Hacking Multi-Factor Authentication

FromMalicious Life

Start listening View podcast show

Hacking Multi-Factor Authentication

FromMalicious Life

ratings:

Length:

26 minutes

Released:

Sep 13, 2022

Format:

Podcast episode

Description

Multi-Factor Authentication (MFA) is usually considered a better solution for authentication than just using passwords. But Roger Grimes, a veteran security professional, and a Data-Driven Defense Evangelist claims that the sense of security current MFA solutions provides us - is false. Advertising Inquiries: https://redcircle.com/brands

Released:

Sep 13, 2022

Format:

Podcast episode

Titles in the series (100)

Malicious Life by Cybereason tells the unknown stories of the history of cybersecurity, with comments and reflections by real hackers, security experts, journalists, and politicians.

Skip carousel

The Dark Avenger: In 1989, a message was found in a virus: “Eddie Lives…Somewhere in Time!”. ‘Eddie’ was a particularly nasty virus, and its discovery led a young Bulgarian security researcher down a rabbit hole, on a hunt for the prolific creator of the Eddie virus: Th... by Malicious Life
30 min listen
Spam Empire: In this episode of Malicious Life, we take a look at one of the oldest forms of criminal activity on the web- the spam empires of the 90’s and 2000’s. Find out how these multi-million dollar industries operated, by Malicious Life
31 min listen
Ghost In The Machine: Cybercrime is one of the most notable threats we face as computer users, nowadays. But it wasn’t always so. Those of us who’ve been in the field long enough may remember a time when computer viruses were much more innocent, by Malicious Life
26 min listen
Friend or Foe: The largest hack in U.S military history may have been conducted by… The NSA. In 1997, a wargame conducted by the NSA showed just how unprepared we were for a potential cybernetic strike- in 4 days, NSA hackers were able to take down entire military ne... by Malicious Life
36 min listen
Stuxnet, part 3: Stuxnet was a devastating weapon, but who wielded it? That is the question we try to answer with the final installment of our Stuxnet series. In this episode, we explore other, similar battles of the modern cyber war, by Malicious Life
30 min listen
Stuxnet, part 1: Where armies once fought with bullets and bombs, they now engage in clandestine, invisible warfare. In 2010 a virus was discovered that would change the world’s perception of cyber warfare forever. Dubbed Stuxnet, by Malicious Life
33 min listen
GhostNet: A young woman is arrested by the Chinese government while trying to cross the border to Tibet. Her interrogator, a Chinese spy, pulls out a dossier full of information regarding her activity online. It turns out she’s been visiting pro-Tibet websites, by Malicious Life
28 min listen
Amit Serper Interview- Holiday Special Episode: It’s the holidays and everyone’s on vacation – but the Internet never rests and neither do the bad guys in cybersecurity. So, for this holiday special, we figured we’ll air an interesting interview we did a few weeks back with Amit Serper, by Malicious Life
39 min listen
Hell to Pay: A global FBI manhunt for the world’s most wanted cyber criminal ends in the capture of a massive criminal network, but with the escape of the man himself. Security experts who operate within the gray areas of morality develop botnets that destroy perso... by Malicious Life
37 min listen
The Whistleblowers: WikiLeaks has ushered in a new age in whistle blowing: Modern leakers such as Chelsea Manning – who’s story is the focus of our current episode – expose huge amounts of confidential information. But can these mega-leaks really influence the actions and... by Malicious Life
36 min listen
Big Cannons: 2016 is known throughout the circles of information security as “The Year of The DDoS Attacks”, and rightfully so: 5 large scale DDoS attacks – ‘Distributed Denial Of Service’ – shocked the technology world. In this episode of Malicious Life, by Malicious Life
45 min listen
The Trojan Horse Affair: The early 2000s were an interesting time in Information Security. This is roughly the period when malware transitioned from viruses written by teenagers for fun, to cybercrime tools in the hands of sophisticated criminals. by Malicious Life
22 min listen
The Roots of Evil: WannaCry’s widespread cyber attack on more than 200,000 computers all over the world made headlines – but only a few people remember a similar attack, named The AIDS Trojan, almost 30 years earlier… In this episode of Malicious Life, by Malicious Life
30 min listen
The Half Life 2 Hack: How far should a die-hard fan go, in order to bring closer to them the thing that they love? In one of the most interesting, yet relatively unknown cybersecurity stories, a young hacker attempts to steal his favorite game prior to its release and then ... by Malicious Life
