Black Hills Information Security 2f3z3l

for Free, Live webcasts & summits: https://poweredbybhis.com 00:00 - PreShow Banter™ — I just want Jorts! 05:42 - Blackmailing A.I. - Talkin’ Bout [infosec] News 2025-05-27 07:01 - Story # 1: Experimental drones developed to neutralize mass shooters, disable weapons 11:29 - Story # 2: How a global malware operation was taken down from a federal court in Georgia 13:50 - Story # 3: Judge allows Workday AI bias lawsuit to proceed as collective action 15:23 - Marker 17 19:25 - Story # 4: Anthropic’s new AI model turns to blackmail when engineers try to take it offline 32:19 - Story # 5: TeleMessage customers include DC Police, Andreessen Horowitz, JP Morgan, and hundreds more 34:53 - Story # 6: TikTok videos now push infostealer malware in ClickFix attacks 36:57 - Story # 7: Beware, Coinbase s. Crypto thieves are taking fingers now 40:56 - Story # 8: Signal now blocks Microsoft Recall screenshots on Windows 11 43:16 - Story # 9: Suspected InfoStealer Malware Data Breach Exposed 184 Million s and s 44:54 - Story # 10: Google Chrome’s Built-in Manager Lets s Update Breached s with One Click 48:09 - Story # 11: Russian military hackers ‘Fancy Bear’ target Western aid supply chains to Ukraine, NSA report says 50:13 - Story # 12: Google Gemini AI assistant coming to new cars in 2025, starting with Volvo 54:17 - Story # 13: Hacker Conference HOPE Says U.S. Immigration Crackdown Caused Massive Crash in Ticket Sales 56:55 - Story # 13b: [HOPE_16] International Travel Tips

for Free, Live webcasts & summits: https://poweredbybhis.coma 00:00 - PreShow Banter™ — Twiddle Me This 02:04 - WORLDS FIRST U Ransomware! - Talkin’ Bout [infosec] News 2025-05-19 03:10 - Story # 1: Coinbase - Standing Up to Extortionists 11:26 - Story # 2: World’s first U-level ransomware 15:09 - Story # 3: New Intel U flaws leak sensitive data from privileged memory 19:04 - Story # 4: After latest kidnap attempt, crypto types tell crime bosses: Transfers are traceable 21:39 - Story # 5: Chinese ‘kill switches’ found hidden in US solar farms 27:52 - Story # 6: Congress proposes 10-year ban on state AI regulations 31:41 - Story # 7: Hackers Abuse Copilot AI in SharePoint to Steal s and Sensitive Data 36:02 - Story # 8: European Vulnerability Database Launches Amid US CVE Chaos 37:32 - Story # 9: 89 million Steam s reportedly leaked. Change your now. 40:06 - Story # 10: Hackers Now Targeting US Retailers After UK Attacks, Google 41:11 - Story # 11: How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes 43:08 - Story # 11b: DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage’s archive server 47:12 - ChickenSec: ‘A Minecraft Movie’ Viral TikTok Trend Wreaks Havoc In Theaters 51:20 - Story # 12: Education giant Pearson hit by cyberattack exposing customer data

for Free, Live webcasts & summits: https://poweredbybhis.coma 00:00 - PreShow Banter™ — Crime is bad 00:18 - dangerous trend of destroying Chromebooks 04:33 - BHIS - Talkin’ Bout [infosec] News 2025-05-12 05:40 - Story # 1: LockBit Ransomware Hacked, Insider Secrets Exposed 06:36 - Story # 1b: https://ransomch.at 09:31 - Story # 2: White House Proposes $500 Million Cut to CISA 10:35 - Story # 2b: Update to How CISA Shares Cyber-Related Alerts and Notifications 18:09 - Story # 3: Inside DragonForce, the Group Tied to M&S, Co-op and Harrods Hacks 22:28 - Story # 4: Despite ransom payment, PowerSchool hacker now extorting individual school districts 26:28 - Story # 5: Tech CEOs warn Senate: Outdated US power grid threatens AI ambitions 32:20 - Story # 6: Warning — 19 Billion Compromised s Have Been Published Online 34:37 - Story # 7: Botnet Dismantled in International Operation, Russian and Kazakhstani s Indicted 36:33 - Story # 8: How a new type of AI is helping police skirt facial recognition bans 48:38 - Story # 9: Threat Actor By SentinelOne EDR to Deploy Babuk Ransomware 51:33 - Story # 10: A Framework to Report AI’s Flaws 53:42 - Story # 10b: MITRE ATLAS™ 54:49 - Simply Hot Ones Challenge | LIVE FIRE SPICE

