Risky Business Podcast
October 11, 2023
Risky Business #725 -- Microsoft knifes VBScript, passkeys the new default for Google accounts
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick Gray and Lina Lau discuss the week’s security news. They cover:
- Microsoft has killed VBScript
- Google to make passkeys the new default sign-in method
- MGM losses to exceed $100m
- Clorox has a bad quarter
- Why a bug in cURL could be really bad news
- Much, much more
This week’s show is brought to you by KSOC. Jimmy Mesta, KSOC’s co-founder and CTO, is this week’s sponsor guest. He talks to us about how we can start applying real, actual IAM to Kubernetes environments.
Brought to you by KSOC
Cloud Native Threat Detection & Response
Show notes
Deprecated features in the Windows client - What's new in Windows | Microsoft Learn
Google Makes Passkeys Default, Stepping Up Its Push to Kill Passwords | WIRED
AWS kicks off cloud race to mandate MFA by default | Cybersecurity Dive
MGM Resorts’ Las Vegas area operations to take $100M hit from cyberattack | Cybersecurity Dive
Clorox warns of quarterly loss related to August cyberattack, production delays | Cybersecurity Dive
Blackbaud agrees to $49.5 million settlement with AGs of nearly all 50 states
Cybercrime gangs now deploying ransomware within 24 hours of hacking victims
Microsoft: Human-operated ransomware attacks tripled over past year
Ukraine, Israel, South Korea top list of most-targeted countries for cyberattacks
Microsoft: State-backed hackers grow in sophistication, aggressiveness | CyberScoop
67 X accounts spread coordinated Israel-Hamas disinformation: report
Hacktivism erupts in response to Hamas-Israel war | TechCrunch
‘War has no rules’: Hacktivists scorn Red Cross’ new guidelines
Cloud giants sound alarm on record-breaking DDoS attacks | Cybersecurity Dive
Israel's Failure to Stop the Hamas Attack Shows the Danger of Too Much Surveillance | WIRED
HTTP/2 Zero-Day Vulnerability Results in Record-Breaking DDoS Attacks
Maintainers warn of vulnerability affecting foundational open-source tool
23andMe user data targeting Ashkenazi Jews leaked online
23andMe User Data Stolen in Credential Stuffing Attack
Thousands of WordPress sites have been hacked through tagDiv plugin vulnerability | Ars Technica
From AI with love: Scammers integrate ChatGPT into dating-app tool
Inside FTX’s All-Night Race to Stop a $1 Billion Crypto Heist | WIRED