On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:
This week’s show is brought to you by Nucleus Security. Chris Hughes from Aquia is this week’s sponsor guest. He appeared at Nucleus Security’s invitation.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes
Massive 3CX Supply-Chain Hack Targeted Cryptocurrency Firms | WIRED3CX support tells customers to investigate malware warnings themselves | Ars TechnicaNorth Korean hackers linked to 3CX supply-chain attack, investigation findsBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz BlogMicrosoft leads effort to disrupt illicit use of Cobalt Strike, a dangerous hacking tool in the wrong hands | CyberScoopMERCURY and DEV-1084: Destructive attack on hybrid environment - Microsoft Security BlogCISA, Cisco highlight Russian military targeting of router vulnerabilitiesIsraeli spyware software surveilling journalists, politiciansMercenary spyware hacked iPhone victims with rogue calendar invites, researchers say | TechCrunchIsraeli Spyware Maker QuaDream Closes, Fires All Employees - National Security & Cyber - Haaretz.comHackers used spyware made in Spain to target users in the UAE, Google says | TechCrunchApple’s high security mode blocked NSO spyware, researchers say | TechCrunchUS commits $25 million to Costa Rica for Conti ransomware recoveryState Department, Congress working on formal program for US cyber aidCISA and partners issue secure-by-design principles for software manufacturers | FedScoopTime to Designate Space Systems as Critical InfrastructureApple’s Macs Have Long Escaped Ransomware. That May Be Changing | WIREDCyber company Darktrace gets caught up in LockBit gang's apparent blunderPayments giant says it is investigating ransomware incident that caused POS outageCyberattack causing treatment delays at Canadian hospitalGerman arms manufacturer Rheinmetall confirms cyberattackHackers using Log4j bug to profit from victim IP addresses through ‘proxyjacking’ schemePolice arrest almost 120 people globally following Genesis Market takedownFBI accessed Genesis Market's backend servers as part of takedownLinkedIn Verification Now Lets You Verify Your Job and Account | WIREDTech industry’s pain is NSA’s gain, cyber leader says about layoffsQueueJumper: Critical Unauthenticated RCE Vulnerability in MSMQ Service - Check Point ResearchMicrosoft shifts to a new threat actor naming taxonomy - Microsoft Security BlogLeaked Pentagon Document Claims Russian Hacktivists Breached Canadian Gas Pipeline CompanyDid someone really hack into the Oldsmar, Florida, water treatment plant? New details suggest maybe not. | CyberScoopFrom Discord to 4chan: The Improbable Journey of a US Intelligence Leak - bellingcatU.S. intel agencies may change how they monitor social media, chatrooms after missing leaked U.S. documents for weeksTaiwan highly vulnerable to Chinese air attack, leaked documents show - The Washington PostPentagon document leak raises questions about internal security - The Washington PostLeaked secret documents detail additional Chinese spy balloons - The Washington Post
View all episodes
