(Replay) Email Spoofing: From Basics to Advanced Techniques and Solutions

The Cyber Threat Perspective

Player FM - Internet Radio Done Right

18 subscribers

اضافه شده در three سال پیش

محتوای ارائه شده توسط SecurIT360. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط SecurIT360 یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal

Clocking In with Haylee Gaffin - Podcast about Podcasting for Podcasters

1
164: Foundations of Podcast Growth: Grow Your Podcast Series Pt. 1 10:41

۷ weeks پیش10:41

پخش در آینده

لیست ها

پسندیدن

دوست داشته شد

10:41

Are you tired of releasing episodes week to week and getting no download growth? In this episode, I’m kicking off a brand-new series where I’ll be breaking down the exact strategies you need to expand your podcast audience—starting with the essential foundations. In this first episode, I’m covering: Why podcast growth matters (and why it’s NOT just about big numbers) The 3 core growth strategies: organic, collaborations, and paid growth What sustainable, realistic growth actually looks like Whether you’re just getting started or looking to scale, this series will give you the tools you need to grow your show strategically. Today's episode is brought to you by Mic Check Society , our community for podcasters who are looking to take their podcast from good to great. Come join us for educational trainings, a private member's only community, and monthly calls! Get $10 off per month with code PODCAST at micchecksociety.com . Clocking In with Haylee Gaffin is produced by Gaffin Creative , a podcast production company for creative entrepreneurs. Learn more about our services at Gaffincreative.com , plus you’ll also find resources, show notes, and more for the Clocking In Podcast. Time-stamps: Why podcast growth matters (2:09) Three pillars of podcast growth (3:39) Organic growth (3:52) Collaboration and borrowing audiences (4:31) Paid growth opportunities (5:11) What sustainable growth looks like (6:36) Connect with Haylee: instagram.com/hayleegaffin Gaffincreative.com micchecksociety.com Review the Transcript: https://share.descript.com/view/Plzue2YOIAh Hosted on Acast. See acast.com/privacy for more information.…

حدود یک سال پیش 27:10

MP3•خانه قسمت

In this episode, we cover:

The fundamentals of email spoofing and why it's a significant threat.
Insight into the recent echo spoofing campaign exploiting Proofpoint's misconfiguration.
The role of SPF, DKIM, and DMARC in combating email spoofing.
How threat actors are using Microsoft 365 to bypass email protections.
Mitigation strategies and the latest updates from Proofpoint and Microsoft to address these vulnerabilities.

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/mylinks

Work with Us: https://securit360.com

168 قسمت

#Tech #SecurIT360 #Cyber Security #Cybersecurity #InfoSec #Pentest #Penetration Testing #Offsec #Offensive Security #Hacking

(Replay) Email Spoofing: From Basics to Advanced Techniques and Solutions

The Cyber Threat Perspective

18 subscribers

published حدود یک سال پیش

اشتراک گذاری

MP3•خانه قسمت

In this episode, we cover:

The fundamentals of email spoofing and why it's a significant threat.
Insight into the recent echo spoofing campaign exploiting Proofpoint's misconfiguration.
The role of SPF, DKIM, and DMARC in combating email spoofing.
How threat actors are using Microsoft 365 to bypass email protections.
Mitigation strategies and the latest updates from Proofpoint and Microsoft to address these vulnerabilities.

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://go.spenceralessi.com/mylinks

Work with Us: https://securit360.com

168 قسمت

#Tech #SecurIT360 #Cyber Security #Cybersecurity #InfoSec #Pentest #Penetration Testing #Offsec #Offensive Security #Hacking

همه قسمت ها

1
Episode 135: We Couldn’t Get In...And That’s a Good Thing, Or Is It? 41:45

1 day پیش41:45

41:45

In this episode of The Cyber Threat Perspective , we dive into why a “we couldn’t get in” result on a pentest isn’t always the victory it seems—and why it can be a great sign if interpreted correctly. We break down the real defensive controls that prevented compromise, explore what might still be hiding under the surface, and share why even a clean report shouldn’t mean letting your guard down. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 134: Preventing Data Breaches: Strategies to Mitigate Initial Compromise 47:20

