Research Saturday
by N2K Networks
Latest episode
A little something extra comes preinstalled.
A little something extra comes preinstalled.
About this podcast
Every Saturday, we sit down with cybersecurity researchers to talk shop about the latest threats, vulnerabilities, and technical discoveries.
Episodes
The newest 50 of 474 episodes
- A little something extra comes preinstalled. · 19 min · Season 10 Episode 450Today Cristian Silviu Stahie, Security Analyst from Bitdefender, joins to discuss their work on The phone was compromised before the user turned it on: the rise of Midnight…
- Stealing more than the spotlight. · 14 min · Season 10 Episode 449This week, we are joined by Matt Poto, Associate Triage Analyst at Huntress, discussing their work on "Grand Theft Auto VI Hype Leads to Malware." Threat actors are exploiting…
- The long road to root. · 20 min · Season 10 Episode 448Today we are joined by Subhajeet Singha, Senior Security Researcher at Acronis Threat Research Unit, discussing their work on "Red Heron exploits Gitea n-day flaw in…
- The middlemen of cyber espionage. · 29 min · Season 10 Episode 447Today we have Damon Rouse, Threat Intelligence from Lumen's Black Lotus Labs, discussing their work on "The infrastructure quartermaster: inside a China-nexus state enablement…
- The wrong kind of access. · 28 min · Season 10 Episode 446Dan Lisichkin, AI Security Researcher from Pillar Security, discussing their work on "A WIF Of Fresh Access, How a GitHub Issue on Gemini-CLI Led to GCP Project Compromise."…
- Contents may be malicious. · 18 min · Season 10 Episode 445Adam Meyers, Head of Counter Adversary Operations at CrowdStrike, is discussing their work on "PhantomRaven, An LLM-Generated Information Stealer Developed for Bug Bounty…
- Play to win, pay to lose. · 23 min · Season 10 Episode 444Today we are joined by Jean-Pierre Mouton, Senior Threat Intelligence Consultant at GuidePoint Security, discussing their work on "How Play Achieves Encryption." Play ransomware…
- An apple a day, a phish away. · 25 min · Season 10 Episode 443Today we are joined by Ensar Seker, VP of Research and CISO at SOCRadar, discussing their work on "Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain." An investigation into…
- All about that proxy. · 26 min · Season 10 Episode 442Today we are joined by Dr. Renée Burton, VP of Threat Intelligence at Infoblox, discussing their work on Lurking Lizard, "Fake Installers, Fake Reviews, Fake Services – Real…
- A beast by any other name. · 23 min · Season 10 Episode 441Today we are joined by Brigid O Gorman, Senior Intelligence Analyst on Symantec Threat Hunter team, discussing their work on “GodDamn Ransomware: Latest Beast Rebrand Uses…
- RMM-ber this ransomware. · 20 min · Season 10 Episode 440Ismael Valenzuela, Vice President of Labs, Threat Research and Intelligence at Arctic Wolf, sits down with Dave to discuss their work tracking Anubis. Arctic Wolf Labs details a…
- Who let the AI hack? · 23 min · Season 10 Episode 439Today we are joined by Crystal Morin, Senior Cybersecurity Strategist, and Michael Clark, Senior Director of Threat Research, at Sysdig, sharing their work on "LLMjacking…
- A RAT in the spreadsheet. · 30 min · Season 10 Episode 438Today we are joined by Aaron Beardslee, Manager of Threat Research at Securonix, discussing "Analyzing SHEET#CREEP: SHEETCREEP is up again with different config obfuscation."…
- The botnet that scouts before it strikes. · 27 min · Season 10 Episode 436Today we are joined by Ian Goldin, Senior Lead Information Security Engineer, and Mike Horka, Principal Information Security Engineer, from Lumen's Black Lotus Labs, discussing…
- A little help from your search engine. · 20 min · Season 10 Episode 436Today we are joined by Brian Hussey, SVP of Howler Cell Threat Services at Cyderes, discussing their work on "Bad Ads, Worse Binaries: Fake Claude Code Installer Drops…
- The driver's seat to ransomware. · 24 min · Season 10 Episode 435This week, we are joined by Marcus Hutchins, Principal Threat Researcher at Expel, sharing their work on "Not very gentlemanly: Analyzing a zero-day exploit used by The Gentlemen…
