Listen to Talos security experts as they dive into emerging threats, forcing the bad guys to innovate, hacking refrigerators, and other security issues, all with beer.

  • Beers With Talos : Episode 47
    2019-02-26

    Privacy, Underwear, and Arias

    Recorded 2/15/19 - We are joined by special guest Michelle Dennedy, VP and Chief Privacy Officer at Cisco. This is a long EP that is worth every minute - covering everything from the modern privacy landscape, privacy as a fundamental human right, and all the ways you didn’t know underwear can protect you. We were a bit concerned about having a VP on, but after Michelle knocked us around a bit we figured out what was up… however, if this is the last EP you see listed, I think we all know what happened. Full show notes on the Talos blog

    Hosted By:
    Mitch Neff@MitchNeff
    Special Guest:
    Michelle Dennedy@mdennedy
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:27:31

    Keywords
    • talos
    • security
    • privacy
    • michelle dennedy

  • Beers With Talos : Episode 46
    2019-02-14

    Privacy Pwnd: ExileRAT and Collecting Bad Karma

    Recorded 2/1/19 - Today we discuss threats that bridge the gap between violating privacy and classic cybersecurity threats - malware and systems that are tracking voices of dissent and using their own devices as recon tools against them. The two cases cited in this EP are ExileRAT, a trojan delivered via malicious Office docs targeting supporters of the Tibetan government-in-exile; and Karma, a zero-touch toolkit used by at least one nation-state to remotely surveil essentially all the valuable data in their targets iPhones. We are going to continue this topic on the next episode as we continue to dig deeper into the idea of privacy as a fundamental human right with a very special guest (hint: it’s Michelle Dennedy) so make sure to catch the next EP as well.
    Full show notes on the Talos Blog

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 48:04

    Keywords
    • talos
    • security
    • privacy
    • karma
    • ExileRAT

  • Beers With Talos : Episode 45
    2019-01-22

    SoHo Attacks, IoT Devices, and the Cesspool Setting

    Recorded 1/18/19 - We have a extended roundtable today (even more than usual) because we accidentally discussed some relevant security topics in the meantime. Eventually, we move on to talk about recent releases, primarily the Pylocky decryptor and more IoT vulnerabilities. We move on to discuss what’s going on in the SoHo device space, with some specific advice and a lot of rage. This EP closes out discussing the release of Holger’s DDR plug-in (download available) and reminding everyone of the TTRS CFP (closing soon!) Full show notes on the Talos blog

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:05:11

    Keywords
    • talos
    • security
    • DDR
    • IoT
    • SoHo
    • TTRS
    • Talos Summit

  • Beers With Talos : Episode 44
    2019-01-17

    Fun with 2018’s Worst and Talks We Want to Hear

    Recorded 1/7/18 - Most of the EP (after an extended Roundtable - we all had a lot to get out after time off), we look back at the 2018 Year-in-Malware Review – Olympic Destroyer, VPNFilter, MDM and other unique, large-scale, or otherwise interesting bits of malware that Talos encountered. We also discuss the things we would love to see conference talks about in the new year. Of course, we use that to announce the CFP for Talos Threat Research Summit 2019. If you do defense and want to talk to other defenders, make sure to submit!

    Full show notes on the Talos blog

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:18:59

    Keywords
    • talos
    • security
    • malware
    • year-end
    • TTRS
    • Talos Summit

  • Beers With Talos : Episode 43
    2018-12-14

    Espionage, Encryption, and CISO Square One

    Recorded 12/7/18 - Several of us are under the weather, but the show must go on. We did our best, as always. After running through some recent research, we spend a good bit of this EP looking through the lens of a recent breach at the first things a new security leader should get a handle on - what questions need to be answered? What information and practices are day-1 vital? We wrap up taking a look at a slew of vulns Talos uncovered in secure messaging apps. Full show notes on the Talos blog

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:07:53

    Keywords
    • talos
    • security
    • vulnerability
    • encryption
    • CISO
    • secure messaging

  • Beers With Talos : Episode 42
    2018-11-21

    To the Moon, Everyone!

