MikroTik routers hijacked, Russian data center threats, UK cybercrime losses surge
Summary
Steve Prentice covers a MicroTik SSH exploit, new Russian data center security mandates, and a surge in UK account hack losses. The episode also details a massive campaign using blockchain-stored payloads on 5,400 hacked sites, SonicWall 0-day exploits, and Unicode-based phishing evasion. Additionally, it highlights LinkedIn’s warning on crypto-draining job scams targeting young professionals and a current issue blocking Microsoft Teams desktop clients on Windows.
Topics discussed
Introduction to the CISO Series
MicroTik routers hijacked via exposed SSH
New security requirements for Russian data centers
UK account hack losses surge
Clarification on UK account hack reporting
Hacked sites serve clickfix payloads on blockchain
Ether hiding technique in compromised websites
Sponsor segment: ThreatLocker AI
New 0-day exploits for SonicWall
ASCII smuggling used for phishing
Unicode tags evade keyword filters in phishing
Young job seekers targeted by employment scams
Crypto-draining malware in job interview documents
Microsoft Teams desktop client issues
Microsoft investigates Teams client delays
Closing remarks and feedback invitation
Show availability and website
Listen ad-free on Castria