Risky Business Podcast
June 07, 2023
Risky Business #709 -- Cl0p goes berserk with MOVEit 0day
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:
- Russia’s FSB uncovers “NSA malware” on iPhones
- Cl0p mass harvests data from MOVEit file transfer servers
- ASD discloses a bunch of operations against ISIS, criminals
- Why China’s prepositioning is probably… prepositioning
- Much, much more
This week’s show is brought to you by Thinkst Canary. Marco Slaviero is this week’s sponsor guest and he joins us to talk about indirect LLM prompt injection and the latest Canary release.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Brought to you by Thinkst
Know. When it Matters!
Show notes
Russia says US hacked thousands of Apple phones in spy plot | Reuters
Risky Biz News: Russia's FSB says NSA hacked iPhones in cyber-espionage campaign
Russia wants 2 million phones with home-grown Aurora OS for use by officials
Доверенная мобильная среда. Мобильная операционная система «Аврора» — Ростелеком
Why China's Latest APT Campaign is Legitimately Worrying
Hacks Against Ukraine's Emergency Response Services Rise During Bombings | WIRED
How Australian cyber spies used 'Rickrolling' to disrupt Islamic State militants in Iraq - ABC News
Australian intelligence's secret hand in bringing down the Bali bombers - ABC News
What we know about the MOVEit vulnerability and compromises | Cybersecurity Dive
metlstorm: "Great, so now I have to roll i…" - Infosec Exchange
Dave Aitel: "@riskybusiness @chort honestly…" - Infosec Exchange
Critical Barracuda 0-day was used to backdoor networks for 8 months | Ars Technica
Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor | WIRED
Ask Fitis, the Bear: Real Crooks Sign Their Malware – Krebs on Security
Discord Admins Hacked by Malicious Bookmarks – Krebs on Security
Google’s Android and Chrome extensions are a very sad place. Here’s why | Ars Technica
How university cybersecurity clinics can help cities fight ransomware | CyberScoop
BrianKrebs: "Russian news outlet Kommersant…" - Infosec Exchange