SIM Swapping: How Worrying is it in 2024?

Summary:

Episode Summary: In this exchanged episode, Timothy De Block chats with Mubix about the intricacies of SIM swapping, an attack vector that has seen significant attention. They discuss the current state of SIM swapping, how attackers exploit this technique, and the measures carriers have implemented to mitigate these risks. Mubix highlights the importance of understanding your risk profile and the practical steps organizations and individuals can take to protect themselves.

Key Topics:

• The evolution and difficulty of executing SIM swapping attacks.

• Real-world examples and the misclassification of SIM swapping incidents.

• The impact of enhanced carrier protections and the role of user awareness.

• The distinction between SIM swapping and other forms of social engineering.

• Practical advice for businesses and high-risk individuals to safeguard against SIM swapping.

Discussion Points:

• SIM swapping detection and reporting procedures.

• The role of eSIMs and potential security concerns.

• The importance of proactive security measures and user empowerment.

Contact Information:

Leave a comment below or reach out via the contact form on the site, email timothy.deblock[@]exploresec[.]com, or reach out on LinkedIn.

Check out our services page and reach out if you see any services that fit your needs.

Social Media Links:

[RSS Feed] [iTunes] [LinkedIn]

What cybersecurity tools every organization should have

Summary:

Rob Fuller AKA Mubix joins me to talk about security tooling every organization should have. This was a result of a discussion Rob and I were having about Thinkst Canary and RunZero. Two fantastic tools that are low cost, easy implementation, and provide a ton of value to a security team.

Episode Highlights:

• Lots of tooling to talk about

• You might hear Rob mention that he’s used one of the tools I suggest in a pentest engagement

Guest Information:

Rob Fuller aka Mubix - Twitter

https://malicious.link/

Resources and Mentions:

RunZero

• https://www.runzero.com/

• Canaries (Thinkst)

• https://canarytokens.org/

• https://canary.tools/

• Shodan.io

• https://www.shodan.io/

• OSQuery / Fleet

• https://github.com/fleetdm/fleet

• https://fleetdm.com/

• Netbird / TailScale

• https://netbird.io/

• https://tailscale.com/

• Sysmon / GrayLog / Logstash / Cribl / Zeek / Wazuh

• https://github.com/SwiftOnSecurity/sysmon-config

• https://graylog.org/

• https://www.elastic.co/logstash

• https://cribl.io/

• https://zeek.org/get-zeek/

• https://wazuh.com/

• Security Onion

• GoDot - Game Dev -> Security Awareness / Security Appreciation

• https://godotengine.org/

• PDQ

• https://www.pdq.com/ 

• GOAD

•  https://github.com/Orange-Cyberdefense/GOAD

• Velociraptor

• https://docs.velociraptor.app/training/

• MISP

• https://www.misp-project.org/

LinkedIn Suggestions

• WisQuas - Lost Rabbit Labs - Noa Park suggestion

• https://www.lostrabbitlabs.com/wisquas 

• Deprovisioning tool - Arvil Nagpal - Abbey Labs

  • https://www.abbey.io/
    

Contact Information:

Leave a comment below or reach out via the contact form on the site, email [timothy.deblock[@]exploresec[.]com, or reach out on LinkedIn.

Check out our services page and reach out if you see any services that fit your needs.

Social Media Links:

[RSS Feed] [iTunes] [LinkedIn]