Risky Business Podcast
January 11, 2023
Risky Business #690 -- 2023 will be a rough year for critical online services
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Adam Boileau discuss the news we missed while on break. Because it’s the first show of the year, we split the discussion into themes:
- Attacks against critical online services like Okta, CircleCI, Slack and Lastpass will increase in volume
- All the latest global intrigue, from NSO being noped by the US Supreme Court to DDoS attacks in Serbia, Turla’s latest campaign, supply chain attacks against Ukraine, why Russia has been more active than we realised and much more
- A ransomware wrap, a discussion about the rise of data extortion and why it’s unlikely to remain a huge problem
- Why automotive security research will actually be interesting this year
- PLUS: A bunch of random news!
This week’s show is brought to you by Trail of Bits. Dan Guido is this week’s sponsor guest and he joins us to talk about something they’ve developed – a zero knowledge proof of exploit technique. Very interesting stuff!
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Brought to you by Trail of Bits
We don't just fix bugs, we fix software
Show notes
First LastPass, now Slack and CircleCI. The hacks go on (and will likely worsen) | Ars Technica
Devs urged to rotate secrets after CircleCI suffers security breach | The Daily Swig
GitHub incident allowed attacker to copy Okta's source code - The Record from Recorded Future News
CISA researchers: Russia's Fancy Bear infiltrated US satellite network
Exclusive: Russian hackers targeted U.S. nuclear scientists | Reuters
NSA cyber director warns of Russian digital assaults on global energy sector - CyberScoop
Notorious Russian hacking group appears to resurface with fresh cyberattacks on Ukraine
Moldovaʼs government hit by flood of phishing attacks - The Record from Recorded Future News
Kremlin-backed hackers targeted a “large” petroleum refinery in a NATO nation | Ars Technica
San Francisco BART investigating ransomware attack - The Record from Recorded Future News
Hackers leak sensitive files following attack on San Francisco transit police
Car hackers discover vulnerabilities that could let them hijack millions of vehicles
Compromised dispatch system helped move taxis to front of the line | Ars Technica
Researcher Deepfakes His Voice, Uses AI to Demand Refund From Wells Fargo
Armed With ChatGPT, Cybercriminals Build Malware And Plot Fake Girl Bots
Key bitcoin developer calls on FBI to recover $3.6M in digital coin | Ars Technica