USB our Guest – Cyber security Best Practices and News

Today's episode is a little different. We have the opportunity to speak to the host of ITPodcast.Club, available on major podcasting platforms and who is in their last year of university. This episode is a bit longer around 30 minutes, but Alwin and I talk about a few topics including, paid and free learning resources, how we learn, entry level work, certifications and lastly why Backups are essential. Alwin email - alwin@itpodcast.club IG - @itpodcast.club Link Alwin’s podcast - ITpodcast.Club https://open.spotify.com/show/2qjTo5KX5lDoEgGymvx4mU?si=Dc46RQssQn2PBKZALuuXwA Link CFTE server - https://discord.gg/uWPvAR6HTR 

Hello and welcome back to USB our Guest, Cyber Security tips. I’m Theo, here to help you break down cyber security news and hacks and how they affect you. However, today I am interviewing Anyaacii a Linux in HPC Administrator. We recorded the interview in an open discord voice channel with video while monitoring chat with Text-to-speech developed by Security_Live. Anya was kind enough to go through my questions in advance and answer them at length. https://github.com/theo2612/NewObsidian/blob/main/Podcast/USB%20our%20guest/Ep%2046%20-%20ANYAscii.md A collab 3 years in the making! Anyascii and my schedule line up to finally sit down and chat. I've been a fan of Anya for long time, ever since we learned that we both cut our teeth on linux at the same time on the same learning platform! I'm a huge fan of her learning on stream style. [https://www.twitch.tv/b7h30](https://www.twitch.tv/b7h30) [https://linktr.ee/b7h30](https://linktr.ee/b7h30) Music by Chillhop Music: [https://chillhop.ffm.to/creatorcred](https://chillhop.ffm.to/creatorcred) Help support the stream by using my Affiliate links - [https://theo2612.github.io/7h30-amazon-affiliate-links/](https://theo2612.github.io/7h30-amazon-affiliate-links/)

Another interview! Yup! Today I am interviewing Tech Penguin who is a Senior Penetration Tester in the Netherlands. We recorded the interview in an open discord voice channel with video while monitoring chat with Text-to-speech developed by Security_Live. The Tech Penguin has 5 years experience as a penetration tester and a different entry to the Cyber Security industry. We are very excited to talk to him! As usual I send people I interview a list of questions to answer, and the Tech Penguin did that, offering well-thought and honest answers. Find the document linked on the episode page, on my Github. This is a little longer than my normal format so feel free to speed it up. Thank you for listening and enjoy.

Today I am interviewing The MonoSpace Mentor, CEO and CTO of their own managed web hosting business. We recorded the interview in an open discord voice channel with video while monitoring chat with Text-to-speech developed by Security_Live. The MonoSpace mentor has a wealth of life experience that I will attempt to draw on. From early beginnings, growth and accomplishment, I am very excited to talk to him. Also, I send people I interview a list of questions to answer, and the MonoSpace Mentor did that, offering well thought and candid answers. Find the document linked on the episode page on my ⁠Github.⁠ This is a little longer than my normal format so feel free to speed it up. Thank you for listening and enjoy. ⁠https://www.twitch.tv/b7h30⁠ ⁠https://linktr.ee/b7h30⁠ Music by Chillhop Music: ⁠https://chillhop.ffm.to/creatorcred⁠ Help support the stream by using my Affiliate links - ⁠https://theo2612.github.io/7h30-amazon-affiliate-links/

Today I am interviewing Tegora, an L3 System Administrator & Senior Technical Leader with technical responsibilities for Networking/Linux/HPC. We recorded the interview in an open discord voice channel with video while monitoring chat with Text-to-speech developed by Security_Live. While this time I had his volume level closer to mine, the music wasn't low enough in some parts. I make sure it is lower on future recordings Tegora became fascinated with computers at an early age, funded his education enlisting in the Army, pursued and obtained multiple degrees, taught and then pivoting into a career in IT. He has an excellent point of view regarding work effort, stepping out of your comfort zone and shares excellent tips on getting started on your path and interviewing. Also, I send people I interview a list of questions to answer, and Tegora did that, offering well thought and candid answers. Find the document linked on the episode page on my Github. This is a little longer than my normal format so feel free to speed it up. Thank you for listening and enjoy. https://www.twitch.tv/b7h30 https://linktr.ee/b7h30 Music by Chillhop Music: https://chillhop.ffm.to/creatorcred Help support the stream by using my Affiliate links - https://theo2612.github.io/7h30-amazon-affiliate-links/

Hello and welcome back to USB our Guest, Cyber Security tips. I’m Theo, here to help you break down cyber security news and hacks and how they affect you. However, today I am interviewing Zoogs. He has been in the industry for a bit now and I wanted to pick his brain on a variety of topics. We decided to record this live on twitch with chat using text to speech, while in Minecraft and recording audio in discord. So If you want to watch the VOD it is available on twitch or YouTube. We talk about his prior experience, current role, their expectations and what it took for him to get into that role. We also talk about Certificates, different learning techniques, the importance of stepping outside of your comfort zone, and advice that he wish he knew when he started on his path in cybersecurity. I include some sleeper questions that really don't have anything to do with cyber security And zoogs triggers himself @ 44:45!! https://linktr.ee/b7h30

