The Hackle Box is a monthly cyber threat intel discussion where Oscar Minks and members of FRSecure's technical services team (Team Ambush) break down the latest trends in the information security industry involving hacking techniques, vulnerabilities, exploits, and more.
The Hackle Box April 2026: EvilTokens, Vuln Management for IoT, FBI Surveillance Breach
The Hackle Box crew discusses EvilTokens, IoT vulnerability management, and the FBI surveillance breach, offering insights into evolving cyber threats.
12 Mar 2026TRANSCRIPT
The Hackle Box March 2026: .arpa, Cybersecurity Strategy for America, Seedworm & Iran, AI Red Team
We're BACK with another live Hackle Box episode to break down what's trending in cyber attacks and incident response.
This month, we're discussing:
Hackers abusing .arpa domain to evade phishing detection
President Trump's Cybersecurity Strategy for America
Seedworm and Iranian APTs
Armadin Series A Funding
Tune in for insights on these topics, and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in real-world exploits and incidents.
The Catch of the Month
The Phishing Report
Live Q&A
Guest Speakers
And more!
If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox
To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/
Please like, subscribe, and follow us on social!
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social
About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start, or looking for a team of experts to collaborate with you, we are ready to serve.
13 Feb 2026TRANSCRIPT
The Hackle Box Feb. 2026: Notepad++, Microsoft Phishing, Solarwinds, & Ring
2026 is off to quite the start! After a New Year's break, we're BACK with another Hackle Box episode to discuss what we've seen so far in the offensive services and incident response sides of the infosec industry!
This month, Oscar, Eric, and special guest Matt Findlay discussed:
Notepad++ Vulnerabilities
Phishing from legitimate Microsoft inboxes
Solarwinds Remote Code Execution
Ring's New Surveillance Feature
Tune in every month for insights on similar topics and the latest trends, tactics, lures, and fixes that our expert cybersecurity team is seeing in the real-world:
The Catch of the Month
The Phishing Report
Live Q&A
Guest Speakers
And more!
If you've got burning questions or feedback, we'd be happy to hear from you: https://www.surveymonkey.com/r/hacklebox
To stay updated on all things The Hackle Box, sign up to receive our newsletters: https://frsecure.com/cyber-threat-intel-series/
Please like, subscribe, and follow FRSecure on social!
Inside a recent episode
The Hackle Box April 2026: EvilTokens, Vuln Management for IoT, FBI Surveillance Breach
Published 8 May 2026 · Transcript excerpt
[…] I mean, uh, fishing right at all starts with the fish. The same as what we've been seeing with evil proxy, uh, evil jinx, all the other flavors of token token theft attacks, but, uh, it's, it's a new path we've seen before. It's going to be delivered in similar mechanisms. Let's make something real juicy. You want to look at and you think you need to see and trick in to seeing that thing. But the difference here is it is abusing the device code flow authentication feature, uh, in m365, which is something like what we can dig in and talk about that more, but I was studying and if you read Microsoft's documentation about device code flow authentication, they tell you this is a high risk mechanism, right? […]
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