۸ روز پیش47:20

47:20

In this episode of The Cyber Threat Perspective, we tackle the crucial first step in cybersecurity: preventing initial compromise. We'll dissect common attack vectors like phishing and exploitation and explore layered defenses ranging from MFA and patch management to DMZs and WAFs. Get actionable guidance to integrate these controls into your security program and safeguard your organization against the risk of that initial foothold. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 133: How Cyber Attackers Steal Credentials & Hijack Sessions 31:51

16 روز پیش31:51

31:51

In this episode of The Cyber Threat Perspective, we break down how attackers steal credentials and hijack sessions to gain unauthorized access to systems and data. From phishing to cookie stealing to session token theft, we’ll explore the most common techniques and how to defend against them. Whether you're an IT admin or security pro, you’ll walk away with practical tips to help protect your users and your organization. Recommended Conditional Access Policies to protect against account compromise: https://x.com/techspence/status/1919815226158932119 Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 132: Reviewing the Mandiant M-Trends 2025 Report 42:23

23 روز پیش42:23

42:23

In this episode Spencer and Brad review the M-Trends 2025 Report. M-Trends 2025 is Mandiant's annual report that shares frontline learnings from its global incident-response engagements—over 450 000 hours of investigations in 2024—providing sanitized, data-driven analysis of evolving attacker tactics, dwell times, industry and regional trends, and practical recommendations to help organizations improve their defenses. M-Trends 2025: Data, Insights, and Recommendations From the Frontlines | Google Cloud Blog Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
(Replay) How To Defend Against Lateral Movement 37:48

29 روز پیش37:48

37:48

In this replay, Spencer and Brad dive into lateral movement, discussing various techniques like RDP, RATs, Impacket tools, PsExec, PTH, PTT, and PowerShell Remoting. They explain how attackers use these methods to gain unauthorized access, evade detection, and enable malicious activities. They also discuss precursors to lateral movement and strategies to restrict it, such as least privilege access, network segmentation, and monitoring. The podcast emphasizes the importance of understanding lateral movement and implementing comprehensive security measures to mitigate these threats. Resources https://www.reddit.com/r/cybersecurity/comments/1ellylu/what_lateral_attacks_have_you_been_seeing/ The DFIR Report Lateral Movement, Tactic TA0008 - Enterprise | MITRE ATT&CK® Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Spencer's Twitter: https://x.com/techspence Spencer's LinkedIn: https://linkedin.com/in/SpencerAlessi Work with Us: https://securit360.com Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 131: DMARC & PCI 4.0 Compliance - Is your Organization Compliant? 28:19

۶ weeks پیش28:19

28:19

In this episode, Tyler and Brad discuss DMARC and how the latest version of the PCI framework requires phishing protection. You'll also learn about DMARC, DKIM, and SPF and how to elevate them to help protect your organization from attacks like Business Email Compromise (BEC). Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 130: Using Deception Technology to Detect Cyber Attacks 46:31

۷ weeks پیش46:31

46:31

In this episode of The Cyber Threat Perspective, we explore the strategic integration of deception technology like canaries and honeypots into your cybersecurity defenses. Discover how these tools allow you to detect threat actors earlier in their attack sequence, disrupt malicious activities, and mitigate potential damage to your organization. Join us for actionable insights and defensive advice to enhance your organization's security posture. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 129: How to Analyze Threat Reports for Defenders 49:51

۸ weeks پیش49:51

49:51

Threat reports can be goldmines for defenders — but only if we know how to extract and apply what matters. A good analysis can mean catching an attack early or missing it entirely. There's no shortage of threat intel out there. The real challenge is making sense of it without getting overwhelmed. In this episode we discuss: What makes up a threat report Goals of analyzing threat reports How to analyze the pieces that matter Actionable tips you can use today Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 128: The Most Common External Pen Test Findings—And How to Fix Them 34:57

۹ weeks پیش34:57

34:57

In this episode, Brad and Sam discuss the most common security issues found on external penetration tests, how to find them yourself, and how to address them. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 127: SaaS Supply Chain Attacks - How to Stay Secure 42:53

10 weeks پیش42:53

42:53

This episode focuses on SaaS (Software as a Service) Supply Chain Attacks. We discuss what SaaS applications are most at risk, what the real danger of saas supply chain attacks are and most importantly how to defend and detect these attacks. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 126: Typosquatting - How and Why It Works and How to Defend Against It 31:37

