Risky Business Podcast
October 30, 2019
Risky Business #560 -- Facebook sues NSO Group
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick and gust co-host Alex Stamos discuss the week’s security news, including:
- Facebook files suit against NSO Group
- Corellium responds to Apple suit
- Indian nuclear power plant administrative network likely attacked by DPRK
- Mass defacement in Georgia. Old schooooool!
- Fancy Bear targets 2020 Olympics
- FCC proposes subsidies for telcos to rip and replace Huawei, ZTE equipment
- City of Johannesburg data held to ransom, but it’s not ransomware
- Much, much more
This week’s sponsor interview is with Jake King of CMD Security. The topic is applying the MITRE ATT&CK framework
Links to everything that we discussed are below and you can follow Patrick or Alex on Twitter if that’s your thing.
Brought to you by Cmd Security
Defense in depth for Linux
Show notes
Will Cathcart - Why WhatsApp is pushing back on NSO Group hacking - The Washington Post
Facebook sues NSO Group for alleged WhatsApp hack - CyberScoop
Exclusive: A ‘Magic’ iPhone Hacking Startup Bites Back At Apple Lawyers — And Demands $300,000
iPhone Emulation Company Sued by Apple Says It's Making iPhones Safer - VICE
Indian nuke plant’s network reportedly hit by malware tied to N. Korea | Ars Technica
Indian Nuclear Power Facility Denies Unverified Reports of a Cyber Attack – The Diplomat
Largest cyber-attack in Georgia's history linked to hacked web hosting provider | ZDNet
Fancy Bear hackers targeted at least 16 athletic organizations ahead of Tokyo Olympics
Inside Olympic Destroyer, the Most Deceptive Hack in History | WIRED
FCC proposes rules requiring telcos remove Huawei, ZTE equipment | TechCrunch
City of Johannesburg held for ransom by hacker gang | ZDNet
Vietnamese student behind Android adware strain that infected millions | ZDNet
NSA: 'We know we need to do some work' on declassifying threat intel
Why did Cyber Command back off its recent plans to call out North Korean hacking?
Sens. Warren, Wyden want to know if Amazon shares some blame for the Capital One breach
White House kicks infosec team to curb in IT office shakeup | Ars Technica
DHS is mulling an order that would force agencies to set up vulnerability disclosure programs
Congress Still Doesn't Have an Answer for Ransomware | WIRED
Most system administrators prefer firewall GUIs over CLIs | ZDNet
Australian House Committee to look into age verification for porn | ZDNet
Monash University partners with Chinese state firm linked to industrial espionage