Risky Business Podcast
April 21, 2022
Risky Business #662 -- It's a bad month to be an electricity grid
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray, Adam Boileau and Dmitri Alperovitch discuss the week’s security news, including:
- Ukraine foils Russian ICS hack
- US Government burns someone’s ICS toolkit
- China gets all up in India’s energy gridz
- The Heroku/Hithub/Travis CI story is very confusing
- US DOJ removes GRU malware from Watchguard boxes under Rule 41
- North Korea behind $540m crypto hack
- Much, much more
This week’s sponsor interview is with Scott Kuffer, co-founder of Nucleus Security, and Jared Semrau of Mandiant. They’ll be joining us to talk about how you can now plug Mandiant data into the Nucleus vulnerability scan aggregator.
Links to everything that we discussed are below and you can follow Patrick, Dmitri or Adam on Twitter if that’s your thing.
Brought to you by Nucleus Security
Unified Vulnerability Management | Application Security
Show notes
Ukraine foiled Russian cyberattack that tried to shut down energy grid
(4) Catalin Cimpanu on Twitter: "Days later... anyone managed to confirm or debunk this?" / Twitter
Pipedream Malware: Feds Uncover 'Swiss Army Knife' for Industrial System Hacking | WIRED
Suspected Chinese hackers are targeting India's power grid
US says it disrupted Russian botnet 'before it could be weaponized'
DOJ's Sandworm operation raises questions about how far feds can go to disarm botnets
Microsoft seizes internet domains linked to GRU cyberattacks against Ukraine
WatchGuard failed to explicitly disclose critical flaw exploited by Russian hackers | Ars Technica
Microsoft uses court order to disrupt ZLoader botnet - The Record by Recorded Future
DHS investigators say they foiled cyberattack on undersea internet cable in Hawaii
U.S. offers $5 million for info on North Korean cyber operators - The Record by Recorded Future
North Carolina A&T hit with ransomware after ALPHV attack - The Record by Recorded Future
Ransomware groups go after a new target: Russian organizations - The Record by Recorded Future
T-Mobile Secretly Bought Its Customer Data from Hackers to Stop Leak. It Failed.
Experts warn of concerns around Microsoft RPC bug - The Record by Recorded Future
VMware patches critical flaws in Workspace ONE Access identity management software | The Daily Swig
Researcher finds cryptomining malware targeting AWS Lambda - The Record by Recorded Future
'We Are Fucked': Crypto Stablecoin Collapses After $182M Hack
The Original APT: Advanced Persistent Teenagers – Krebs on Security