for Free, Live webcasts & summits: https://poweredbybhis.com 00:00 - PreShow Banter™ — Double Coffee 05:04 - BHIS - Talkin’ Bout [infosec] News 2025-05-05 06:05 - Story # 1: Largest bank in the world issues stark security warning about technology that billions use every single day 11:15 - Story # 2: M&S cyber-attack linked to hacking group Scattered Spider 13:47 - Story # 3: Top Tier Target | What It Takes to Defend a Cybersecurity Company from Today’s Adversaries 20:10 - Story # 4: A North Korean agent applied for a job at a popular crypto firm: They tripped him up with a simple question about Halloween 21:54 - Story # 4b: The one interview question that will protect you from North Korean fake workers 23:09 - Story # 5: Santa Clarita Man Agrees to Plead Guilty to Hacking Disney Employee’s Computer, ing Confidential Data from Company 25:33 - Story # 6: TerraStealerV2 and TerraLogger: Golden Chickens’ New Malware Families Discovered 29:19 - Story # 7: Gremlin Stealer: New Stealer on Sale in Underground Forum 33:17 - Story # 8: Over 290,000 citizens at risk: CloudSEK uncovers major data breach at Bangalore Water Supply and Sewerage Board 34:56 - Story # 9: The Signal Clone the Trump Uses Was Hacked 39:58 - Story # 10: Windows RDP lets you using revoked s. Microsoft is OK with that. 42:19 - Story # 11: Software dev fortifies his blog with ‘zip bombs’ — attacking bots meet their end with explosive data package 43:44 - Story # 12: WhatsApp says in-app AI tools will still keep messages secret 45:37 - Story # 13: House es bill to study routers’ national security risks 49:48 - Simply Hot Ones Challenge (YouTube)

for webcasts & summits -  https://poweredbybhis.com 00:00 - PreShow Banter™ — Talking Bout Red Green 02:24 - InfoSec CEO Charged with Installing Malware! – BHIS - Talkin’ Bout [infosec] News 2025-04-28 03:01 - Story # 1: CEO of cybersecurity firm charged with installing malware on hospital systems 11:22 - Story # 2: 2025 Data Breach Investigations Report 25:05 - Story # 3: The Age of Realtime Deepfake Fraud Is Here 29:00 - Story # 4: Whistleblower: DOGE Siphoned NLRB Case Data 33:09 - Story # 5: Top employee monitoring app leaks 21 million screenshots on thousands of s 36:59 - Story # 6: 159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure 42:13 - Story # 7: SAP zero-day vulnerability under widespread active exploitation 46:29 - Story # 8: FBI: US lost record $16.6 billion to cybercrime in 2024 47:55 - Story # 8b: FBI Report Doc 53:50 - Story # 9: M- Trends 2025 Report

for webcasts & summits -  https://poweredbybhis.com 00:00 - PreShow Banter™ — A Monocle and a Glass of Wine 05:36 - The CVE Saga - Talkin’ Bout [infosec] News 2025-04-21 06:43 - Story # 1: US agency extends for cyber vulnerability database 29:08 - Story # 1b: CVE Foundation 32:35 - Story # 2: Former cybersecurity agency chief Chris Krebs leaves SentinelOne after Trump targets him in executive order 33:57 - Story # 3: 4chan Is Down Following What Looks to Be a Major Hack Spurred By Meme War 37:17 - Story # 4: TA Phone Home: EDR Evasion Testing Reveals Extortion Actor’s Toolkit 44:57 - Story # 5: The Sophos Annual Threat Report: Cybercrime on Main Street 2025

for webcasts & summits -  https://poweredbybhis.com 00:00 - PreShow Banter™ — Trigger Warning 00:42 - Trump Vs Chris Krebs | BHIS - Talkin’ Bout [infosec] News 2025-04-14 01:54 - Story # 1: Cybersecurity Community Must Not Remain Silent On Executive Order Attacking Former CISA Director 17:04 - Story # 2: Cybersecurity industry falls silent as Trump turns ire on SentinelOne 18:00 - Story # 3: Maryland pharmacist used keyloggers to spy on coworkers for a decade, victim alleges 33:13 - Story # 4: Rippling Believe it or Not: How the Largest Corporate Espionage Case this Century Happened 41:36 - Story # 5: Moroccan cybercrime group Atlas Lion hiding in plain sight during attacks on retailers 52:18 - Story # 6: Pentagon to end $5.1 billion in contracts with Accenture, Deloitte, others

