Hacking Humans

Cons through and through. [Hacking Humans Goes to the Movies]

April 24, 2022

20:49

On the front lines of fraud protection.

April 21, 2022

43:44

Domain-based Message Authentication Reporting Conformance (DMARC) (noun) [Word Notes]

April 19, 2022

7:57

Magic, illusion, and scams, oh my.

April 14, 2022

51:01

Shields Up (noun) [Word Notes]

April 12, 2022

7:16

Online threats turned real world danger.

April 7, 2022

46:26

Software Assurance Maturity Model (SAMM) (noun) [Word Notes]

April 5, 2022

5:13

Robocall scams and the psychology surrounding them.

March 31, 2022

42:35

Universal 2nd Factor (U2F) [Word Notes]

March 29, 2022

6:47

Cons: the short one and the first one. [Hacking Humans Goes to the Movies]

March 27, 2022

18:04

What's behind Buy Now, Pay Later scams?

March 24, 2022

50:22

adversary group naming (noun) [Word Notes]

March 22, 2022

9:47

Data privacy: is it black and white when it comes to your kids?

March 17, 2022

40:17

BSIMM (noun) [Word Notes]

March 15, 2022

5:39

Technology's effects on students during the pandemic.

March 10, 2022

40:17

OWASP vulnerable and outdated components (noun) [Word Notes]

March 8, 2022

7:34

Phishing seems to be cyclical and thematic.

March 3, 2022

48:09

OWASP software and data integrity failures (noun) [Word Notes]

March 1, 2022

7:57

A blurring of lines between nation states and criminals.

Feb. 24, 2022

45:15

OWASP server-side request forgery (noun) [Word Notes]

Feb. 22, 2022

7:08

Hustling the hustlers. [Hacking Humans Goes to the Movies]

Feb. 20, 2022

21:15

Vulnerabilities will be found.

Feb. 17, 2022

47:53

OWASP security logging and monitoring failures (noun) [Word Notes]

Feb. 15, 2022

5:34

If you wish for peace, prepare for cyberwar.

Feb. 10, 2022

49:55

OWASP identification and authentication failures (noun) [Word Notes]

Feb. 8, 2022

5:28

How to talk your way in anywhere. [Hacking Humans Goes to the Movies]

Feb. 6, 2022

22:09

The ransomware game has evolved.

Feb. 3, 2022

52:14

OWASP broken access control (noun) [Word Notes]

Feb. 1, 2022

7:00

Useful ransomware protection for you.

Jan. 27, 2022

44:55

OWASP security misconfiguration (noun) [Word Notes]

Jan. 25, 2022

6:33

The perfect environment for ATOs (account takeovers) to breed.

Jan. 20, 2022

46:21

OWASP insecure design (noun)

Jan. 18, 2022

7:49

The only locks you should pick are your own.

Jan. 13, 2022

44:52

Log4j vulnerability (noun) [Word Notes]

Jan. 11, 2022

8:46

Changing the game on ransomware.

Jan. 6, 2022

49:21

OWASP injection (noun) [Word Notes]

Jan. 4, 2022

6:02

Identity "protection" and a pigeon drop. [Hacking Humans Goes to the Movies]

Dec. 30, 2021

21:23

Encore: zero trust (noun) [Word Notes]

Dec. 28, 2021

8:32

The CyberWire: The 12 Days of Malware.

Dec. 25, 2021

4:43

Hustling the hustler and three-card Monte. [Hacking Humans Goes to the Movies]

Dec. 24, 2021

20:14

Even if a cause moves you, do your due diligence.

Dec. 23, 2021

30:28

Conmen come in many flavors, all motivated by greed. [Hacking Humans Goes to the Movies]

Dec. 22, 2021

22:14

OWASP cryptographic failures (noun) [Word Notes]

Dec. 21, 2021

6:05

The 3 M's: Minimize, monitor and manage.

Dec. 16, 2021

45:52

account takeover prevention (noun) [Word Notes]

Dec. 14, 2021

5:53

Scams abound this time of year.

