Mrtentacle, Morphing Meerkat, Tor, VMWare, Waymo, Oracle, Aaran Leyland, and more… – SWN #463

Summary: The video discusses the latest trends in cybersecurity, featuring insights into various threats, including the rise of AI-powered phishing attacks and Oracle’s recent claims regarding data breaches. It highlights the importance of security training and the necessity for organizations to remain vigilant against evolving cyber threats.

Keypoints:

• The episode features Doug White and guest speakers discussing current cybersecurity news and trends.
• ThreatLocker promotes a zero-trust approach to cybersecurity, emphasizing granular control over executables to prevent attacks.
• Oracle is facing scrutiny over claims about a data breach, with their spokesperson denying any compromise of Oracle Cloud.
• A domain hijacking incident affected Microsoft’s deprecated video service, Microsoft Stream, redirecting it to a spam site.
• AI-driven phishing attacks are becoming more sophisticated and harder to detect, increasing the challenge for traditional signature-based defenses.
• Insider threats are on the rise, with examples including a North Korean hire who attempted to install malware upon employment.
• New phishing as a service platforms are emerging, exploiting DNS and email settings to craft convincing fake login pages.
• Denmark and India researchers developed techniques to potentially unmask users behind VPNs with a 65-70% success rate using honeypots.
• Broadcom has implemented significant price increases for VMware licenses, impacting many organizations in the process.
• Discussions on the safety of AI in self-driving cars reveal that they may crash less often than human drivers, indicating the need for careful evaluation of AI technologies.