Season 4 Episode 10 - The Fundamentals with Dan Haagman

Story 1

Docusign APIs exploited in new phishing campaign.

https://www.darkreading.com/cloud-security/docusign-api-abused-invoice-attack

https://www.docusign.com/trust/alerts/alert-phishing-campaign-observed-november-6-2024

Story 2

Hacker behind Snowflake arrested in Canada, held on extradition charges.

https://krebsonsecurity.com/tag/alexander-antonin-moucka/

https://therecord.media/alleged-snowflake-hacker-detained-in-canada

https://thenightly.com.au/politics/australia/man-arrested-after-cybercrime-investigation-into-software-breaches-that-affected-millions-of-australians-c-16649915?fbclid=IwY2xjawGW4zBleHRuA2FlbQIxMQABHR1UtBwEj_IFUWeCrgPIHCw4Qyz2jUsEURuetn7RN2p0tAYzbwVsxnxJtQ_aem_kRaiRznyXouWYXoIUCt6Zw&sfnsn=wa

Interview - Dan Haagman - https://www.linkedin.com/in/danhaagman/

Upcoming Events

November

26-29 - Cybercon - Melbourne - https://www.cyberconference.com.au/

Contacts

Website - Cyberwesthub.au

Email - westcoastcyber@cyberwesthub.au

Discord - https://discord.gg/kwsmDBUZKZ

Social Media

Facebook https://www.facebook.com/WestCoastCyber

Twitter https://twitter.com/WestCoastCybr

LinkedIn https://www.linkedin.com/showcase/westcoastcyber/

Insta https://www.instagram.com/westcoastcyber/

Youtube : https://www.youtube.com/@westcoastcyber

This podcast is co-produced in partnership with CyberWest, the WA Cybersecurity Innovation hub in Joondalup.

Driving Growth in the WA Cybersecurity sector.

For more information, go to cyberwest.au.

Hosted on Acast. See acast.com/privacy for more information.

Special Note: For your own safety, do not look for or try to access the resources mentioned in this main story without a good VPN or other anonymising service. Exercise caution at all times.

Story 1

ChatGPT errors of judgement puts child at risk.

https://ia.acs.org.au/article/2024/chatgpt-error-of-judgement-puts-child-at-risk-.html

Main Topic - Jacob Larsen - Research : Doxxing takes a serious turn.

Live interview with Jacob Larsen on his research on Doxxing and Violence as a Service.

https://larsencyber.com/blog/2024-08-08-blackhat-doxing-to-doorstep/

https://larsencyber.com/blog/2024-08-07-blackhat-interviews-extorters/

https://www.wired.com/story/doxing-extortion-violence-as-service/

Upcoming Events

Cybercon

BSides - Melb, Canberra

AISA Perth Sec - Wednesday 23 October - https://aisasecuritydays.com.au/perthsec

AISA Stuent Sec - Thursday 31st October - https://www.eventbrite.com/e/aisa-studentsec-tickets-1004923171257

Contacts

Website - Cyberwesthub.au

Email - westcoastcyber@cyberwesthub.au

Discord - https://discord.gg/kwsmDBUZKZ

Social Media

Facebook https://www.facebook.com/WestCoastCyber

Twitter https://twitter.com/WestCoastCybr

LinkedIn https://www.linkedin.com/showcase/westcoastcyber/

Insta https://www.instagram.com/westcoastcyber/

Youtube : https://www.youtube.com/@westcoastcyber

Hosted on Acast. See acast.com/privacy for more information.

In this episode of West Coast Cyber, we talk about the global problem of fraud.

Story 1

Telegram - CEO Arrested https://www.abc.net.au/news/2024-08-29/telegram-pavel-durov-banned-from-leaving-france-charges-laid/104283704

https://www.theguardian.com/technology/article/2024/sep/06/pavel-durov-telegram-founder-post-comments-arrest-france

Story 2

Change Healthcare - Update

https://www.npr.org/sections/shots-health-news/2024/09/17/nx-s1-5111590/cyberattacks-ransomware-health-care-federal-response

Main Topic - Scam Farms

https://www.linkedin.com/posts/cyber-cx_last-night-60-minutes-australia-looked-at-activity-7233641800350015489-pqvG/?utm_source=share&utm_medium=member_android

Challenges - Apart from the traditional.

