Risky Business #554 -- Is there an iOS exploit glut?

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

Alex Stamos is our news co-host this week. Patrick and Alex discuss all the week’s security news, including:

  • Mass exploitation of iOS devices by Chinese govt
  • Telegram moves to nix phone number enumeration “feature”
  • USA targeted Iranian maritime awareness system
  • Existence of Stuxnet mole revealed by Kim Zetter
  • @jack gets hacked
  • Much, much more

This week’s sponsor interview is with Michelle Price of AustCyber. AustCyber is the organisation here in Australia that aims to build out the Australian cyber security industry and skills base, and Michelle pops in this week to tell us all about the upcoming Australian Cyber Week.

Links to everything are below in the show notes.

Risky Business #554 -- Is there an iOS exploit glut?
0:00 / 0:00

Show notes

Project Zero: A very deep dive into iOS Exploit chains found in the wild

Mysterious iOS Attack Changes Everything We Know About iPhone Hacking | WIRED

iPhone Hackers Caught By Google Also Targeted Android And Microsoft Windows, Say Sources

Apple iPhone Hack Exposed By Google Breaks WhatsApp Encryption

This Has Been the Worst Year for iPhone Security Yet - VICE

Why 'Zero Day' Android Hacking Now Costs More Than iOS Attacks | WIRED

Exploit Sellers Say There are More iPhone Hacks on the Market Than They’ve Ever Seen - VICE

Researchers uncover malicious sites targeting China's Uyghur population

Confirmed: Google’s Android Suffers Sustained Attacks By Anti-Uighur Hackers

Exclusive: Messaging app Telegram moves to protect identity of Hong Kong protesters - Reuters

U.S. Cyberattack Hurt Iran’s Ability to Target Oil Tankers, Officials Say - The New York Times

Revealed: How a secret Dutch mole aided the U.S.-Israeli Stuxnet cyberattack on Iran

North Korean state hackers target retired diplomats and military officials | ZDNet

How Twitter CEO Jack Dorsey's Account Was Hacked | WIRED

Google launches bounty program to spot misuses of Google API, Chrome, and Android user data | ZDNet

Google adds all Android apps with +100m installs to its bug bounty program | ZDNet

Cisco releases guides for incident responders handling hacked Cisco gear | ZDNet

BEC overtakes ransomware and data breaches in cyber-insurance claims | ZDNet

How MuleSoft patched a critical security flaw and avoided a disaster | ZDNet

Rash of ransomware continues with 13 new victims—most of them schools | Ars Technica

Russian police take down malware gang that infected 800,000+ Android smartphones | ZDNet

Avast and French police take over malware botnet and disinfect 850,000 computers | ZDNet

TrickBot, today's top trojan, adds feature to aid SIM swapping attacks | ZDNet

German bank loses €1.5 million in mysterious cashout of EMV cards | ZDNet

Over 47,000 Supermicro servers are exposing BMC ports on the internet | ZDNet

Spam In your Calendar? Here’s What to Do. — Krebs on Security

Marc Owen Jones on Twitter: "[Thread] As promised, today I want to tell you of how I became friends with a Twitter troll called Angus Gallagher. Angus recently had a sex/ethnicity reassignment operation. He is now called Jasmine, but we'll come to that a bit later. First though, say hi to Angus #StopTheCoup https://t.co/z9cjTZxkxo" / Twitter

Security Engineer job in Austin, TX at Praetorian

National Missing Persons Hackathon 2019 Tickets, Fri 11/10/2019 at 9:30 am | Eventbrite