The Interplanetary File System serving malware from the stars! Also included are some bonus discussions around automatically exfiltrating information from your own organization using SOAR and a discussion about an article on API myths. Matthew got heated on the API one. It's mostly good information, but presented in a super sale-sy way. And there's nothing Matthew hates more than sales. Vendors make him froth at the mouth.
Article 1 - Top 5 API Security Myths That Are Crushing Your Business
Article 2 - InterPlanetary File System Increasingly Weaponized for Phishing, Malware Delivery
Supporting Articles:
Attackers Using IPFS for Distributed, Bulletproof Malware Hosting
Several Cyber Attacks Observed Leveraging IPFS Decentralized Network
InterPlanetary File System
Article 3 - urlscan.io's SOAR spot: Chatty security tools leaking private data
Supporting Articles:
Tell HN: GitHub leaked names of private repos with pages
Understanding Google Dorks and How Hackers Use Them
If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!
In this episode, we do a quick review of what ATT&CK is, some ways that you can use it, and a summary of changes...
Snark abounds in this episode, where we discuss the rich folks at Davos getting a briefing on ransomware, ransomware takings down year over year,...
We discuss women in cybersecurity companies vs on the dark side, the new CyberSecurity Strategy from the White house, and a re-written Smart Contract...