    Recorded 11/16/18 - Cyber moonshot, baby! It’s just like that time the US raced everyone to the moon, except completely different and in-no-way related! Do we need a “cyber moonshot”? Is the plan that was just released the way to get there? …and holy crap if Craig didn’t actually prepare for this podcast with notes and everything.
    We genuinely hope that you enjoy our rants over the Thanksgiving holiday break (for our American friends) or just at work like usual for the rest of you that don’t have a four day weekend ahead. We are genuinely grateful for you, listeners, as the entire reason that we get to keep doing this podcast. We enjoy having fun spreading the word on security and calling out excellence where we find it. Full show notes on the Talos blog

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:03:05

    Keywords
    • talos
    • security
    • malware
    • moonshot

  • Beers With Talos : Episode 41
    2018-11-14

    Sex, Money, and Malware

    Recorded 11/9/18 - We tried to make this episode last week, but thanks to some technical difficulties, we ended up calling that one a practice. Here is take two, focused on recent sextorition scams, the pending machine learning apocolyse (hint: it’s neither). We also review why vuln discovery and red teams are the most import line items in your security budget by looking a recent story where being breached cost dozens of lives. Full show notes on the Talos blog

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:08:16

    Keywords
    • talos
    • security
    • sextortion scam
    • machine learning
    • malware
    • red team

  • Beers With Talos : Episode 40
    2018-10-24

    BWT XL feat. SuperMicro, Giant Patches, and More Mobile Malware

    Recorded 10/19/18 - In celebration of EP40 and hitting over 1 million downloads(!!!), we go XL. This EP is a little long, we go a bit deeper than usual to discuss a few things that are highly unusual - namely, the XL patches dropped by Oracle, and the XL questions surrounding the Bloomberg/SuperMicro story. We also talk about a few mobile threats we have seen and what we have brewing in the mobile threat space. Full show notes available on the Talos blog

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:18:37

    Keywords
    • talos
    • security
    • Bloomberg
    • SuperMicro
    • patching
    • mobile malware

  • Beers With Talos : Episode 39
    2018-10-19

    VB 2018 Rundown and Prevalent Problems with PDF

    Recorded 10/5/18 - Quick chat to get to know this week’s special guests from the Talos Outreach team - Paul Rascagneres, Vanja Svajcer, and Warren Mercer. We discuss everyone’s work being presented at Virus Bulletin, and Paul and Warren being nominated the Péter Szőr Award. We also cover a lot of vuln discovery work recently released around various PDF software Full show notes available on the Talos Blog

    Hosted By:
    Mitch Neff@MitchNeff
    Special Guests:
    Warren Mercer@SecurityBeard, Vanja Svajcer@VanjaSvajcer, and Paul Rascagneres@R00tBSD
    Featuring:
    Nigel Houghton@EnglishLFC
    Download
    Run Time: 42:46

    Keywords
    • talos
    • security
    • vulnerability
    • Virus Bulletin
    • PDF

  • Beers With Talos : Episode 38
    2018-09-28

    More Fun with VPNFilter, Getting Pwnd via Spreadsheet

    Recorded 9/21/18 - The whole crew is back together! On the agenda today - VPNFilter part III, now with more known third stage payloads! As much as we have talked about multi-part posts, you know we wouldn’t post if it wasn’t important (on the blog, that is. That rule obvs doesn’t apply here) We are also releasing a related open source tool - WInbox Protocol Dissector. Finally, delve into an AV avoiding DDE and jump off into defense in depth. Full show notes on the Talos blog.

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 40:55

    Keywords
    • Talos
    • security
    • podcast
    • VPNFilter
    • Winbox Dissector

  • Beers With Talos : Episode 37
    2018-09-17

    Snort 3 Beta Uses Multithreading. It’s Super Effective!

