Cybersecurity Awareness Month 2023

CyCognito’s CEO on keeping people and endpoints secure

Screen Shot 2021-11-02 at 1.37.53 PM

Freddie Mac CISO on the evolving cyber threat targeting financial services

Screen Shot 2021-10-26 at 6.25.22 PM

Zoom Deputy CISO on adapting to newfound customer requirements

Security Staff Acquisition & Development

Cybersecurity Alert Critical System Vulnerability Detected

Training

Brief

Report warns overconfidence masks flat cyber preparedness

CISA – Cybersecurity and Infrastructure Security Agency displaye

Government security

Critical Infrastructure Security

Threat Intelligence

Mounting Chinese threat prompts CISA to ramp up hiring

netherlandscrireport_1230499

Leadership

Link11 expands Dutch market with new appointment 

<body>Segment 1: Interview with Rob Allen</body>

<body><h3>Segment 1: Interview with Rob Allen</h3></body>

<body>It’s the Year of the (Clandestine) Linux Desktop!</body>

<body><p>It’s the Year of the (Clandestine) Linux Desktop!</p></body>

<body>As if EDR evasions weren’t enough, attackers are now employing yet another method to hide their presence on enterprise systems: deploying tiny Linux VMs. Attackers are using Hyper-V and/or WSL to deploy tiny (120MB disk space and 256MB memory) Linux VMs to host a custom reverse shell and reverse proxy.</body>

<body><p>As if EDR evasions weren’t enough, attackers are now employing yet another method to hide their presence on enterprise systems: deploying tiny Linux VMs. Attackers are using Hyper-V and/or WSL to deploy tiny (120MB disk space and 256MB memory) Linux VMs to host a custom reverse shell and reverse proxy.</p></body>

<body>In this segment, we’ll discuss strategies and mitigations to battle this novel technique with Rob Allen from Threatlocker.</body>

<body><p>In this segment, we’ll discuss strategies and mitigations to battle this novel technique with Rob Allen from Threatlocker.</p></body>


<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.darkreading.com/endpoint-security/pro-russian-hackers-linux-vms-hide-windows">Pro-Russian Hackers Use Linux VMs to Hide in Windows</a></li>


<li><a rel="noopener" target="_blank" href="https://www.bleepingcomputer.com/news/security/russian-hackers-abuse-hyper-v-to-hide-malware-in-linux-vms/">Russian Hackers Abuse Hyper-V to Hide Malware in Linux VMs</a></li>


<li><a rel="noopener" target="_blank" href="https://www.bleepingcomputer.com/news/security/qilin-ransomware-abuses-wsl-to-run-linux-encryptors-in-windows/">Qilin ransomware abuses WSL to run Linux encryptors in Windows</a></li>
</ul>


<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.darkreading.com/endpoint-security/pro-russian-hackers-linux-vms-hide-windows">Pro-Russian Hackers Use Linux VMs to Hide in Windows</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.bleepingcomputer.com/news/security/russian-hackers-abuse-hyper-v-to-hide-malware-in-linux-vms/">Russian Hackers Abuse Hyper-V to Hide Malware in Linux VMs</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.bleepingcomputer.com/news/security/qilin-ransomware-abuses-wsl-to-run-linux-encryptors-in-windows/">Qilin ransomware abuses WSL to run Linux encryptors in Windows</a></li></ul></body>

<body>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</body>

<body><p>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</p></body>

<body>Segment 2: Topic - Threat Modeling Humanoid Robots</body>

<body><h3>Segment 2: Topic - Threat Modeling Humanoid Robots</h3></body>

<body>We're entering the age of human-shaped robots, so it seems like a good time to talk about the fact that they ALREADY HAVE CVEs assigned to them. I guess this isn't a terrible thing - John Connor might have had an easier time if he could simply hack the terminators from a distance...</body>

<body><p>We're entering the age of human-shaped robots, so it seems like a good time to talk about the fact that they ALREADY HAVE CVEs assigned to them. I guess this isn't a terrible thing - John Connor might have had an easier time if he could simply hack the terminators from a distance...</p></body>

<body><p><strong>Resources</strong></p></body>


<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.unitree.com/H2">https://www.unitree.com/H2</a> (watch the video!)</li>


<li><a rel="noopener" target="_blank" href="https://www.scmp.com/tech/tech-trends/article/3332372/chinas-humanoid-robots-get-factory-jobs-ubtechs-model-scores-us112-million-orders">China’s humanoid robots get factory jobs as UBTech’s model scores US$112 million in orders</a></li>


