Risky Business #714 -- Microsoft vs Wiz: pistols at dawn

They're both wrong, but it's fun to watch...
26 Jul 2023 » Risky Business

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

  • The dust-up between Microsoft and Wiz
  • MobileIron/Ivanti 0day hoses Norwegian government agencies
  • That’ll do TETRA, that’ll do…
  • Microsoft finally agrees to offer decent logging without price gouging
  • Much, much more

This week’s show is brought to you by Resoucely. Travis McPeak, Resourcely’s co-founder and CEO, is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Hackers exploited Ivanti zero-day to breach Norway’s government
Citrix zero day exposes critical infrastructure, one provider hit | Cybersecurity Dive
Interview with the ETSI Standards Organization That Created TETRA "Backdoor"
Researchers Find ‘Backdoor’ in Encrypted Police and Military Radios
Microsoft attackers may have data access beyond Outlook, researchers warn | Cybersecurity Dive
Risky Biz News: Microsoft feels the heat, gives customers access to more cloud security logs
Risky Biz News: JumpCloud compromised by APT group
North Korean hackers breached a US tech company to steal crypto | Reuters
North Korean hackers targeting JumpCloud mistakenly exposed their IP addresses, researchers say | TechCrunch
Cyberattack on GitHub customers linked to North Korean hackers, Microsoft says
Latest North Korean hack targeting cryptocurrency shows troubling evolution, experts say | CyberScoop
White House secures safety commitments from 7 AI companies | Cybersecurity Dive
Renewable technologies add risk to the US electric grid, experts warn | CyberScoop
Statement on Labor’s rush to renewables leaves Australia vulnerable to catastrophic cyber attack
Zenbleed
Firmware vulnerabilities in millions of computers could give hackers superuser status | Ars Technica
Satellites Are Rife With Basic Security Flaws | WIRED
Russia’s vast telecom surveillance system crippled by withdrawal of Western tech, report says
Apple issues third mobile OS update after zero-click spyware campaign | CyberScoop
Apple slams UK surveillance-bill proposals - BBC News
Bill that Would Stop the Government Buying Data Without a Warrant Passes Key Hurdle
Kevin Mitnick Obituary - Las Vegas, NV