This week in the bucket, a massive data breach (again), attackers persuade AI to give up your data, and baking tips for starting a Sourdough.

News Stories for Reference:

"National Public Data confirms breach exposing Social Security numbers"

https://www.bleepingcomputer.com/news/security/national-public-data-confirms-breach-exposing-social-security-numbers/

Check to see if you are involved in the breach: https://npd.pentester.com/search

"Microsoft’s AI Copilot can be weaponized as an ‘automated phishing machine,’ but the problem is bigger than one company"

https://fortune.com/2024/08/13/microsoft-ai-copilot-hacking-prompt-injectoin-attack-black-hat/

Cyber Career Resources:

Cyber Seek Career Pathway | Link

SANS Cyber Security Roadmap | Link

SANS Cyber Courses and Certs by Job Role | Link

GIAC NICE Framework | Link

TCM Security | Link

A Little Something Extra

2030: Privacy's Dead. What happens next? | Tom Scott, YouTube

youtube.com/watch?v=_kBlH-DQsEg

Connect With Us:

Twitter: @theeffitbucket

Reddit: r/theeffitbucket

E-mail: theeffitbucket@gmail.com

Musical Attribution:

"Limit 70" Kevin MacLeod (incompetech.com)

Licensed under Creative Commons: By Attribution 4.0 License

http://creativecommons.org/licenses/by/4.0/

This week in the bucket, CrowdStrike's RCA reads more like an advertisement, AMI released a private key in code marked "DO NOT TRUST" back in 2016, and how Cybersecurity Clinics are changing the cybersecurity education landscape. Plus, we demonstrate just how little we know about the Olympics.

News Stories for Reference:

"New CrowdStrike RCA Released"

https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdfc

"PKFail bug puts firmware security at risk"

https://www.scmagazine.com/news/pkfail-bug-puts-firmware-security-at-risk

Our Guest(s) This Week:

Francesca Lockhart, Cybersecurity Clinic Program Lead from the Strauss Center for International Security and Law, at the University of Texas at Austin | @FLockhartUT

A Little Something Extra

Sign up for the Extra Life Charity Challenge taking place on Saturday, September 28th at Kinnick Stadium in Iowa City. Text-to-Register Number: Text GAMEON to 51555

Or click here: bit.ly/ELCC25

Connect With Us:

Twitter: @theeffitbucket

Reddit: r/theeffitbucket

E-mail: theeffitbucket@gmail.com

Musical Attribution:

"Limit 70" Kevin MacLeod (incompetech.com)

Licensed under Creative Commons: By Attribution 4.0 License

http://creativecommons.org/licenses/by/4.0/

This week in the bucket, a hacker gets a job, we dig into the aftermath of the Crowdstrike issue that took down 8.5 Million computers, and we reminisce over sci-fi of the 80s and 90s.

News Stories for Reference:

"North Korean hacker got hired by US security vendor, immediately loaded malware"

https://arstechnica.com/tech-policy/2024/07/us-security-firm-unwittingly-hired-apparent-nation-state-hacker-from-north-korea/

"Cybersecurity Threat Advisory: Fake CrowdStrike updates observed in the wild"

https://blog.barracuda.com/2024/07/26/cybersecurity-threat-advisory-fake-crowdstrike-updates-observed-in-the-wild

"CrowdStrike IT Outage Explained by a Windows Developer"

https://www.youtube.com/watch?v=wAzEJxOo1ts

"CrowdStrike Update: Latest News, Lessons Learned from a Retired Microsoft Engineer"

https://www.youtube.com/watch?v=ZHrayP-Y71Q

"Microsoft says EU to blame for the world's worst IT outage"

https://www.euronews.com/next/2024/07/22/microsoft-says-eu-to-blame-for-the-worlds-worst-it-outage

Connect With Us:

Twitter: @theeffitbucket

Reddit: r/theeffitbucket

E-mail: theeffitbucket@gmail.com

Musical Attribution:

"Limit 70" Kevin MacLeod (incompetech.com)

Licensed under Creative Commons: By Attribution 4.0 License

http://creativecommons.org/licenses/by/4.0/