Coffee Talk with SURGe: RansomBoggs, Log4Shell Exploitation, Medibank Update, Twitter E2EE Messaging
Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. The team from Splunk will discuss the latest security news, including:
- ESET Research identifies a wave of ransomware attacks targeting organizations in Ukraine that they're calling #RansomBoggs
- https://twitter.com/ESETresearch/status/1596181925663760386
- Cincinnati State College is added to Vice Society's leak site
- https://www.bleepingcomputer.com/news/security/vice-society-ransomware-claims-attack-on-cincinnati-state-college/
- Iranian Hackers use Log4Shell to mine crypto on a US Federal computer system
- https://www.washingtonpost.com/politics/2022/11/17/iranian-hackers-breached-agency-that-hears-federal-worker-grievances/
- The extortion site used in the Medibank attack goes offline after the Australian goverment pledges 'offensive' actions
- https://www.theguardian.com/australia-news/2022/nov/23/medibank-hacker-blog-mysteriously-disappears-but-experts-warn-it-may-return
Mick and Ryan competed in a 60 second charity challenge about network surveillance. The group also discussed the possibility of Twitter implementing end-to-end encrypted messaging on the platform.