Beers with Talos Podcast artwork

Beers with Talos Podcast

154 episodes - English - Latest episode: 19 days ago - ★★★★★ - 143 ratings

Threats, Beers, and No Silver Bullets. Listen to Talos security experts as they bring their hot takes on current security topics and Talos research to the table. Along the way, Mitch, Matt and a rotating chair of special guests will talk about anything (and we mean anything) that's on their minds, from the latest YouTube trends to Olympic curling etiquette. New episodes every other Thursday.

Technology News Tech News security threat intelligence malware vuln dev day zeroday intel vulnerability
Homepage Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed

Episodes

Why Ransomware Actors Are (and Aren’t) Targeting Healthcare

January 04, 2021 18:06 - 25 minutes - 17.2 MB

Recorded early November, 2020 – This is an EP we recorded in early November but got pushed back in the end of year shuffle to make production schedules work. We’re happy to put this one out now with somewhat belated takes on (somewhat recent) health care ransomware attacks. We discuss a few key questions that are rather evergreen. Why is health care targeted in this way (and other verticals for that matter)? What defines a “high value” target to a ransomware actor? How can targeted entities ...

Getting to Better Security Outcomes (ft. Wendy Nather)

December 10, 2020 15:46 - 37 minutes - 25.5 MB

Recorded November 24, 2020 –On this EP, Mitch and Matt are joined by Wendy Nather to discuss the newly released Cisco Security Outcomes Study. The results and findings of the research are interesting and somewhat surprising. As often happens with most good research, we end up asking more questions - in this case, geared toward the nature of the relationships found in the data. Special thanks to Wendy for coming on and joining us. As usual, her insight is stellar and she is much more enterta...

The Bogeyman and QR codes

December 01, 2020 20:44 - 35 minutes - 24.5 MB

We got delayed with the holidays and PTO, but here is a long awaited ep. The rest of the year is on deck to release through the holidays, so fret not. In this EP we talk about QR codes becoming pervasive as easily deployed “touchless tech” (and how they could help the robots try to kill Craig), and then we take a look at some recent DOJ and APT activity that begs the question: is bringing charges against foreign APT actors anything more than a symbolic gesture? Full show notes on the Talos...

Election 2020: Advice for voters and election officials

October 29, 2020 17:54 - 37 minutes - 25.5 MB

Recorded October. 9, 2020 –We are running a short bench today after Nigel’s retirement and Joel being on vacation. We start off talking about how specific use cases don’t equate to the death of entire defensive technologies, despite the frequent assertions otherwise you may find on Twitter. The key to defense in depth is that no silver bullet stops everything - nothing is surprising here. The big focus of this EP, leading into the 2020 election is, of course, election security. We recap som...

Nigel is Marching On, Victorious and Glorious

October 16, 2020 04:34 - 52 minutes - 36.3 MB

Recorded Sept. 25, 2020 –Today is Nigel’s last episode as a regular host of BWT. Join us in wishing him a happy transition to his next chapter - as we all know, Nigel won’t ever actually retire. Today’s show is us chatting with Nigel - about his career and his take on the industry as he entered, and now as he moves on to whatever comes next. Every aspect of Talos is better off because Nigel was here, as well as so many of the people he impacted along the way. We will all miss your daily pre...

“More Secure” Myths and Misconceptions

October 01, 2020 20:51 - 36 minutes - 24.9 MB

On today’s show we take several of the larger security myths that are often heard around things like patching vulnerabilities - specifically the notion that more patches indicate less secure software. We also talk about other “common knowledge”-esque bits of advice we’ve all often come across. We could do a whole episode on silver bullets that (spoiler alert) weren’t. Let us know some of your favorite silver flashes on Twitter or drop us an email.Full show notes on the Talos Blog

Now Trending in Your Network: Disinformation

September 18, 2020 17:04 - 39 minutes - 27.1 MB

Disinformation is front and center right now. As disinformation efforts constantly increase, platforms struggle to contain the problem without giving the appearance of censuring or controlling all information present. A Talos research team recently published some findings on the building blocks of disinformation campaigns (available via link below). Special guest Kendall McKay joins us to discuss the research she co-authored with her team in Talos. We go over exactly what defines disinform...

