On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
North Korea is ransomwaring hospitals with homegrown and Russian strainsRussia proposes law greenlighting “patriotic hacks”It’s 702 renewal time… againCISA releases ESXiArgs recovery script (yay!)UK mulls crimephone banMuch, much moreThis week’s show is brought to you by Thinkst Canary. Haroon Meer is this week’s sponsor guest and joins us to talk about Thinkst’s latest release: the credit card canary.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes
North Korean hackers extort health care organizations to fund further cyberattacks, US and South Korea say | CNN PoliticsRisky Biz News: US and UK sanction seven Trickbot membersUnited States and United Kingdom Sanction Members of Russia-Based Trickbot Cybercrime Gang | U.S. Department of the TreasuryRisky Biz News: Russia wants to absolve patriotic hackers from any criminal liabilityThe FBI’s Most Controversial Surveillance Tool Is Under Threat | WIREDMeet the Creator of North Korea’s Favorite Crypto Privacy Service | WIREDCISA publishes recovery script for ESXiArgs ransomware as Florida courts, universities reel - The Record from Recorded Future Newsdecrypt your crypted files in ESXi servers affected by CVE-2020-3992 / CryptoLocker attackTonga is the latest Pacific Island nation hit with ransomware - The Record from Recorded Future NewsUK Proposes Making the Sale and Possession of Encrypted Phones IllegalUK High Court allows Bahraini activists to sue government over spyware - The Record from Recorded Future NewsRussian cybersecurity expert convicted of charges in $90M hack-to-trade case | CyberScoopDeepfake 'news anchors' appear in pro-China footage on social media, research group says - ABC NewsGeotargeting tools are allowing phishing campaigns to home in on potential victims - The Record from Recorded Future NewsThis week’s Reddit breach shows company’s security is (still) woefully inadequate | Ars TechnicaNamecheap denies system breach after email service used to spread phishing scams - The Record from Recorded Future NewsMysterious leak of Booking.com reservation data is being used to scam customers | Ars TechnicaDOM XSS vulnerability in Gartner Peer Insights widget patched | The Daily SwigDota 2 Under Attack: How a V8 Bug Was Exploited in the Game - Avast Threat LabsOAuth ‘masterclass’ crowned top web hacking technique of 2022 | The Daily SwigNew XSS Hunter host Truffle Security faces privacy backlash | The Daily Swig'No evidence of malicious access,' Toyota says about serious bug exploited by outside researcher - The Record from Recorded Future NewsA year after outcry, IRS still doesn't offer taxpayers alternative to ID.me | CyberScoop