Risky Business Podcast
September 21, 2022
Risky Business #679 -- A look at Uber's very bad week
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- A look at how Uber got owned so hard
- Why cleartext cookie storage in Microsoft Teams’ Electron-based app is actually a big deal
- Russian official: Starlink is a legitimate military target
- Wagner mercs get doxxed
- Kiwi Farms having a bad time
- Much, much more
In this week’s sponsor interview we’ll be chatting to Nucleus’s CEO Steve Carter about CISA’s KEV list. He has feelings about the KEV list – they’re mostly positive, but he also has a few reasonable gripes and he joins me to talk about them.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Brought to you by Nucleus Security
Unified Vulnerability Management | Application Security
Show notes
Uber confirms it is investigating cybersecurity incident - The Record by Recorded Future
Microsoft Teams stores cleartext auth tokens, won’t be quickly patched | Ars Technica
SharpTongue Deploys Clever Mail-Stealing Browser Extension "SHARPEXT" | Volexity
Hacking group focused on Central America dumps 10 terabytes of military emails, files
Securing the Supply Chain of Nothing | Kelly Shortridge
Russia Makes Veiled Threat to Destroy SpaceX's Starlink
Pro-Ukraine Hacktivists Claim to Have Hacked Notorious Russian Mercenary Group
Fears grow of Russian spies turning to industrial espionage - The Record by Recorded Future
Congressional inquiry reveals secret Customs and Border Protection database of U.S. phone records
Alternative payment apps such as AliPay a boon for cybercriminals, experts tell Congress
Breach of software maker used to backdoor ecommerce servers | Ars Technica
Kiwi Farms has been breached; assume passwords and emails have been leaked | Ars Technica
Pentagon reviews psychological operations amid Facebook, Twitter complaints - The Washington Post
Botched Crypto Mugging Lands Three U.K. Men in Jail – Krebs on Security
Cryptocurrency company Wintermute says hackers stole $160 million - The Record by Recorded Future
Anonymous hacker, who bragged about exploits on TikTok, says he was raided by Canadian police