11 weeks پیش31:37

31:37

Dive into the quirky underworld of digital misdirection in this episode, where we explore the art of typosquatting. Discover how a simple mistyped URL can turn into a gateway for cyber trickery, as we break down the many forms of typosquatting—from subtle misspellings that mimic trusted sites to more elaborate schemes designed to deceive. Learn why these small errors are so effective in luring unsuspecting users and get insider tips on how to protect yourself from falling into these cleverly crafted traps. Whether you're a digital native or just curious about the hidden risks of the internet, this episode equips you with the knowledge and defenses you need to navigate online spaces with confidence. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 125: Whose Job Is Harder? Red or Blue 55:30

12 weeks پیش55:30

55:30

In this episode, we discuss whose job is harder. The red team or the blue team? We discuss the roles and responsibilities of many red and blue teamers, the challenges both those teams face, and then we share some advice for handling and overcoming those challenges. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
(Replay) How To Monitor Your Attack Surface 35:12

13 weeks پیش35:12

35:12

Unlock the secrets of effective attack surface monitoring in this replay of The Cyber Threat Perspective. Brad and Spencer dive into essential practices, tools, and methodologies to keep your systems secure. Define and understand attack surface and attack vectors Distinguish between physical and digital attack surfaces Explore DIY vs. commercial tools for attack surface monitoring Learn from bug bounty industry methodologies and resources Emphasize the importance of continuous monitoring and asset management Check out our show notes for additional resources, and don't forget to like, share, and subscribe! Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

1
Episode 124: MFA != Secure 54:21

14 weeks پیش54:21

54:21

Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com

1
Episode 123: Insecure Active Directory Protocols 39:47

15 weeks پیش39:47

39:47

In this episode, we discuss several insecure protocols that are found within Active Directory environments. When these protocols are enabled, they could be abused by an attacker to perform a number of attacks, including privilege escalation and lateral movement. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 122: AI/ChatGPT Interviews a Web Pen Tester!! 15:02

16 weeks پیش15:02

15:02

In this episode, Chelsea (ChatGTP) interviews Brad about web application penetration testing. Listen in to learn how the process works from start to finish! Resources https://owasp.org/ https://nvd.nist.gov/vuln-metrics/cvss https://chatgpt.com/ Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 121: How We Evade Detection During Internal Pentests 40:44

17 weeks پیش40:44

40:44

In this episode, Spencer and Brad discuss the ever popular and highly debated topic of evasion. In this podcast we talk about evasion from the context of evading defense controls, not necessarily EDR specific evasion techniques. Our hope with this episode is to shed light on this topic and help defenders understand various methods of evasion and this topic more in general. Resources (Jun 1, 2021) Evadere Classifications - detection & response focus Defense Evasion, Tactic TA0005 - Enterprise | MITRE ATT&CK® - controls focus (Mar 22, 2024) Atomics on a Friday - Evade or Bypass - edr focus Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 120: Demystifying Pentests: What Every Organization Needs to Know 40:38

18 weeks پیش40:38

40:38

In this episode, Spencer and Tyler discuss key things that they as pentesters wish all organizations knew about pentesting and the pentest process. They go through the entire lifecycle of a pentest and discuss definitions, processes, misconceptions and much more. By the end of this episode, we hope you have a better understanding of everything that goes into the pentesting process including things that are not typically visible to clients. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 119: Lessons Natural Disasters Can Teach Us About Cybersecurity 45:33

19 weeks پیش45:33

45:33

In this episode, we draw parallels between natural disasters and navigating today’s cybersecurity landscape. From the importance of preparation and layered defenses to the critical need for constant monitoring and resilience, we uncover valuable lessons that nature’s challenges can teach us about protecting systems and data. Whether you’re an IT professional, a business owner, or just someone passionate about cybersecurity, this episode will inspire you to think differently about your defenses—and stay one step ahead. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
(Replay) Tales From The Trenches 57:06

20 weeks پیش57:06

57:06

Join us for this replay of episode 78 - an enthralling journey into the heart of cybersecurity operations with “Tales from the Trenches,” an exclusive podcast presented by Brad Causey, Vice President of Offensive Security at SecurIT360. Dive deep into the high-stakes world of offensive security as Brad shares his firsthand experiences from a career spent on the front lines of digital defense. Engage with real-life stories illustrating offensive cybersecurity's intense challenges and triumphant victories. Brad's narrative will transport you to the core of high-pressure operations, where strategic decisions can impact the security posture of entire organizations. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
(Replay) Email Spoofing: From Basics to Advanced Techniques and Solutions 27:10