Dec. 9, 2021

43:55

threat hunting (noun) [Word Notes]

Dec. 7, 2021

6:31

Do you really want that device to be a connected device?

Dec. 2, 2021

47:24

vulnerability management (noun) [Word Notes]

Nov. 30, 2021

7:46

Misdirection and layering with a con in the middle. [Hacking Humans Goes to the Movies]

Nov. 25, 2021

17:45

software bill of materials (SBOM) (noun) [Word Notes]

Nov. 23, 2021

6:29

A good amount of skepticism helps protect you online.

Nov. 18, 2021

50:48

zero trust (noun) [Word Notes]

Nov. 16, 2021

8:32

Let's go to the movies. [Hacking Humans Goes to the Movies]

Nov. 11, 2021

25:11

OT security (noun) [Word Notes]

Nov. 9, 2021

7:43

Cybersecurity awareness should be a year-round activity.

Nov. 4, 2021

33:38

cybersecurity skills gap (noun) [Word Notes]

Nov. 2, 2021

7:13

The Malware Mash!

Oct. 29, 2021

3:05

Good grammar is essential for business email compromise.

Oct. 28, 2021

41:42

digital transformation (noun) [Word Notes]

Oct. 26, 2021

6:35

Joekens, Bittnercoins, and the serious impacts of spam analysis.

Oct. 21, 2021

37:14

bulletproof hosting (noun) [Word Notes]

Oct. 19, 2021

6:02

Physical pen testing: You've got to be able to think on your feet.

Oct. 14, 2021

47:10

endpoint security (noun) [Word Notes]

Oct. 12, 2021

8:01

Measuring security awareness proactively.

Oct. 7, 2021

50:11

Executive Order on Improving the Nation's Cybersecurity (noun) [Word Notes]

Oct. 5, 2021

7:44

Capture the Flag, Black Badges and social engineering tricks.

Sept. 30, 2021

40:21

lateral movement (noun) [Word Notes]

Sept. 28, 2021

7:33

They won't ask for sensitive information over the phone.

Sept. 23, 2021

39:02

common vulnerabilities and exposures (CVE) (noun) [Word Notes]

Sept. 21, 2021

6:43

Sometimes, deepfake victims don't want to be convinced it is fake.

Sept. 16, 2021

44:08

dead-box forensics (noun) [Word Notes]

Sept. 14, 2021

5:46

Collaboration platforms are a gateway for ransomware attacks.

Sept. 9, 2021

33:29

cybersecurity maturity model certification (CMMC) (noun) [Word Notes]

Sept. 7, 2021

6:27

Don't blindly test your colleagues.

Sept. 2, 2021

40:03

incident response (noun) [Word Notes]

Aug. 31, 2021

7:20

Companies don't want their customers to be victims of fraud.

Aug. 26, 2021

39:28

script kiddies (noun) [Word Notes]

Aug. 24, 2021

5:08

Effective cybersecurity training has to be meaningful to employees.

Aug. 19, 2021

36:32

sandbox (noun) [Word Notes]

Aug. 17, 2021

5:55

The attackers keep coming every single day.

Aug. 12, 2021

45:09

security orchestration, automation, and response (SOAR) (noun) [Word Notes]

Aug. 10, 2021

5:56

Acceleration of our digital lives and impacts on cybercrime.

Aug. 5, 2021

43:52

personally identifiable information (PII) (noun) [Word Notes]

Aug. 3, 2021

6:56

What are our devices doing to our compassion?

July 29, 2021

46:42

secure access service edge (SASE) (noun) [Word Notes]

July 27, 2021

7:55

It's ok to be trusting, just be careful.

July 22, 2021

42:12

red teaming (noun) [Word Notes]

July 20, 2021

5:56

Threat actors changing ransomware tactics.

July 15, 2021

40:41

next generation firewall (noun) [Word Notes]

July 13, 2021

6:57

Introducing 8th Layer Insights: Deceptionology 101: Introduction to the Dark Arts

July 11, 2021

1:01:27

Collaboration, data portability, and employee mobility fuel insider risk.

