ShadowTalk: Powered by ReliaQuest
von ReliaQuest
Neueste Folge
Claude Chat Invites and a Backdoored Coding Extension
Claude Chat Invites and a Backdoored Coding Extension
Über diesen Podcast
Want to hear what industry experts really think about the cyber threats they face? ShadowTalk is a weekly cybersecurity podcast, made by practitioners for practitioners, featuring analytical insights on the latest cybersecurity news and threat research.
Threat Intelligence Analyst John Dilgen brings extensive expertise in cyber threat intelligence and incident response, specializing in researching threats impacting ReliaQuest customers. John and his guests provide practical perspectives on the week’s top cybersecurity news and share knowledge and best practices to help businesses mitigate the most pertinent cyber threats.
With over 1,000 customers worldwide and 1,200 teammates across six global operating centers, ReliaQuest delivers security outcomes for the most trusted enterprise brands in the world. Learn more at www.reliaquest.com.
Folgen
Die neuesten 50 von 499 Folgen
- Claude Chat Invites and a Backdoored Coding Extension · 29 Min.In this episode of ShadowTalk, Brandon Tirado and John Dilgen look at two recent initial access campaigns that used Anthropic's Claude to gain trust. In the first, attackers…
- ARTEX for Everyone: What Widely Available AI Hacking Means for Defenders · 28 Min.In this episode of ShadowTalk, John Dilgen and Dylan Deane examine ARTEX, an AI-powered penetration-testing framework that was openly available on GitHub and is now appearing in…
- PHP2Shell: Inside the AI-Assisted Exploit Race · 34 Min.In this episode of ShadowTalk, John Dilgen and Alexandra Moore break down PHP2Shell, two critical vulnerabilities in PHP that sent the security community scrambling. With PHP…
- QuartzLine: A PDF Viewer Deploying a Backdoor at Scale · 24 Min.In this episode of ShadowTalk, John Dilgen and Tehman Tariq examine QuartzLine, a malware campaign disguised as a legitimate, signed Windows PDF viewer. The application works as…
- AI Attacks From the Front Lines · 34 Min.In this episode of ShadowTalk, John Dilgen and Alexandra Moore break down a campaign where AI carried out major parts of an intrusion. The conversation covers the attack flow…
- DPRK Insider Threats: How Remote-Worker Tactics Are Evolving · 30 Min.Security leaders should be asking a hard question: if a remote hire looks legitimate at every checkpoint, what would expose the operation? Security operations is the defense…
- CISO Wisdom: Turning Security Investments Into Measurable Risk Reduction · 33 Min.Security teams are contending with more tools, alerts, and vulnerabilities than ever—but volume does not necessarily equal security. Jigar Shah joins us to discuss how…
- Fake NDAs, Real Money: Inside the M&A Social Engineering Playbook · 28 Min.In this episode, we examine the Phantom Deal campaign, in which threat actors used publicly available details about companies’ acquisition histories, subsidiaries, executives…
- From Vulnerability Research to Domain Admin in Minutes · 31 Min.AI is changing the economics of cyberattacks. In this episode, we examine how a suspected threat actor used AI agents to accelerate PaperCut vulnerability research, exploit…
- One Empty Field: The Email Security Bypass Letting Attackers Impersonate Your Executives · 30 Min.Organizations rely on Microsoft 365's RejectDirectSend control to block internal email spoofing—but a structural gap lets attackers walk right past it. With nothing more than a…
- From Data Dumps to Critical Findings: The New Era of Data Extortion · 29 Min.Threat actors do not see old email archives, forgotten shared drives, and outdated CRM exports as clutter. They see them as searchable inventory. With AI-assisted analysis…
- Vishing at Scale: Inside the Criminal SaaS Platform Enabling Account Takeover · 31 Min.What if a threat actor already knew your name, your job title, your manager's name, and your direct number before they ever picked up the phone? That's not a hypothetical —…
- Nation-State Actors: Iran’s PLC Attacks, Russia’s Zero-Click Email Exploit, and North Korea’s Fake Employees · 27 Min.Three nation-states. Three distinct playbooks. Iranian actors are targeting internet-exposed industrial controllers and disabling critical safety systems. A Russian threat group…
- When AI Escapes the Lab: The Hugging Face Breach, PyPI Malware, and What It Means for Defenders · 24 Min.Fully autonomous attacks are here. AI agents escape a test environment, exploit zero-days, coordinate through shared infrastructure, and breach a production company—generating…
