What you need to know about credential stuffing

In this episode of the Cyber Uncut podcast, Liam Garman and David Hollingworth unpack how the US and Australian governments are holding social media giants responsible for their content and data safety. The pair begin by discussing revelations that Congress is looking to force ByteDance to sell TikTok in the United States to an approved third party or face being shut down.  They then discuss how Julie Inman Grant, Australia’s eSafety commissioner, is challenging X for hosting videos of the Wakeley stabbing attack and their rocky history. The podcast wraps up by analysing the recent OracleCMS hack.  Enjoy the podcast, The Cyber Uncut team

In this episode of the Cyber Uncut podcast, Sabeen Malik, vice-president of global government affairs and public policy at Rapid7, joins Liam Garman to discuss the changing nature of global tech policy – applauding Australia’s stringent cyber security legislation. The pair begin the podcast by discussing Malik’s time developing tech policy within the Obama administration and how there is a hesitancy among policymakers to acknowledge the nefarious application of popular new technologies. Malik then applauds Australia as a world leader in cyber security and recommends that Australia could strengthen its frameworks yet further with privacy regulations that make cyber personally relevant to all individuals and organisations. They then discuss the necessity of public-private partnerships for cyber security, given the expertise of the private sector. The podcast wraps up with some tips for businesses to get ahead of the curb and prepare for future regulations in the sector, including developing bespoke processes based on unique risk profiles. Enjoy the podcast, The Cyber Uncut team

In this episode of the Cyber Uncut podcast, hosts Phil Tarrant and Major General (Ret’d) Dr Marcus Thompson unpack building a nexus between academia, business and our national security organisations to build a stronger domestic cyber security industry. MAJGEN (Ret’d) Dr Marcus Thompson begins the podcast by discussing his experience setting up the Australian Defence Force’s initial cyber and information warfare capabilities and discusses creating a pathway into the cyber security industry to foster public-private innovation. The pair then unpack the challenges in creating a nexus between academia, industry and national security with the risk of foreign interference on university campuses. Tarrant and Thompson then discuss the Change Healthcare hack and the operating model of politically and financially motivated criminal gangs. The podcast wraps up by analysing the benefits of the European Union’s Artificial Intelligence Act and the Australian Digital ID legislation and how governments can improve legislation yet further. Enjoy the podcast, The Cyber Uncut team

In this episode of the Cyber Uncut podcast, Ben Miller, chief information security officer at Dragos, joins host Liam Garman to unpack the increasing number of ransomware attacks directed towards industrial organizations and how OT/ICS operators can better protect their assets. The pair begin by unpacking how threat groups have adapted their TTPs to attack modern industrial organisations and how ransomware attacks on manufacturers continue to disrupt global supply chains. Miller then details how OT/ICS operators can strengthen their cyber security posture and how the industry can better collaborate to enhance cyber resilience. The podcast wraps up by unpacking how Dragos enhances the threat detection and response strategies of industrial operators and what the future of OT cyber security looks like. Enjoy the podcast, The Cyber Uncut team

In this episode of the Cyber Uncut podcast, Raj Samani, senior vice-president and chief scientist at Rapid7, joins host Liam Garman to provide intelligence direct from the cyber security battlefield. The pair begin the podcast by discussing the links between leading threat groups and rogue states, detailing their TTPs and operating models. Samani then unpacks recent findings from North Korea’s Kimsuky threat group, lifting the veil on how such threat actors target companies and how Rapid7 works with governments and businesses to keep them safe online. The podcast wraps up by examining emerging TTP trends and how businesses can build effective systems and processes to monitor their organisation’s attack surface. Enjoy the podcast, The Cyber Uncut team

In this episode of the Cyber Uncut podcast, hosts Phil Tarrant and Major General (Ret’d) Dr Marcus Thompson unpack how foreign actors are targeting persons of interest on social media and how Australians are falling victim to unsophisticated credential stuffing campaigns. Like all news over recent months, the podcast begins talking about Taylor Swift – and how regular Australians became victims of credential stuffing campaigns on a popular ticketing website. The podcast continues with a look into pop culture deepfakes and how artificial intelligence (AI) poses a risk to geopolitical stability. The pair wrap up the podcast by looking into ASIO’s Annual Threat Assessment and how foreign actors have targeted people of interest online, before analysing some of the world’s most high-profile recent data breaches. Enjoy the podcast, The Cyber Uncut team

In this episode of the Cyber Uncut podcast, Mark Goudie, senior director of professional services at CrowdStrike, joins host Liam Garman to provide insight into the most prolific threats and vulnerabilities facing Australian businesses and how they can immediately take action to defend themselves. The podcast begins by examining critical findings from CrowdStrike’s Global Threat Report before detailing the top things Australian businesses must do to protect their assets.  Goudie and Garman then outline the roles and responsibilities of different departments across a business in the event of a breach – from IT to legal and investor relations.  The pair wrap up the podcast by discussing how businesses can wargame an attack, before addressing common misconceptions in the cyber security industry.  Enjoy the podcast, The Cyber Daily team 

In this episode of the Cyber Uncut podcast, Liam Garman, David Hollingworth, and Daniel Croft provide critical insights for business leaders on how to craft an investor and media relations strategy in the event of a breach. The trio begin the podcast by discussing the latest news before diving into how cyber breaches require all hands on deck to get a company back to business as usual. Hollingworth and Croft then provide anonymised case studies of investor and media relations strategies that have allowed companies to take control of the narrative. The podcast wraps up with a list of top tips for businesses to get on the front foot in the event of a breach.  Enjoy the podcast, The Cyber Daily team

In this episode of the Cyber Uncut podcast, hosts Phil Tarrant and Major General (Ret’d) Dr Marcus Thompson discuss how malicious actors are targeting Australian courts and how Australians can keep themselves safe from the threat of credential stuffing. The pair begin the podcast by unpacking the Commonwealth’s sanctions on the Medibank hacker and how Australian courts have been in the crosshairs of malicious actors. Tarrant and Dr Thompson then unpack the recently leaked package of 26 billion documents, collated from some of the world’s top brands, and how Australians can protect themselves from credential stuffing campaigns. They wrap up by examining the ethics of ransomware payments – even when the clean-up cost is greater than the cost of the ransom. Enjoy the podcast, The Cyber Daily team

In this episode of the Cyber Uncut podcast, Mercury ISS’ Edward Farrell and Niru Verma join host Steve Kuper to discuss the latest trends in cyber security and the importance of building a tailor-made security strategy for your business. The trio begin the podcast by unpacking how cyber security underpins all military capabilities, whether on land, at sea, or in the air, before discussing the importance of instituting threat-driven approaches to cyber. Farrell and Verma then unpack the latest trends in cyber security and how businesses should build bespoke cyber security strategies that address the most likely vectors for attack, as opposed to the vulnerabilities that are most in vogue. They then discuss the most concerning threats for businesses, before examining just how easily threat actors can use credential stuffing to break into your organisation’s network. The podcast wraps up by examining Mercury’s philosophy of prevention over response, before discussing what is next on their business horizon. Enjoy the podcast, The Cyber Daily team