Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
https://risky.biz/
Risky Business #675 -- The problem with Mudge's whistleblowing complaint
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- A deep look at Mudge’s sensational whistleblower complaint against Twitter
- Brazilian Federal Police raid Lapsus$ crew
- NSO CEO to stand down (again), 100 staff to be let go
- Signal users impacted in Twilio incident
- Tornado Cash OFACs around and finds out
- Much, much more
This week’s show is brought to you by Greynoise. Its founder, Andrew Morris, joins the show with a stinging critique of the wider threat intelligence industry. Don’t miss that one.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes- Patrick Gray on Twitter: "Jesus… can open, worms everywhere. You basically can’t find anyone more credible than @dotMudge in infosec so this is a massive deal https://t.co/TaDQzTEtzR" / Twitter
- Twitter confirms January breach, urges pseudonymous accounts to not add email or phone number - The Record by Recorded Future
- A Slack Bug Exposed Some Users’ Hashed Passwords for 5 Years | WIRED
- TikTok Says, No, It Isn't Stealing Your Passwords
- Brazilian police launch investigation targeting Lapsus$ group - The Record by Recorded Future
- Israeli spyware company NSO Group CEO steps down | Reuters
- How a Third-Party SMS Service Was Used to Take Over Signal Accounts
- VIASAT hack impacted French critical services | Cybernews
- DOJ now relies on paper for its most sensitive court documents, official says
- Microsoft disrupts Russia-linked hacking group targeting defense and intelligence orgs - The Record by Recorded Future
- Lloyd’s to forbid insurers from covering losses due to state-backed hacks - The Record by Recorded Future
- U.S. Treasury Sanctions Notorious Virtual Currency Mixer Tornado Cash | U.S. Department of the Treasury
- OFAC Around and Find Out - Lawfare
- Suspected Tornado Cash developer arrested in Netherlands - The Record by Recorded Future
- Report: Ransomware gangs, fraudsters laundered $540 million through RenBridge platform - The Record by Recorded Future
- Risky Biz News: Is ransomware going after the Global South? Sure looks like it!
- Ransomware Now Threatens the Global South | Royal United Services Institute
- Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling | PortSwigger Research
- The Return of LOIC, HOIC, HULK, and Slowloris to the Threat Landscape | Radware Blog
- Hackers steal crypto from Bitcoin ATMs by exploiting zero-day bug
- A New Jailbreak for John Deere Tractors Rides the Right-to-Repair Wave | WIRED
- Malicious code exploiting recent VMware bug publicly available, company warns - The Record by Recorded Future
- Breaking SIDH in polynomial time
- Hackers Use Deepfakes of Binance Exec to Scam Crypto Projects
- Cisco confirms May attack by Yanluowang ransomware group - The Record by Recorded Future
- Cisco releases advisories for bug affecting more than 1 million security devices - The Record by Recorded Future
- Cisco warns of critical vulnerabilities in routers - The Record by Recorded Future
- North Korea-backed hackers have a clever way to read your Gmail | Ars Technica
- When Efforts to Contain a Data Breach Backfire – Krebs on Security
- Microsoft: Bug in Janet Jackson’s “Rhythm Nation” could crash a laptop - The Record by Recorded Future
- Anonymous poop gifting site hacked, customers exposed