- The Gentlemen, Deadlock, and Clop: The Groups Driving Ransomware & Extortion in 2026 · 36 Min.An affiliate receives a ready-made intrusion kit — pre-compromised targets, an EDR killer, and a full deployment workflow included. No building from scratch. No long ramp-up…
- Compromised Hotel Gateways, Fake Microsoft Domains, and the APT28-Adjacent Campaign That Bypasses MFA Without a Phishing Click · 31 Min.An employee connects to hotel Wi-Fi, receives a familiar Microsoft 365 sign-in prompt, and authenticates. No phishing email. No malicious link. No suspicious attachment. Yet an…
- The Largest Patch Tuesday Ever: 622 CVEs, a 1,380% Phishing Surge, and the Two-Front War on Initial Access · 28 Min.Defenders aren't losing ground on one front, they're losing it on two at once. The largest Patch Tuesday in history just dropped alongside a 1,380% surge in phishing, and threat…
- FortiBleed, 70,000 Compromised Devices, and the Credential Economy Powering Every Breach · 23 Min.When a 20-person team using AI, automated tools, and a list of default credentials compromised 70,000 devices across 194 countries they exposed how mature the criminal market…
- Inside Conti's Leaked Chats: 300,000 Messages, a Criminal Empire, and the Ransomware Playbook Still Running Today · 43 Min.When 300,000 internal messages from the world's most prolific ransomware gang were leaked, they exposed more then a shadowy underground network, a full company. HR departments…
- How Hackers Are Using AI Right Now: Faster Attacks, Smarter Malware, and a New Arms Race · 25 Min.AI is not replacing threat actors, instead it is making them faster, cheaper, and harder to stop. From AI powered phishing campaigns generating thousands of pages simultaneously…
- Klue, Kali365, OAuth: When the Front Door Is a Trusted Integration · 28 Min.In the Klue compromises threat actors walked in through a trusted integration, using legitimate credentials to quietly siphon Salesforce CRM data at scale. The challenge isn't…
- ShinyHunters' Expanding Toolkit: Oracle PeopleSoft Zero-Day Exploitation and the BreachForums Defense Gaps · 20 Min.ShinyHunters dominated headlines this week: a zero-day, a BreachForums listing, and unverified claims all hitting at once. The problem isn't just keeping up with the volume. It's…
- China-Linked Cyber Espionage: How OP-512 Exploited Legacy IIS Servers and Evaded Detection · 23 Min.Your team built defenses around known China-linked clusters. The file hashes are tracked. The behavioral patterns are documented. What those weren't built to catch is a new…
- SonicWall, MFA Bypass, IABs: Why Patched Devices Are Still Handing Attackers Initial Access · 21 Min.Your team patches the device. The firmware version matches the advisory. The ticket closes. The device comes off the remediation queue. What your workflow never tracked is that…
- Device Code, OAuth, PhaaS: How Session Token Theft is Breaking the Phishing Playbook · 29 Min.Your user clicked a link, landed on a real Microsoft login page, typed their password, completed MFA, and walked away thinking nothing happened. Somewhere across the internet, an…
- SQLite, Mistral, OpenAI: How AI Attacks Are Reshaping the Attack Surface · 20 Min.What happens when an AI agent uncovers a zero-day in hours instead of weeks, and state-backed groups are already operationalizing the same tools? With self-hosted AI…
- Canvas, Trellix, Mini Shai-Hulud: How Defenders Respond When Supply Chain Attacks Become Weekly · 32 Min.What's driving the surge in weekly supply chain attacks, and why does the real defender problem start after the supplier gets hit? With 275 million records exposed and 8,809…
- Akira, ShinyHunters, and The Gentlemen: Extortion Lessons From Early 2026 · 35 Min.What factors have driven the top ransomware and extortion groups' success in early 2026? And how should organizations structure their defenses to protect against them? Join hosts…
- What Happened to Black Basta's Playbook? The Automated Teams Phishing Threat Hitting Executives · 27 Min.Black Basta disbanded in February 2025, but their playbook didn't go with them. In March 2026, 77% of observed incidents targeted executives and directors, and attackers moved…
- Did ShinyHunters Compromise Vercel? Every CISO's Cloud Security Visibility Problem · 25 Min.89% of organizations that suffered a SaaS breach last year believed they had appropriate visibility. They had the logs — what they lacked was detection on what mattered. The…
- What Claude Mythos Means for Organizations · 26 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts John and Alex, alongside special guest and ReliaQuest CTO Joe Partlow, as they discuss: How Claude Mythos…
- Axios and Trivy — Supply Chain Gaps Organizations Must Fix · 25 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts John and Tehman as they break down two of the most consequential supply chain attacks of 2026: How DPRK actors…
