5 Minute Friday | Critical Vulnerabilities in iOS & Android

Security Soapbox | Privacy, Security and Everything in Between

MP3•Pagina principale dell'episodio

46:39

“If we march into that village and we start trying to persecute people for using poison, something that's very illegal, nobody's going to talk to us. We're not going to find out where the poison came from. We're not going to be able to shut anything down. We should take the approach that people are using poison because they're desperate, because they see no other alternative.” – Andrew Stein Andrew Stein is a wildlife ecologist who spent the past 25 years studying human carnivore conflict from African wild dogs and lions in Kenya and Botswana to leopards and hyenas in Namibia. His work has long focused on finding ways for people and predators to coexist. He is the founder of CLAWS , an organization based in Botswana that's working at the intersection of cutting-edge wildlife research and community driven conservation. Since its start in 2014 and official launch as an NGO in 2020, CLAWS has been pioneering science-based, tech-forward strategies to reduce conflict between people and carnivores. By collaborating closely with local communities, especially traditional cattle herders, CLAWS supports both species conservation and rural livelihoods—making coexistence not just possible, but sustainable.…

circa un anno fa 5:02

In this week's episode of 5 Minute Friday, we discuss three critical vulnerabilities affecting both iOS and Android devices. We also discuss the importance of patching these vulnerabilities, and the modern phishing attack tactics used to exploit them.

To keep up to date on current threats: www.lookout.com/threat-intelligence

43 episodi

#News #Tech News #Lookout

5 Minute Friday | Critical Vulnerabilities in iOS & Android

Security Soapbox | Privacy, Security and Everything in Between

published circa un anno fa

MP3•Pagina principale dell'episodio

To keep up to date on current threats: www.lookout.com/threat-intelligence

43 episodi

#News #Tech News #Lookout

Tutti gli episodi

Security Soapbox | Privacy, Security and Everything in Between

1
Cybersecurity Predictions: A Look into 2025's Security Landscape 41:17

13 weeks fa41:17

41:17

2024 saw a surge in cyberattacks alongside rapid tech advancements, making it clear that staying ahead in the digital world is more important than ever. In this week's session, we’ll explore the top cybersecurity predictions for 2025 — highlighting emerging threats, key trends, and the latest strategies for fortifying your defenses. Listen as our expert panel shares valuable insights and predictions on: New ransomware tactics and data breach methods How AI is shaping both security solutions and cyberattacks Growing threats from nation-states The latest security regulations and compliance frameworks…

Security Soapbox | Privacy, Security and Everything in Between

1
Securing Democracy: Election Integrity, Threats and Solutions with Jim Coyle 32:46

26 weeks fa32:46

32:46

On this week’s episode of Security Soapbox, we are joined by Jim Coyle, US Public Sector Field CTO at Lookout. We’re diving into the hot topic of election security; unpacking various threats, like disinformation campaigns, cyber espionage, and weaknesses in our election infrastructure — and who’s behind them. We’ll also chat about current protective measures and some innovative ideas, like using blockchain to fight misinformation. Watch the Billington Cybersecurity Summit session on Election Security here. Follow Hank on LinkedIn Follow Jim on LinkedIn…

Security Soapbox | Privacy, Security and Everything in Between

1
Why is my CEO Texting me? What to do About Executive Impersonation Attacks 5:12

27 weeks fa5:12

5:12

We’ve all received that urgent text message from our “CEO” asking us to take care of an urgent task. This form of social engineering has become a preferred tactic by threat actors who want to create a high-pressure situation in order to convince employees to send money or share sensitive data. This week’s episode will cover the why and how behind these attacks. We will also cover the critical role they play in the modern kill chain and how to protect against them. To see how Lookout protects against advanced smishing and executive impersonation attacks, read our release blog or watch the short overview video below. Blog: https://www.lookout.com/blog/smishing-prevention-executive-impersonation Video: https://vimeo.com/1009294652…

Security Soapbox | Privacy, Security and Everything in Between

1
Advanced Web Threats: Data Leaks, Shadow IT, and AI 13:48

27 weeks fa13:48

13:48

On this week’s episode of Security Soapbox, we are joined by Charity Spiri, who oversees the Security Service Edge (SSE) product portfolio at Lookout. Were challenging the common perception of web-based threats being solely network attacks. Web threats encompass a wider range of risks, including data leakage, shadow IT, and security concerns from AI platforms. While not entirely new issues, these pose significant challenges within the ever-evolving web-based threat landscape. For a deeper dive into advanced web threats and how to protect your organization, check out Charity’s recent session, Defending Against Advanced Threats with a Modern Secure Web Gateway. Follow Hank Schless on LinkedIn Follow Charity Spiri on LinkedIn…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | A New EU Mandate Makes iOS Less Secure 6:32