38 min listen
Deception: From the Bulgarian hacker scene of the 90’s, featured in episodes 1 and 2, we now move to the vibrant underground hacker scene of West and East Berlin. Working secretly for the KGB, a young Berliner hacker attempts to hack the U.S military network, by Malicious Life
30 min listen
The Propaganda: Governments around the world have been making devious use of the internet as a platform to spread, not malware, but propaganda. As in all wars, propaganda is a huge part of the modern cyber war. Join us as we explore the roots, by Malicious Life
40 min listen
Fancy Bear, Cozy Bear: When representatives from the Democratic National Committee reached out to a silicon valley cybersecurity company, to investigate a potential breach in their computer system, it’s hard to imagine what they might have expected to come of it. by Malicious Life
31 min listen
The Morris Worm Pt. 2: In an attempt to halt the Morris worm’s path of destruction, a systems administrator at Harvard shut down the university router through which Andy Sudduth’s message would be sent to the internet. The post didn’t go through until after it was too late.... by Malicious Life
22 min listen
The Legalities of the Cyber War: Catching a criminal is by no means easy, but there’s something we take for granted in any crime: that the criminal has a face and a name, that they used a specific weapon on a specific target, and that the crime had ended once it was complete. by Malicious Life
23 min listen
Weapons of Mass Disruption: The threat of fire and fury stands at the center of all modern conflicts- nuclear bombs that can eradicate life in seconds are the ultimate weapon of war, as they pose a huge threat to centers of population. But what of the cyber war? by Malicious Life
41 min listen
Stuxnet, part 2: Stuxnet was a weapon, a kind of a smart bomb- perhaps one of the smartest bombs ever created. A bomb that couldn’t rely on operators, cameras, and laser targeting, instead it had to “think” its way to its destination. An invisible commando unit, by Malicious Life
27 min listen
Shamoon – The Biggest Hack In History: The Shammon Virus. There is a single company, run by a royal family, which employs the majority of the Saudi working population. It’s worth more than Apple, Google, and Amazon…by a lot. The Saudi Aramco oil company is one of the most significant commer... by Malicious Life
27 min listen
The Soldiers of North Korea: Guerrilla warfare has been around for as long as conventional warfare has. The idea that a small force, through cunning and brazen action, could overtake a larger force is an old one. From pirates who would take merchant ships by surprise, by Malicious Life
34 min listen
The WANK Worm, Part 1: On October 16th, 1989, NASA's scientists went into work preparing to launch a spacecraft that very day. But when they sat down to their computers, they were met with an unexpected greeting: “Your system has been officially WANKed. by Malicious Life
35 min listen
Cyber Terrorism: What governments and powerful organizations regularly use, others will find ways to use as well. Cyber activity fits so incredibly well with terrorism. Actors can remain hidden, or reveal themselves to the world; Create propaganda campaign, by Malicious Life
31 min listen
The Stuxnet Virus Pt. 2: Stuxnet was a weapon, a kind of a smart bomb- perhaps one of the smartest bombs ever created. A bomb that couldn’t rely on operators, cameras, and laser targeting, instead it had to “think” its way to its destination. An invisible commando unit, by Malicious Life
27 min listen
The Stuxnet Virus Pt. 3: Stuxnet was a devastating weapon, but who wielded it? That is the question we try to answer with the final installment of our Stuxnet series. In this episode, we explore other, similar battles of the modern cyber war, by Malicious Life
30 min listen
Gene Spafford on the Morris Worm & Cyber-security in the 1980’s: Eugene Spafford (aka Spaf), a professor of computer science at Purdue University, was the first researcher to publish a detailed analysis of the infamous Morris Worm. Gene talks to Ran about this incident, as well as how was security different in the 1... by Malicious Life
56 min listen
The Target Hack: If movies have taught me anything, it’s that if you want to rob a bank, you dress as the cleaning crew. The people behind the Target hack must have seen one action film too many, because when they decided to hack one of the biggest retailers in the wor... by Malicious Life
34 min listen
WoW: Corrupted Blood: How does the outbreak of a “plague” inside a video game- a bug, essentially- affect real-life disease research? by Malicious Life
27 min listen

