On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:
More victims identified in Chinese breach of Microsoft email accountsCyber Safety Review Board to investigate MicrosoftWe got some stuff wrong last weekMore details on Viasat hack revealedSpecial guest Heather Adkins talks about the CSRB’s Lapsus$ reportMuch, much moreThis week’s show is brought to you by RunZero. Its co-founder HD Moore is this week’s sponsor guest.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes
Chinese Microsoft hackers also hit GOP Rep. Don Bacon of Nebraska - The Washington PostUS cyber board to investigate Microsoft hack of government emails | TechCrunchRichard: "@briankrebs @metlstorm @riskyb…" - Mastodon.RadioMastodon.RadioAn SSRF, privileged AWS keys and the Capital One breach | by Riyaz Walikar | AppseccoChamber of Commerce urges SEC to delay cyber rule implementation | Cybersecurity DiveSatellite hack on eve of Ukraine war was a coordinated, multi-pronged assault | CyberScoopMicrosoft to freeze license extensions for Russian companiesTakedown of Lolek bulletproof hosting service includes arrests, NetWalker indictmentRansomware Diaries V. 3: LockBit's SecretsHow the FBI goes after DDoS cyberattackers | TechCrunchMeet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’ – Krebs on SecurityMultiple zero days found affecting crypto platformsLawmakers press FCC for action on Chinese-made cellular modulesPanasonic Warns That IoT Malware Attack Cycles Are Accelerating | WIREDRapid7 to cut 18% of workforce, shutter certain offices | Cybersecurity DiveSecureWorks layoffs affect 15% staff | TechCrunchResearcher says they were behind iPhone popups at Def Con | TechCrunchReview of the Attacks Associated with LAPSUS$ and Related Threat GroupsUS should crack down on SIM swapping following Lapsus$ attacks: DHS reviewKevin Collier: "Def Con is over and nobody hac…" - Infosec Exchange