for webcasts & summits -  https://poweredbybhis.com Chapters 00:00 - PreShow Banter™ — A Complex Business 06:40 - BHIS - Talkin’ Bout [infosec] News 2025-04-07 07:34 - Story # 1: Oracle quietly its data breach, days after lawsuit accused it of cover-up 12:47 - Story # 2: Twitter (X) Hit by 2.8 Billion Profile Data Leak in Alleged Insider Job 21:13 - Story # 3: Phishing platform ‘Lucid’ behind wave of iOS, Android SMS attacks 28:14 - Story # 4: GitHub expands security tools after 39 million secrets leaked in 2024 37:28 - Story # 5: The 10 Biggest Crypto Hacks in History 40:11 - Story # 6: OpenAI tests watermarking for ChatGPT-4o Image Generation model 45:44 - Story # 7: National Security Agency chief fired as Trump ousts another top military officer

00:00 - PreShow Banter™ — The Bed Slinger 08:34 - The Oracle of Lies! - BHIS - Talkin’ Bout [infosec] News 2025-03-31 10:43 - Story # 1: Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service 20:00 - Story # 2: A Sneaky Phish Just Grabbed my Mailchimp Mailing List 26:17 - Story # 3: Windows 11 is closing a loophole that let you skip making a Microsoft 29:51 - Story # 4: The Trump istration Accidentally Texted Me Its War Plans 32:51 - Story # 4b: Signal is ‘absolutely not suitable’ for government use: Former NSA hacker 37:42 - Story # 5: How the FBI Tracked, and Froze, Millions Sent to Criminals in Massive Caesars Casino Hack 42:27 - Story # 6: Retail giant Sam’s Club investigates Clop ransomware breach claims 45:07 - WEBCAST – Keeping Things Local – Making Your Own Private LLM w/ Bronwen Aker 46:16 - Story # 7: New VanHelsing ransomware targets Windows, ARM, ESXi systems 48:28 - Story # 8: Infostealer campaign compromises 10 npm packages, targets devs 53:13 - Story # 9: Risky Biz News: EU bans anonymous crypto payments 56:02 - ChickenSec: South African Poultry Company Reports $1M Loss After Cyber Intrusion

00:00 - PreShow Banter™ — We’re Not Ready For the Finger Thing 01:40 - Trading in Jock Straps for Jock Hacks – BHIS - Talkin’ Bout [infosec] News 2025-03-24 03:24 - Story # 1: GitHub Action hack likely led to another in cascading supply chain attack 07:53 - Story # 2: Wiz to Google Cloud: Making Magic Together 14:47 - Story # 3: Oracle denies breach after hacker claims theft of 6 million data records 19:52 - Story # 4: Critical flaw in Next.js lets hackers by authorization 25:47 - Story # 5: Cloudflare builds an AI to lead AI scraper bots into a horrible maze of junk content 29:20 - Story # 6: Ex-Michigan QB coach Matt Weiss facing 24 federal charges in hack of thousands of student s 35:47 - Story # 7: DNA of 15 Million People for Sale in 23andMe Bankruptcy 38:40 - Story # 8: Everything you say to your Echo will be sent to Amazon starting on March 28 44:03 - Story # 9: We partner with world-renowned scambusters to create our own fraud-fighting call centre 52:01 - Story # 10: Sperm donation giant California Cryobank warns of a data breach 54:19 - Story # 11: Microsoft: New RAT malware used for crypto theft, reconnaissance 56:32 - Story # 12: TrustedSec | Trimarc s Forces with TrustedSec to Strengthen…

00:00 - PreShow Banter™ — Fun Jank Decks 05:25 - BHIS - Talkin’ Bout [infosec] News 2025-03-17 - Malicious browser plugins will destroy us ALL!!!!! 06:35 - Story # 1: Polymorphic Extensions: The Sneaky Extension That Can Impersonate Any Browser Extension 14:37 - Story # 1b: Chrome Web Store is a mess 31:14 - Story # 2: Lazarus Strikes npm Again with New Wave of Malicious Packages 36:17 - Story # 3: China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days 44:44 - Story # 4: Saudi Arabia Buys Pokémon Go, and Probably All of Your Location Data 49:31 - Story # 5: Second biggest bank in US hit by major data breach stealing social security numbers and other personal info 51:25 - Story # 6: Hackers Take Credit for X Cyberattack 54:32 - Story # 7: Hackers Using Advanced MFA-Bying Techniques To Gain Access To

