Hactivism, Verizon Enterprise PHI Breach Report, and GMail Dots Attack




InfoSec ICU show

Summary: Steve and Gerry drill into the Verizon PHI Data Breach Report and discuss a few surprising findings. They offer their opinion on the recent attacks on Russian and Iranian Cisco devices and the value of Hacktivism. They close out with a scam that attacks a little known feature of all GMail email addresses.<br> <a href="https://podcast.musc.edu/podcast/infosec/e19-infosecicu/" target="_blank" rel="noopener">Show Notes</a><br> <br> Resources:<br> Verizon PHI Data Breach Report: <a href="http://www.verizonenterprise.com/verizon-insights-lab/phi/2018/" target="_blank" rel="noopener">http://www.verizonenterprise.com/verizon-insights-lab/phi/2018/</a><br> Attacked Cisco Devices:<br> <a href="https://www.securityweek.com/cisco-switches-iran-russia-hacked-apparent-pro-us-attack" target="_blank" rel="noopener">https://www.securityweek.com/cisco-switches-iran-russia-hacked-apparent-pro-us-attack</a> <br> <a href="https://motherboard.vice.com/en_us/article/a3yn38/election-hacking-vigilante-russia-iran-cisco" target="_blank" rel="noopener">https://motherboard.vice.com/en_us/article/a3yn38/election-hacking-vigilante-russia-iran-cisco</a> <br> GMail dots do matter: <a href="https://jameshfisher.com/2018/04/07/the-dots-do-matter-how-to-scam-a-gmail-user.html" target="_blank" rel="noopener">https://jameshfisher.com/2018/04/07/the-dots-do-matter-how-to-scam-a-gmail-user.html</a><br> One Cool Things<br> Sysmon <a href="https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon</a><br> Swift on Security Sysmon Config file.<a href="https://github.com/SwiftOnSecurity/sysmon-config" target="_blank" rel="noopener"> https://github.com/SwiftOnSecurity/sysmon-config</a><br> PlayFest <a href="http://southofbroadway.com/season/" target="_blank" rel="noopener">http://southofbroadway.com/season/</a><br> Piccolo Spoleto <a href="https://www.charlestoncvb.com/events/piccolo-spoleto-~8959/" target="_blank" rel="noopener">https://www.charlestoncvb.com/events/piccolo-spoleto-~8959/</a><br> Contact<br> Email <a href="mailto:infosecicu@musc.edu">infosecicu@musc.edu</a><br> Twitter:<br> <br> * <a href="https://twitter.com/Gerald_Auger" target="_blank" rel="noopener">Gerry Auger (@Gerald_Auger)</a><br> * <a href="https://twitter.com/sgcardinal" target="_blank" rel="noopener">Steven Cardinal (@sgcardinal)</a><br> <br>