Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
https://risky.biz/
Risky Business #658 -- Germany sounds alarm on Kaspersky software
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Germany issues stark warning to Kaspersky users
- Ukraine SATCOM hack keeps getting more interesting
- Russia to spin up its own CA, but it’s not what it seems
- Why the ransomware threat could get worse, then better
- Much, much more
This week’s show is brought to you by Fastly. Kelly Shortridge, Fastly’s Senior Principal Product Technologist, joins the show this week to tell us what modern security actually looks like. Kelly is always fascinating so we were thrilled she was in the sponsor chair this week.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes- German government issues warning about Kaspersky products - CyberScoop
- Exclusive: U.S. spy agency probes sabotage of satellite internet during Russian invasion, sources say | Reuters
- SATELLITE SYSTEMS, SATCOM AND SPACE SYSTEMS UPDATE
- Russia to create its own security certificate authority, alarming experts
- Political fallout in cybercrime circles upping the threat to Western targets
- (2) Oleg Shakirov on Twitter: "Russia's deputy foreign minister says he hopes the Russian-U.S. dialogue on cyber security will be resumed in response to a question whether it has been frozen He adds that it can bring tangible results like the disruption of REvil https://t.co/m817WD80vr" / Twitter
- FinCEN warns ransomware proceeds could be part of Russia sanctions evasion
- Biden takes big step toward government-backed digital currency
- Ukrainian hackers say HackerOne is blocking their bug bounty payouts | TechCrunch
- (2) Techmeme on Twitter: "Sources: Apple and Google removed Kremlin critic Navalny's app in September after FSB agents came to homes of top execs and threatened to take them to prison (Washington Post) https://t.co/nqvtHmG1Ft https://t.co/gQCcnFhnyo" / Twitter
- Government agencies in Ukraine targeted in cyber-attacks deploying MicroBackdoor malware | The Daily Swig
- (2) ESET research on Twitter: "#BREAKING #ESETresearch warns about the discovery of a 3rd destructive wiper deployed in Ukraine ????????. We first observed this new malware we call #CaddyWiper today around 9h38 UTC. 1/7 https://t.co/gVzzlT6AzN" / Twitter
- Ukraine facing major regional internet outages as Russian invasion continues
- Transparency Org Releases Alleged Leak of Russian Censorship Agency
- Denial-of-service attack knocked Israeli government sites offline
- The Lapsus$ Hacking Group Is Off to a Chaotic Start | WIRED
- Penny Arcade - Comic - Also Known As Blackmail
- Man charged with Kaseya hack extradited to the US - The Record by Recorded Future
- NetWalker ransomware affiliate extradited to the US - The Record by Recorded Future
- Researcher uses Dirty Pipe exploit to fully root a Pixel 6 Pro and Samsung S22 | Ars Technica
- New method that amplifies DDoSes by 4 billion-fold. What could go wrong? | Ars Technica
- SEC weighs reporting requirements for publicly traded companies
- Biden signs cyber incident reporting bill into law - The Record by Recorded Future
- Join The Dept of Know_ Live!
- BAYRAKTAR-Official Song (english) - YouTube
- Product Demo: Proofpoint Nexus People Explorer - YouTube