00:00 - PreShow Banter™ — Agent A.I. 07:35 - BHIS - Talkin’ Bout [infosec] News 2025-03-10 10:47 - Story # 1: 12 Chinese hackers charged with US Treasury breach — and much, much more 15:25 - Story # 2: Signal President Meredith Whittaker calls out agentic AI as having ‘profound’ security and privacy issues 25:33 - Story # 3: X/Twitter is down for a third time today 27:33 - Story # 4: Developer sabotaged ex-employer with kill switch activated when he was let go 33:37 - Story # 5: Undocumented commands found in Bluetooth chip used by a billion devices 45:37 - Story # 6: Cybercrime’s Cobalt Strike Use Plummets 80% Worldwide 46:19 - Story # 7: Majority of Orgs Hit by AI Cyber-Attacks as Detection Lags 55:01 - Story # 8: Ransomware gang encrypted network from a webcam to by EDR

00:00 - PreShow Banter™ — Not Talking About Anything 04:29 - BHIS - Talkin’ Bout [infosec] News 2025-03-03 05:42 - Story # 1: FBI Warns iPhone, Android s—We Want ‘Lawful Access’ To All Your Encrypted Data 24:28 - Story # 2: Disney engineer ed ‘helpful’ AI tool that ended up completely destroying his life 34:28 - Story # 3: Have I Been Pwned adds 284M s stolen by infostealer malware 43:22 - Story # 4: Dragos’s 8th Annual OT Cybersecurity Year in Review Is Now Available 45:53 - Story # 5: Trump istration retreats in fight against Russian cyber threats 55:19 - Story # 5b: Exclusive: US intel shows Russia and China are attempting to recruit disgruntled federal employees, sources say 57:33 - Story # 6: Feds: Army soldier suspected of AT&T heist Googled ‘can hacking be treason,’ ‘defecting to Russia’

00:00 - PreShow Banter™ — Get Political 05:27 - BHIS - Talkin’ Bout [infosec] News 2025-02-25 06:07 - Story # 1: Trump 2.0 Brings Cuts to Cyber, Consumer Protections 37:57 - Story # 2: OpenAI Uncovers Evidence of A.I.-Powered Chinese Surveillance Tool 49:48 - Story # 3: Apple pulls data protection tool after UK government security row 55:00 - Story # 4: Judge dismisses Chris Hadnagy lawsuit against DEF CON

  00:00 - PreShow Banter™ — Prove That You’re Wearing Pants 05:50 - BHIS - Talkin’ Bout [infosec] News 2025-05-17 06:46 - Story # 1: Fortinet discloses second firewall auth by patched in January 07:12 - Story # 1b: Fortinet CEO boasts it was voted the “most trusted” cybersecurity firm. Don’t die laughing 08:45 - Story # 1c: Forbes Most Trusted Companies in America 2025 List 16:25 - Story # 2: SAML By Authentication on GitHub Enterprise Servers to as Other 18:37 - Story # 2b: Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation 20:04 - Story # 3: Putting the human back into AI is key, former NSA Director Nakasone says 36:35 - Story # 4: Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack 37:44 - Story # 5: DOGE Exposes Once-Secret Government Networks, Making Cyber-Espionage Easier than Ever 43:14 - Story # 5b: DOGE’s .gov site lampooned as coders quickly realize it can be edited by anyone 46:59 - Story # 6: Man who SIM-swapped the SEC’s X pleads guilty 51:26 - Story # 7: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs 53:55 - Story # 8: Nearly 10 years after Data and Goliath, Bruce Schneier says: Privacy’s still screwed  

00:00 - PreShow Banter™ — Walking Through Denver 02:23 - BHIS - Talkin’ Bout [infosec] News 2025-02-10 04:35 - Story # 1: Ransomware payments declined in 2024 despite massive. well-known hacks 05:02 - Story # 1b: 35% Year-over-Year Decrease in Ransomware Payments, Less than Half of Recorded Incidents Resulted in Victim Payments 14:19 - Story # 2: Critical Cisco ISE bug can let attackers run commands as root 16:43 - Story # 3: The Untold Story of a Crypto Crimefighter’s Descent Into Nigerian Prison 24:18 - Story # 4: IoT’s botnet problem is up 500% – three things s must do now 31:49 - Story # 5: WhatsApp identifies dozens of s hacked by Paragon spyware company 39:41 - Story # 6: Sri Lanka goes bananas after monkey unplugs nation 43:36 - Story # 7: Microsoft Study Finds AI Makes Human Cognition “Atrophied and Unprepared” 50:17 - ChickenSec Story #: 1 Here’s a Super Bowl riddle: Why are egg prices surging — but not chicken wings? 52:21 - Story # 8: DOGE Staffer Previously Fired From Cybersecurity Company for Leaking Secrets 58:07 - ChickenSec Story #2: Americans to Eat 1.47 Billion Chicken Wings for Super Bowl LIX