22 weeks پیش27:10

27:10

Welcome to this replay on The Cyber Threat Perspective! In this episode, Brad and Spencer dive into the mechanics and recent developments of email spoofing, shedding light on how attackers are bypassing advanced email protections. In this episode, we cover: The fundamentals of email spoofing and why it's a significant threat. Insight into the recent echo spoofing campaign exploiting Proofpoint's misconfiguration. The role of SPF, DKIM, and DMARC in combating email spoofing. How threat actors are using Microsoft 365 to bypass email protections. Mitigation strategies and the latest updates from Proofpoint and Microsoft to address these vulnerabilities. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
(Replay) Windows and Active Directory Hardening 47:58

22 weeks پیش47:58

47:58

In this episode of The Cyber Threat Perspective, Nathan and Spencer discuss crucial strategies for Windows and Active Directory hardening, emphasizing the importance of community collaboration and the value of using CIS benchmarks for security compliance. In this episode, we cover: Implementing multi-factor authentication for domain admins The benefits and importance of using CIS benchmarks for Windows 10 and 11 Advantages of having a consistent standard in an active directory environment Assurance and verification tools available in the benchmarks Simulated environment testing and active community participation for benchmark improvement Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 118: 2025 - A CISO's Perspective with Mike Whitt 46:26

23 weeks پیش46:26

46:26

In this episode, we’re discussing what a seasoned CISO is focused on going into 2025. Mike Whitt is a Cheif Information Security Officer in the financial sector with over 20 years of experience building teams, security programs, and leading organizations to a more secure posture. https://www.linkedin.com/in/mike-whitt-a4b4802/ Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 117: Why Do Pentests Cost So Much? 39:03

25 weeks پیش39:03

39:03

In this episode, we’re peeling back the layers of the question so many organizations ask: Why do penetration tests cost so much? But here’s the real twist—are they actually expensive, or are we measuring their value the wrong way? By the end of this episode, you’ll understand not just the cost of a penetration test, but its value as an investment in protecting your business. We’ll dive into real-world examples, break down the factors that drive pentest pricing, and explore how it compares to the costs of incidents like data breaches, ransomware, and PR disasters. Let’s get started. https://www.morganlewis.com/blogs/sourcingatmorganlewis/2024/03/study-finds-average-cost-of-data-breaches-continued-to-rise-in-2023 Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 116: Painfully Persistent Problems - Weak Passwords 35:52

26 weeks پیش35:52

35:52

In this episode, we’re diving into one of the most enduring cybersecurity challenges—weak passwords. We’ll explore how poor password practices and identity management pitfalls leave organizations vulnerable to compromise. From understanding the most common mistakes to implementing effective defenses, we’re breaking down what it takes to fortify your systems against attackers exploiting the weakest link. Sources https://www.verizon.com/about/news/2023-data-breach-investigations-report?utm_source=chatgpt.com https://blog.1password.com/challenges-of-shadow-it/ https://www.microsoft.com/en-us/security/security-insider/intelligence-reports/microsoft-digital-defense-report-2024?msockid=2e875ee0e1fe64d22f854aa6e0746523 Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 115: How to understand and address risk w/ Robert McElroy 40:25

26 weeks پیش40:25

40:25

In this episode, we discuss the broad concept of risk, what it is, and how to manage it. This episode is a great way to begin understanding how to develop an overall risk management strategy at your organization or understand how a risk management program might work for you. You find out more about what Rob and his team can do here: https://www.securit360.com/services/managed-services-consulting/ Reach him directly here: rob@securit360.com Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 114: Making Penetration Test Results Actionable 38:07

28 weeks پیش38:07

38:07

In this episode, we discuss the challenge of translating penetration test findings into practical and effective security improvements, and we delve into the three major bottlenecks to improving security and give recommendations for overcoming them. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 113: Phishing with Malicious RDP Files 28:14