July 8, 2021

41:12

fast flux (noun) [Word Notes]

July 6, 2021

6:43

An inside view on North Korean cybercrime.

July 1, 2021

35:35

encryption (noun) [Word Notes]

June 29, 2021

6:17

Bad password hygiene jeopardizes streaming services.

June 24, 2021

40:14

keylogger (noun) [Word Notes]

June 22, 2021

5:00

Answering a job ad from a ransomware gang.

June 17, 2021

37:22

non-fungible tokens (NFT) (noun) [Word Notes]

June 15, 2021

5:04

Pandemic taxes: later due dates afford more time for scams.

June 10, 2021

39:29

multi-factor authentication (noun) [Word Notes]

June 8, 2021

5:31

The fight in the dog.

June 3, 2021

39:03

machine learning (noun) [Word Notes]

June 1, 2021

5:46

Hacking people vs. hacking technologies to get into companies.

May 27, 2021

39:23

intelligence (noun) [Word Notes]

May 25, 2021

5:26

Whaling attacks are more targeted than phishing or spearphishing.

May 20, 2021

33:59

Introducing 8th Layer Insights [Trailer]

May 19, 2021

3:19

SaaS (noun) [Word Notes]

May 18, 2021

5:34

How to best fight fake news.

May 13, 2021

39:23

decryption (noun) [Word Notes]

May 11, 2021

6:58

Digital identities are at the core of recent breaches.

May 6, 2021

39:18

brute-force attack (noun) [Word Notes]

May 4, 2021

6:02

Anyone can be a target of romance scams.

April 29, 2021

36:04

denial-of-service attack (noun) [Word Notes]

April 27, 2021

6:07

Make systems to mitigate the mistakes.

April 22, 2021

42:28

cold boot attack (noun) [Word Notes]

April 20, 2021

6:29

Being aware can go a long way to prevent attacks.

April 15, 2021

35:32

cloud computing (noun) [Word Notes]

April 13, 2021

5:46

Finding targets of opportunity.

April 8, 2021

40:10

APT (noun) [Word Notes]

April 6, 2021

6:22

The pandemic is slowing, time to travel?

April 1, 2021

34:50

backdoor (noun) [Word Notes]

March 30, 2021

5:24

Technology is not designed for older users.

March 25, 2021

37:17

watering hole attack (noun) {Word Notes]

March 23, 2021

5:00

Ideally, look for someone open to deception.

March 18, 2021

39:25

network telescope (noun) [Word Notes]

March 16, 2021

4:48

Insider threats and security concerns for APIs.

March 11, 2021

38:22

SOC Triad (noun) [Word Notes]

March 9, 2021

4:51

Fraud activity within secure messaging apps in plain sight.

March 4, 2021

41:35

supply chain attacks (noun) [Word Notes]

March 2, 2021

4:58

How likely are online users to reveal private information?

Feb. 25, 2021

33:14

taint analysis (noun) [Word Notes]

Feb. 23, 2021

3:50

Including your passwords in your final arrangements.

Feb. 18, 2021

41:12

ATM skimming (noun) [Word Notes]

Feb. 16, 2021

4:27

In the disinformation and misinformation crosshairs.

Feb. 11, 2021

37:26

APT side hustle (noun) [Word Notes]

Feb. 9, 2021

4:59

Understanding human behavior is a key to security.

Feb. 4, 2021

39:31

endpoint (noun) [Word Notes}

Feb. 2, 2021

5:35

Covid has shifted the way we deal with money and increased fraud.

Jan. 28, 2021

41:12

unified extensible firmware interface (UEFI) (noun) [Word Notes]

Jan. 26, 2021

5:26

Targeted phishing campaigns and lottery scams abound.

Jan. 21, 2021

34:13

Daemon (noun) [Word Notes]

Jan. 19, 2021

4:19

As B2C interactions shift online, call centers become new fraud vector.

Jan. 14, 2021

39:28

greyware (noun) [Word Notes]

Jan. 12, 2021

4:48

Combating growing online financial fraud.

