Today we discuss the Detection Engineering Behavior Maturity Model, which is a new Capability Maturity Model for Detection Engineering (surprise!) from Elastic. It seems a little overly complicated to me (M.) but super useful despite that!

Article that we originally saw

Direct link to Elastic Blog Post

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

This week we discuss an attempted kidnapping and ransom of the parents of someone connected to a multi million dollar theft, stolen prompts and responses from Muah.ai's "companions", and how much attention should be paying low severity alerts?

Article 1 - Lamborghini Carjackers Lured by $243M Cyberheist

Article 2 - AI girlfriend site breached, user fantasies stolen

Article 3 - Have you been keeping up with your low confidence detections?

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Does the T-Mobile Consent Decree mean that the government is going to get more involved in breaches? Additionally, Kia closes a gap in it's dealership API which allowed researchers to geolocate and lock/unlock cars. Finally, we briefly discuss a new method attackers are monetizing AWS credentials... it's not pretty.

Article 1 - T-Mobile US to cough up $31.5M after that long string of security SNAFUs
Supporting Articles:
The Cost of Doing Business
T-Mobile hit with $60M fine over data security violations
T-Mobile to take $400M hit from hacking settlement
T-Mobile Consent Decree

Article 2 - Hacking Kia: Remotely Controlling Cars With Just a License Plate
Supporting Articles:
Plate to VIN
Car Companies Know When You Speed. Then They Sell That Data

Article 3 - A Single Cloud Compromise Can Feed an Army of AI Sex Bots

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!