Adam Boileau is along this week to discuss the week’s security news, which also features comment from Dmitri Alperovitch, Klon Kitchen and The Grugq. We cover:
Former USAF counterintelligence official indicted over spearphishing, leaking secrets
Australia’s major political parties targeted by APT crew that totally isn’t Chinese. (It’s Chinese)
More on the Iran DNS hijacks
Venezuelans phished by their own government
China’s mass surveillance of Uyghur Muslims laid bare in data leak
Millions of Swedes have their healthcare help-line calls exposed
Bank of Valletta dodges a bullet, catches fraudulent transfers
VK gets Samy’d
Calls for GDPR-like law in USA
Marcus “Malwaretech” Hutchins has a bad week
This week’s sponsor interview is with Jason Haddix of Bugcrowd. He’ll be along to talk a little more about what Bugcrowd calls next-generation pentests. They claim one of their tests is sufficient for compliance purposes under PCI, ISO or NIST and they’ve had a third party auditor prove that for them. They also say the service has really taken off despite being launched only a couple of months ago.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.