This week on Hacker And The Fed we break down how Equifax was breached, is Google Authenticator MFA Cloud Sync feature responsible for a hack into 27 crypto companies? Google’s Threat Analysis Group announces an in-the-wild 0-day exploit chain for iPhones, the year of the insider threat continues with the arrest of a Department of State IT Contractor on espionage charges.
Links from the episode:
How Equifax Was Breached in 2017
https://blog.0x7d0.dev/history/how-equifax-was-breached-in-2017/
https://twitter.com/vxunderground/status/1700335482440204521
 
Retool Blames Breach on Google Authenticator MFA Cloud Sync feature
https://www.bleepingcomputer.com/news/security/retool-blames-breach-on-google-authenticator-mfa-cloud-sync-feature/
 
0-days Exploited by Commercial Surveillance Vendor in Egypt
https://blog.google/threat-analysis-group/0-days-exploited-by-commercial-surveillance-vendor-in-egypt/
 
Department of State IT Contractor Arrested on Espionage Charges
https://fedscoop.com/department-of-state-it-contractor-arrested-on-espionage-charges/
 
Support our sponsors:
Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off

Get your Hacker and the Fed merchandise at hackerandthefed.com
Send HATF your questions at questions@hackerandthefed.com