ChatGPT may represent one of the biggest disruptions in modern history with it's powerful A.I based chatbot. But within weeks of ChatGPT's release, security researchers discovered several cases of people using ChatGPT for everything from malware development to exploit coding. In this video, take a look at the five ways attackers are utilizing ChatGPT for wrong doing. 0:14 Intro to ChatGPT / Natural Language Processing (NLP) & GPT 1:28 Using ChatGPT for Vulnerability Discovery 1:56 Vulnerability Prompts to Utilize 3:10 Writing Exploits 3:35 Exploit Prompts to Utilize 4:33 Malware Development 5:00 Malware Examples (Stealers, Command & Control) 5:42 Polymorphic Malware Development Using ChatGPT 6:21 A.I. Based Phishing using NLP (Natural Language Processing) 7:20 ChatGPT Advantages over Traditional Phishing Messages 7:41 Custom Messages Using GPT-3 8:04 Using Macros and LOLBINs 9:33 GPT-3 vs GPT-4 (Coming Soon) 9:56 Cybersecurity Considerations and Predictions

In this video, we compare traditional VPN vs SASE and SSE (Security Service Edge). SSE and SASE are categories of technology that provide Cloud-delivered security services. We’ll review the components that make up SASE and SSE, and look at how these two similar services compare. The Problem with VPNs 0:01 Secure Access Service Edge (SASE) Overview 1:28 SASE Components 2:10 SASE Integration 3:08 Security Service Edge (SSE) 4:40 SASE vs SSE 4:53 Choosing Between SASE and SSE 5:31

Extended Detection and Response (XDR) is a cybersecurity tool that integrates with multiple products to detect and respond to threats. While EDR (Endpoint Detection and Response) focuses on the endpoint, XDR uses A.I. to ingests information from multiple sources and detect patterns across different device types. In this video, we'll discuss what XDR is and how it compares to EDR and MDR (Managed Detection and Response). Overview 0:55 - What is Endpoint Detection and Response (EDR)? 3:11 - Traditional Endpoint vs EDR 3:46 - What is Extended Detection and Response (XDR)? 4:27 - XDR Components 5:13 - How XDR uses A.I. (artificial intelligence) 6:06 - What is Managed Detection and Response (MDR)? 6:30 - Forrestor MDR definition 7:08 - MDR Segments / Markets 7:48 - Putting it together: EDR vs XDR vs MDR

Reconnaissance is the first step of the cybersecurity kill chain and the foundation to a successful attack. Open-source Intelligence (OSINT) is the practice of collecting publicly available information about a target. In this video, we'll cover what OSINT is, the framework and methodology for an OSINT investigation and some of the top tools in OSINT data investigation. What is OSINT (Open-source Intelligence) 1:09 The OSINT Methodology and Process 1:34 OSINT Tools 2:23 Maltego Overview 2:30 theHarvester Overview 3:35 Spiderfoot overview 4:25 Other OSINT Tools 5:32 OSINTFramework.com 6:29 OSINT Defense 6:57 -Maltego & theHarvester are included with Kali -Spiderfoot Community edition Github link: https://github.com/smicallef/spiderfoot

Bypassing multi-factor authentication was once considered more of a proof of concept then an actual threat. In this video, we will review four common techniques an attacker will utilize to hack multi-factor and two-factor authentication. We’ll review Evilgenix2, which is a popular framework for stealing authentication cookies, and other methods that an attacker can utilize to bypass the authentication process. 1:06 Evilgenix2 Framework 2:51 Evilgenix Defense and Protection 3:45 Pass the Cookie 5:10 Pass the Cookie Defense and Protection 5:56 SMS Man-in-the-Middle 6:34 SIM Swap 8:13 Attack on Soft and Hard Tokens 9:22 Hard Token Example Resources/Links -Evilgenix GitHub: https://github.com/kgretzky/evilginx2 -Pass the Cookie example: https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/ -Android 0-day SMS: https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/

Exploits represent any piece of code, data or sequence of commands that targets a vulnerable application for the purpose of gaining unauthorized access. Log4j is one of the most popular recent exploits that is widely considered to be the most dangerous exploit of our time. In this video, we will break down the anatomy of an exploit, and how each part of the malicious code comes together to target a vulnerable application. We’ll discuss the three distinct parts most exploits have in common, as well as a deep dive into Log4j. Exploit Anatomy 0:51 Lof4j Overview 1:12 Types of Exploits 2:25 Buffer Overflows 2:44 Buffer Overflow Demo 3:18 Shell Codes 4:07 Jumping the Memory Stack 5:26 Payloads 5:49 Meterpreter 6:30 Layered Defense Against Exploits 7:05

AIOps (also known as MLOps) is a combination of big data with machine learning to enhance IT operations. Using artificial intelligence, the system can find and predict network issues in real time. With Gartner predicting an increase of 700% over the next three years, this technology is only just beginning. In this video, we'll review what AIOps is, uses cases, and the five Gartner components that make up the system. 1:02 - Current I.T. Operations Triaging 1:53 - Intro to AIOps (Artificial Intelligence for IT Operations) 2:15 - Machine Learning for Operations 2:36 - Big Data Analytics for Operations 3:20 - Gartner's Five Functions 3:33 - Function 1: Ingestion 4:32 - Function 2: Topology 4:57 - Function 3: Correlate 5:39 - Function 4: Recognition 6:49 - Function 5: Remediation 7:39 - AIOps Market

The Cybersecurity Kill Chain is a model for describing the steps an attacker must complete to carry a successful attack. In this video, we'll look at defensive tools we can apply at every phase of the kill chain as part of a multi layered security strategy.