1 year fa6:32

6:32

In this week's episode of 5 Minute Friday, we discuss the new Digital Markets Act (DMA) in the EU and its potential impact on iOS security. We talk through the possible security risks and malware threats that could come from opening iOS devices to third-party app stores. To keep up to date on current threats: ⁠www.lookout.com/threat-intelligence…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | BadBazaar: iOS and Android Used to Target Tibetans and Uyghurs 4:38

1 year fa4:38

4:38

In this week's episode of 5 Minute Friday, we discuss BadBazaar, an iOS & Android surveillanceware by China's APT-15, designed to target Uyghur Muslims. We take a dive into the invasive nature of Chinese "pre-criminal" surveillance and BadBazaar's recent expansion to iOS devices, providing insights into its early development and the evolving landscape of mobile threats. To keep up to date on current threats: www.lookout.com/threat-intelligence…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | Critical Vulnerabilities in iOS & Android 5:02

1 year fa5:02

5:02

Security Soapbox | Privacy, Security and Everything in Between

1
Unveiling the Impact of Cyber Poverty with Ramy Houssaini 28:52

1 year fa28:52

28:52

In this episode, host Hank Schless welcomes back Ramy Houssaini, Chief Cyber & Technology Risk Officer at BNP Paribas and Founding Chair of The Cyber Poverty Line Institute. They explore the concept of 'cyber poverty,' and shed light on the global disparity in cybersecurity resources, highlighting the critical need for inclusive cyber capability building to safeguard individuals and societies worldwide. For more information on the Cyber Poverty Line Institute, visit: www.cyberpovertyline.org For more information on Lookout, visit: www.lookout.com Connect with Ramy Houssaini on LinkedIn here: www.linkedin.com/in/strategicleadership Connect with Hank Schless on LinkedIn here: www.linkedin.com/in/hank-schless…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | Robin Banks: A Poster Child for MFA Bypass 3:32

1 year fa3:32

3:32

In this week's episode of 5 Minute Friday, we discuss the resurgence of the Robin Banks, a phishing-as-a-service kit, and its tactics like MFA bypass. We also discuss related threats such as 0ktapus, showcasing evolving cyber threats and the replication of successful attack methods among different groups. To stay up to date on recent threat intelligence, ⁠ ⁠click here⁠.…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | Dropper as a Service 4:36

1 year fa4:36

4:36

In this episode of 5 Minute Friday, we discuss droppers, a type of mobile malware that serves as a middleman between a target device and the threat actor's command and control server. Droppers are now being offered as a service, which could enable more advanced malware to get on more devices. To stay up to date on recent threat intelligence, ⁠ click here⁠.…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | Arid Viper: The Mobile Malware Threat 4:29

1 year fa4:29

4:29

In this episode of 5 Minute Friday, we discuss recent research related to the advanced persistent threat (APT) group Arid Viper. Learn about how their tactics for targeting mobile users are exemplary of an attack chain that many cybercriminals use and why it's so effective To stay up to date on recent threat intelligence, click here .…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | Unveiling Infamous Chisel, Sandworm, and Deblind 4:29

1 year fa4:29

4:29

In this episode of Five Minute Friday, we delve into the shadowy world of cyber espionage as we explore Infamous Chisel, Sandworm, and Deblind. Discover how the Russian APT group, Sandworm, known for major international cyberattacks, ventured into mobile surveillance with Infamous Chisel. Learn about Deblind, a system-level Android app that operates with unprecedented privileges, collecting user activity and suppressing security warnings. For more information, visit: www.lookout.com/threat-intelligence/article/russian-sandworm-apt-infamous-chisel-deblind-spyware…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | Red Alert-Rocket Alerts: A Malicious Threat Exploiting Societal Disruption 5:03

1 year fa5:03

5:03

In this episode of Five Minute Friday, we discuss how societal disruption creates opportunities for malicious actors to exploit people's uncertainties. In this case, we examine a recent case where a malicious version of the legitimate mobile app, RedAlert - Rocket Alerts, was distributed, targeting individuals in Israel. To stay protected against these types of mobile threats, click here .…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | iLeakage: The Hidden Threat to Your iOS Device 3:46

