https://www.antisyphontraining.com/on...
Antisyphon Discord:   / discord  
Antisyphon Mastodon: https://infosec.exchange/@Antisy_Trai...

///Educational Infosec Content
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin' Fest YouTube:    / wildwesthackinfest  
Antisyphon Training YouTube:    / antisyphontraining  
Active Countermeasures YouTube:    / activecountermeasures  
Threat Hunter Community Discord:   / discord  

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/