Episodes

EP	Title	Date	Categories	Entities	Claims
1	The Phreaky World of PBX Hacking The episode examines PBX hacking and toll fraud, including abuse of voicemail call forwarding and insecure internet-connected PBX systems, and discusses the …	01 September 2017	cybercrime	29	13
2	The Peculiar Case of the VTech Hacker The episode examines the 2015 compromise of VTech’s online services, including customer and children’s data, and the subsequent disclosure, investigation, remediation, legal …	15 September 2017	hacktivism	36	16
3	DigiNotar, You are the Weakest Link, Good Bye! The episode examines the DigiNotar certificate-authority breach, rogue certificates, and the resulting man-in-the-middle attack against Iranian Gmail users.	01 October 2017	advanced persistent threat	34	13
4	Panic! at the TalkTalk Board Room The episode covers multiple TalkTalk-related data breaches, including insider theft at Webpro, a 2015 Carphone Warehouse breach, and the October 2015 TalkTalk …	15 October 2017	hacktivism, cybercrime	34	19
5	#ASUSGATE Kyle Lovett discovers extensive security weaknesses in the ASUS N66 router, including anonymous FTP access, exposed cleartext credentials, default passwords, and vulnerable …	01 November 2017	bug hunter, research	28	22
6	The Beirut Bank Job The episode features Jason E. Street describing physical security awareness engagements in Beirut banks, including social-engineering pretexts, unauthorized access to teller areas, …	15 November 2017	penetration test, social engineering	22	15
7	Manfred (Part 1) Jack Rhysider interviews Manfred about reverse-engineering MMORPG clients and protocols, exploiting packet handling and game logic, and disclosing vulnerabilities in online games.	01 December 2017	black hat, cybercrime	32	18
8	Manfred (Part 2) The episode describes Manfred’s exploitation of online-game protocols and economic systems, including house deletion, item duplication, integer overflows, packet manipulation, and the …	01 December 2017	black hat, cybercrime	41	28
9	The Rise and Fall of Mt. Gox The episode examines the technical failures, breaches, thefts, software errors, and bankruptcy of the Mt. Gox Bitcoin exchange.	15 December 2017	bitcoin, cybercrime	29	16
10	Misadventures of a Nation State Actor The episode presents an anonymized account of a government cyber operation conducted through reconnaissance, weaponization, exploitation, installation, command and control, and attempted …	01 January 2018	advanced persistent threat	32	16
11	Strictly Confidential An incident-response consultant describes investigating a long-running, state-sponsored intrusion into an unnamed technology company, including intellectual-property theft, lateral movement, and delayed remediation.	15 January 2018	incident response	20	10
12	Crypto Wars The episode covers the first Crypto Wars, including US export controls on cryptography, legal challenges by cryptographers and the EFF, the Clipper …	01 February 2018	policy/law	40	21
13	Carna Botnet The episode describes the creation of the Carna Botnet to scan the internet, the resulting Internet Census of 2012, the prevalence of …	15 February 2018	botnet, research	34	15
14	#OpJustina The episode covers the Anonymous campaign against Boston Children’s Hospital, including denial-of-service attacks, phishing, unauthorized mail-server access, the FBI investigation, and Martin …	01 March 2018	hacktivism	26	15
15	Ill Tills Incident responders investigate a global retail breach involving Tiny POS-derived malware on point-of-sale and back-of-house systems, encrypted output files, extensive backdoors, and …	01 April 2018	incident response	32	21
16	Eijah Eijah describes deriving and publicly releasing an AACS decryption key for HD DVD and Blu-ray content, the resulting anti-circumvention response, and his …	01 May 2018	hacktivism, research, black hat	34	19
17	Finn The episode documents Finn’s unauthorized access to a school’s shared files, the principal’s Twitter account, and the school website, followed by disclosure …	03 June 2018	hacktivism, black hat	34	18
18	Jackpot The episode describes the discovery and exploitation of a software bug in IGT Game King video poker machines, the resulting casino investigations …	01 July 2018	cybercrime	20	19
19	Operation Aurora The episode describes Operation Aurora, a coordinated cyber-espionage campaign that compromised Google and numerous other companies using targeted phishing, zero-day exploits, a …	01 August 2018	advanced persistent threat	56	30
20	mobman The episode features Mobman discussing Sub7, unauthorized access to AT&T systems, the resulting telephone-network outage, and the disputed attribution of Sub7’s creation.	15 August 2018	cybercrime, black hat	29	23
21	Black Duck Eggs The episode features Ira Winkler and his former intelligence and Special Forces team conducting espionage simulations, penetration tests, social engineering, and physical …	01 September 2018	penetration test, social engineering	25	21
22	Mini-Stories: Vol 1 The episode contains short stories about an accidental unauthorized penetration test, crypto-jacking on wind-turbine systems, and social-engineering assessments of a corporate headquarters.	15 September 2018	penetration test, social engineering, incident response	35	21
23	Vladimir Levin The episode describes Vladimir Levin’s 1994 unauthorized Citibank money transfers through Sprintnet, the ensuing FBI investigation, and the case’s significance as an …	01 October 2018	cybercrime	28	21
24	Operation Bayonet The episode describes the rise and takedown of AlphaBay and Hansa, culminating in the coordinated Operation Bayonet law-enforcement campaign.	15 October 2018	dark web, cybercrime	42	24
25	Alberto The episode concerns Alberto Hill, a Uruguayan security professional convicted after a medical provider was hacked and patient records were used in …	01 November 2018	bug hunter, research	38	14