1 year fa3:46

3:46

On this week’s episode of 5 Minute Friday, we are discussing a recent iOS vulnerability, iLeakage, that exploits your web browser including opened tabs and login credentials. Learn more about iLeakage and the importance of protecting your mobile device — the device that goes everywhere you do. For additional resources on protecting your mobile device, visit: www.lookout.com/products/endpoint-security/mobile-endpoint-security…

Security Soapbox | Privacy, Security and Everything in Between

1
5 Minute Friday | Scattered Spider, MGM, and Caesars 4:53

2 years fa4:53

4:53

Caesars Entertainment and MGM resorts were recently breached by a well-known cybercrime group, Scattered Spider. Listen to this week’s 5 Minute Friday to learn about these attacks, how this group operates, and what you can do to avoid your organization being the next target. For a deeper dive, visit: www.lookout.com/documents/threat-reports/us/lookout_tg_scatteredspider.pdf…

Security Soapbox | Privacy, Security and Everything in Between

1
Soap Suds: Protect Your Data From Risky Apps Like TikTok 6:23

2 years fa6:23

6:23

Recent hype around Chinese apps TikTok and Pinduoduo has put a spotlight on the risk surrounding mobile apps. In this quick-fire Soap Suds episode, host Hank Schless discusses the concerns behind these Chinese apps and highlights the reasons why organizations need to keep tabs on mobile apps in general to minimize the risk to their data. For more information on data collection related security threats and how to ban risky apps like TikTok, check out our blog: https://bit.ly/tiktok-podcast…

Security Soapbox | Privacy, Security and Everything in Between

1
Data Overload: Edge Computing Augmenting Our Cloud-first World (ft. Said Ouissal/ZEDEDA) 22:30

2 years fa22:30

22:30

With more devices than humans in our world today, the amount of data being generated is higher than ever, with no sign of slowing down. Enter: edge computing. In this episode, host Hank Schless is joined by Said Ouissal, Founder and CEO at ZEDEDA, to discuss edge computing — from its business applications to the challenges of securing the technology and everything in between.…

Security Soapbox | Privacy, Security and Everything in Between

1
Don’t Think Twice, Modern IT is Alright: Top Ways to Modernize Your IT Today (ft. Faz Sadikali, Cloud Insights) 20:48

2 years fa20:48

20:48

Organizations are making big decisions to implement cloud solutions to boost collaboration and gain competitive advantage. But many aren’t prepared to handle the risks that cloud services introduce. In this episode of Security Soapbox, host Hank Schless talks shop with Faz Sadikali, Founder of Cloud Insights, on how to build secure workstreams and level up IT to reap the benefits of the cloud while ensuring data remains secure. Read Faz's blog about IT modernization here: https://bit.ly/3h3qqlW…

Security Soapbox | Privacy, Security and Everything in Between

1
The Sleeping Giant is Waking Up: the State of Mobile Security Today ft. Cile Montgomery/VMware 17:08

2 years fa17:08

17:08

With the rapid adoption of BYOD and the growing remote workforce, IT and security teams are just catching on to the need for mobile security to protect corporate data and assets. In this episode, host Hank Schless is joined by Cile Montgomery, Product Line Marketing Manager at VMware, to discuss the new risks mobile devices present to organizations and what trends to expect in the next year for mobile security.…

Security Soapbox | Privacy, Security and Everything in Between

1
Soap Suds: The Return of SharkBot 6:07

3 years fa6:07

6:07

SharkBot, a notorious banking trojan, has just resurfaced since it was first spotted in the wild in October 2021. In this newest variation, the malware targets banking credentials through two apps with collectively over 60,000 downloads on Google Play. In this episode, host Hank Schless discusses what you need to know about SharkBot and how to protect yourself and your organization.…

Security Soapbox | Privacy, Security and Everything in Between

1
The Twilio Breach and Phishing: Lessons Learned 6:25

3 years fa6:25

6:25

Twilio, Cloudflare and other organizations reported employees were targeted with a phishing campaign leveraging a kit codenamed 0ktapus. Tune in for this short episode to learn more about the mechanisms behind the phishing campaign and tips for mitigating this threat. To learn more about this breach and how to protect your organization, check out our blog on this topic: https://bit.ly/3cuweCI…

