Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The 443 Podcast - Episode 248 - RepoJacking

On this week's podcast we discuss a recent analysis on the risks of GitHub RepoJacking. After that, we dive in to the Barracuda 0-day that China-based threat actors are actively exploiting as well as a novel command and control distribution method for a separate China-based APT. You can view more information on the CISA guidance as well as Blaze Lab's full blog post at the links below: The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Tutorial: Get Started with Aliases and Exceptions Import

In this WatchGuard Support video, you'll learn how to import aliases and exceptions from a local-managed Firebox configuration file to a cloud-managed Firebox and Firebox templates in WatchGuard Cloud. Includes the import requirements, limitations and handling of duplicate entries.

The 443 Podcast - Episode 247 - A New Russian APT

On this week's episode we discuss the newly named threat actor Cadet Blizzard, including their typical tools, tactics and procedures. We also cover CISA's newest binding directive to federal agencies. Before that, we give an update on exploited MOVEit Transfer servers and the latest Bitcoin laundering technique.

The 443 Podcast - Episode 246 - Minecraft Mod Malware

This week on the podcast we cover a supply chain attack of sorts against Minecraft gamers. After that, we cover a vulnerability in MOVEit Transfer that threat actors are exploiting in the wild to steal data and deploy ransomware. Finally, we wne with our review of the latest Verizon Data Breach Investigations Report (DBIR).