Jan. 7, 2021

36:20

Unix (noun) [Word Notes]

Jan. 5, 2021

4:45

fuzzing (noun) [Word Notes]

Jan. 5, 2021

4:45

Encore: Don't go looking for morality here. [Hacking Humans]

Dec. 31, 2020

38:51

deep packet inspection (DPI) (noun) [Word Notes]

Dec. 29, 2020

5:04

Encore: Separating fools from money. [Hacking Humans]

Dec. 24, 2020

30:02

rootkit (noun) [Word Notes]

Dec. 22, 2020

6:27

tactics, techniques and procedures (TTPs) (noun) [Word Notes]

Dec. 22, 2020

4:58

Phishing lures that may be in your inbox soon, and how to deal "left of bang."

Dec. 17, 2020

37:04

identity theft (noun) [Word Notes]

Dec. 15, 2020

3:30

The landscape has shifted for holiday shopping to online.

Dec. 10, 2020

33:07

cyber threat intelligence (CTI) (noun) [Word Notes]

Dec. 8, 2020

5:32

Virtual Private Network (VPN) (noun) [Word Notes}

Dec. 8, 2020

5:55

Going behind the scenes and preventing social engineering in financial institutions.

Dec. 3, 2020

38:59

Network Time Protocol (NTP) attack (noun) [Word Notes]

Dec. 1, 2020

6:07

smishing (SMS phishing) (noun) [Word Notes]

Dec. 1, 2020

4:07

Encore: Wearing a mask in the Oval Office and the art of deception.

Nov. 26, 2020

43:33

port mirroring (noun) [Word Notes]

Nov. 24, 2020

4:07

The public's expectations are changing.

Nov. 19, 2020

40:43

shadow IT (noun) {Word Notes]

Nov. 17, 2020

4:24

Network Detection and Response (NDR) (noun) [Word Notes]

Nov. 17, 2020

5:49

Ransomware: Statistically, it's likely to happen to anybody.

Nov. 12, 2020

36:20

remote access Trojan or RAT (noun) [Word Notes}

Nov. 10, 2020

4:12

Too good to be true.

Nov. 5, 2020

36:16

business email compromise or BEC (noun) [Word Notes]

Nov. 3, 2020

3:17

David Sanger on the HBO documentary based off his book, "The Perfect Weapon". [Special Edition]

Nov. 1, 2020

24:00

The Malware Mash!

Oct. 30, 2020

3:05

New consequences, extortion and cyber insurance.

Oct. 29, 2020

40:23

anagram (noun) [Word Notes]

Oct. 27, 2020

3:04

What is true and important versus what is the spin.

Oct. 22, 2020

35:37

rogue access point (noun) [Word Notes]

Oct. 20, 2020

3:37

Use a Dance Dance Revolution floor lock for your data centers.

Oct. 15, 2020

36:08

darknet (noun) [Word Notes]

Oct. 13, 2020

4:17

Don't click any button...even the 'No' button.

Oct. 8, 2020

42:06

phishing (verb) [Word Notes]

Oct. 6, 2020

3:47

Cookies make for some tasty phishing lure.

Oct. 1, 2020

36:03

credential stealing (verb) [Word Notes]

Sept. 29, 2020

3:19

It's human nature.

Sept. 24, 2020

33:41

The Bombe (noun) [Word Notes]

Sept. 22, 2020

3:45

Your information is already on the Dark Web.

Sept. 17, 2020

36:00

cross-site scripting (noun) [Word Notes]

Sept. 15, 2020

3:16

The story is what gets people in.

Sept. 10, 2020

34:19

penetration test (noun) [Word Notes]

Sept. 8, 2020

3:38

It's evolving rapidly and getting more furious by the minute.

Sept. 3, 2020

37:07

social engineering (noun) [Word Notes]

Sept. 1, 2020

3:40

Take a deep breath.

Aug. 27, 2020

36:17

man trap (noun) [Word Notes]

Aug. 25, 2020

4:12

Many times it is less sophisticated than we think.