Get the FUD out

September 01, 2020 17:38 - 43 minutes - 30 MB

Recorded August 14, 2020 –Let’s talk about FUD - it’s not enough to just say FUD sucks. Let’s talk about exactly how and why producers of FUD are garbage nightmare monster people. We also cover how they are actually damaging themselves, not just the people and organizations that buy their hype. We have rather strong opinions on this, so we invited Meredith Corley, an actual professional on the topic, to break it down for us all. Meredith is our Security communications and PR Director (pre...

Hacktivism: Understanding the Real World Consequences

August 17, 2020 19:02 - 36 minutes - 24.9 MB

Recorded July 31, 2020 –This week in BWT land, we’re discussing hacktivism - from the unintended consequences to the tropes perpetuated by Hollywood. Regardless of the reason or cause, hacktivism often wields DDoS and web defacement as easily deployed tools. We discuss some instances where using code as a weapon without deeper understanding can have disastrous consequences. The crew also digs deeper into the ethical considerations of hacktivism, pseudo anonymity, and the intended impact of ...

What To Do When the Pwnd One is You

August 03, 2020 22:17 - 32 minutes - 22.3 MB

Recorded July 17, 2020 –The gang’s all back this week, and we take on what happens when you get pwnd, hacked, or your data is leaked. It happens to all of us eventually, one quick moment connecting to public wifi, clicking on a bad link when you just aren’t paying enough attention, or your account data is leaked through no real fault of your own. So, what do you do first when it happens to you? Sure, this is a fundamental review for some, but you can thank us the next time your brother’s co-...

It’s Not About the Vote, It’s About Trust

July 22, 2020 14:03 - 39 minutes - 27.4 MB

Nigel is out this week, but we have a couple light and breezy topics on the docket: 0-day research and the institutions of democracy. FUN STUFF!! First, we chat about 0-day research tools and the questions raised around them, contrasted to the time before security research was widely accepted. We spend the last half of the show discussing some of the findings and finer points of Matt’s recently released research paper on election security “What to expect when you’re electing”.

Happy 3rd Birthday BWT - It’s story time!

July 08, 2020 03:12 - 45 minutes - 31.4 MB

Has it been 3 years already? We have a great episode to celebrate! We start off chatting about the origins of BWT and what made it… I don’t know… the way that it is. We also have some great guests. Hazel and Ben from the Security Stories podcast come by to talk about another anniversary of note to all of us - NotPetya. We also chat about what makes storytelling a powerful tool (even in security), and atypical paths to careers in cybersecurity. While we are talking about communication, we wr...

It’s Just an Exploit Popularity Contest...

July 01, 2020 23:16 - 31 minutes - 21.5 MB

Recorded June 5, 2020 –Prod. Note: Things are a hot mess right now and the team thinks that there are voices you have needed to hear more than ours, so we held back on releasing a few episodes. This is the last of those withheld eps, please pardon any weeks-old info. Be safe, be kind, and listen to each other. Black lives matter. This was a difficult show to make in light of the events the week prior. We were all in a mood along with the rest of the US and the world, and it showed. There ...

The In-Between, Vol. 5

June 25, 2020 14:43 - 27 minutes - 18.9 MB

Recorded May 29, 2020 – Prod. Note: Things are a hot mess right now and the team thinks that there are voices you have needed to hear more than ours, so we held back on releasing a few episodes. We are releasing those now, please pardon any weeks-old info. Be safe, be kind, and listen to each other. Black lives matter. This is the last of the In-Between episodes. Thanks for having fun with this non-security miniseries across a span of weeks that I am not even going to try and neatly sum up...

Mid-Career Advancement in Cybersecurity

June 16, 2020 23:44 - 40 minutes - 27.9 MB

Recorded May 26, 2020 – Prod. Note: Things are a hot mess right now and the team thinks that there are voices you have needed to hear more than ours, so we held back on releasing a few episodes. We are releasing those now, please pardon any weeks-old info. Be safe, be kind, and listen to each other. Black lives matter. You, our audience, have asked this question a lot - in person, on Twitter, in DMs, and one of you even sent me InMail - so we spend a whole EP talking about advancing your ...

The In-Between, Vol. 4

June 11, 2020 18:02 - 33 minutes - 23 MB

Recorded May 15, 2020 –Prod. Note: Things are a hot mess right now and the team thinks that there are voices you have needed to hear more than ours, so we held back on releasing a few episodes. We are releasing those now, please pardon any weeks-old info. Be safe, be kind, and listen to each other. Black lives matter. Sammi (inexplicably) continues tolerating hanging out with the rest of the crew on the The In-Between. As usual, we avoid discussing security at all costs. These EPs are al...

