Risky Business Podcast
November 24, 2021
Risky Business #646 -- Apple cracks the sads, sues NSO Group
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Apple sues NSO Group and it’s all a bit weird
- Israel charges defence minister’s house cleaner with Iranian hacker collusion (really)
- USA charges two Iranians over “Proud Boy” emails
- Cyber insurers nope out of comprehensive coverage
- Prodaft shells Conti, drops report like it’s a Normal Thing
- Much, much more
This week’s show is sponsored by VMRay. We’ll be chatting with one of VMRay’s customers in this week’s sponsor interview. Jim Byrge works on the CSIRT team at Valvoline, and he’ll be along to talk about how they replaced their ageing, in-house developed SOAR platform with commercial tools. It was still harder than it should be in 2021, but they got there in the end.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Brought to you by VMRay
Advanced Malware Sandbox & Phishing Analysis
Show notes
Apple sues spyware maker NSO Group - The Record by Recorded Future
Apple_v_NSO_Complaint_112321.pdf
Crime Boss or Tech CEO? An Encrypted Phone Company Sues the Government to Save Itself
Insurers run from ransomware cover as losses mount | Reuters
IRS seized $3.5 billion in cryptocurrency this past year, agency says
Conti ransomware gang suffers security breach - The Record by Recorded Future
Conti gang has made at least $25.5 million since July 2021 - The Record by Recorded Future
A third of all dark web domains are now v3 onion sites - The Record by Recorded Future
Evil Corp: 'My hunt for the world's most wanted hackers' - BBC News
Arrest in ‘Ransom Your Employer’ Email Scheme – Krebs on Security
FBI identified BEC scammers using bank surveillance footage - The Record by Recorded Future
Banks must report major cyber incidents within 36 hours under finalized regulation
Devious ‘Tardigrade’ Malware Hits Biomanufacturing Facilities | WIRED
GoDaddy data breach impacts 1.2 million WordPress site owners - The Record by Recorded Future
NUCLEUS:13 – Host of vulnerabilities shatter Nucelus TCP/IP stack defenses | The Daily Swig
Vulnerabilities in NPM allowed threat actors to publish new version of any package | The Daily Swig
FBI: An APT abused a zero-day in FatPipe VPNs for six months - The Record by Recorded Future
CISA, FBI issue holiday warning about hackers, urge vigilance - The Record by Recorded Future