Aug. 20, 2020

40:22

Zero-day (adjective) [Word Notes]

Aug. 18, 2020

3:27

Flying under the radar.

Aug. 13, 2020

29:36

NMAP (noun) [Word Notes]

Aug. 11, 2020

3:23

Ignore the actor, focus on the behavior.

Aug. 6, 2020

33:42

Be the custodian of your own digital identity.

July 30, 2020

33:55

Never think of security as a destination.

July 23, 2020

36:08

A little dose of skepticism.

July 16, 2020

34:26

Send me money so I know you are real.

July 9, 2020

37:54

Because they deserve the money!

July 2, 2020

36:04

Close in your pajamas.

June 25, 2020

36:18

It can happen to anybody.

June 18, 2020

44:02

Taking a selfie with your ID.

June 11, 2020

36:55

Seniors and millennials more alike than people think.

June 4, 2020

34:22

Wearing a mask in the Oval Office.

May 28, 2020

41:05

HH Extra - Happy 100 shows!

May 28, 2020

8:25

How scammers fill the gap.

May 21, 2020

34:42

Every day you're a firefighter.

May 14, 2020

35:29

Exploiting our distractions.

May 7, 2020

35:05

Passwords are the easiest things to steal.

April 30, 2020

42:06

Wallet inspector.

April 23, 2020

33:34

They're getting smart, but we're getting smarter.

April 16, 2020

25:29

Even famous people get scammed.

April 9, 2020

33:56

Shedding light on the human element.

April 2, 2020

31:02

Paging Dr. Dochterman.

March 26, 2020

40:22

Disinformation vs. misinformation.

March 19, 2020

29:25

Winking emoji.

March 12, 2020

30:45

Don't go looking for morality here.

March 5, 2020

36:24

The art of cheating.

Feb. 27, 2020

32:55

Hi, I'm trying to steal your money.

Feb. 20, 2020

29:10

Fake news and misplaced trust.

Feb. 13, 2020

32:35

I wouldn't want my computer to be disappointed.

Feb. 6, 2020

28:17

They had no idea.

Jan. 30, 2020

29:24

Flipping the script.

Jan. 23, 2020

29:33

Life in the (second) age of pirates.

Jan. 16, 2020

30:42

Ransomware is a reality.

Jan. 9, 2020

28:05

Leading by example and positive reenforcement.

Jan. 2, 2020

28:36

Telling The Truth In A Dishonest Way - Rebroadcast

Dec. 26, 2019

30:15

Managing access and insider threats.

Dec. 19, 2019

30:34

If you didn't ask for it don't install it.

Dec. 12, 2019

26:36

I really wanted that shed.

Dec. 5, 2019

30:44

Security has to be friendly.

Nov. 21, 2019

29:35

Skepticism is the first step.

Nov. 14, 2019

33:06

When you are the target, objectivity is gone.

Nov. 7, 2019

31:26

The Malware Mash!

Oct. 31, 2019

3:06

Don't dismiss the fraudsters.

Oct. 31, 2019

34:58

The ability to fundamentally deceive someone.

Oct. 24, 2019

32:15

The fallacy of futility.

Oct. 17, 2019

30:08

Don't trust ransomware to tell you its real name.

Oct. 10, 2019

32:06

The ultimate hacking tool.

Oct. 3, 2019

33:01

The usefulness of single sign on.

Sept. 26, 2019

30:44

Algorithms controlling truth in our society.

Sept. 19, 2019

32:00

An ethical hacker can be a teacher.

Sept. 12, 2019

35:32

Think before you post.

Sept. 5, 2019

31:39

Securing your SMS.

Aug. 29, 2019

31:43

Backups backups backups.

Aug. 22, 2019

30:05

Swamping search results for reputation management.

Aug. 15, 2019

36:58

Positive pretexting on the rise.

Aug. 8, 2019

31:58

Images are the language of the brain.

Aug. 1, 2019

31:39

Looking after Dad.

July 25, 2019

32:13

The skills gap disconnect.

