Episode 222 - The Disappearing Episodes Episode

This week in InfoSec  (11:22)

With content liberated from the “today in infosec” twitter account and further afield

27th February 2002: Timothy Allen Lloyd was sentenced to 41 months in prison for activating a logic bomb at Omega Engineering, 20 days after being fired as a network administrator.

https://x.com/todayininfosec/status/1895255588881474024    

18th February 2013: Burger King's Twitter account was compromised, had its name changed to McDonalds, and shared offensive tweets. The incident was a...well...Whopper! 

https://x.com/todayininfosec/status/1891999132866183322

Rant of the Week (17:34)

Army soldier suspected of AT&T heist Googled ‘can hacking be treason,’ ‘defecting to Russia’

The US Army soldier suspected of compromising AT&T and bragging about getting his hands on President Trump's call logs allegedly tried to sell stolen information to a foreign intel agent.

The military man even Google searched for "can hacking be treason," and "US military personnel defecting to Russia," according to prosecutors who argue he poses a serious flight risk and should be detained.

Cameron John Wagenius, 21, was arrested in Texas in December, and last week told a federal court judge he intends to plead guilty to unlawfully posting and transferring confidential phone records. 

Prosecutors have also linked Wagenius to two other men accused of stealing data from more than 150 Snowflake cloud accounts in April 2024, and then demanding payment to keep a lid on that info.

After admitting his crimes in court, and showing a willingness to enter a guilty plea, "Wagenius should be detained as both a danger to the community — given his ability to access sensitive datasets — and a serious risk of flight," Uncle Sam's attorneys argued.

"While engaged in these criminal activities, Wagenius conducted online searches about how to defect to countries that do not extradite to the United States and that he previously attempted to sell hacked information to at least one foreign intelligence service," the documents allege. 

Billy Big Balls of the Week (24:32)

100-plus spies fired after NSA internal chat board used for kinky sex talk

More than 100 US spies have been fired, and their security clearance revoked, after an internal NSA messaging system was used by staff to chat about their sex lives.

After the NSA – the National Security Agency, that is, not the other meaning – confirmed on state media it was "aware of posts that appear to show inappropriate discussions" by intelligence community employees and that "investigations to address this misuse of government systems are ongoing," Trump's Director of National Intelligence Tulsi Gabbard announced more than 100 people had since been terminated.

The messaging app in question is the NSA's Intelink, a secure intranet service used by various American military and intelligence teams to share information, including top secret and classified threat intel.

Federal workers said to have been involved in the NSFW Intelink chatter included personnel at the NSA, the Defense Intelligence Agency, and US Naval Intelligence.

"There are over 100 people from across the intelligence community that contributed to and participated in … what is really just an egregious violation of trust," Gabbard told Fox News commentator Jesse Watters Tuesday. "What to speak of, like basic rules and standards around professionalism."

Industry News (32:54)

Chinese-Backed Silver Fox Plants Backdoors in Healthcare Networks

Ransomware Gang Publishes Stolen Genea IVF Patient Data

HaveIBeenPwned Adds 244 Million Passwords Stolen By Infostealers

Signal May Exit Sweden If Government Imposes Encryption Backdoor

DISA Global Solutions Confirms Data Breach Affecting 3.3M People

FBI Confirms North Korea’s Lazarus Group as Bybit Crypto Hackers

OpenSSF Publishes Security Framework for Open Source Software

Software Vulnerabilities Take Almost Nine Months to Patch

DragonForce Ransomware Hits Saudi Firm, 6TB Data Stolen

Tweet of the Week (42:59)

https://x.com/roytait/status/1895224942565970354

Come on! Like and bloody well subscribe!