- Cold lures, hot targets. · 17 min · Season 10 Episode 434This week, we are joined by Ondrej Kubovič, Security Awareness Specialist from ESET, discussing their work on "FrostyNeighbor: Fresh mischief and digital shenanigans." Ondrej…
- When trusted sites turn. · 18 min · Season 10 Episode 433Lauren Fievisohn, Ph.D, Senior Threat Researcher from Silent Push, is sharing their work on "Meet DriveSurge: A New Threat Actor Using ClickFix and Fake Update Drive-By Attacks…
- Conti-versal opinions. · 29 min · Season 10 Episode 432Today we are joined by Geoff White, host of Cyber Hack and BBC journalist, taking a deep dive into the Conti ransomware gang. Geoff explores an in-depth investigation into the…
- Is your enterprise AI strategy delivering ROI yet? [AI Security Brief] · 24 min · Season 1 Episode 4While we take a break this 4th of July weekend, please enjoy this encore of AI Security Brief. Your enterprise AI strategy isn’t as far along as you think. The reality for most…
- More bark than byte. · 24 min · Season 10 Episode 431This week we are joined by Daniel Schwalbe, Chief Information Security Officer & Head of Investigations at DomainTools, discussing their work on "ZionSiphon OT Malware First…
- Peeling back Banana RAT. · 29 min · Season 10 Episode 430This week, we are joined by Tom Kellermann, TrendAI's VP of AI Security and Threat Research, discussing their work on "Inside SHADOW-WATER-063’s Banana RAT: From Build Server to…
- This Sparrow doesn't migrate. · 23 min · Season 10 Episode 429Martin Zugec, Technical Solutions Director at Bitdefender, discussing their work on "FamousSparrow APT Targets Azerbaijani Oil and Gas Industry." Bitdefender researchers…
- You've been muted...permanently. · 21 min · Season 10 Episode 428Ismael Valenzuela, Arctic Wolf’s VP of Labs, Threat Research and Intelligence, discusses their work on "BlueNoroff Uses ClickFix, Fileless PowerShell, and AI-Generated Fake Zoom…
- The skills pay the bills. · 24 min · Season 10 Episode 427Today we are joined by Marco Giuliani, Vice President & Head of Research at ThreatDown, discussing their work on "GachiLoader adopts AI skill lure." Threat actors are now using…
- Ghosted by Grafana · 26 min · Season 10 Episode 426Today we are joined by Sasi Levi, Security Research Lead at Noma Security, sharing their team's work on "GrafanaGhost: The Phantom Stealing Your Data." Researchers at Noma…
- Scam papers served. · 27 min · Season 10 Episode 425Thomas Elkins, SOC L3 Analyst from BlueVoyant, is discussing "Unpacking Augmented Marauder’s Multi-Pronged Casbaneiro Campaigns." BlueVoyant researchers uncovered a…
- The spy who logged me in. · 24 min · Season 10 Episode 424Mark Kelly, Staff Threat Researcher at Proofpoint, is discussing their work on "I’d come running back to EU again: TA416 resumes European government espionage campaigns."…
- Double-edged threat. · 31 min · Season 10 Episode 423Today we are joined by Justin Albrecht, Principal Researcher at Lookout, discussing "Attackers Wielding DarkSword Threaten iOS Users." DarkSword is a highly sophisticated iOS…
- A QRazy clever scam. · 19 min · Season 10 Episode 422This week, we are joined by Juliana Testa, Senior Security Engineer from 7AI, sharing their work on "Quish Splash - When the QR Code Is the Weapon: A Multi-Wave Phishing Campaign…
- A new breed of RAT. · 22 min · Season 10 Episode 421Today we are joined by Dr. Darren Williams, Founder and CEO of BlackFog, to discuss his team's work on "Steaelite RAT Enables Double Extortion Attacks from a Single Panel." A new…
- A wolf in admin clothing. · 25 min · Season 10 Episode 420Today we are joined by Selena Larson, Threat Researcher from Proofpoint research team and co-host of Only Malware in the Building, talking about their work on "(Don't)…
- Startup surge sparks spy interest. · 19 min · Season 10 Episode 419This week, we are joined by Santiago Pontiroli, Threat Intelligence Research Lead from Acronis TRU team, discussing their work on "New year, new sector: Transparent Tribe targets…
