Show Notes
Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is Selena Larson, Proofpoint intelligence analyst and host of their podcast DISCARDED. Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by her co-hosts N2K Networks Dave Bittner and Keith Mularski, former FBI cybercrime investigator and now Chief Global Ambassador at Qintel.
Being a security researcher is a bit like being a detective: you gather clues, analyze the evidence, and consult the experts to solve the cyber puzzle. This week, Dave, Selena, and Keith explore the pros and cons of allowing select U.S. companies to conduct offensive cyber operations under strict government guardrails. They discuss what the proposed framework could mean for private-sector security researchers, how researchers have already been operating in this space for years, and where the line between defense and offense gets blurry. They also look at how adversaries such as China and Russia use proxy companies and other private-sector entities to conduct cyber operations—and consider whether giving trusted U.S. companies similar capabilities could strengthen cyber defenses or create new risks.
More from Hacking Humans
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up, including a chicken update and a little Greek vocabulary. Dave explores new tools from FINRA designed to help investors research the markets, assess their vulnerability to financial fraud, and practice recognizing common scam tactics before real money is at stake. Joe looks at Apate, an Australian startup using AI agents to pose as potential scam victims, waste fraudsters’ time, and gather intelligence that can help researchers and security teams better understand and disrupt scams. Maria covers new approaches to cybersecurity awareness and personal cyber readiness, exploring how we can move beyond traditional awareness campaigns and help people better protect themselves online. Our Catch of the Day comes from Anthony, who received a convincing-looking scam email about his trademark application that uses publicly available information and a fake mandatory verification appointment to pressure him into calling a fraudulent number.
This week, N2K CyberWire hosts Maria Varmazis and Joe Carrigan are joined by Kieran Human from ThreatLocker while Dave Bittner is out. Together, they discuss the latest in social engineering scams, phishing schemes, and criminal exploits making headlines. We start with some follow up on Daejon Love’s story, but we’ll save that for next week. Plus, Joe has a chicken update. Maria explores reporting that TikTok relaxed its advertising enforcement rules, coinciding with a sharp increase in scams involving fake ads for deeply discounted products that never arrive. Joe looks at Wisconsin’s efforts to curb cryptocurrency ATM scams through transaction limits, identity verification, and mandatory refunds, with early reports suggesting the restrictions are making a difference. Kieran Human covers a data breach disclosed by Revolut that exposed customers’ financial information and passport details. Our Catch of the Day comes from Rachel, who received a suspicious invitation email from a hacked contact that asked her to download and install software.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up from Maria on ACATS fraud, including a reminder that protecting your accounts starts with the basics: strong passwords and multifactor authentication. Joe also has a follow-up inspired by 2001: A Space Odyssey and an experiment with AI. Joe covers a New York parking scam involving fake QR codes placed on parking kiosks, then takes a strange detour into Pennsylvania’s spotted lanternfly quarantine and an alleged scheme involving fake lanternfly permits. Dave looks at a fake iPhone Duo preorder scam that uses an Apple-style site and a supposed $500 voucher to deliver a DarkSword exploit to vulnerable iPhones. Maria explores new Consumer Reports research showing that 91% of Americans have encountered a digital scam or cyberattack attempt, while confidence in the privacy of personal data continues to fall. Our Catch of the Day comes from Reddit, where a spam caller appears to be on the hunt for someone named Juan.