In this video Episode of USB our Guest, I Phish myself Repeatedly.  Today I wanted to do something a little different and something I've wanted to do for a while. I'm getting phished, repeatedly. I'm going to show you multiple legitimate login screens next to spoofed login screens that actually steal credentials. We're gonna talk about when and where the attack happens, where the username and password gets pulled and how to avoid. I want to send a special thank you to Casper0x413 for all the hard work they put in on PhishNet. I still can't get over how legit the phishing login screens look. Thank you Saint! Never click on links in emails, DMs, texts to login to apps. Always go directly the app on your phone or type the web address in the browser yourself If you have a topic you would like me to cover drop me a line at anchor.fm/usbog, email me at usbourguest@gmail.com or visit me on twitch at twitch.tv/b7h30. If I've helped you in any way please consider telling friends or family about the podcast. Or rate and review the podcast on whatever platform you use to listen. Thank you for listening, stop reusing passwords and have a great day. Music in the episode provided by Chillhop -- artist less.people - Eternal now https://chll.to/dd19c5f6

This episode cover the LastPass breach that occurred in August. Links to the LastPass blog and articles referenced in the show are below. You can also find me on twitch at https://www.twitch.tv/b7h30.  [LastPass - Notice of Recent Security Incident](https://blog.lastpass.com/2022/08/notice-of-recent-security-incident/) [Explore how LastPass keeps you safe during a security event or potential hack](https://www.lastpass.com/security/what-if-lastpass-gets-hacked) [LastPass - Zero knowledge ](https://www.lastpass.com/security/zero-knowledge-security) [Forbes - LastPass Hacked: Password Manager With 25 Million Users Confirms Breach](https://www.forbes.com/sites/daveywinder/2022/08/25/lastpass-hacked-password-manager-with-25-million-users-confirms-breach/?sh=4c25e8b87d5a) [Dark Reading - LastPass Suffers Data breach, Source Code Stolen](https://www.darkreading.com/cloud/lastpass-data-breach-source-code-stolen) [Bleeping Computer - LastPass says hackers had internal access for four days](https://www.bleepingcomputer.com/news/security/lastpass-says-hackers-had-internal-access-for-four-days/)

I sit down with Stefan from the Tech Hatters Discord for a discussion on the Russia / Ukraine Cyber War. Stefan is a University student working in the industry. Please see all the links for all the articles we discussed below. Feel free to run all the links provided below through VirusTotal to ensure safe to click. I do not suggest using the 1920.in app. Tech Hatters Discord Tracking Cyber Operations and actors in the Russian-Ukraine War  Anonymous broadcasts infamous ‘troll face’ on Russian military radio WhisperGate Malware Corrupts Computers in Ukraine Second Data Wiper attack hits Ukraine computer networks CENTRAL BANK HACK Most recently, the group claimed involvement in hacking of the central bank of Russia White House.gov- FACT SHEET: Act Now to Protect Against Potential Cyberattacks Anonymous hacks Russia AGAIN and leaks 340,000 files in attempt to stop Putin’s war propaganda campaign Snapchat turns off public ‘heatmap’ for Ukraine SPACE HACK ATTACK Anonymous claims it has shut down Russia’s space agency – so Putin ‘no longer has control over spy satellites Hackers changed the call sign of a Putin-linked superyacht to 'FCKPTN' and set the ship's destination as 'hell'

Today’s episode covers the vulnerability affecting Java logging package, Log4j. This episode took a little longer to make than expected due to its complexity. Please see links below used to create the episode. TryHackMe’s Solar, exploiting log4j https://tryhackme.com/room/solar The Log4J Vulnerability Will Haunt the Internet for Years https://www.wired.com/story/log4j-log4shell/ Huntress Log4Shell Vulnerability Tester https://log4shell.huntress.com/ Apache logging services https://logging.apache.org/ The Apache Software Foundation https://www.apache.org/ USB our Guest - Episode 22 Updates - https://anchor.fm/usbog/episodes/Software-Updates-emgnsh Log4j Attack surface - https://github.com/YfryTchsGD/Log4jAttackSurface Log4j - Apache Log4j Security Vulnerabilities - https://logging.apache.org/log4j/2.x/security.html JDBC Appender https://logging.apache.org/log4j/2.x/manual/appenders.html#JDBCAppender Apache Log4j Security Vulnerabilities https://logging.apache.org/log4j/2.x/security.html What is JDBC? https://www.ibm.com/docs/en/informix-servers/12.10?topic=started-what-is-jdbc Lesson: Overview of JNDI https://docs.oracle.com/javase/tutorial/jndi/overview/index.html W3Schools - Addressing https://www.w3.org/Addressing/URL/uri-spec.html Amazon Affiliate link - https://amzn.to/3rpF5KI