- When “safe” documents aren’t. · 21 min · Season 10 Episode 418Omer Ninburg, CTO of Novee Security, joins us on this episode of Research Saturday to discuss their work on "From PDF to Pwn: Scalable 0day Discovery in PDF Engines and Services…
- A subtle flaw, a massive blast radius. · 17 min · Season 10 Episode 417Yuval Avrahami from Wiz joins to share their work on "CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild." Wiz Research…
- Your AI sidekick might be a spy. · 23 min · Season 10 Episode 416This week, we are joined by Or Eshed, Co-Founder and CEO from LayerX Security, discussing their work on "How We Discovered A Campaign of 16 Malicious Extensions Built to Steal…
- The scareware rabbit hole. · 28 min · Season 10 Episode 415This week we are joined by Marcelle Lee, cybersecurity consultant and researcher, discussing "CTI tradecraft: Investigating a mobile scareware campaign." She details how a…
- The parking lot of digital danger. · 21 min · Season 10 Episode 414This week we are joined by Dr. Renée Burton, Vice President of Infoblox Threat Intel, discussing "Parked Domains and Direct Search: An Underreported Security Risk." Parked…
- Telegram for the throne. · 21 min · Season 10 Episode 413Today we have Tomer Bar, VP of Security Research at SafeBreach Labs, discussing their work on "Prince of Persia: A Decade of Iranian Nation-State APT Campaign Activity under the…
- Stealer in the status bar. · 16 min · Season 10 Episode 412Today we have Ziv Mador, VP of Security Research from LevelBlue SpiderLabs discussing their work on "SpiderLabs IDs New Banking Trojan Distributed Through WhatsApp." Researchers…
- The phishing kit that thinks like a human. · 26 min · Season 10 Episode 411Piotr Wojtyla, Head of Threat Intel and Platform at Abnormal AI, is discussing their work on "InboxPrime AI: New Phishing Kit Fueling Scalable, AI-Powered Cybercrime." A new…
- The link knows all. · 22 min · Season 10 Episode 410Muhammad Danish, University of New Mexico lead author and cybersecurity researcher, discussing his team's work on "Private Links, Public Leaks: Consequences of Frictionless User…
- Caught in the funnel. · 24 min · Season 10 Episode 409Today we have Andrew Northern, Principal Security Researcher at Censys, discussing "From Evasion to Evidence: Exploiting the Funneling Behavior of Injects". This research…
- Picture perfect deception. · 20 min · Season 10 Episode 408Today we are joined by Ben Folland, Security Operations Analyst from Huntress, discussing their work on "ClickFix Gets Creative: Malware Buried in Images." This analysis covers a…
- Walking on EggStremes. · 28 min · Season 10 Episode 407This week, we are joined by Martin Zugec, Technical Solutions Director from Bitdefender, sharing their work and findings on "EggStreme Malware: Unpacking a New APT Framework…
- Don’t trust that app! · 21 min · Season 9 Episode 392While our team is out on winter break, please enjoy this episode of Research Saturday. Today we are joined by Selena Larson, co-host of Only Malware in the Building and…
- Excel-lerating cyberattacks. · 24 min · Season 9 Episode 370While our team is out on winter break, please enjoy this episode of Research Saturday. This week, we are joined by Tom Hegel, Principal Threat Researcher from SentinelLabs…
- The lies that let AI run amok. · 25 min · Season 9 Episode 406Darren Meyer, Security Research Advocate at Checkmarx, is sharing their work on "Bypassing AI Agent Defenses with Lies-in-the-Loop." Checkmarx Zero researchers introduce…
- Root access to the great firewall. · 26 min · Season 9 Episode 405Daniel Schwalbe, DomainTools Head of Investigations and CISO, is sharing their work on "Inside the Great Firewall." This two-part research project analyzes an extraordinary…
- When macOS gets frostbite. · 25 min · Season 9 Episode 404Jaron Bradley, Director of Jamf Threat Labs, is sharing their work on "ChillyHell: A Deep Dive into a Modular macOS Backdoor." Jamf Threat Labs uncovers a newly notarized macOS…
