Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
https://risky.biz/
Risky Business #560 -- Facebook sues NSO Group
On this week’s show Patrick and gust co-host Alex Stamos discuss the week’s security news, including:
- Facebook files suit against NSO Group
- Corellium responds to Apple suit
- Indian nuclear power plant administrative network likely attacked by DPRK
- Mass defacement in Georgia. Old schooooool!
- Fancy Bear targets 2020 Olympics
- FCC proposes subsidies for telcos to rip and replace Huawei, ZTE equipment
- City of Johannesburg data held to ransom, but it’s not ransomware
- Much, much more
This week’s sponsor interview is with Jake King of CMD Security. The topic is applying the MITRE ATT&CK framework
Links to everything that we discussed are below and you can follow Patrick or Alex on Twitter if that’s your thing.
Show notes Will Cathcart - Why WhatsApp is pushing back on NSO Group hacking - The Washington Post Facebook sues NSO Group for alleged WhatsApp hack - CyberScoop Exclusive: A ‘Magic’ iPhone Hacking Startup Bites Back At Apple Lawyers — And Demands $300,000 iPhone Emulation Company Sued by Apple Says It's Making iPhones Safer - VICE (9) Sandhya Sharma on Twitter: "GOI denies reports of #CyberAttack on #kudankulam nuclear power plant and other Indian nuclear power plants control systems. Said they are stand alone not connected to outside cyber network and internet. “Any cyber attack on the Nuclear Power Plant Control System is not possible” https://t.co/o5bUmUKHqp" / Twitter Indian nuke plant’s network reportedly hit by malware tied to N. Korea | Ars Technica Indian Nuclear Power Facility Denies Unverified Reports of a Cyber Attack – The Diplomat Largest cyber-attack in Georgia's history linked to hacked web hosting provider | ZDNet Fancy Bear hackers targeted at least 16 athletic organizations ahead of Tokyo Olympics Inside Olympic Destroyer, the Most Deceptive Hack in History | WIRED FCC proposes rules requiring telcos remove Huawei, ZTE equipment | TechCrunch City of Johannesburg held for ransom by hacker gang | ZDNet Vietnamese student behind Android adware strain that infected millions | ZDNet NSA: 'We know we need to do some work' on declassifying threat intel Why did Cyber Command back off its recent plans to call out North Korean hacking? Sens. Warren, Wyden want to know if Amazon shares some blame for the Capital One breach White House kicks infosec team to curb in IT office shakeup | Ars Technica DHS is mulling an order that would force agencies to set up vulnerability disclosure programs Congress Still Doesn't Have an Answer for Ransomware | WIRED Most system administrators prefer firewall GUIs over CLIs | ZDNet Australian House Committee to look into age verification for porn | ZDNet Monash University partners with Chinese state firm linked to industrial espionage Storage Wars star's parents' garage was raided by Feds for top-secret spy equipment | Daily Mail Online Cmd – Protect your Linux servers, proactively