Red Flags to Look For:

Urgency

Playing on emotions - Fear, Greed, Lust etc.

Unusual methods (paying by gift cards, cryptocurrency)

Repeated (and unexpected) 2FA requests

Might even be from someone you know or trust (impersonation/spearphishing/whaling)

What can we do to slow down or stop fraud?

Policy

Culture

Champions

Event Calendar -

13th September - National Missings Persons Hackathon - Bash's review

26 - 28 Sept - Bsides Canberra

Contacts

Website - Cyberwesthub.au

Email - westcoastcyber@cyberwesthub.au

Discord - https://discord.gg/kwsmDBUZKZ

Social Media

Facebook https://www.facebook.com/WestCoastCyber

Twitter https://twitter.com/WestCoastCybr

LinkedIn https://www.linkedin.com/showcase/westcoastcyber/

Insta https://www.instagram.com/westcoastcyber/

Youtube : https://www.youtube.com/@westcoastcyber

Hosted on Acast. See acast.com/privacy for more information.

Season 4 Episode 7 What actually caused the Medibank breach?

Story 1

Link to Crowdstrike blog update

https://www.crowdstrike.com/blog/falcon-update-for-windows-hosts-technical-details/

https://www.inc-aus.com/associated-press/crowdstrike-ceo-called-to-testify-before-congress-over-global-tech-outage.html?cid=pushly

https://edition.cnn.com/2024/07/24/business/crowdstrike-outage-uber-eats/index.html

https://www.abc.net.au/news/2024-08-07/drt-crowdstrike-root-cause-analysis/104193866

Story 2

Cabinet reshuffle -

https://www.abc.net.au/news/2024-07-28/anthony-albanese-reshuffles-cabinet-clare-oneil-andrew-giles/104141974

https://au.news.yahoo.com/pm-albanese-unveil-look-cabinet-173000864.html?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAAGJqXero2AY2_lVvId1MsxW2sppVSNXfrPMYS0xcDwly7Q5aMXTPZCWvDT9j3f-41VmOf96qUDUJtieFpGhRYwH5_eTP5puaEeGFG9WIYQdhMe8d0QlKFc4XXUM0eeQIiGPAWXqLpqTYIYMTXVbsT07_c4GhK7sGVOh4YSnLj8T1

Main Topic

Medibank breach

https://www.oaic.gov.au/newsroom/oaic-takes-civil-penalty-action-against-medibank

Event Calendar -

30th August - Scams and Sushi - City of Subiaco

Last week of August - Scam Watch Week - Share a story, stop a scam

3rd September - Student of Cyber with AWS

13th September - National Missings Persons Hackathon

17th September - Computing and Security Showcase Evening Joondalup ECU Building 21

Contacts

Website - Cyberwesthub.au

Email - westcoastcyber@cyberwesthub.au

Discord - https://discord.gg/kwsmDBUZKZ

Social Media

Facebook https://www.facebook.com/WestCoastCyber

Twitter https://twitter.com/WestCoastCybr

LinkedIn https://www.linkedin.com/showcase/westcoastcyber/

Insta https://www.instagram.com/westcoastcyber/

Youtube : https://www.youtube.com/@westcoastcyber

Hosted on Acast. See acast.com/privacy for more information.

Story 1

Crowd Strike - Just a quick note “Early days, lots to unfold.”

Story 2

https://amp-abc-net-au.cdn.ampproject.org/c/s/amp.abc.net.au/article/104126074

Main Topic

Free WiFi

https://www.afp.gov.au/news-centre/media-release/man-charged-over-creation-evil-twin-free-wifi-networks-access-personal

Event Calendar -

24th - 26th July Indian Ocean Defence and Security Conference - PCEC

26th July Cyber Boardgame Arvo UWA Student Hub

4th August - PECAN + Capture the Flag - ECU Joondalup

10th August - Parallel Realities: AI and the Unfolding Cyber Culture - Curtin University St. Georges Terrace, Perth

Last week of August - Scam Watch Week - Share a story, stop a scam

3rd September - Student of Cyber with AWS

13th September - National Missing Persons Hackathon

17th September - Computing and Security Showcase Evening Joondalup ECU Building 21

If you have an event you would like to share, just get in touch with the team using the contacts below.

