Risky Business Podcast
February 22, 2023
Risky Business #696 -- Why Twitter had to kill SMS 2FA
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Why Twitter had to kill SMS 2FA
- A look at Meta’s new verification service
- How a ransomware attack disrupted the semiconductor supply chain
- Why Anonymous Sudan is probably a Russian info op
- Microsoft mixes up public and private keys in Azure B2C (for real)
- Much, much more
This week’s show is brought to you by Proofpoint. Its Executive Vice President of Cybersecurity Strategy Ryan Kalember joins the show in the sponsor slot.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Brought to you by Proofpoint
Enterprise Cybersecurity Solutions, Services & Training
Show notes
How to Protect Yourself From Twitter’s 2FA Crackdown | WIRED
Twitter’s Two-Factor Authentication Change ‘Doesn't Make Sense’ | WIRED
Political aides hacked by ‘Team Jorge’ in run-up to Kenyan election | World news | The Guardian
Fox News stars and staffers privately blasted election fraud claims as bogus, court filing shows
google_fog_of_war_research_report.pdf
Hacks, leaks and wipers: Google analyzes a year of Russian cyberattacks on Ukraine | CyberScoop
Azure B2C Crypto Misuse and Account Compromise - Praetorian
GoDaddy: Hackers stole source code, installed malware in multi-year breach
WIP26 Espionage | Threat Actors Abuse Cloud Infrastructure in Targeted Telco Attacks - SentinelOne
Health info for 1 million patients stolen using critical GoAnywhere vulnerability | Ars Technica
Latest attack on PyPI users shows crooks are only getting better | Ars Technica
Belgium launches nationwide safe harbor for ethical hackers | The Daily Swig
Tor Project Moves Away from Infrastructure Ran by Internet Monitoring Firm