More Episodes from Malicious Life

Skip carousel

The Y2K Bug, Part 1 by Malicious Life
27 min listen
Can You Bomb a Hacker? by Malicious Life
31 min listen
Kevin Mitnick, Part 2 by Malicious Life
49 min listen
Kevin Mitnick, Part 1 by Malicious Life
37 min listen
SIM Registration: Security, or Surveillance? by Malicious Life
31 min listen
The Mariposa Botnet by Malicious Life
44 min listen
The Real Story of Citibank’s $10M Hack by Malicious Life
33 min listen
How to Hack Into Satellites by Malicious Life
30 min listen
Moonlight Maze by Malicious Life
35 min listen
Volt Typhoon by Malicious Life
32 min listen
Is NSO Evil? Part 2 by Malicious Life
40 min listen
Is NSO Evil? Part 1 by Malicious Life
32 min listen
Should You Pay Ransomware Attackers? A Game Theory Approach by Malicious Life
33 min listen
Silent Firewalls: The Underrepresentation of Women in Cyber by Malicious Life
30 min listen
Operation Kudo by Malicious Life
34 min listen
Can We Stop the AI Cyber Threat? by Malicious Life
27 min listen
Is Generative AI Dangerous? by Malicious Life
38 min listen
Why aren't there more bug bounty programs? by Malicious Life
34 min listen
The Voynich Manuscript by Malicious Life
29 min listen
Roman Seleznev: Did the Punishment Fit the Crime? by Malicious Life
38 min listen
Sony BMG's Rootkit Fiasco by Malicious Life
41 min listen
Ad Fraud, Part 2 by Malicious Life
29 min listen
Ad Fraud, Part 1 by Malicious Life
24 min listen
The Economics Of Cybersecurity by Malicious Life
27 min listen
The Reason You Don’t Have Data Privacy by Malicious Life
37 min listen
How Entire Countries Can Lose the Internet by Malicious Life
33 min listen

