Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
https://risky.biz/
Risky Business #558 -- Trump targets Crowdstrike, Apple jailbreakers rejoice
On this week’s show Patrick and Adam discuss the week’s security news, including:
- Apple jailbreakers partying in the streets
- Donald Trump targets Crowdstrike over 4chan conspiracy nonsense
- Ransomware absolutely everywhere this week
- Horror-show VxWorks bugs are popping up in other stacks
- OnApp fixes mother of all misconfigurations
- More SIM card issues
- Much, much more
In this week’s sponsor interview we chat with Mr Sandbox himself, VMRay’s Carsten Willems. He’s along to talk about VMRay’s involvement in a machine-learning bypass competition that happened at DEFCON earlier this year.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes Unfixable iOS Device Exploit Is the Latest Apple Security Upheaval | WIRED No, it wasn’t a virus; it was Chrome that stopped Macs from booting | Ars Technica How Trump’s Ukraine Mess Entangled CrowdStrike | WIRED Trump Was Repeatedly Warned That Ukraine Conspiracy Theory Was ‘Completely Debunked’ - The New York Times Evan McMurry on Twitter: "NEW: Tom Bossert on Pres. Trump's Crowdstrike reference on Ukraine call: "It's not only a conspiracy theory, it is completely debunked... "I am deeply frustrated with what [Rudy Giuliani] and the legal team is doing in repeating that debunked theory to the president." https://t.co/o1lcVI31u8" / Twitter Trump Still Doesn't Believe Russia Hacked the 2016 Election | WIRED Trump told Russian officials in 2017 he wasn’t concerned about Moscow’s interference in U.S. election - The Washington Post Airbus hit by series of cyber attacks on suppliers U.S. Steps Up Scrutiny of Airplane Cybersecurity - WSJ Ransomware forces 3 hospitals to turn away all but the most critical patients | Ars Technica Surgeries delayed and patient security fears after cyber attack on Victorian hospitals Wood Ranch Medical Announces Permanent Closure Due to Ransomware Attack Malware infection disrupts production at defence contractor plants in three countries | ZDNet Over 500 US schools were hit by ransomware in 2019 | ZDNet Ransomware incident to cost Danish company a whopping $95 million | ZDNet Decades-Old Code Is Putting Millions of Critical Devices at Risk | WIRED Thousands of Cloud Computing Servers Could Be Owned With 'Very Simple' Attack, Researchers Say - VICE California's new labor law is going to impact bug bounty companies. By how much is unknown. Legit-Looking iPhone Lightning Cables That Hack You Will Be Mass Produced and Sold - VICE New SIM card attack disclosed, similar to Simjacker | ZDNet German Cops Raid “Cyberbunker 2.0,” Arrest 7 in Child Porn, Dark Web Market Sting — Krebs on Security Cloudflare, Google Chrome, and Firefox add HTTP/3 support | ZDNet Microsoft bans 38 file extensions in Outlook for the Web | ZDNet AT&T redirected pen-test payloads to the FBI's Tips portal | ZDNet Azure Sentinel, Microsoft's cloud-based SIEM, hits general availability | ZDNet Microsoft will now encrypt new SSDs with BitLocker | TechRadar High-severity vulnerability in vBulletin is being actively exploited | Ars Technica Cybersecurity giant Comodo can’t even keep its own website secure | TechCrunch Threesome Blowjob Scene on Giant Highway Billboard Could Have Caused an Accident, Police Say - VICE Porn on the big screen in central Auckland: Asics video monitor hacked - NZ Herald Yahoo Engineer Used Insider Access to Get Private Photos of Women - VICE Landmark White data beach: Sydney IT contractor arrested after high-profile cyber attack Home - MLSEC VMRay | Malware Analysis Tools | Malware Sandbox Solutions