Hurricane Labs InfoSec Podcast

SOC Talk: Malware on USB

In this podcast, Heather and Roxy talk about the malware-laced USB devices being mailed to companies recently–and how you can stay safe. 

Also, make sure to check out some of the articles and resources mentioned during this episode:

• CISA: Using Caution with USB Drives
• FBI warns cybercriminals have tried to hack US firms by mailing malicious USB drives
• Ransomware warning: Cyber criminals are mailing out USB drives that install malware

Click here for our podcast episode transcript.

SOC Talk: Log4Shell

In part two of this series, Heather chats with some of Hurricane Labs' security analysts about the Log4Shell vulnerability.

Also, make sure to check out some of the articles and resources mentioned during this episode:

• Log4j: Letting the JNDI out of the bottle blog post by Tony Robinson
• 6 Practical Fraud Prevention Tips blog post by Roxy
• FTC warns companies to remediate Log4j security vulnerability blog post via the FTC
• FTC Warns Companies: Patch Log4j ASAP or Suffer Our Wrath blog post via Gizmodo

Click here for our podcast episode transcript.

Pentesters’ Perspective: Log4Shell

In part one of this two-part series, Heather chats with two of Hurricane Labs' pentesters about the Log4Shell vulnerability.

Also, make sure to check out some of the articles and resources mentioned during this episode:

• Log4Shell Everywhere
• Log4Shell Detection with ZAP
• Two Nmap NSE scripts:
  • NSE Log4Shell
  • Other NSE
• Hurricane Labs'  SOC Talk: IoT and Security Podcast
• OWASP ZAP – The Eval Villain Add-on Blog Post 
• Making Easy DOM XSS Actually Easy with Eval Villain 
• Hurricane Labs Penetration Testing Services

Click here for our podcast episode transcript.

Wireless Security: Identifying Risks and Hardening Your Network

In this podcast, Heather chats with Tom, Meredith, and Roxy about ways to harden your wireless security.

Also, make sure to check out our related blog post: 6 Tips for Wireless Security. 

Click here for our podcast episode transcript! 

SOC Talk: The Log4Shell Vulnerability

In this podcast, Heather chats with Tony, Kurt, and Josh about the Log4Shell vulnerability.

Also, make sure to check out some of the articles and resources mentioned during this episode:

• Actual CVE-2021-44228 payloads captured in the wild
• Log4j – Apache Log4j Security Vulnerabilities
• Log4Shell Hell: anatomy of an exploit outbreak
• Splunk Security Advisory for Apache Log4j (CVE-2021-44228)
• Trending Internet Scanning on Apache Log4j Vulnerability

Click here for our podcast episode transcript.

CISA Adds Single-Factor Authentication to list of Bad Practices

In today's podcast, Heather chats with Tom and Meredith about CISA's bad practices list and single-factor authentication.

Click here for our podcast episode transcript.

Ads and Safeframes: Keeping your site safe(r)

In this podcast, Heather chats with Dennis, one of Hurricane Labs' pentesters, about how to avoid vulnerabilities ads inject into websites.

Click here for our podcast episode transcript.

Physical Security: Identifying Risks and Hardening Your Systems

In today's podcast, Heather chats with Tom and Meredith about mitigating risks to your physical security.

Click here for our podcast episode transcript.

Cybersecurity Chat: A Perspective on Apple‘s Bug Bounty Program

In today's podcast, Heather chats with Hurricane Labs pentester Meredith about what the infosec community thinks of Apple's recent 0day disclosure troubles.

Also, make sure to check out some of the articles mentioned during this episode:

• About the security content of iOS 12.5.5
• Apple Releases Security Updates
• Pentest Stories: Responsible vulnerability disclosure

Click here for our podcast episode transcript.

Infosec Community: Diversity and Inclusion, Part 3

In the third and final part this series, the Hurricane Labs team talks about diversity in infosec–and how companies can support inclusivity within their organization. 

Click here for our podcast episode transcript.