Risky Business Podcast
March 20, 2024
Risky Business #741 -- The Mintlify breach and modern supply chains
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick and Adam discuss the week’s security news, including:
- Turns out AI is still bad code review after all,
- Mintlify loses a bunch of Github tokens,
- Everything old is new again with the UDP loop DoS,
- Know-your-(recon satellite)-customer is hard,
- Microsoft takes away Russia’s powershell, solving living off the land,
- And much, much more
This week’s show is brought to you by Material Security. In this week’s sponsor interview we speak with Material’s Rajan Kapoor, VP of Customer Experience at Material. We’re also joined by Chaim Sanders, who heads Security and Privacy at Lyft.
Brought to you by Material Security
Cloud Email Security for Microsoft 365 and Google Workspace
Show notes
Anthropic’s CISO drinks the AI kool aid - backpedals frantically on security analysis claim
Incident report on March 13, 2024 - Mintlify
Loop DoS: New Denial-of-Service attack targets application-layer protocols
Pharmaceutical development company investigating cyberattack after LockBit posting
Exclusive: After LockBit’s takedown, its purported leader vows to hack on
Russian-Canadian hacker sentenced for global ransomware scheme to be extradited | CTV News
A Suspicious Pattern Alarming the Ukrainian Military - The Atlantic
Elon Musk’s SpaceX Forges Closer Ties With U.S. Spy and Military Agencies - WSJ
Russians will no longer be able to access Microsoft cloud services, business intelligence tools
Rostelecom blocks the SIP protocol for clients of Russian hosters / Sudo Null IT News
Researchers spot updated version of malware that hit Viasat | CyberScoop
Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks | Trend Micro (US)
PRC State-Sponsored Cyber Activity: Actions for Critical Infrastructure Leaders | CISA
US is still chasing down pieces of Chinese hacking operation, NSA official says
875 workers rescued in Tarlac POGO raid | Philippine News Agency
Fujitsu says it found malware on its corporate network, warns of possible data breach | Ars Technica
Mike Lindell must pay a Nevada man after election data dispute - The Washington Post