29 weeks پیش28:14

28:14

In this episode, we're talking about a significant development in the cyber threat landscape. There has been a surge in activity from a group known as Midnight Blizzard, also known as APT29. They're a sophisticated Russian state-sponsored group, and their primary targets are governments, diplomats, NGOs, and IT service providers, mainly in the US and Europe. What's really alarming is their recent shift in tactics. They're now using malicious RDP files in their spear-phishing campaigns, which is a new approach for them. This indicates they are evolving their methods, becoming even more dangerous. RDP is commonly used in corporate environments for remote access to resources, so many organizations have it enabled and may not be blocking RDP files, making them an ideal attack vector. Amazon identified internet domains abused by APT29 | AWS Security Blog: https://aws.amazon.com/blogs/security/amazon-identified-internet-domains-abused-by-apt29/ Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments | CISA: https://www.cisa.gov/news-events/cybersecurity-alerts-advisories/aa24-329a Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files _ Microsoft Security Blog.pdf: The URL for this source was not provided. Rogue RDP – Revisiting Initial Access Methods - Black Hills Information Security: https://www.blackhillsinfosec.com/rogue-rdp-revisiting-initial-access-methods/ Rogue RDP: Bring Your Own Server | Mike Felch | 1-Hour: https://www.youtube.com/watch?v=y1Y-t7fDwXU Warning: Government-themed Phishing with RDP Attachments | CCB Safeonweb: https://www.safeonweb.be/en/news/warning-government-themed-phishing-rdp-attachments Rogue RDP Attack Detection: UAC-0215 Leverages RDP Configuration Files to Gain Remote Access to Ukrainian Public Sector Computers - SOC Prime: https://socprime.com/blog/rogue-rdp-attack-detection-uac-0215-leverages-rdp-configuration-files-to-gain-remote-access-to-ukrainian-public-sector-computers/ Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 112: Key Insights From The Microsoft Digital Defense Report 2024 38:45

30 weeks پیش38:45

38:45

In this episode, we dive deep into the newly released Microsoft Digital Defense Report 2024, which offers a comprehensive look at the latest trends in the global cybersecurity landscape. From evolving cyber threats and attack strategies to Microsoft's analysis of the most vulnerable sectors, we break down the key findings and what they mean for businesses, governments, and cybersecurity professionals. Join us as we discuss how threat actors are leveraging new technologies, the role of AI in defense strategies, and what steps organizations can take to bolster their cyber resilience. Whether you're an IT professional or just passionate about cybersecurity, this episode will give you critical insights into defending against tomorrow's threats, today. Microsoft Digital Defense Report 2024 Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
(Replay) How To Actually Protect Credentials 43:31

30 weeks پیش43:31

43:31

In this episode replay, Spencer and Darrius break down the complexities of credential protection, discussing everything from user education and tools to threat modeling and guardrails. Plus, we delve into the world of protecting credentials within scripts and code. This is a must-listen for all IT admins, CISOs and any other IT/Security professional. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 111: Red Team Tools (OST) Managing Open-Source Threats 31:04

32 weeks پیش31:04

31:04

In this episode, Spencer and Brad discuss a recent Trend Micro research project and associated white paper "Red Team Tools in the Hands of Cybercriminals and Nation States". Spencer and Brad dig into what red teaming is, what red team tools (often referred to as offensive security tools) are and why they are used. They also cover the abuse of red team tools, the speed of exploitation after public release and supply chain attacks against red team tools. From Defense to Offense: The Misuse of Red Teaming Tools by Cybercriminals | Trend Micro (US) Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
(Replay) Vulnerability Management Deep Dive 35:42

32 weeks پیش35:42

35:42

In this replay episode, Spencer is joined by Daniel Perkins, a Senior Information Security Officer at SecurIT360 to discuss the intricacies of vulnerability management, the important prerequisites to vulnerability management, and best practices, and provide actionable strategies to level up your vulnerability management program. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 110: AD Security Workshop Preview 23:28

34 weeks پیش23:28

23:28

In this episode, Brad and Spencer discuss Spencer's upcoming in-person workshop at Cyber SC. The **Hardening Active Directory to Prevent Cyber Attacks** Workshop is aimed at IT professionals, system administrators, and cybersecurity professionals eager to learn how to bolster their defenses against cyber threats. In this workshop, we will discuss comprehensive strategies and best practices for securing Active Directory. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 109: Current State of Pentesting - Internal and External 39:41

35 weeks پیش39:41

39:41

In this episode, Spencer and Tyler share what they love and hate about the current state of penetration testing, they discuss current and future trends, and what it means to be a true cybersecurity partner. We hope you enjoy this episode! Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 108: New tales from the trenches! 38:38

