Risky Business Podcast
August 24, 2022
Risky Business #675 -- The problem with Mudge's whistleblowing complaint
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- A deep look at Mudge’s sensational whistleblower complaint against Twitter
- Brazilian Federal Police raid Lapsus$ crew
- NSO CEO to stand down (again), 100 staff to be let go
- Signal users impacted in Twilio incident
- Tornado Cash OFACs around and finds out
- Much, much more
This week’s show is brought to you by Greynoise. Its founder, Andrew Morris, joins the show with a stinging critique of the wider threat intelligence industry. Don’t miss that one.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Brought to you by Greynoise
Real-Time Intelligence For Modern Threats
Show notes
A Slack Bug Exposed Some Users’ Hashed Passwords for 5 Years | WIRED
TikTok Says, No, It Isn't Stealing Your Passwords
Brazilian police launch investigation targeting Lapsus$ group - The Record by Recorded Future
Israeli spyware company NSO Group CEO steps down | Reuters
How a Third-Party SMS Service Was Used to Take Over Signal Accounts
VIASAT hack impacted French critical services | Cybernews
DOJ now relies on paper for its most sensitive court documents, official says
OFAC Around and Find Out - Lawfare
Suspected Tornado Cash developer arrested in Netherlands - The Record by Recorded Future
Risky Biz News: Is ransomware going after the Global South? Sure looks like it!
Ransomware Now Threatens the Global South | Royal United Services Institute
Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling | PortSwigger Research
The Return of LOIC, HOIC, HULK, and Slowloris to the Threat Landscape | Radware Blog
Hackers steal crypto from Bitcoin ATMs by exploiting zero-day bug
A New Jailbreak for John Deere Tractors Rides the Right-to-Repair Wave | WIRED
Breaking SIDH in polynomial time
Hackers Use Deepfakes of Binance Exec to Scam Crypto Projects
Cisco confirms May attack by Yanluowang ransomware group - The Record by Recorded Future
Cisco warns of critical vulnerabilities in routers - The Record by Recorded Future
North Korea-backed hackers have a clever way to read your Gmail | Ars Technica
When Efforts to Contain a Data Breach Backfire – Krebs on Security