Bite Sized Cyber Crime
by Chloe Thonus
Latest episode
Truffle Revokes Exposed Secrets in Code
Truffle Revokes Exposed Secrets in Code
About this podcast
Bite Sized Cyber Crime is a short true crime series about cyber crime, notorious viruses and scams, and dark web operations. You can learn how hackers are able to steal data from underneath your nose as well as ways to better protect your online life in manageable ways.
Episodes
The newest 20 of 100 episodes
- Truffle Revokes Exposed Secrets in Code · 6 min · Episode 235Exposed API keys in code are a major security issue, and notifying code owners has lead to little success in getting them removed, so Truffle Security found a way to remove them…
- Chicago Mayoral Candidate Exposes Data Info on AI Website · 6 min · Episode 234Election time is often a time where we receive annoying mail due to our voting status, voter data is collected but in Illinois it has strict regulations around it. One candidate…
- PHP2Shell Breaks the Internet · 5 min · Episode 233PHP2Shell Vulnerabilities were recently announced that made site owners and managers sweat, two critical risk vulnerabilities that can only be patched on version 8 of PHP leave…
- Refrigeration Hack Leaves Food Spoiled · 6 min · Episode 232Refrigerators are so common in grocery stores and our own homes, and we are used to the occasional power outage resulting in food spoilage, but sometimes something much more…
- Ransomware Recovery Firm Paid off Threat Actors · 6 min · Episode 231A ransomware recovery firm claimed to have proprietary technology that could decrypt ransomware actor encryption algorithms, which seems too good to be true. As it so turns out…
- Killsec Ransomware Group Shut Down · 6 min · Episode 230Members of Killsec ransomware group were arrested across multiple countries, and the one in charge of it all may have been just 16 years old. Sources: https://pastebin.com/xU2UkHtN
- Did We Break RSA? · 6 min · Episode 229Sort of. A novel attack against RSA algorithms that forges keys rather than finds the prime factors could be a cause for concern, especially with AI enhanced computing…
- Google Gemini Hacks 3 Websites · 10 min · Episode 228Google becomes the 4th AI tech company to accidentally hack unrelated entities during a security test. But it seems for AI companies that cause real damage there is a lack of…
- Fake Merger and Acquisitions Targeting Companies · 9 min · Episode 227Real processes, if they are not followed properly, can be a convenient way for threat actors to manipulate employees into wiring over thousands of dollars. Sources…
- First Malware Infecting Android Head Units · 6 min · Episode 226As cars become computers on wheels there are more opportunities for hackers to exploit them to become tools in a larger operation. This is the first time we've seen the…
- You Can Apply to Hack Foreign Adversaries Under the US Government · 7 min · Episode 225Is the US establishing their first APT group to address foreign cyber threats? Possibly. Private sector firms can now apply to be essentially cyber privateers. Sources…
- Why Half of AI Generated Patches Fail · 7 min · Episode 224A recent study of publicly accessible AI models found that patches generated by them fail about half the time, often introducing new vulnerabilities or leaving paths for…
- Minnesota Water Plants Under Attack · 8 min · Episode 223Water is a critical infrastructure, and lately multiple water plants across the US are under attack, starting in Minnesota. So far drinking water is safe, but it does bring into…
- Vatican App Exposes Data of all Users · 8 min · Episode 222Vatican app ClickToPray has had an unpatched IDOR sitting in its website that could allow for scraping the data of every single user. Sources: https://pastebin.com/SiYDAR40
- Old Techniques Return to Trick Modern AI Email Filters · 7 min · Episode 221AI email filters may be worse at detecting old tricks than traditional spam filters as old tactics are being used against old agents to allow in malicious or spam emails…
- Illbloom: When Randomness Doesn't Truly Exist · 7 min · Episode 220Randomness is not as random as it seems, and this can cause problems, especially when your money relies on it. Some crypto wallets generated predictable random passphrases that…
- JadePuffer: The First AI Hacker · 10 min · Episode 219The skill ceiling to become a real ransomware threat actor may have been lowered considerably, as JadePuffer performed an attack as an AI agent with no human intervention, being…
- Fake Shopify Receipts Part of Callback Phishing Scam · 6 min · Episode 218Shopify has a dashboard that integrates all your web order activity, but this has allowed for a new type of phishing scheme much sneakier than emails. Fake receipts with fake…
- Klue Abused to Steal Salesforce Data · 6 min · Episode 217Klue allows you to get the upperhand on your competitors by using their public data and your internal information to create quick sales talking points, however it may have also…
- The Messy Release of Anthropic's Fable 5 · 8 min · Episode 216Fable 5 was based on Mythos, a model so dangerous it could not be released to the general public. But that release did not exactly go smoothly, was complains from customers that…
