Risky Business Podcast
June 29, 2022
Risky Business #669 -- Finally, an ICS attack that made stuff explode!
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Activists who are totally not Israeli military hackers make Iranian steel mills firebally
- Chinese APT crews use ransomware to muddy attribution
- Attackers are now ransoming cloud access
- Chinese APTs using building control systems for persistence and stealth
- USA, UK and NZ govts issue PowerShell advice
- Much, much more
This week’s show is brought to you by Material Security. JJ Agha, CISO at Compass, joins the show to talk about how he’s using it to make phishing triage and automation less traumatic.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Brought to you by Material Security
Cloud Email Security for Microsoft 365 and Google Workspace
Show notes
Iranian steel facilities suffer apparent cyberattacks
Automotive fabric supplier TB Kawashima announces cyberattack
BRONZE STARLIGHT Ransomware Operations Use HUI Loader | Secureworks
Ransomware groups targeting Mitel VoIP zero-day - The Record by Recorded Future
Akamai Blog | Bots Are Scalping Israeli Government Services
Rise of LNK (Shortcut files) Malware | McAfee Blog
Attacks on industrial control systems using ShadowPad | Kaspersky ICS CERT
The hacking industry faces the end of an era | MIT Technology Review
Lawmakers want to restrict user data sales to nations like China, Russia
US, UK, New Zealand argue against disabling PowerShell - The Record by Recorded Future
CSI_KEEPING_POWERSHELL_SECURITY_MEASURES_TO_USE_AND_EMBRACE_20220622.PDF
A pro-China online influence campaign is targeting the rare-earths industry | MIT Technology Review
Statutory defense for ethical hacking under UK Computer Misuse Act tabled | The Daily Swig
CSAC Recommendations (06-16-2022) (1) - DocumentCloud
Meet the Administrators of the RSOCKS Proxy Botnet – Krebs on Security
Splunk patches critical vulnerability while users push for legacy updates | The Daily Swig
Oracle patches ‘miracle exploit’ impacting Middleware Fusion, cloud services | The Daily Swig
FBI investigating $100 million theft from blockchain company Harmony - The Record by Recorded Future
Jerry Gamblin on Twitter: "Ahhh... the orignal NFTs." / Twitter