Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
https://risky.biz/
Risky Business #681 -- It's Exchangehog Day
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- More Exchange 0days cause more havoc
- A look at some earlier Exchange hack incidents
- How the CIA got its agents killed with its truly awful online opsec
- Ex NSA staffer arrested for espionage
- Much, much more
This week’s show is brought to you by Proofpoint. Ryan Kalember, Proofpoint’s EVP of cybersecurity strategy, joins the show this week to talk about some overlooked detection opportunities – some simple stuff you can look for in your environment that should raise gigantic flashing red flags.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes- Microsoft confirms two Exchange Server zero days are being used in cyberattacks - The Record by Recorded Future
- CISA: Multiple government hacking groups had ‘long-term’ access to defense company - The Record by Recorded Future
- Mexican president confirms ‘Guacamaya’ hack targeting regional militaries - The Record by Recorded Future
- Mexican journalists targeted by zero-click spyware infections - The Record by Recorded Future
- Ex-NSA employee charged with violating Espionage Act, selling U.S. cyber secrets
- Putin grants citizenship to Edward Snowden, who disclosed US eavesdropping - The Washington Post
- U.S. fails in bid to extradite Brit for helping North Korea evade sanctions with cryptocurrency - The Record by Recorded Future
- Bill Marczak on Twitter: "NEW REPORT today from @Reuters @JoelSchectman providing more detail about fatal flaws in the CIA's defunct communications network. Iran and China compromised the network in 2011, and killed dozens of CIA assets https://t.co/AwN8pQtWL2" / Twitter
- Numerous orgs hacked after installing weaponized open source apps | Ars Technica
- 'Poisoned' Tor Browser tracks Chinese users' online history, location
- Mystery Hackers Are ‘Hyperjacking’ Targets for Insidious Spying | WIRED
- A Matrix Update Patches Serious End-to-End Encryption Flaws | WIRED
- LA officials confirm ransomware group leaked students’ personal data - The Record by Recorded Future
- Nearly 700 ransomware incidents traced back to wholesale access markets: report - The Record by Recorded Future
- Semiconductor industry faced 8 attacks from ransomware groups, extortion gangs in 2022 - The Record by Recorded Future
- CISA directs federal agencies to track software and vulnerabilities - The Record by Recorded Future
- Fake CISO Profiles on LinkedIn Target Fortune 500s – Krebs on Security
- House Democrats debut new bill to limit US police use of facial recognition | TechCrunch
- EP000: Operation Aurora | HACKING GOOGLE - YouTube