The Dark Dive

Can you quantify the risk the dark web poses to organizations? In this episode of the podcast, we discuss a landmark study that has tried to do just that. We're joined by Scott Stransky, Managing Director and Head of the Marsh McLennan Cyber Risk Intelligence Center and Ben Jones, CEO of Searchlight Cyber and Scott unravel the findings of the report "The Correlation Between Dark Web Exposure and Cybersecurity Risk". We discuss how cyber insurance loss data can be used to calculate the impact of dark web exposure on an organization's cybersecurity risk. We look at how different types of dark web exposure individually impact the chance of a cyberattack. Then we explore how multiple factors combined increase the chances of a cybersecurity incident. Download the research report discussed in the podcast: https://slcyber.io/whitepapers-reports/the-correlation-between-dark-web-exposure-and-cybersecurity-risk/ Apply for a Dark Web Risk Report on your organization: https://slcyber.io/dark-web-risk-report-find-out-your-dark-web-exposure/ Want to find out more or have a suggestion for future podcast episodes? Email: thedarkdive@slcyber.io Website: www.slcyber.io [http://www.slcyber.io/] LinkedIn: www.linkedin.com/company/searchlight-cyber [http://www.linkedin.com/company/searchlight-cyber] X: www.twitter.com/SLCyberSec [http://www.twitter.com/SLCyberSec] Weekly newsletter: www.slcyber.io/beacon/ [http://www.slcyber.io/beacon/]

This episode of the podcast looks at the Qilin ransomware group's attack on the UK's National Health Service. Or - more accurately - their ransomware attack against Synnovis, a third party pathology testing organization for a number of London hospitals. Guests Louise Ferrett and Joe Honey go through time timeline of the attack - discussing the group's history, whether to trust claims that the attack was politically motivated, and the reasoning behind leaking 400gb of stolen patient data. This episode also looks at the state of ransomware half a year into 2024 - including where some of the biggest groups from last year have disappeared off to, new groups that security professionals should be aware of, and the diversification of ransomware landscape as more groups emerge than ever before. Want to find out more or have a suggestion for future podcast episodes? * Email: thedarkdive@slcyber.io * Website: www.slcyber.io [http://www.slcyber.io/] * LinkedIn: www.linkedin.com/company/searchlight-cyber [http://www.linkedin.com/company/searchlight-cyber] * X: www.twitter.com/SLCyberSec [http://www.twitter.com/SLCyberSec] * Weekly newsletter: www.slcyber.io/beacon/ [http://www.slcyber.io/beacon/]

This episode of The Dark Dive takes a listener's question as a jumping off point to talk about the topic of data leaked on the dark web. Guests Luke Donovan and Adam Wilson discuss noteworthy data leaks from over the years - impacting organizations such as 23andMe, Ashley Madison, and Yahoo! - and bring things right up to the present day (June 2024) by looking at the data leaks on BreachForums impacting Ticketmaster and Santander customers. We look at how data such as credit card information, addresses, passwords, usernames, and even biometric information is stolen in the first place, how it is packaged and sold on the dark web, and the implications of highly sensitive data being leaked. Want to find out more or have a suggestion for future podcast episodes? * Email: thedarkdive@slcyber.io     * Website: www.slcyber.io [http://www.slcyber.io/]    * LinkedIn: www.linkedin.com/company/searchlight-cyber [http://www.linkedin.com/company/searchlight-cyber]   * X: www.twitter.com/SLCyberSec [http://www.twitter.com/SLCyberSec]       * Weekly newsletter: www.slcyber.io/beacon/ [http://www.slcyber.io/beacon/]  For more background on the cases we discuss: * Ticketmaster: https://www.bbc.com/news/articles/cw99ql0239wo [https://www.bbc.com/news/articles/cw99ql0239wo]  * Santander: https://www.bbc.com/news/articles/c6ppv06e3n8o [https://www.bbc.com/news/articles/c6ppv06e3n8o]  * 23andMe: https://www.bbc.com/news/technology-67624182 [https://www.bbc.com/news/technology-67624182]  * El Salvador: https://securityaffairs.com/162790/data-breach/el-salvador-massive-leak-biometric-data.html [https://securityaffairs.com/162790/data-breach/el-salvador-massive-leak-biometric-data.html]  * Ashley Madison: https://www.forbes.com/sites/zakdoffman/2020/02/01/ashley-madison-hack-returns-to-haunt-its-victims-32-million-users-now-have-to-watch-and-wait/ [https://www.forbes.com/sites/zakdoffman/2020/02/01/ashley-madison-hack-returns-to-haunt-its-victims-32-million-users-now-have-to-watch-and-wait/]  * Yahoo! 2013 data breach: https://www.bbc.co.uk/news/business-41493494 [https://www.bbc.co.uk/news/business-41493494]  * Nitro: https://www.bleepingcomputer.com/news/security/massive-nitro-data-breach-impacts-microsoft-google-apple-more/ [https://www.bleepingcomputer.com/news/security/massive-nitro-data-breach-impacts-microsoft-google-apple-more/]

