dumpster diving (noun) [Word Notes]

0:00You're listening to the CyberWire network, powered by N2K. Standard Active Directory Migration Tools don't move AES keys. They move NTLM hashes. That means when you cut over your applications fail silently. In my recent conversation with Semprice's Mike Mesquale, I asked him why standard migration tools miss these accounts and how identity teams can fix them before cut over day. Listen to our full conversation now at explore.theciberwire.com slash Semprice. Hey everybody, Dave here. I want to let you know about a special gathering hosted by Zimperium at the Spy Museum in Washington, D.C. This invitation only event will bring together federal cyber security and technology leaders to discuss some of the most pressing challenges facing government today, including mobile security, mission resilience and the evolving threat landscape.

1:07I'm always grateful for opportunities to spend time with smart people doing important work and I'm excited to be part of these conversations. I hope to see some familiar faces there. If you're interested in attending you can request an invitation. You'll find more information in our show notes. Our thanks to Zimperium for sponsoring this event. We'll see you there. The word is DUNSTER DIVING. Spelled DUNSTER as in a trash receptacle and diving as in descending into something. Definition. The act of searching through an organization's trash or discarded sensitive material.

2:07Example Sentence. A DUNSTER DIVING criminal is a threat to business and individuals alike. Origin and context. DUNSTER DIVING is a physical security breach in which an attacker looks for sensitive documents or devices. That have been thrown in the trash. Information gleaned from these items can be used to launch additional attacks such as fishing or identity theft. Secureworks describes a case that occurred in 2020 in which a threat actor searched through tax preparers, dumpsters, to gather tax payers information. The threat actor then sold this information on criminal forms and cyber criminals use the data to commit stimulus check fraud and to launch COVID-19 themed fishing campaigns. Safety tip. Organizations can defend against dumpster diving attacks by shredding documents and thoroughly wiping devices before discarding them.

3:20Nerd reference. On the long running and critically acclaimed AMC TV show Better Call Saul, Bob Odenkirk plays Jimmy McGill, a morally complex character who is both a con artist and a skilled small-time lawyer. In this scene, Odenkirk has already discovered that the owners of the sandpiper retirement home have been scamming their elderly clients and he caught sandpiper personnel shredding documents to hide the evidence trail. He quickly wrote out a cease and desist letter to the sandpiper lawyers on the only paper he could find, toilet paper. Later that evening, he decides to do a little dumpster diving outside the back alley of the sandpiper headquarters to see if he could find any more incriminating evidence. But while he's in the dumpster, he has to dive deep under the trash to hide from employees throwing trash bags into the dumpster. Soon after they leave, but before he can get out, Odenkirk receives a call from the sandpiper lawyers. James McGill. Mr. McGill, rich swikered a swikered and coquely.

4:20We're the law firm representing sandpiper crossing assisted living. How are you this evening? Quite well, thank you. How are you? I'm fine. Sorry, it's called so late. Did I catch you at a bad time? No, no, no, it's fine. It's just that you're whispering. I'm at the opera. Oh, what opera? Magic flute. Mozart, lovely. Well, I'll try not to keep you. We received something from you today and we're not quite sure what. It's a demand letter. It was a little confusing because it was written on... Well, I had to write it quickly because your clients were in the process of destroying evidence. Mr. McGill, if you're talking about shredding documents, it's neither a regular nor illegal. Every business in America does it. You say potato, I say spoliation. Maybe you should walk me through what you're alleging here. I believe it's all in the letter. I'm not saying it's not, but it's a bit hard to read.

5:21Next time I'd use double ply. Let's not fixate on the medium. Okay, let's look at the message. Your clients are facing multiple counts of elder abuse and fraud and deceptive and unfair trade practices. And that's just a start. Okay, I'm not a betting man, but I bet the farm I'll find more. Word Notes is written by Tim Notar, executive produced by Peter Kielping and edited by John Petrick and me Rick Howard. The mixed sound design and original music have all been crafted by the ridiculously talented Elliott Peltzmann. We're privileged that N2K and podcasts like Word Notes are part of the daily intelligence routine of many of the most influential leaders and operators in the public and private sector, as well as the critical security team supporting the Fortune 500 and many of the world's pre-imminent intelligence and law enforcement agencies.

6:21N2K's strategic workforce intelligence optimizes the value of your biggest investment, people. We make you smarter about your team while making your team smarter. Learn more at n2k.com. Thanks for listening. Yes, you can have an enterprise network that's secure and reliable and high performance and no, you don't need to choose the best two out of three. With meter, you can get the end-to-end network built from the ground up, fast to deploy and easy to manage. That's because meter is software led for easy installation, maintenance and control for everything running on your enterprise network.

7:25Hardware, firmware and software all working together from the start seamlessly on a unified platform that's secure by design. You can't protect what you don't know exists, which is why meter gives you comprehensive visibility into wired and wireless routing, switching firewalls, DNS security and VPNs. You'll really know what's running on your network down to the most granular client level. Step off the hardware box upgrade treadmill and switch to meter for a predictable fee and free up your team to spend time on all the other things that keep your business running. Try it out for yourself and book a demo online at meter.com slash cyber wire. That's M-E-T-E-R dot com slash cyber wire. And now a word from our sponsor SpecterOps. Today, AI is rapidly adding non-human and agentic identities to modern enterprise environments creating new trust relationships and attack paths.

8:39Bloodhound Enterprise helps defenders map attack paths across AWS and hybrid environments as one connected graph. Identify the choke points that matter most and bring trusted attack path intelligence into approved AI workflows with Bloodhound Hunter. See how SpecterOps helps team secure the AI-driven identity era at SpecterOps.io. Ryan Reynolds here for Mint Mobile with your summer price forecast. Now, unfortunately, we're seeing rising costs across the country with possibility that big wireless hates you 100%. Now, over here at Mint Mobile, we're seeing sunny skies and dropping prices every plan to just $15 a month. Give it a try at minmoble.com slash switch. Up from payment of $45 for three months, $90 for six months or $180 for 12 month plan required $15 per month equivalent to taxes and fees extra.

9:39New customer offer for initial plan term only greater than 50 gigabytes may slow and network is busy. See terms.