36 weeks پیش38:38

38:38

In this episode, Tyler and Brad talk about various security issues found on recent penetration tests. They outline the how and why, and talk about mitigation strategies to help you beat these issues in your environment. Resources Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://twitter.com/cyberthreatpov Work with Us: https://securit360.com Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 107: How To Defend Against Lateral Movement 37:48

37 weeks پیش37:48

37:48

In this episode, Spencer and Brad dive into lateral movement, discussing various techniques like RDP, RATs, Impacket tools, PsExec, PTH, PTT, and PowerShell Remoting. They explain how attackers use these methods to gain unauthorized access, evade detection, and enable malicious activities. They also discuss precursors to lateral movement and strategies to restrict it, such as least privilege access, network segmentation, and monitoring. The podcast emphasizes the importance of understanding lateral movement and implementing comprehensive security measures to mitigate these threats. Resources https://www.reddit.com/r/cybersecurity/comments/1ellylu/what_lateral_attacks_have_you_been_seeing/ The DFIR Report Lateral Movement, Tactic TA0008 - Enterprise | MITRE ATT&CK® Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
(Replay) DNS Security 31:12

37 weeks پیش31:12

31:12

In our "DNS Security" podcast, we delve into DNS's critical role in how the internet works, exploring its vulnerabilities and attacks like DNS spoofing, cache poisoning, and DDoS. We discuss DNSSEC and its components, including public and private keys, and examine practical solutions such as DNS and content filtering. The episode also highlights the advantages of cloud-based DNS services, like those offered by Cloudflare. Finally, we share best practices and resources for securing DNS infrastructure, addressing challenges like scalability and false positives. Join us for a concise yet comprehensive exploration of DNS security's complexities and solutions. For questions, hit us up! brad@securit360.com Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 106: An Overview of Cyber Risk 27:52

39 weeks پیش27:52

27:52

Let's talk about cyber risk classification in this episode of The Cyber Threat Perspective. Brad and Tyler provide a high-level overview of various types of cyber risk encountered in penetration testing. -Reputational Risk -Financial Risk -Operational Risk -Direct Risk -Indirect Risk -Lateral Risk -Strategic Risk -Compliance Risk https://offsec.blog Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 105: How to Monitor Your Attack Surface 35:12

40 weeks پیش35:12

35:12

In this episode Brad and Spencer discuss Attack Surface Monitoring, what it is, and why it's important for defending against cyber-attacks. They give into the difference between attack vectors and attack surface and share a high-level overview on how to go about monitoring your own attack surface. Finally, they share tools and techniques for attack surface monitoring, many of which are key concepts taken from the world of bug bounty. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 104: How To Get Into Cyber For First Responders 32:41

41 weeks پیش32:41

32:41

In this episode, Spencer has Sam Killingsworth on the show to talk about getting into cybersecurity, specifically penetration testing, coming from a first responder background. Sam is currently a full-time Firefighter/EMT and part-time penetration tester here at SecurIT360. Sam shares his background and experiences of learning cybersecurity and pentesting and how he has used the skills from his full-time job to help him be a better pentester. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 103: Email Spoofing 27:10

42 weeks پیش27:10

27:10

In this episode, Spencer and Brad dive into the complex maze of 3rd party email providers, filtering and spoofing. Email spoofing is a technique used by cybercriminals to disguise the sender's address in an email message, making it appear as though the email originated from a different source. This can be used for a variety of malicious purposes, such as phishing attacks, fraudulent activities, or spreading malware. DMARC Rundown - Offensive Security Blog - SecurIT360 “EchoSpoofing” — A Massive Phishing Campaign Exploiting... Spoof intelligence insight - Microsoft Defender for Office 365 How attackers bypass third-party mail filtering to Office 365 Spoofing Microsoft 365 Like It’s 1995 - Black Hills Information Security Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 102: The Global CrowdStrike Outage 48:30

43 weeks پیش48:30

48:30

In this episode, Spencer is joined by Joey Vandergrift (SecurIT360's VP of Security Operations) and Mark Brophy (SecurIT360's DFIR practice lead). Together they discuss how CrowdStrike, a leading EDR product, caused one of the largest global IT outages in history. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 101: Infostealers - 10,000 Victims a Day 38:11

