On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
DoJ seizes 50k bitcoin stolen from Silk Road, charges thiefAustralian health insurer Medibank refuses to pay ransom, data leakedInside Qatar’s $386m world cup espionage operationEU Parliament report into spyware landsSolarWinds settles shareholder lawsuit, faces SEC enforcement actionMuch, much moreThis week’s sponsor guest is Andrew Morris from Greynoise Intelligence.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes
DOJ says it seized billions in Bitcoin stolen by hacker from Silk Road darknet marketplace - The Record by Recorded FutureU.S. Attorney Announces Historic $3.36 Billion Cryptocurrency Seizure And Conviction In Connection With Silk Road Dark Web Fraud | USAO-SDNY | Department of JusticeMedibank says it will not pay ransom in hack that impacted 9.7 million customers - The Record by Recorded FutureNames, addresses, birthdays posted to dark web by hackers after Medibank ransom deadline passes - ABC News‘Project Merciless’: how Qatar spied on the world of football in Switzerland - SWI swissinfo.chHow Qatar hacked the World Cup — The Bureau of Investigative Journalism (en-GB)FBI probing ex-CIA officer's spying for World Cup host Qatar - The Washington PostEU governments accused of using spyware ‘to cover up corruption and criminal activity’ - The Record by Recorded FuturePress conference on draft findings of EP spyware inquiry | News | European ParliamentSolarWinds says it’s facing SEC ‘enforcement action’ over 2020 hack | TechCrunchMicrosoft accuses China of abusing vulnerability disclosure requirements - The Record by Recorded Future工业和信息化部国家互联网信息办公室公安部关于印发网络产品安全漏洞管理规定的通知-中共中央网络安全和信息化委员会办公室Insurance giant settles NotPetya lawsuit, signaling cyber insurance shakeupCould a ‘digital Red Cross emblem’ protect hospitals from cyber warfare? - The Record by Recorded FutureTrustCor Systems verifies web addresses, but its address is a UPS Store - The Washington PostCyber incident at Boeing subsidiary causes flight planning disruptions - The Record by Recorded FutureFIN7 cybercrime cartel tied to Black Basta ransomware operation: report - The Record by Recorded FutureMore than 100 election jurisdictions waiting on federal cyber help, sources say$28 million stolen from cryptocurrency platform Deribit - The Record by Recorded FutureNigerian scammer sentenced to 11 years in US prison - The Record by Recorded FutureHackers get into Dropbox developer accounts on GitHub, access 130 code repositories and more - The Record by Recorded FutureUrlscan.io API unwittingly leaks sensitive URLs, data | The Daily SwigThe Most Vulnerable Place on the Internet | WIREDSo long and thanks for all the bits - NCSC.GOV.UK