<li><a rel="noopener" target="_blank" href="https://www.scmp.com/tech/article/3331958/big-reveal-xpeng-founder-unzips-humanoid-robot-prove-its-not-human?module=inline&amp;pgtype=article">The big reveal: Xpeng founder unzips humanoid robot to prove it’s not human</a></li>


<li><a rel="noopener" target="_blank" href="https://spectrum.ieee.org/unitree-robot-exploit">Exploit Allows for Takeover of Fleets of Unitree Robots - Security researchers find a wormable vulnerability</a></li>


<li>100-page Paper: <a rel="noopener" target="_blank" href="https://arxiv.org/pdf/2509.14096">The Cybersecurity of a Humanoid Robot</a></li>


<li>5-page Paper: <a rel="noopener" target="_blank" href="https://arxiv.org/pdf/2509.14139v3">Cybersecurity AI: Humanoid Robots as Attack Vectors</a></li>


<li>Amazingly, $300 smart vacuums have some of the same exact vulnerabilities and backdoors built into them as the $16,000 humanoid robots! <a rel="noopener" target="_blank" href="https://codetiger.github.io/blog/the-day-my-smart-vacuum-turned-against-me/">The Day My Smart Vacuum Turned Against Me</a></li>
</ul>


<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.unitree.com/H2">https://www.unitree.com/H2</a> (watch the video!)</li><li><a rel="noreferrer noopener" target="_blank" href="https://www.scmp.com/tech/tech-trends/article/3332372/chinas-humanoid-robots-get-factory-jobs-ubtechs-model-scores-us112-million-orders">China’s humanoid robots get factory jobs as UBTech’s model scores US$112 million in orders</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.scmp.com/tech/article/3331958/big-reveal-xpeng-founder-unzips-humanoid-robot-prove-its-not-human?module=inline&amp;pgtype=article">The big reveal: Xpeng founder unzips humanoid robot to prove it’s not human</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://spectrum.ieee.org/unitree-robot-exploit">Exploit Allows for Takeover of Fleets of Unitree Robots - Security researchers find a wormable vulnerability</a></li><li>100-page Paper: <a rel="noreferrer noopener" target="_blank" href="https://arxiv.org/pdf/2509.14096">The Cybersecurity of a Humanoid Robot</a></li><li>5-page Paper: <a rel="noreferrer noopener" target="_blank" href="https://arxiv.org/pdf/2509.14139v3">Cybersecurity AI: Humanoid Robots as Attack Vectors</a></li><li>Amazingly, $300 smart vacuums have some of the same exact vulnerabilities and backdoors built into them as the $16,000 humanoid robots! <a rel="noreferrer noopener" target="_blank" href="https://codetiger.github.io/blog/the-day-my-smart-vacuum-turned-against-me/">The Day My Smart Vacuum Turned Against Me</a></li></ul></body>

<body><h3>Segment 3: Weekly News</h3></body>

<body>Finally, in the enterprise security news,</body>

<body><p>Finally, in the enterprise security news, </p></body>


<ol class="wp-block-list">
<li>A $435M venture round</li>


<li>A $75M seed round</li>


<li>a few acquisitions</li>


<li>the producer of the movie Half Baked bought a spyware company</li>


<li>AI isn’t going well, or is it?</li>


<li>maybe we just need to adopt it more slowly and deliberately?</li>


<li>ad-blockers are enterprise best practices</li>


<li>firewalls and VPNs are security risks, according to insurance claims</li>


<li>could you power an entire house with disposable vapes?</li>
</ol>


<body><ol><li>A $435M venture round</li><li>A $75M seed round</li><li>a few acquisitions</li><li>the producer of the movie Half Baked bought a spyware company</li><li>AI isn’t going well, or is it?</li><li>maybe we just need to adopt it more slowly and deliberately?</li><li>ad-blockers are enterprise best practices</li><li>firewalls and VPNs are security risks, according to insurance claims</li><li>could you power an entire house with disposable vapes?</li></ol></body>

<body>All that and more, on this episode of Enterprise Security Weekly.</body>

<body><p>All that and more, on this episode of Enterprise Security Weekly.</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14257″} podcast from PPWorks

Endpoint/Device Security

AI benefits/risks

Acquisition

Year of the (Clandestine) Linux Desktop, topic, and the news – Rob Allen – ESW #433

Person holding cellphone with logo of National Security Agency (NSA) on screen in front of webpage.

Stuttgart, Germany – 10-28-2024: Person holding cellphone with l

Indo-Pacific Command leader reportedly considered for top NSA, Cybercom post

deepwatch_logo

Security Operations

AI/ML

Cybersecurity firm Deepwatch cuts jobs, citing AI focus

Abstract Representation of People Connected in a Global Network and Digital World