- Faster, Smarter, and Already Escalated — What It Takes to Defend Against the Modern Threat Landscape · 33 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Alexandra and John, live from Exponent 2026, alongside top security leaders as they discuss: How organizations keep…
- The Invisible Attack Surface: Iran-Aligned Threat Actors and Corporate Blind Spots · 20 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Brandon and John as they discuss: How Handala wiped 200,000 devices by weaponizing a trusted platformWhy your…
- The 2026 Annual Threat Report Breakdown, Part 3: The Long Game — Nation-State Threats & What's Coming in 2026 · 25 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts John and Alex as they discuss: How a Chinese APT maintained access for over a yearWhy North Korean impersonation…
- The 2026 Annual Threat Report Breakdown, Part 2 — Once They're In: Post-Compromise Tactics, Ransomware & Exfiltration · 26 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Tehman and John as they discuss: Why ransomware now prioritizes exfiltration over encryption How attackers can…
- The 2026 Annual Threat Report Breakdown, Part 1 — How AI Contributes to Attacker Speed, and the Malware That's Winning · 26 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Brandon and John as they discuss: How attacker breakout times dropped to as little as 4 minutes Why ClickFix surged…
- Malware Isn't Required—How Ransomware Groups Turn Legitimate RMMs Into a Weapon · 21 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts John and Tehman as they discuss: What attackers prefer over custom malwareHow signature-based detection…
- Ransomware vs. Exfiltration-Only—The Extortion Model Showdown · 28 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Brandon and John as they discuss: Why extortion payment rates are the lowest everOrganizations paying ransomware but…
- Patch Management Is Losing—The Case for Predictive Vulnerability Defense · 29 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Brandon and John as they discuss: Why traditional patch cycles can't beat attackers exploiting vulnerabilities in 24…
- Beyond Phishing Emails—Social Engineering Drives Initial Access · 23 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts John and Tehman as they discuss: Why phishing emails are no longer the top malware delivery methodEmerging social…
- Malicious AI—The New Face of Cyber Threats · 21 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk John and Tehman as they discuss: How AI is enabling large-scale, high-speed attacksNation-states weaponizing AI for attack…
- Maintainer Compromise: The Next Supply-Chain Attack Vector in 2026 · 27 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Brandon and John as they discuss: How supply-chain attacks evolvedCampaigns targeting NPM package…
- Kicking Off 2026 with Ransomware Insights and Defense Strategies · 32 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Brandon and Tehman as they discuss: The resurgence of LockBit 5.0 and its December 2025 surge in named…
- React2Shell Attacks Evolve, ClickFix Attacks, and Holiday Season Threats · 32 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join host John and intelligence analyst Ivan as they discuss: React2Shell Exploits Flood the Internet as Attacks Continue…
- React2Shell Exploits, CISA’s Brickstorm Warning, ShadyPanda’s Browser Weaponization · 32 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join host John along with systems security engineer Corey and intelligence analyst Hayden as they discuss: Chinese Threat Groups…
- Scattered Lapsus$ Hunters, SilverFox's ValleyRat Campaign, and More · 25 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join host John and intelligence analysts Alex and Hayden as they discuss: Scattered Lapsus$ Hunters Targeting Zendesk…
- Are Cyber Predictions Worth It? Plus Chinese AI Attacks, IoT Takeovers · 28 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Do you really need predictions to tackle cyber threats? Join host Kim along with intelligence analyst John & special guest CISO…
- Fortinet Flaw Exposed and Exploited! Plus, Threat Hunter Hacks: SEO Hits Hard · 30 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Kim, intelligence analyst John, and threat hunter Tristan as they discuss: Fortinet Flaw Enables Admin TakeoverAkira…
- Gootloader's Return, LANDFALL Android Spyware, Sector-by-Sector Cyber Trends · 34 Min.Resources: https://linktr.ee/ReliaQuestShadowTalk Wondering why Gootloader is suddenly back in action? Join host Kim along with intelligence analyst Hayden & Systems Security…
