Coffee Talk with SURGe

Coffee Talk with SURGe: 2022-OCT-11 EU Data, Vice Society Ransomware, Killnet

Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. You can watch the episode livestream here.
 
The team from Splunk will discuss the latest security news, including: 
- President Joe Biden signs an executive order outlining a new data transfer framework between the EU and US. 
- Ransomware attacks disrupt programming for three Brazilian broadcasters and a bank in Brazil reportedly paid $950,000 in Bitcoin to a LockBit affiliate. 
- Healthcare providers associated with CommonSpirit Health are still dealing with outages from a suspected ransomware attack. 
- Vice Society adds more school districts to its leak site after releasing personal data of students at Los Angeles Unified School District. 
- Lloyd's of London says its investigation into a possible cyberattack found no evidence of data compromise. 
- The Pro-Russia hacktivist group Killnet targets the websites of U.S. state governments and airlines.  
Mick, Ryan, and Audra also competed in a 60 second charity challenge to name their top takeaway from Cybersecurity Awareness Month.

Coffee Talk with SURGe: 2022-SEPT-27 Ukraine, GRU Hactivist Coordination, Network Monitoring, Optus

Grab a cup of coffee and join Audra Streetman and special guests David Bianco and Haylee Mills for another episode of Coffee Talk with SURGe. You can watch the episode livestream here. 
 
The trio will discuss the latest cybersecurity news, including:
- Officials in Ukraine say they believe the Kremlin is planning "massive cyberattacks on critical infrastructure" 
- Mandiant researchers at Google see Russia coordinating with hacktivists in cyberattacks tied to the Ukraine war 
- VICE reports on an internet monitoring tool purchased by the U.S. military
- The alleged hacker behind the Optus breach withdraws their extortion demands citing law enforcement scrutiny 
- Toolkit to build LockBit 3.0 ransomware leaked 
Haylee and David competed in a 60 second charity challenge to explain the concept of domain shadowing. The team also discussed the Uber hack as it relates to general security practices at companies.

Coffee Talk with SURGe: 2022-SEPT-13 Mudge Testimony, Albania Cyberattacks, Vice Society

Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. You can watch the episode livestream here. 
 
The team from Splunk discussed the latest cybersecurity news, including:
- Twitter’s former head of security, Peiter Zatko, testified in a Senate committee hearing about security concerns he claims the company ignored. 
- Albania reports a second cyberattack that officials attribute to the Iranian government.
- CISA issues an alert about the Vice Society ransomware group targeting the education sector.
- Ransomware groups are switching to the tactic of intermittent encryption.
- CISA is requesting public feedback about its forthcoming incident reporting rules. 
- Researchers at Norton Labs found that more than 80% of the top websites leak user searches to advertisers. 

Coffee Talk with SURGe: 2022-AUG-30 Twitter Whistleblower, Roasting Oktapus, Montenegro Cyberattack

Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. You can watch the episode livestream here. 
 
The team from Splunk will discuss the latest security news including:
- Twitter whistleblower Peter Zatko will testify at a Senate hearing on Sept. 13.
- Group-IB published a blog about a phishing campaign targeting Okta identity credentials that they're calling "Roasting Oktapus." 
- Montenegro is dealing with cyberattacks targeting critical infrastructure. 
- Lloyd's plans to exclude catastrophic nation-backed cyberattacks from insurance coverage. 
Mick and Ryan competed in a 60 second charity challenge to explain why they think password managers are still your best option for password security. The team also discussed data privacy after the FTC announced it is suing a data broker for selling geolocation data. Meanwhile, the FCC is launching an investigation into mobile carriers' geolocation data practices.

Coffee Talk with SURGe: 2022-AUG-16 Signal, FTC Data Privacy Rules, Conti Ransomware, E2EE

Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. You can watch the episode livestream here. 
 
This week the team from Splunk discussed Signal's response to the Twilio breach, the FTC's effort to create new data privacy rules, and a $10 million reward for information about a suspected Conti ransomware operator. Mick and Ryan competed in a 60 second charity challenge benefiting The Hunger Project. They each took turns explaining the importance of encrypted comms following news of Facebook testing end-to-end encrypted messages on the Messenger app. They also talked about their experience at Black Hat and Defcon last week in Las Vegas.
Links:
Signal says 1,900 users’ phone numbers exposed by Twilio breach (Tech Crunch)
FTC moves to create data security and privacy rules (The Record)
U.S. State Department reward for information about alleged Conti suspect (Twitter)
Facebook begins testing default end-to-end encryption on Messenger (The Verge)

Coffee Talk with SURGe: 2022-AUG-10 Live from Black Hat

Join Mick and Ryan as they travel to the desert to experience Hacker Summer Camp 2022. They'll discuss what exciting new cyber thought leadership they've picked up in a day or two, the heat, how much they miss Audra, and what's happened in the world since .conf22.
You can watch the episode livestream here. 

Coffee Talk with SURGe: 2022-JUNE-28 Iran Steel Industry, Killnet DDoS, LockBit 3.0, PowerShell

Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. You can watch the episode livestream here. 
 
The team from Splunk discussed the latest security news, including:
Check Point Research's analysis of cyberattacks targeting Iran's steel industry 
Killnet launches DDoS attacks against Lithuanian government websites in response to EU sanctions affecting Kaliningrad
LockBit announces a bug bounty program and the release of LockBit 3.0
Conti shuts down its Tor servers as affiliates infiltrate other ransomware operations
Secureworks finds China-linked APT groups are using ransomware as a decoy for espionage and stealing intellectual property
Cybersecurity agencies argue against disabling PowerShell

LIVE from .conf22: Coffee Talk with SURGe: 2022-JUNE-16 Snoop Dogg Concert, Security Session Recap

Join Ryan Kovar, Mick Baccio, and Audra Streetman live at .conf22 for a recap of the Splunk Insider Minicon and Boss of the SOC VII. The trio also highlights some of the security sessions at .conf22. You don't want to miss it!
You can watch the episode livestream here.

Live from .conf22: Coffee Talk with SURGe: 2022-JUNE-15 Highlights and Security Sessions

Join Mick Baccio, Tony Iacobelli, and Audra Streetman live at .conf22 for a recap of the Splunk Insider Minicon and Boss of the SOC VII. The trio also highlights some of the security sessions at .conf22. You don't want to miss it!
You can watch the episode livestream here. 

Live from .conf22: Coffee Talk with SURGe: 2022-JUNE-14 Insider Minicon, Boss of the SOC VII

Join Ryan Kovar, Mick Baccio, and Audra Streetman live at .conf22 for a recap of the Splunk Insider Minicon and Boss of the SOC VII. The trio also highlights some of the security sessions at .conf22. You don't want to miss it!
You can watch the episode livestream here.