44 weeks پیش38:11

38:11

In this episode, Spencer and Brad dive into the deep underworld of infostealer malware. They discuss what infostealers are, how they are used and what they are used for. They will dig into how the information obtained from infostealers can help cyber threat actors compromise large and small organizations, cloud providers and more but also how the infostealer data and logs can be used by authorities for good. Resources 10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit https://x.com/vxunderground/status/1757467533202862344 Infostealer malware logs used to identify child abuse website members https://cybernews.com/cybercrime/disney-slack-data-breach-unreleased-projects/ https://x.com/arekfurt/status/1800181869256024083 https://x.com/ddd1ms/status/1755256762997850279 https://cloud.google.com/blog/topics/threat-intelligence/unc5537-snowflake-data-theft-extortion?linkId=10091118 Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
(Replay) How We Hack Medical Devices To Save Lives 36:12

44 weeks پیش36:12

36:12

Discover the vulnerabilities lurking within medical devices and how ethical hacking can safeguard patient care. Join Brad, VP of Offensive Security at SecurIT360, as he unpacks the risks and protections against cyber threats in healthcare tech. - Unveiling the risks of wireless communication vulnerabilities in insulin pumps and glucose monitors that could be exploited through advanced hacking techniques. - Demonstrating the use of tools like ESP32, Hashcat, and attack scenarios to reveal how medical devices can be manipulated, compromising patient safety. - An in-depth analysis of a common air purifier APK, exposing undocumented features and firmware flaws with far-reaching security implications. - Real-world examples highlighting the importance of pen testing medical devices, including the potential for increased medication dosing due to infusion pump flaws. - A deep dive into the broad-reaching impact of exploited vulnerabilities, from chaos in hospitals to privacy breaches through interconnected devices and mobile apps. Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://twitter.com/cyberthreatpov Work with Us: https://securit360.com Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

The Cyber Threat Perspective

1
Episode 100: The OpenSSH RegreSSHion Vulnerability 27:14

46 weeks پیش27:14

27:14

In this episode, Spencer and Brad discuss the OpenSSH "regreSSHion" vulnerability. This is being tracked as CVE-2024-6409 & CVE-2024-6387. A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period. Links: https://nvd.nist.gov/vuln/detail/CVE-2024-6409 https://nvd.nist.gov/vuln/detail/CVE-2024-6387 https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt?ref=thestack.technology https://www.infosecurity-magazine.com/news/chinese-state-exploits/ https://x.com/fofabot/status/1810622161192919350 https://justpaste.it/do235 Blog: https://offsec.blog/ Youtube: https://www.youtube.com/@cyberthreatpov Twitter: https://x.com/cyberthreatpov Follow Spencer on social ⬇ Spencer's Links: https://go.spenceralessi.com/mylinks Work with Us: https://securit360.com…

به Player FM خوش آمدید!

Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.

به بیش از 500 موضوع گوش کنید

18 subscribers

مشابه The Cyber Threat Perspective

TERRO Ant Killer Bait Stations T300B - Liquid Bait to Eliminate Ants - 12 Count Stations for Effective Indoor Ant Control

Bounty Quick Size Paper Towels, White, 8 Family Rolls = 20 Regular Rolls (Packaging May Vary)

2025 - American Silver Eagle .999 Fine Silver with our Smyrnacoin Certificate of Authenticity Dollar Uncirculated US Mint

پادکست هایی که ارزش شنیدن دارند

The Cyber Threat Perspective « » (Replay) Email Spoofing: From Basics to Advanced Techniques and Solutions

(Replay) Email Spoofing: From Basics to Advanced Techniques and Solutions

پادکست هایی که ارزش شنیدن دارند

به Player FM خوش آمدید!

Mini Mic Pro Wireless Microphone for iPhone, iPad, Android, Lavalier Microphone for Video Recording - 2 Pack iPhone Mic Crystal Clear Recording with USB-C for Podcast, ASMR

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Amazon eGift Card - Amazon Logo (Animated)

Zevo Flying Insect Trap & Cartridge - Plug in Fly Trap & Indoor Bug Catcher for Gnats, House & Fruit Flies - Mess-Free - Use in Any Room - Uses Blue & UV Light (1 Plug in Device & 1 Cartridge)

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

مشابه The Cyber Threat Perspective

راهنمای مرجع سریع

The Cyber Threat Perspective « »
(Replay) Email Spoofing: From Basics to Advanced Techniques and Solutions