ShadowTalk: Powered by ReliaQuest – Details, episodes & analysis

Resources: https://linktr.ee/ReliaQuestShadowTalk

Did you know 99% of cloud identities are over-privileged, creating the perfect storm for attackers to seamlessly infiltrate your environment? Join host Kim along with intelligence analysts John & Alex as they discuss: 

• Chinese Nation-State Campaigns and Geopolitics (1:12)
• Malicious NPM Packages (7:20)
• TruffleNet Attacks on AWS (10:53)
• The Danger of Over-Privileged Cloud Identities (15:36)

Kim Bromley: Senior Cyber Threat Intelligence Analyst on the ReliaQuest Threat Research Team. She joined ReliaQuest in June 2020 following a 10-year career in UK law enforcement, and has acted as host since 2024.  Kim brings a wealth of experience in threat intelligence and law enforcement tactics, providing unique insights.

John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest.

Alexander Capraro: Alexander Capraro is a Cyber Threat Intelligence Analyst at ReliaQuest with over five years of experience in cybersecurity. With his prior experience as a Security Analyst, he specializes in incident response, malware campaign tracking, and OSINT investigations. 

Resources: https://linktr.ee/ReliaQuestShadowTalk

Picture this: You close a $50M acquisition on Friday and by Monday, attackers are in your network. Sound far-fetched? It's not. Join host Kim along with intelligence analyst John & Threat Hunter Leo as they discuss:

• Attackers Exploit WSUS Flaw (1:15)
• Qilin Deploys Cross-Platform Attacks (4:21)
• Lazarus Group Reignites Operation DreamJob (9:05)
• Threat Hunter Hacks: Active Cyber Threats in M&A (15:19)

Kim Bromley: Senior Cyber Threat Intelligence Analyst on the ReliaQuest Threat Research Team. She joined ReliaQuest in June 2020 following a 10-year career in UK law enforcement, and has acted as host since 2024.  Kim brings a wealth of experience in threat intelligence and law enforcement tactics, providing unique insights.

John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest.

Leo Dawson: Leo Dawson is a Threat Hunter on the ReliaQuest Threat Research Team. With a deep background in Experimental Physics and Artificial Intelligence, Leo brings a unique interdisciplinary perspective to cybersecurity. He is driven by a passion for leveraging these skills to proactively track, analyze, and understand threat actor campaigns while gaining deeper insights into their evolving tactics and behaviors. 

Resources: https://linktr.ee/ReliaQuestShadowTalk

Curious about the skills needed for modern cyber attacks? Join host Kim along with intelligence analysts John & Hayden as they discuss:

• Apple Patches Exploited Zero-Day (1:40)
• Hackers Abuse Linux Files to Drop Malware (3:50)
• Silk Typhoon Attacks Cloud Supply Chains (7:21)
• ReliaQuest Uncovers Cybercriminals' Most Sought After Skills (11:02)

Kim Bromley: Senior Cyber Threat Intelligence Analyst on the ReliaQuest Threat Research Team. She joined ReliaQuest in June 2020 following a 10-year career in UK law enforcement, and has acted as host since 2024.  Kim brings a wealth of experience in threat intelligence and law enforcement tactics, providing unique insights.

John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest. 

Hayden Evans: Cyber Threat Intelligence Analyst at ReliaQuest. He has experience in the F3EAD lifecycle and analyzing adversaries' TTPs to operationalize this information. He is also experienced with intrusion response, OSINT investigations, and offensive security. 

In this episode of ShadowTalk, host Ivan Righi, along with ReliaQuest's CISO Rick Holland and Detection Researcher Marken Teder, discuss the latest news in cyber security and threat research. Topics this week include:

• Apache ActiveMQ vulnerability (CVE-2023-46604) exploited by ransomware gangs
• Discussion over charges filed by the US SEC against SolarWinds
• Active exploitation of a Critical Atlassian Confluence flaw (CVE-2023-22518)
• An overview of QR code phishing threats

Resources:

• https://event.on24.com/wcc/r/4387339/A63BC17298406ECD68AABFFEF416702B?partnerref=organic

In this episode of ShadowTalk, host Kim, along with Caroline and Corey, discuss the latest news in cyber security and threat research. Topics this week include:

• The charges filed by the US SEC against SolarWinds
• A sneak-peak of the findings from our Vulnerabilities Roundup blog
• An overview of some vulnerabilities impacting users right now
• The Executive Order issued by the Biden administration on artificial intelligence.

In this episode of ShadowTalk, Host Chris Morgan is joined by one of ReliaQuest's CISO's Rick Holland, Threat Hunter Brian Kelly and Threat Intelligence Analyst Ivan Righi to discuss the latest news in cyber security and threat research. Topics this week include:

• The findings of ReliaQuest's Quarterly Ransomware Report recapping Q3 2023 activity.
•  ServiceNow vulnerability and what it means for you
• The latest on a security incident pertaining to authentication provider, Okta.

Resources:

• https://www.reliaquest.com/blog/ransomware-trends-q3-2023/

In this episode of ShadowTalk, host Chris, along with Kim and Gjergji, discuss the latest news in cyber security and threat research. Topics this week include:

• Threat actors exploiting Critical CISCO IOS XE Vuln 
• Increase in Business Email Compromise (BEC) activity
• Social media platform Discord being used for malicious activity

In this episode of ShadowTalk, host Chris Morgan, along with ReliaQuest CISO Rick Holland, James Xiang and Caroline Fenstermacher, discuss the latest news in cyber security and threat research. Topics this week include:

• Cyber threat implications from the Hamas - Israel Conflict
• Top Adversary Techniques: What We're Seeing Right Now
• Has Qakbot returned? 

Resources:

• https://www.reliaquest.com/blog/iranian-cyber-threats-practical-advice-for-security-professionals/

In this episode of ShadowTalk, host Chris Morgan, along with ReliaQuest CISO Rick Holland and Corey Carter discuss the latest news in cyber security and threat research. Topics this week include:

• 2023 National Cyber Security Awareness Month (NCSAM) 
• Progress FTP Server
• The risk posed by open Remote Desktop Protocol (RDP) Sessions
• IronNet ceasure operations

Resources:

•  https://www.reliaquest.com/blog/cybersecurity-awareness-automation/ 
• https://www.reliaquest.com/blog/israel-hamas-implications-for-cyber-threats/ 

In this episode of ShadowTalk, host Chris, along with Gjergji and James, discuss the latest news in cyber security and threat research. Topics this week include:

• Hunting for MFA bypass techniques
• Exploitation of a Zero-day LibWebP Vulnerability
• Threat actors targeting VMWare ESXI

Resources:

https://www.reliaquest.com/blog/mfa-bypass-techniques/#:~:text=Attackers%20also%20bypass%20MFA%20by,for%20sale%20on%20cybercriminal%20platforms.