Security Soapbox | Privacy, Security and Everything in Between

1
Fast and Furious: How to Tackle Speed and Complexity in Security with Ramy Houssaini (BNP Paribas) 16:53

3 years fa16:53

16:53

Cybersecurity challenges are moving at cloud speed and leaving legacy approaches in the dust. On this week’s episode, host Hank Schless is joined by Ramy Houssaini, head of privacy and cyber risk at BNP Paribas, to discuss the top security considerations CISOs should be aware of in this rapidly changing security environment. To learn more about what Ramy spoke about, check out Hank's blog on this topic: https://bit.ly/3KtYMsI…

Security Soapbox | Privacy, Security and Everything in Between

1
Risky Business: How to Win Over Your Boards of Directors 18:50

3 years fa18:50

18:50

When pitching to your board of directors, security should be treated like any other business unit. On this week’s Security Soapbox, our host Hank Schless is joined by Paul Simmonds, CEO of the Global Identity Foundation and Former CISO of AstraZeneca, ICI and Motorola Cellular Infrastructure. They discuss how to cut through buzzwords and turn security into a business enabler. Check out Paul’s guest blog on lookout.com to learn more: https://bit.ly/38zFunf…

Security Soapbox | Privacy, Security and Everything in Between

1
You Need All the Telemetry You Can Get: Zero Trust is a Shared Responsibility (feat. Google) 18:08

3 years fa18:08

18:08

While Zero Trust is a popular framework, it doesn’t come with a user manual. On this week’s Security Soapbox, Ashish Kathapurkar and Nikhil Sinha from Google join Hank Schless to discuss how securing your cloud apps requires an approach that goes beyond the apps’ capabilities. Check out our blog to learn more: https://bit.ly/3vAo15w…

Security Soapbox | Privacy, Security and Everything in Between

1
5-minute Fridays: Cyber Readiness And The Russia-Ukraine War 4:10

3 years fa4:10

4:10

As the conflict in Ukraine continues, including in cyberspace, the rest of the world needs to be prepared. Listen in on this 5-minute Fridays episode where I discuss what’s going on in Ukraine and how organizations can be cyber ready. For more information, also check out the blog I wrote on this topic: https://bit.ly/3MMIuMu…

Security Soapbox | Privacy, Security and Everything in Between

1
Breaking the Chain: Are You the Unintended Victim of a Supply Chain Attack? (Ft. Vodafone Security Experts) 19:29

3 years fa19:29

19:29

Between SolarWinds and Log4J, supply chain attacks have become a common occurrence over the past couple of years. In this episode, host Hank Schless is joined by Vodafone security experts Andy Deacon and Verity Carter-Johnson to define what a supply chain is, what the intended and unintended consequences are, and what legal ramifications exist for those who fall victim. Check out our blog about supply chain attacks: https://bit.ly/3Om5C52…

Security Soapbox | Privacy, Security and Everything in Between

1
Let’s Get Real About Zero Trust: How To Assess Your Security Posture 23:14

3 years fa23:14

23:14

While most of us understand Zero Trust conceptually, the path to Zero Trust is a complex and constantly evolving journey. In this episode, host Hank Schless is joined by Andy Olpin, Solutions Engineer at Lookout to scale back all the marketing noise surrounding the term and discuss how organizations can pragmatically get started with Zero Trust. Check out this blog to learn how you can assess your Zero Trust posture: https://bit.ly/3uVVXul…

Security Soapbox | Privacy, Security and Everything in Between

1
Is 2022 the Beginning of the End of On-prem Security? 17:16

3 years fa17:16

17:16

Nearly two years after we were forced to experiment with remote work, 2022 will be an inflection point for both threats and cybersecurity solutions. Tune into our annual predictions episode to hear what Lookout CTO of SASE Products Sundaram Lakshmanan thinks will happen next year. We'll be discussing everything from software supply chains to threat hunting and data protection. Check out Sundaram's predictions blog: https://bit.ly/3uX4Aog…

Security Soapbox | Privacy, Security and Everything in Between

1
Ain’t No Mountain High Enough: Achieving Zero Trust for a Mobile Workforce (feat Art Ashmann from VMware) 20:22

3 years fa20:22

20:22

Widespread remote work has called for a paradigm shift in how we conduct enterprise cybersecurity. On this week’s Endpoint Enigma, VMware Staff EUC Solutions Engineer, Art Ashmann joins Hank Schless to discuss how mobile and cloud technology have enabled us to manage both work and personal responsibilities from anywhere and what organizations can do to securely take advantage of it. Check out our blog to learn more: https://bit.ly/3rDK4Hj…

Security Soapbox | Privacy, Security and Everything in Between

1
Know Thy Enemy: What is Pegasus and What Can You Do? 18:48

4 years fa18:48