2019-028-fileless_malware_campaign,privacy issues with email integration-new_zip_bomb_record

FIleless malware campaign - https://www.microsoft.com/security/blog/2019/07/08/dismantling-a-fileless-campaign-microsoft-defender-atp-next-gen-protection-exposes-astaroth-attack/

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/fileless-threats

 

https://www.andreafortuna.org/2017/12/08/what-is-reflective-dll-injection-and-how-can-be-detected/

https://www.extremetech.com/computing/294852-new-zip-bomb-stuffs-4-5pb-of-data-into-46mb-file 

 

https://articles.forensicfocus.com/2019/07/15/finding-and-interpreting-windows-firewall-rules/

https://www.theregister.co.uk/2019/02/11/google_gmail_developer/     

Privacy issues:

    Companies integrating with email systems

    Pulling all information from the inboxes

    Collecting that information

    Storing for long periods of time (‘training the AI’)

    Check for SOC2 and press them on their data storage and privacy policies

    Have language in your 3rd party agreements to understand sharing and collection

 

Check out our Store on Teepub! https://brakesec.com/store

Join us on our #Slack Channel! Send a request to @brakesec on Twitter or email bds.podcast@gmail.com

#Brakesec Store!:https://www.teepublic.com/user/bdspodcast

#Spotify: https://brakesec.com/spotifyBDS

#RSS: https://brakesec.com/BrakesecRSS

#Youtube Channel:  http://www.youtube.com/c/BDSPodcast

#iTunes Store Link: https://brakesec.com/BDSiTunes

#Google Play Store: https://brakesec.com/BDS-GooglePlay

Our main site:  https://brakesec.com/bdswebsite

#iHeartRadio App:  https://brakesec.com/iHeartBrakesec

#SoundCloud: https://brakesec.com/SoundcloudBrakesec

Comments, Questions, Feedback: bds.podcast@gmail.com

Support Brakeing Down Security Podcast by using our #Paypal: https://brakesec.com/PaypalBDS OR our #Patreon

https://brakesec.com/BDSPatreon

#Twitter: @brakesec @boettcherpwned @bryanbrake @infosystir

#Player.FM : https://brakesec.com/BDS-PlayerFM

#Stitcher Network: https://brakesec.com/BrakeSecStitcher

#TuneIn Radio App: https://brakesec.com/TuneInBrakesec

 

 

Cool Tools:

https://github.com/AxtMueller/Windows-Kernel-Explorer

https://github.com/TheSecondSun/Revssl