In the first episode of season two, The Dark Dive takes a forensic look at Operation Cronos, the international law enforcement takedown of the notorious ransomware group LockBit. Dr. Gareth Owenson and Louise Ferrett give an overview of LockBit, explain how Operation Cronos has unfolded, and discuss why law enforcement has taken an unconventional approach (“the most epic trolling in cybersecurity history”) to this ransomware group takedown. Recorded on May 14, this episode includes the “unmasking” of LockBitSupp in early May, how LockBit has responded to the law enforcement action, and how this operation has (and could still) impact other groups - with the BlackCat ransomware gang choosing early retirement. Useful links: NCA press release, February 20, 2024: https://www.nationalcrimeagency.gov.uk/news/nca-leads-international-investigation-targeting-worlds-most-harmful-ransomware-group/ LockBit statement: https://x.com/vxunderground/status/1761506370656825531 US DoJ sanctions, May 7, 2024: https://www.justice.gov/opa/pr/us-charges-russian-national-developing-and-operating-lockbit-ransomware Want to find out more or get in touch with us?: Email: thedarkdive@slcyber.io [thedarkdive@slcyber.io]  Website: www.slcyber.io [http://www.slcyber.io/] LinkedIn: www.linkedin.com/company/searchlight-cyber [http://www.linkedin.com/company/searchlight-cyber] X: www.x.com/SLCyberSec [http://www.twitter.com/SLCyberSec] Weekly newsletter: www.slcyber.io/beacon/ [http://www.slcyber.io/beacon/]

The final episode of this limited series looks at how law enforcement and cybersecurity professionals can respond to the dark web criminality outlined in the previous five episodes. Returning guest Dr. Gareth Owenson is joined by Ben Jones, CEO of Searchlight Cyber, and Evan Blair, General Manager of North America, to discuss the actions that law enforcement agencies and private organizations are tackling threats that emerge from the dark web. This bumper conversation ranges from how officers identify individuals that are masking their identity with the anonymity of the dark web, to how security teams are beginning to monitor the dark web for "early warning signals" that their organization is about to be attacked, and concludes with the final messages that our experts would like listeners to take away from this podcast series. Want to find out more or have a suggestion for future podcast episodes? Email: thedarkdive@slcyber.io Website: www.slcyber.io [http://www.slcyber.io/] LinkedIn: www.linkedin.com/company/searchlight-cyber [http://www.linkedin.com/company/searchlight-cyber] X: www.twitter.com/SLCyberSec [http://www.twitter.com/SLCyberSec] Weekly newsletter: www.slcyber.io/beacon/ [http://www.slcyber.io/beacon/] Report, "Government Agency Targeted on the Dark Web": https://www.slcyber.io/whitepapers-reports/government-agency-targeted-on-the-dark-web/ [https://www.slcyber.io/whitepapers-reports/government-agency-targeted-on-the-dark-web/]