Related podcast episodes

Skip carousel

Protecting Your Practice from Click to Brick by True to Form Podcast
26 min listen
Addressing Identity-Related Threats in 2024 - Rod Simmons - ESW #353: In this interview, we talk to Rod Simmons, the VP of Product Strategy at Omada. We'll discuss the complex topic of securing identities against ever growing threats. We'll discuss challenges like unnecessary access, accounts with too many permissions,... by Security Weekly Podcast Network (Video)
49 min listen
Addressing Identity-Related Threats in 2024 - Rod Simmons - ESW #353: In this interview, we talk to Rod Simmons, the VP of Product Strategy at Omada. We'll discuss the complex topic of securing identities against ever growing threats. We'll discuss challenges like unnecessary access, accounts with too many permissions,... by Enterprise Security Weekly (Video)
49 min listen
How to achieve the Defense Department’s CMMC compliance with Frank Smith: Did you know that the Department of Defense (DOD) is mandating that suppliers have Cybersecurity Maturity Model Certification (CMMC) to a prescribed level? In , Frank Smith, Manager of Security and Consulting Practice at Ntiva, shares all you need to... by TestGuild Security Testing Podcast
33 min listen
We're Gonna Run These Pen Test Exercises Until You Turn Purple: Find all the links and images on CISO Series () We learn to iterate our security stamina faster by bringing the attackers and defenders in the room together. We're seeing purple on this episode of... by CISO Series Podcast
32 min listen
#8 - The Moral Reason for Security (First Data/Card Connect): Different reasons can motivate different behaviors. Security can be driven by a standard of which you meet the minimum level required. Security can be put in place to protect the organization against loss. What about the good of the client? Managing... by The Treasury Update Podcast
23 min listen
January 6, 2022: Microsoft’s digital signature verification exploited New York AG warns of credential stuffing attacks Google acquires Siemplify Thanks to our episode sponsor, deepwatch Increasing ransomware attacks and their evolving sophistication have been... by Cyber Security Headlines
6 min listen
Rated #1 in Irresponsible Security Journalism: All links and images for this episode can be found on CISO Series () No security alert is too small for us to completely misrepresent its severity. The sky is falling on the latest episode of CISO/Security Vendor Relationship Podcast. Thanks to... by CISO Series Podcast
34 min listen
The Brave New World of ERP Security by The ERP Advisor
47 min listen
Will the Coronavirus Create a Data Breach in Your Company? with Jodi Daniels: Will the Coronavirus Create a Data Breach in Your Company? with Jodi Daniels by Entrepreneurs on Fire
37 min listen
ESW #318 - Mickey Bresman, Dave Merkel, Michaël Lakhal, Ashley Leonard, Jason Rolleston, Eve Maler: This week, we discuss fundings, acquisitions (TWO DSPM exits!), the ongoing market downturn/weirdness, and surprise - LLM-based AIs! We spend a fair amount of time talking about the importance of breach transparency - we need to be able to learn from... by Security Weekly Podcast Network (Audio)
145 min listen
009: Coding Securely In PHP: With big security breaches becoming the norm these days, security is something we simply cannot ignore. In this discussion we'll ask the experts how we can become more responsible developers by learning about specific security threats we should be most... by PHPRoundtable Podcast
72 min listen
Digital Transformation Breaks Risk Management - Chris Morales - BSW #323: CEOs and boards struggle with their digital transformation process. Does their operations hinder or align with business initiatives? Has their security operations scaled to meet the data and digital demands to protect against business risk? In... by Security Weekly Podcast Network (Video)
37 min listen
EP373: Spotlight - Jamie Beresford - Understanding The Future Of Cyber Safety: “Storage isn’t what’s attacked, it's access. People steal access, they steal credentials, usernames and passwords from users, and access data illegally from anywhere, it's not about the location.” -Jamie Beresford As the tools that help make... by The Successful Bookkeeper Podcast
28 min listen
Who's Watching the Watchers?: What happens when no one is watching the watchers, when the solution you're trusting for the security of your organization has security issues itself? In this episode of Cybersecurity Unplugged, Jeremy Rasmussen, CTO at Abacode, a Managed... by Cybersecurity Unplugged
25 min listen
Penetration Testing by Prodigy
29 min listen
Protecting Against Fraud: Insights from the 2020 Treasury Fraud and Controls Survey - #88: Host Craig Jeffery joins Chris Gerda, Risk and Fraud Prevention Officer of Bottomline Technologies, to discuss the results and strategies from the 2020 Treasury Fraud & Controls Survey. Topics of discussion center around corporate fraud concerns,... by The Treasury Update Podcast
32 min listen
Episode 24: To 3D Secure or Not? For Merchants That is the Question by The Online Fraudcast with Brett Johnson & Karisse Hendrick
54 min listen
101 Questions to Ask When Shopping for Threat Intelligence: 101 Questions to Ask When Shopping for Threat Intelligence by Inside Security Intelligence
26 min listen
Data Protection 101: Redaction, Masking, Encryption, and More with Skyflow’s Ram Muthukrishnan: In this episode, Ram Muthukrishnan, Senior Product Manager at Skyflow, joins the show to delve into the fundamental aspects of data protection. Ram demystified key concepts like redaction, masking, and encryption, shedding light on their significance... by Partially Redacted: Data, AI, Security, and Privacy
33 min listen
566. Craig Callé, Third Party Risk Management and Cyber Security: Craig Callé talks about third party risk management (TPRM) and cyber security. TPRM is a subset of Governance Risk and Compliance (GRC), which aims to help organizations achieve their objectives, address uncertainties, and act with integrity. TPRM is... by Unleashed - How to Thrive as an Independent Professional
34 min listen
Challenges & Opportunities in Cyber Threat Intelligence with Brian Kime: Brian Kime, VP of Intelligence Strategy and Advisory at ZeroFox, talks about all things threat intelligence this week. Brian explains why he chose threat intelligence as his focus, where he’s seen opportunities for growth in recent years, and what ch... by Hacker Valley Studio
31 min listen
2840: The CISO’s Journey: Balancing Risk, Resilience, and Business Growth: How can Chief Information Security Officers (CISOs) transcend traditional boundaries to become enablers of business success and innovation? Join me on Tech Talks Daily as I sit down with Jim Doggett, CISO of Semperis and a veteran in the field of... by The Tech Talks Daily Podcast
30 min listen
One Day You'll Grow Up to Know Less Than You Do Now: All links and images for this episode can be found on CISO Series We know so little when we're born. We're just absorbing information. But then we get older, and get the responsibility to secure the computing environment of a large company, we... by CISO Series Podcast
35 min listen
Fingerprint authentication is not completely secure. [Research Saturday]: Passwords are the traditional authentication methods for computers and networks. But passwords can be stolen. Biometric authentication seems the perfect solution for that problem. Our guest today is Craig Williams, director of Talos outreach at Cisco.... by CyberWire Daily
21 min listen
Security Budgets: All links and images for this episode can be found on CISO Series () How do you calculate a security budget? Is it a percentage of the IT budget? Something else? And why does it grow so drastically after a breach? Thanks to this week's podcast... by Defense in Depth
26 min listen
Best Practices for Mitigating Cybersecurity and Blockchain Risks With Roderic Deichler: Roderic Deichler is the Co-founder and Chief Security Officer at AfterDark, a boutique blockchain security company delivering white glove services, such as smart contract advising, pentesting, and security advising. Roderic founded the company to fill... by She Said Privacy/He Said Security
25 min listen
I Have the Perfect Job for You (But Probably Not): All links and images for this episode can be found on CISO Series () You put those qualifications on your resume, and I queried. So don't blame me for getting your hopes up. This episode is hosted by me, (), producer of CISO Series and... by CISO Series Podcast
36 min listen
Street cred: increasing trust in passwordless authentication. [CyberWire-X] by CyberWire Daily
30 min listen
We Recommend a “Know the Right People” Certification: All links and images for this episode can be found on CISO Series There are so many fantastic certifications out there for security professionals. But we've found the one certification that will really help you land the right job really quickly, is... by CISO Series Podcast
34 min listen

Discover this podcast and so much more

Hacking Multi-Factor Authentication

Hacking Multi-Factor Authentication

Description

Titles in the series (100)

More Episodes from Malicious Life

Related podcast episodes