The Hackle Box

Dec 26 2024 37 ep. 55 mins 17
The Hackle Box Podcast artwork

The Hackle Box is a monthly cyber threat intel discussion where Oscar Minks and members of FRSecure's technical services team (Team Ambush) break down the latest trends in the information security industry involving hacking techniques, vulnerabilities, exploits, and more.

  Technology
RSS feed Share
Copy RSS


Subscribe on Podcast Addict


RCS, AuthQuake, & "The Night before Breachmas"

Dec 26 2024 59 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This special holiday episode, Pinky shares a reading of "The Night Before Breachmas", the gang talks encrypted texting, Microsoft's MFA flaw - aka "AuthQuake", and hackers bypassing AntiVirus protections with BYOVD. Links:"FBI Warn

SolarWinds Attack Disclosures, OWASP's AI Security Guidance, & More

Nov 13 2024 57 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This month, Oscar and the crew focus on SolarWinds cyber attack and the resulting charges from the SEC, guidance from OWASP on AI Security, and CISCO's security patch.Links: "Google Cloud to Enforce Multi-Factor Authentication by 2

Internet Archive Hacked, New CISA Warnings, Zero Day Alert

Oct 28 2024 58 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This month, the hosts talk about personal preparation for emergency events like natural disasters, the DDOS attacks of Internet Archive, newest CISA warnings, and Zero Day Alert for Ivanti exploitation. They also open up to the liv

Worm-Driven USB Attacks, Microsoft Zero-Days, Scattered Spider Vishing & Smishing

Sep 16 2024 59 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.With Oscar out traveling, Pinky and Eric lead the discussion this month. Together, they discuss: A worm-driven USB attack strategy, Microsoft's disclosure of four zero-days in their September update, and the Scattered Spider ransomw

TeamViewer APT29 Attack, Zero-Click Outlook RCE Vulnerability, CISA Takedown of Ivanti Systems

Jul 16 2024 57 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss Midnight Blizzard, a zero-click Outlook vulnerability, and CISA's takedown of Ivanti Systems.Links: Network Segmentation Saved TeamViewer From APT29 Attack https://www.darkreading.com/cyberattacks-data-breac

Police Troll LockBit, Microsoft Holds Execs Accountable for Security

May 13 2024 55 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss critical Citrix flaws, fake journalists stealing data, Microsoft holding execs accountable for security, police trolling a ransomware gang, and more.Links: Citrix Addresses High-Severity Flaw in NetScaler AD

AI-Written Malware, XZ Utils, Attackers Target Hospital Help Desks

Apr 16 2024 53 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.This time, they discuss AI-written malware, XZ Utils, and attackers targeting hospital IT help desks.Links:XZ Utils scare https://www.darkreading.com/application-security/xz-utils-scare-exposes-hard-truths-in-software-securityChange

Gemini AI Vulnerability, ChatGPT Plugins, Typosquatting, Vishing

Mar 19 2024 54 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.This time, they discuss security risks in ChatGPT plugins, a major flaw in Google's Gemini AI, typosquatting, and a worldwide vishing epidemic.Links:ChatGPT Plugin Securityhttps://www.infosecurity-magazine.com/news/security-risks-ch

AnyDesk, Resumes Stolen From Compromised Job Boards, Industry News

Feb 12 2024 53 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits.This time, they discuss compromised job boards where millions of resumes were stolen, AnyDesk's actions post-hack, an exploited SSRF flaw in Ivanti, and more.Links:Millions of resumes stolen via exploited job boards https://thehacke

Cybersecurity Funding Reduced 40% in 2023, Vulnerability/Patch News

Jan 19 2024 53 mins  
The guys are back for another episode of the Hackle Box—a monthly conversation between information security experts about new and noteworthy exploits. This time, they discuss the reduced cybersecurity funding observed in 2023 as well as new vulnerabilities, patches, and more.Links: Cybersecurity Funding Reduced https://www.securityweek.com/cybersecurity-funding-dropped-40-in-2023