Talos IR Quarterly Threat Trends

May 21, 2020 22:23 - 37 minutes - 25.4 MB

Brad Garnett from Cisco Talos Incident Response joins us today to talk about DFIR, the Talos Quarterly Trends Report, and how a high-speed police chase on reality TV kick-started his DFIR career. That’s not even clickbait, for real. After Brads drops a quick IR trends briefing on us, the crew drills down on some key findings. (IDK what that means either, but there were good questions asked and great discussions in response).We are taking your questions from Twitter so keep sending them for ...

Talos IR Quarterly Threat Trends

May 21, 2020 22:23 - 37 minutes - 25.4 MB

Brad Garnett from Cisco Talos Incident Response joins us today to talk about DFIR, the Talos Quarterly Trends Report, and how a high-speed police chase on reality TV kick-started his DFIR career. That’s not even clickbait, for real. After Brads drops a quick IR trends briefing on us, the crew drills down on some key findings. (IDK what that means either, but there were good questions asked and great discussions in response).We are taking your questions from Twitter so keep sending them for ...

The In-Between, Vol. 3

May 15, 2020 15:51 - 30 minutes - 20.9 MB

Recorded May 1, 2020 –Sammi is back and the rest of the crew is here to hang out, chat, and as is The In-Between Way - avoid discussing security at all. These EPs are all about just keeping in touch and having some fun. Despite Joel forgetting his one. job. on this podcast, we are taking your (sometimes crazy) questions from Twitter on these episodes, so keep sending them for the next “The In-Between” episode — @TalosSecurity #BWT. Full show notes on the Talos blog

Working Securely in a New (not yet) Normal

May 06, 2020 18:55 - 38 minutes - 26.6 MB

Matt isn’t with us today, but the rest of the crew discusses current security issues in our new WFH environment, including some more-than-the-basics advice on how to protect yourself and your organization’s data while working wherever. We go a bit more in depth on VPN and explain how VPNs work, how they protect you, and more importantly, how they DON’T protect you. The key takeaway of this podcast, however, is that we need to start a campaign to formally recognize the legitimacy of Social Mu...

The In-between vol. 2 (It's a better name than Quittin' Time)

April 30, 2020 17:03 - 18 minutes - 12.6 MB

We are renaming these episodes - “Quittin’ time” was okay and all, but “The In-between” better captures what these eps are. Compared to our normally named eps, you can expect the same lack of actual security content presented in Vol. 1, just a shorter format. You seem to enjoy us taking your (sometimes crazy) questions from Twitter, so keep sending them! We are doing these extra episodes because we need to laugh and have some fun right now, and hopefully give you the same little break from...

Fingerprints and Hunting Parties

April 21, 2020 15:36 - 40 minutes - 28 MB

We have a couple great topics today - and only one of them is a COVID-19 related topic. So, it turns out that you can fake fingerprints - the good news is that it takes a lot of time, equipment, and expertise. It is much easier for a criminal to just make you unlock it yourself. We have also seen an unprecedented level of collaboration and righteous anger across all vendors responding to COVID-based scams. Literally everyone is just watching, documenting, and hunting anything even tangentia...

Quittin’ Time, vol. 1 - Tigers and Tales of the In-Between

April 14, 2020 16:42 - 43 minutes - 30.1 MB

Recorded April 3, 2020 – We’re kinda bored. We figured you are too. So we decided to get together between normal recordings to help save you from the bottom of the Netflix barrel. It gets weird down there. These Quittin’ Time eps are just the crew hanging out for a bit without a security topic agenda. Sans. None of that. Honestly, if you’re not a fan of the banter in the Roundtable and Closing Thoughts segments, this …probably isn’t your cup of tea. Anyway, we have fun getting together and f...

When Security Hits Home (and Stays)

April 06, 2020 21:32 - 47 minutes - 32.5 MB

Our goal is always to talk to you about what’s on our minds. Right now, we are pretty sure we all have the same thing on our minds. In addition to our regular show material, we want to talk through some of the things that we are dealing with professionally and personally in the hopes that it applies and is useful to you. To that end, we asked Sammi Seaman (our Education coordinator and resident mega-extrovert) to stop by and chat with us about the challenges of working from home and shifting...

Now That Coronavirus Made a Global WFH Policy...