Contacts

Website - Cyberwesthub.au

Email - westcoastcyber@cyberwesthub.au

Discord - https://discord.gg/kwsmDBUZKZ

Social Media

Facebook https://www.facebook.com/WestCoastCyber

Twitter https://twitter.com/WestCoastCybr

LinkedIn https://www.linkedin.com/showcase/westcoastcyber/

Insta https://www.instagram.com/westcoastcyber/

Youtube : https://www.youtube.com/@westcoastcyber

Hosted on Acast. See acast.com/privacy for more information.

This time we talk about big medical breaches, the fallout, and our most favourite thing: Cyberwest.

Show Notes

Season 4, Episode 5, Cyberwest Rewind.

Story 1

https://www.itnews.com.au/news/medisecure-calls-in-administrators-after-cyber-breach-608580

Story 2

https://www.oaic.gov.au/newsroom/oaic-takes-civil-penalty-action-against-medibank

Main Topic

CyberWest Summit 2024

Event Calendar:

• 19/6 (Wednesday) AISA Breakfast - Anzac Club WA - member tickets on the website.
• 26/6 AWSN at the BankWest Offices on Murray Street - See the website for member tickets

Contacts us at:

• Website Cyberwesthub.au
• Email westcoastcyber@cyberwesthub.au
• Discord https://discord.gg/kwsmDBUZKZ
• Facebook https://www.facebook.com/WestCoastCyber
• Twitter https://twitter.com/WestCoastCybr
• LinkedIn https://www.linkedin.com/showcase/westcoastcyber/
• Instagram https://www.instagram.com/westcoastcyber/
• Youtube https://www.youtube.com/@westcoastcyber

The Red Piranha Competition

Red Piranha is hosting an EOFY Competition for people in Perth!

Your participation in the competition can make you win Red Piranha CISO Swag Bag which includes:

✅ 6 months of Loot Crate #1 Pop Culture Mystery Subscription for you!

✅50% off 1 x Platinum Managed Detection and Response (MDR)/Security Event and Incident Management (SIEM) 12 Month Subscription for your organisation.

✅Free Dark Web Monitoring

✅$10,000.00 off a Vulnerability Assessment and Penetration Test (VAPT) for your organisation.

✅Free Cybersecurity Awareness Training (CSAT) for your organisation.

To participate, all you have to do is:

• Get down to Central Park, Perth City before 19th June 2024, and look up at the big screen. When you see Red Piranha’s Ad, get a selfie.
• Upload your selfie to LinkedIn and use the hashtags #teamdefenceaustralia and #redpiranha

Hash tags

#cybersecurity #infosec #perth #australia #technology #westernaustralia #wa #cyber #instagram #scam #bounty #CISA #vulnerability #google #conti #phishing #password #passwordless #scams #microsoft # macro

==========================================

The content of this podcast is the opinions of hosts and guests and does not represent the views, thoughts and opinions of their respective employers, partners or stakeholders.

This podcast is co-produced in partnership with CyberWest, the WA Cybersecurity Innovation hub in Joondalup.

Driving Growth in the WA Cybersecurity sector.

For more information, go to cyberwesthub.au.

Hosted on Acast. See acast.com/privacy for more information.

Show Notes

Season 4 Episode 4 The S in IOT stands for Security

Articles

Story 1

Qantas fixes data breach after passengers' personal details shared - ABC News

Story 2

Authentication failure blamed for Change Healthcare ransomware attack | CSO Online (ampproject.org)

https://amp.theage.com.au/politics/victoria/family-violence-and-sex-assault-victims-exposed-in-monash-health-data-breach-20240503-p5foni.html

https://www.malwarebytes.com/blog/ransomware/2024/03/alphv-ransomware-gang-fakes-own-death-fools-no-one

Main Topic

No more 12345: devices with weak passwords to be banned in UK | Data and computer security | The Guardian (ampproject.org)

Event Calendar -

Cyberwest Summit 15/5 16/5

Contacts

Website - Cyberwesthub.au

Email - westcoastcyber@cyberwesthub.au

Discord - https://discord.gg/kwsmDBUZKZ

Social Media

Facebook https://www.facebook.com/WestCoastCyber

Twitter https://twitter.com/WestCoastCybr

LinkedIn https://www.linkedin.com/showcase/westcoastcyber/

Insta https://www.instagram.com/westcoastcyber/

Hosted on Acast. See acast.com/privacy for more information.

Hosted on Acast. See acast.com/privacy for more information.