Risky Business #694 -- Cleansing fire claims ESXi, GoAnywhere servers

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • Unpatched ESXi boxes are getting rinsed
  • GoAnywhere MFT file transfer boxes are too
  • Royal Mail data being ransomed by Lockbit
  • Advanced materials manufacturer and finance company among latest rware victims
  • Guilty plea in Ubiquiti case
  • Much, much more

This week’s show is brought to you by Red Canary. Red Canary’s Adam Mashinchi is this week’s sponsor guest. He joins us to talk about the impact layoffs are having on infosec teams.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Risky Business #694 -- Cleansing fire claims ESXi, GoAnywhere servers
0:00 / 0:00

Show notes

Risky Biz News: Ransomware wave hits thousands of VMWare ESXi servers

Risky Biz News: Zero-day alert for GoAnywhere file transfer servers

Royal Mail faces threat from ransomware group LockBit | Reuters

ION brings clients back online after ransomware attack: Source | Business Insurance

Hackers who breached ION say ransom paid; company declines comment | Reuters

Blow to Morgan Advanced Materials as cyber-attack to cost millions to deal with | Evening Standard

K-12 schools in Tucson, Nantucket respond to cyberattacks - The Record from Recorded Future News

Ransomware gang attempts to extort UK school by posting files about at-risk children - The Record from Recorded Future News

British steel industry supplier Vesuvius ‘currently managing cyber incident’ - The Record from Recorded Future News

Tallahassee hospital diverting patients, canceling non-emergency surgeries after cyberattack - The Record from Recorded Future News

All classes canceled at Irish university as it announces ‘significant IT breach’ - The Record from Recorded Future News

Switzerland’s largest university confirms ‘serious cyberattack’ - The Record from Recorded Future News

Dutch Police Read Messages of Encrypted Messenger 'Exclu'

Julius 'zeekill' Kivimäki, former Lizard Squad hacker, arrested in France - The Record from Recorded Future News

New York attorney general fines developer of stalking apps - The Record from Recorded Future News

Microsoft alleges attacks on French magazine came from Iranian-backed group | Ars Technica

Hackers linked to North Korea targeted Indian medical org, energy sector - The Record from Recorded Future News

Google Cuts Company Protecting People From Surveillance To A ‘Skeleton Crew,’ Say Laid Off Workers

Feds get guilty plea in Ubiquiti data extortion case - The Record from Recorded Future News

For Hire: Ex-Ubiquiti Developer Charged With Extortion

Microsoft notifies UK customers affected by hackers abusing ‘verified publisher’ tag - The Record from Recorded Future News

Darknet drug market BlackSprut openly advertises on billboards in Moscow - The Record from Recorded Future News

Toyota sealed up a backdoor to its global supplier management network | The Daily Swig