March 20, 2020 13:56 - 33 minutes - 23.2 MB

Recorded 3/13/20 - Of course we have to talk about the implications of Coronavirus to the way business and security are getting done. While everything about the COVID-19 pandemic seems to be a fluid situation, a rare constant has been the same rehashed disaster scams. But that could quickly change with the mass shift toward remote work. This episode takes a look at both securing that shift as well as practical advice for those of us finding ourselves as newly remote employees. Full show not...

Impacting Civil Society

March 12, 2020 19:57 - 41 minutes - 28.8 MB

Recorded 3/02/20 - We open up the show with a sugary sweet poem before talking about RSA and our annual trip through the startup hall. Matt expertly segues the crew into talking about the impact the security industry can have on public-interest technologies and civil society - both in the industry sense as well as in the interpersonal sense. FInally, we take a look at opposing mindsets and approaches, discussing how partnering with an adversarial approach is not near the oxymoron it seems.Fu...

Feature Ownership, Vuln Advisories, and Fancy Audio FX

February 27, 2020 02:03 - 27 minutes - 19 MB

Recorded 2/19/20 - Craig made an oopsie. He sends his apologies for the echo-chamber reverb. We had no idea until he sent in his audio for mixing, we would never do this to you intentionally. This is a shorter ep focusing on software licencing and features as well as vulnerability disclosure. Join us to talk about vendors abilities to disable feature sets and owning versus using products. We further chat about vulnerabilities and how a vendor with no security advisories is often seen as a “m...

Getting to Patch Day: Understanding Vulnerability Risks and Options

February 14, 2020 19:52 - 45 minutes - 31.1 MB

Recorded 1/31/20 - When a vulnerability is released, regardless if it has a website and logo or not, we need to understand the risk to the network and what defense options are possible before the patch is ready for production. Can you defend against the vulnerability or do you go straight for known exploits? What happens if an exploit occurs? Also discussed: Talos begins releasing Threat Assessment Reports based on IR engagement data and known prevalent threats. Snort has a new series of tra...

I Have the Power(shell)!

January 31, 2020 20:34 - 50 minutes - 34.5 MB

Recorded 1/20/20 - Powershell is a frequent flyer in security headlines - a powerful and oft wielded tool for attackers and defenders alike. This ep takes a look at Powershell and how to help ensure its security posture as an effective management tool. We also look at the missing-the-forrest-for-the-trees concept of behind being concerned about the latest shiny ATP before all else.Full show notes on the Talos blog

Semper Vigilantes - Strategic Defense in a Cyber Conflict

January 16, 2020 16:36 - 49 minutes - 34.3 MB

Recorded 1/6/20 - There is a looming cyber conflict on the horizon between the US and Iran. We use all our time this week to discuss the situation at hand and take a hard look at what you should have already done foundationally. The crew offers insight and analysis of what nation-state cyber conflict looks like and what you can do to elevate your security strategy to the next level in an uncertain time of increased suspicion. Full show notes on the Talos blog

2019 Threat Recap - RATs, Turtles, and Worms!

January 06, 2020 22:21 - 39 minutes - 27.1 MB

Recorded 12/20/19 - In a shorter year-end EP, we take a look back and a look forward. It seems everyone else wants to break out the crystal ball this time of year and prognosticate the coming year’s threat landscape. We don’t have one of those, so we used a Magic 8-ball, but we’re pretty confident the results are as-good or better. However, most of the EP is dedicated to going through the notable security events of the past year. We take a look at the lasting effects and lessons learned from...

Talos Takes Ep. #3: The basics of malvertising

December 17, 2019 16:30

In episode 3 of Talos Takes, Nick Biasini and Earl Carter give walk through malvertising 101. Why should you be worried about it? Why are there so many malicious ads online? What is the online advertising market like?

Talos Takes Ep. #2: How to keep your fancy new IoT toy secure

December 17, 2019 16:28

So you just got a new smart home assistant for Christmas. Now what? On episode #2 of Talos Takes, Nick Biasini and Earl Carter tell you how to keep your new smart device secure. From doorbells to refrigerators, it seems like everything has to be connected to the internet now. Here are the best practices for patching, settings and more.

Talos Takes Ep. #1: How to avoid common holiday shopping scams

December 17, 2019 16:19

Welcome to the first-ever episode of Talos Takes. In each episode, our researches and analysts will put the Talos spin on the hottest news in security. We're starting out with how to avoid common holiday shopping scams. When is a deal too good to be true? Is it actually safer to use payment services like Google Pay and Apple Pay?