    Recorded 9/7/18 - We have Joel back this week (and he is very happy to have himself back), but we lost Matt and we’re still wishing Nigel a speedy recovery from becoming bionic. This EP, we cover the latest findings in Talos MDM research and go over the exciting changes in the newly released Snort 3 beta (your move, Valve.). Bill reprises his role from last week as sentient seat filler that makes good jokes.

    See the full show notes on the Talos blog.

    Hosted By:
    Mitch Neff@MitchNeff
    Special Guest:
    William Largent@security_will
    Featuring:
    Craig Williams@security_craig and Joel Esler@JoelEsler
    Download
    Run Time: 43:00

    Keywords
    • Talos
    • security
    • podcast
    • MDM
    • Snort
    • 3 beta

  • Beers With Talos : Episode 36
    2018-08-30

    There Are Few Shades in the Grey Market

    Recorded 8/24/18 - We’re finally back in the studio after Hacker Summer Camp! Sadly, due to summer vacations and becoming bionic, we are missing Joel and Nigel respectively. We end up discussing most of our topics through the lens of Matt’s frequent Twitter polls. We also find out he bribes followers with free sporks. Craig brings the discussion on the details of Remcos, and go through some interesting points on the emerging grey markets in security software and vuln disco. The crew closes this episode discussing the hypothetical merits of perfect patching versus perfect visibility.

    Full show notes on the Talos Blog

    Hosted By:
    Mitch Neff@MitchNeff
    Special Guest:
    William Largent@security_will
    Featuring:
    Craig Williams@security_craig and Matt Olney@kpyke
    Download
    Run Time: 51:53

    Keywords
    • Talos
    • security
    • podcast
    • Remcos
    • grey market

  • Beers With Talos : Episode 35
    2018-08-16

    Live from the RiRa at Black Hat

    Recorded 8/8/18 - We decided to broadcast while we were all together at Black Hat - and invited everyone over for lunch and beers. Since we had a room full of people, we made this EP “choose your own podcast” and tooks topics from the audience. Neil Jenkins from the Cyber Threat Alliance came by to bestow befitting superhero swag on Matt and Adam for their work on VPNFilter. Headlining this event is our very special guest - Dave Bittner from The CyberWire. Full show notes podcast blog post

    Hosted By:
    Mitch Neff@MitchNeff
    Special Guest:
    Dave Bittner@bittner
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 01:22:27

    Keywords
    • talos
    • security
    • black hat
    • defcon
    • cyberwire
    • cyber threat alliance

  • Beers With Talos : Episode 34
    2018-07-26

    Click Here to Assign New Mobile Device Owner

    Recorded 7/20/18 - This week, we touch on several topics, but we spend the lion’s share of the EP discussing MDM. We are joined by Aaron Woland and spend a great deal of time discussing how these attacks work and how these are attacks happen to users of all devices across platforms. We talk about the differences in how MDM is handled across different OS flavors, and the similarities in how the attacks happen (hint: users ignoring the warnings). Click here for the full show notes on the blog

    Hosted By:
    Mitch Neff@MitchNeff
    Special Guest:
    Aaron Woland@AaronWoland
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 1:07:47

    Keywords
    • Talos
    • security
    • podcast
    • MDM
    • vuln discovery

  • Beers With Talos : Episode 33
    2018-07-15

    Change the Conversation or the People Having It?

    Recorded 7/6/18 - This episode is a bit less technical than most as we take on how the security conversation is happening and who is a part of it. Coincidentally (we promise), that dovetails in with Matt’s contention that everybody just needs to stop acting with unending self-interest. Once again, Craig goes on vacation and all hell breaks loose, giving birth to a new concept in ransomware - Send us Bitcoin or we send Craig to a remote island for a month. Also - we are going to be doing a live EP from BalckHat! Registration link and full show notes available on the Talos blog.

    Hosted By:
    Mitch Neff@MitchNeff
    Featuring:
    Craig Williams@security_craig, Joel Esler@JoelEsler, Matt Olney@kpyke, and Nigel Houghton@EnglishLFC
    Download
    Run Time: 48:10

    Keywords
    • talos
    • security
    • thanatos
    • community