July 18, 2019

35:17

Know and spot the patterns.

July 11, 2019

34:35

Encore — Separating fools from money.

July 4, 2019

29:46

Be wary of all emails.

June 27, 2019

36:24

The knowledge / intention behavior gap.

June 20, 2019

32:03

Just because I trusted you yesterday doesn't mean I trust you today.

June 13, 2019

32:01

The best way to break in is to walk through the front door.

June 6, 2019

32:08

Be willing to admit you don't know everything.

May 30, 2019

34:54

People aren't perfectly rational.

May 23, 2019

30:27

Live at KB4CON 2019.

May 16, 2019

46:11

A data-driven approach to trust.

May 9, 2019

30:49

Twitter bots amplifying divisive messages.

May 2, 2019

28:13

Let's play, "Covered by cyber insurance — true or false?"

April 25, 2019

34:54

I have been practicing honesty and truthfulness my whole life.

April 18, 2019

30:58

Scammers have no ethics whatsoever.

April 11, 2019

30:49

Girl Scouts empowering cyber security leaders.

April 4, 2019

33:05

Pick a persona to match the goal.

March 28, 2019

30:22

Kids are a great target.

March 21, 2019

35:23

When we rush we make bad decisions.

March 14, 2019

29:04

Don't assume younger people get it.

March 7, 2019

28:45

Delivering yourself to a kidnapper.

Feb. 28, 2019

30:59

Stop and think before you click that link.

Feb. 21, 2019

28:53

The trauma is multifactored.

Feb. 14, 2019

30:46

Make it seem like the real answer is impossible to know.

Feb. 7, 2019

30:13

The excitement of tricking someone wears off quickly.

Jan. 31, 2019

30:37

Opening your eyes to the reality in which we live.

Jan. 24, 2019

33:15

Prisoners have nothing but time.

Jan. 17, 2019

31:05

Trained humans are your strongest link.

Jan. 10, 2019

34:47

At some point you're probably going to have to do some running.

Jan. 3, 2019

32:03

Truth emerges from the clash of ideas.

Dec. 20, 2018

31:04

A pesky problem that doesn't go away.

Dec. 13, 2018

25:03

Bringing trust to a trustless world.

Dec. 6, 2018

30:53

Be very aware of your desire to be right.

Nov. 29, 2018

33:50

CEOs can be the weakest link.

Nov. 15, 2018

36:06

Human sources are essential.

Nov. 8, 2018

30:08

Scams are fraud and fraud is crime.

Nov. 1, 2018

30:58

Fear, flattery, greed and timing.

Oct. 25, 2018

30:59

Waste my time and I'll waste yours back.

Oct. 18, 2018

30:29

Information is the life blood of social engineering.

Oct. 11, 2018

31:10

Easier to trick than to hack.

Oct. 4, 2018

35:55

Kidnappers, robots and deep fakes.

Sept. 27, 2018

28:02

Stringing along a scammer.

Sept. 20, 2018

29:35

Influence versus manipulation.

Sept. 13, 2018

30:53

Real estate transactions in the crosshairs.

Sept. 6, 2018

30:35

Red teaming starts with research.

Aug. 30, 2018

30:05

Telling the truth in a dishonest way.

Aug. 23, 2018

30:36

Sometimes less is more.

Aug. 16, 2018

36:05

Focus, technology, and training fight phishing.

Aug. 9, 2018

29:15

Luring unsuspecting money mules.

Aug. 2, 2018

29:51

Nothing up my sleeve.

July 26, 2018

30:51

Think like an attacker.

July 19, 2018

30:05

Presidential prank, pensioner pilfered.

July 12, 2018

30:43

Phone scams, phantom employees and sitting Ducks.

July 5, 2018

30:44

Separating fools from money.

June 28, 2018

29:43

Playing on kindness.

June 21, 2018

22:57

Gaming pro athletes online.

June 14, 2018

31:03

A flood of misinformation and fake news.

June 7, 2018

31:01

Social Engineering works because we're human.

May 30, 2018

30:25