Total Recall

Here are the pre-show notes:

• Leif & Misha are speaking at BSides LV!
• BSides SF panel: https://www.youtube.com/watch?v=BRh8B0bIa9o
• Swathi has started publishing useful security templates, starting with a Security Design Review template: https://github.com/firstprinciplesecurity/Security-Design-Review/blob/main/Template.md
• Campfire stories at Blackhat: https://lu.ma/bh2024

And all of the articles discussed during this recording:

• Microsoft Chose Profit Over Security and Left U.S. Government Vulnerable to Russian Hack, Whistleblower Says
  • https://www.propublica.org/article/microsoft-solarwinds-golden-saml-data-breach-russian-hackers
• AWS Cloud Incident Analysis Query Cheatsheet
  • https://securosis.com/blog/aws-cloud-incident-analysis-query-cheatsheet
• Business of Secure Defaults
  • https://tldrsec.com/p/business-of-secure-defaults
• Snowflake “breach” and A guide to threat hunting and monitoring in snowflake
  • https://arstechnica.com/information-technology/2024/06/hackers-steal-significant-volume-of-data-from-hundreds-of-snowflake-customers/
  • https://www.secureworld.io/industry-news/snowflake-data-breach
  • https://securitylabs.datadoghq.com/articles/a-guide-to-threat-hunting-and-monitoring-in-snowflake
• Red-teaming LLMs and AI skeleton key
  • https://x.com/haizelabs/status/1800936720990384174
  • https://futurism.com/the-byte/microsoft-skeleton-key-ai-chatbot-jailbreak
• Porsche Will Stop Selling Boxster, Cayman in Europe Due to Anti-Hacking Law
  • https://www.thedrive.com/news/porsche-stops-selling-718-boxster-cayman-europe-cybersecurity-law
• Microsoft postpones Recall due to security / privacy concerns
  • https://www.malwarebytes.com/blog/news/2024/06/microsoft-recall-delayed-after-privacy-and-security-concerns

‍