Takes from Talos on IoT (and the NEW “Talos Takes” podcast announced!)

December 17, 2019 15:14 - 44 minutes - 30.3 MB

Recorded 12/9/19 - We have a big announcement to make today! Check your feed for a few Ep’s of a new podcast from Talos - “Talos Takes”. On this Ep of BWT, we welcome Joe Marshall to the table - Joe is a Talos ICS/IoT tech lead and he stops by to discuss issues in the IoT space - macro and micro, from both the vendor and user perspectives. Check out the crew’s advice on staying secure in this IoT gift giving season.We will see you in the new year, and thanks for listening in 2019. Merry Chri...

Inside Incident Response

December 09, 2019 15:47 - 56 minutes - 38.6 MB

Craig is out sick/injured/fighting robots (actually all three), so we brought in Sean Mason from Talos IR to talk shop today and give you the inside scoop on IR (and Sean’s next-level beard care regimen). How do incidents affect the enterprise and consumers? How has the advent of widespread ransomware fundamentally shifted the burden of responsibility in the c-suite and what have been the outcomes? What does a responder have in the bag when they arrive on-site?Full show notes on the Talos blog

I Choose YOU! Attackers view of targets, RLAs, and scam season

November 20, 2019 20:41 - 46 minutes - 31.8 MB

Recorded 11/8/19 - Joel is out on PTO, so Mitch, Matt, Nigel, and Craig carry the banner this EP discussing how attackers approach targets like investors looks at portfolio. We also talk about how the most recent off-cycle elections in the US give us a glimpse of improvements and changes in election security. Finally, we take a quick look at popular scams and how attackers use seasonality to increase the relevance of their scam for emotional response.Full notes on the Talos Blog

Please Welcome to the Show… Talos Incident Response

November 05, 2019 14:31 - 53 minutes - 37.1 MB

Recorded 10/25/19 - Today is a bit different. We normally keep things pretty neutral on this show (not really), but today is all about the new service Talos is launching - say hello to Talos Incident Response. Amy Henderson from the Talos Intel and Interdiction group joins us as we discuss the full circle of threat intelligence - from global visibility to hyper local context, and how IR allows those feed each other to the improvement of both. Listen to the announcement as we discuss what IR ...

Your Problem Isn’t Complex, Its Simply Complexity

October 25, 2019 13:38 - 56 minutes - 38.8 MB

Recorded 10/10/19 - This EP lives up to it’s name, by trying to only take on a minimal topic and then becoming completely convoluted. We start of with an extended round table (I even cut like half of it out) and then start talking about the trials and tribulations of making things too complex - from software to network design. If the devil is in the details, then the danger is in there being too many of them. We take two simple examples - PDF readers and a trip to the doctors office - and lo...

The Third Law of Thermodynamics

October 11, 2019 12:49 - 57 minutes - 39.5 MB

Recorded 9/27/19 - We are down Matt and Joel today, so Mitch, Craig, and Nigel are taking you through this EP. We cover some recent posts from Talos with Divergent and Tortoiseshell. Turns out, people get a bit excited when you target US veterans with malware - even other malware authors thinks that’s scummy. That takes us into a chat about social engineering in general and we end up talking about some interesting stuff with unpatchable vulns and why deleting /var on install could be describ...

Fifty Shades of Shady

September 26, 2019 15:44 - 54 minutes - 37.1 MB

Recorded 9/13/19 - In one of our rantier episodes of late, the BWT crew dives into the ongoing insidiousness that is cryptomining with Watchbog, and then we turn our attention to some idiot that thinks charging people $50 to bypass MFA on their own machines is a swell idea, because nothing bad can happen there, right? RIGHT?! Finally, we take a look at some recent breaches and the trend of attempting to downplay the severity of a breach because the data ex-fil wasn’t “vital or important”. Ag...

Hacking for Good is a Bad Idea

September 11, 2019 14:16 - 1 hour - 46.5 MB

Recorded 8/30/19 - In this extra-sized EP, we cover a lot - starting with Retadup, and discussing the intricate workings of why it’s a bead idea to execute code on other computers without permission when you have no idea what that computer is doing. WannaCry is making some headlines again, but this time it isn’t WannaCry and frankly it’s not news. From the mobile ecosystem os battleground, Google’s Project0 announced several vulns in iOS that have been discovered being exploited in the wild,...