00:00 - PreShow Banter™ — Community Swear Bucket 01:40 - BHIS - Talkin’ Bout [infosec] News 2025-02-05 03:27 - Story # 1: DeepSeek R1 Exposed: Security Flaws in China’s AI Model 11:25 - Story # 2: Backdoor found in two healthcare patient monitors, linked to IP in China 15:21 - Story # 3: Facebook flags Linux topics as ‘cybersecurity threats’ — posts and s being blocked 20:56 - Story # 4: Here’s how Musk’s access to Treasury system may impact Social Security, other government payments 31:29 - Story # 5: Russian Cybercrime Groups Exploiting 7-Zip Flaw to By Windows MotW Protections 34:34 - Story # 6: Insurance Company Globe Life Notifying 850,000 People of Data Breach 36:15 - Story # 10: DeepSeek Fails Researchers’ Safety Tests 38:35 - Story # 11: Engineering giant Smiths Group discloses security breach

00:00 - PreShow Banter™ — Fake Australian 04:17 - BHIS - Talkin’ Bout [infosec] News 2025-01-27 04:34 - Story # 1: DeepSeek sparks AI stock selloff; Nvidia posts record market-cap loss 30:50 - Story # 2: Tech giants are putting $500bn into ‘Stargate’ to build up AI in US 42:23 - Story # 3: DeepSeek Faces Large-scale Cyberattack, Halts New Registrations 43:34 - Story # 4: DHS cyber review board cleaned out in Trump move to eliminate ‘misuse of resources’ 47:38 - Story # 5: UnitedHealth estimates 190M people impacted by Change Healthcare cyberattack 50:02 - Story # 5b: UnitedHealth now says 190 million impacted by 2024 data breach 53:09 - Story # 6: Cloudflare Issue Can Leak Chat App s’ Broad Location 54:09 - Story # 7: Hacking Subaru: Tracking and Controlling Cars via the STARLINK 59:40 - Story # 8: Researchers say new attack could take down the European power grid

00:00 - PreShow Banter™ — Highest Rated Chalk 04:14 - BHIS - Talkin’ Bout [infosec] News 2025-01-20 08:53 - Story # 1: Data From 15,000 Fortinet Firewalls Leaked by Hackers 14:25 - Story # 2: China’s Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says 16:29 - Story # 3: TikTok reportedly plans ‘immediate’ Sunday shutdown in the US if it’s banned 25:47 - Story # 4: FBI forces Chinese malware to delete itself from thousands of US computers 35:06 - WWHF Denver 36:03 - BSides San Diego 37:23 - Security Stadium 38:22 - Story # 5: Exchange 2016 and 2019 reach end-of-life status later this year 42:45 - Story # 6: Snyk security researcher deploys malicious NPM packages targeting Cursor.com 46:17 - Story # 7: New UEFI Secure Boot flaw exposes systems to bootkits, patch now 57:34 - Story # 8: Lawsuit: Allstate used GasBuddy and other apps to quietly track driving

00:00:00 - PreShow Banter™ — An RGB State of Mind 00:07:20 - BHIS - Talkin’ Bout [infosec] News 2025-01-13 00:10:24 - Story # 1: A Day in the Life of a Prolific Voice Phishing Crew 00:18:39 - Story # 2: Dental group lied through teeth about data breach, fined $350,000 00:25:49 - Story # 3: Hacker claims breach of US location tracking company Gravy Analytics 00:27:48 - Story # 4: License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data 00:33:19 - Story # 5: US Cyber Trust Mark launches as the Energy Star of smart home security 00:43:08 - Story # 6: Hackers are exploiting a new Ivanti VPN security bug to hack into company networks 00:45:09 - Story # 7: Hacker Broke into ‘Path of Exile 2’ , Hijacked Wave of Characters 00:47:36 - Story # 8: Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit 00:54:47 - Story # 9: Ransomware crew abuses AWS native encryption 01:00:41 - Story # 10: Cannabis company Stiiizy says hackers accessed customers’ ID documents