Summer Camp Flashbacks and Defining Your Intel

August 30, 2019 07:19 - 1 hour - 47.9 MB

Recorded 8/16/19 - The understatement of the day would be the guys were in some kind of mood today… There is no explaining the way they are sometimes. We ended up discussing a lot of the awesome things that went on at Blackhat and DEFCON… like the time Matt and Mitch got ejected from the Aviation Village for recognizing the prowess of the greatest plane ever built. BRRRRRRT. And also the time Joel ejected himself from the Cisco party. Deeper in the EP we get into threat intelligence – what i...

The Tardy Episode

August 16, 2019 05:19 - 53 minutes - 36.6 MB

Recorded 8/2/19 - Yes, I know what today’s date is. We got really busy last week and I am sorry that the podcast is late. Really, I wish I wasn’t writing these notes at 12:#0r4-j3pofw…. What? Anyway, we talk about malvertising and dig into that ecosystem a bit looking at some of the competing priorities (hint: none of them are your privacy). We also discuss BlueKeep making its debut in Canvas and surely soon to follow in other fine pen testing platforms. We use that opportunity to review a l...

Defending Democracy and Doing DEFCON

July 24, 2019 04:20 - 1 hour - 50 MB

Recorded 7/19/19 - Wow, we packed a lot in this one: election security, burner phones, social app ToS, and maybe the worst opsec of all time - of course, Nigel blames Canada for all of it. Fair warning, this EP set a new record for beeps and train horns, so you have been warned. We primarily take a look at how an attacker would see disrupting democracy (and not in the cool startup way) by looking at the available attack surface with their intentions in mind. We also lay out some cases where ...

It’s a Business Decision, Not Rocket Science

July 18, 2019 15:22 - 53 minutes - 37.1 MB

Recorded 7/8/19 - Matt skipped today’s podcast in favor of a meeting - for real. The rest of the crew carried on to discuss a few of this week’s hot button issues - municipalities paying (or not paying) the ransom, NASA JPL reporting APT breached their network via a rouge Pi (in true Mr. Robot fashion), and looking at rouge devices in general. Next EP will be our last before Black Hat and DEFCON, so tune in to find out where you can find Talos!Full show notes on the Talos blog

Flatlined: Breach to Bankrupt

July 03, 2019 21:18 - 44 minutes - 30.6 MB

Recorded 6/24/19 - Back in the studio for EP 56 and off the top, Matt got some new toy for his side hustle as a Twitch star - I still can’t figure out exactly how he did what he did, but it was not helpful from a producer’s perspective. It’s repaired, but still enough to apologize for. This is why we can’t have nice things. We discuss the issues around the AMCA data heist - a breach that caused a bankruptcy - and the complexity of securely moving sensitive data, like PII and HIPAA data, to...

Flatlined: Breach to Bankrupt

July 03, 2019 21:18 - 44 minutes - 30.6 MB

Recorded 6/24/19 - Back in the studio for EP 56 and off the top, Matt got some new toy for his side hustle as a Twitch star - I still can’t figure out exactly how he did what he did, but it was not helpful from a producer’s perspective. It’s repaired, but still enough to apologize for. This is why we can’t have nice things. We discuss the issues around the AMCA data heist - a breach that caused a bankruptcy - and the complexity of securely moving sensitive data, like PII and HIPAA data, to...

BWT Live from San Diego!

June 25, 2019 19:33 - 57 minutes - 39.8 MB

Recorded 6/12/19 - God knows why, but we bring you another live EP from the Talos Threat Research Summit at Cisco Live US in San Diego, CA. We are joined by TTRS keynote speaker (as is tradition) Liz Wharton. Catch the highlights of the show and stick around for hot takes from the live audience. Thanks to everyone who showed up to the recording, especially those brave enough to step up to the mic at the end. This is our annual reminder of why we don’t do this more often. Full show notes on...

Patch After Listening, RDP and Wild 0-days

May 29, 2019 19:01 - 53 minutes - 37.1 MB

Recorded 5/24/19 - There is another Blue(x) to talk about and guess what? YES, YOU STILL NEED TO PATCH. We talk about RDP, the source of this vuln, and whether or not exploits exist for it (hint: they do). There is a quick look back at last year on the anniversary of VPNFilter, and we also tackle 0-days again through the lens of Project Zero’s timeline of 0-days found in the wild. Also, Craig hasn’t seen the end of John Wick 3 yet, so feel free to tweet him spoilers. If you are in San Die...

Twitter Mentions

@talossecurity 1 Episode
@nohackme 1 Episode