Podcasts

Microsoft has outed attempts by GRU attackers to hack into the Office365 accounts of political campaigns.

On this week’s show Patrick and Adam discuss the week’s security news, including:

• Why integrity and availability are key to developing a COVID vaccine
• China closing the “cyber gap” with USA
• ASPI publishes research on TikTok, WeChat censorship
• Belarusian “news app” was tracking activists
• Julian Assange back in court to fight extradition
• Much, much more

Plus DDoS extortion surge, Norwegian Parliament inboxes under attack, US weighs up cost of replacing Huawei and more…

This is a sponsored podcast.

Today we’re chatting with a very special guest, Haroon Meer.

Haroon is the founder of Thinkst Canary. Some call it a deception company, but he doesn’t, as you’ll hear. He says Canary is a detection company and the distinction is important.

On this week’s show Patrick and Alex discuss the week’s security news, including:

• NZ stock exchange felled by DDoS attack
• DNI cancels in-person election security briefings for Democats
• Russians didn’t hack Michigan voter data
• Sendgrid having a bad time of its own making
• US to doxes historical DPRK crypto laundering infrastructure, processes

The US Government has stepped up its campaign to expose North Korea’s state-backed cybercrime operations, this week doxxing malware the DPRK uses to cash out attacks on banks and the techniques it uses to launder funds stolen from cryptocurrency exchanges.

On this week’s show Patrick and Adam discuss the week’s security news, including:

• Former Uber CSO Joe Sullivan charged with obstruction of justice
• Whitehouse to concede WeChat carveouts for US operations in China
• A bunch of news that sounds like it’s from 1997

A criminal complaint filed against Uber’s former chief security officer this week was an extraordinary event because Uber’s response to its 2016 breach was anything but ordinary. There are nonetheless some hard lessons in it for every CSO.

On this week’s show Patrick, Adam and Sherrod DeGrippo discuss the week’s security news, including:

• NSA and FBI doxx GRU malware. Lol.
• Malicious Azure app snags SANS staffer
• Oracle to acquire TikTok?
• Trump weighs Snowden pardon
• Much, much more

This week’s show is brought to you by Airlock Digital. They make allowlist/safelist software that is actually manageable at scale! David Cottingham, an Airlock co-founder, joins the show this week to talk through a few product updates.

If the SANS Institute can fall victim to OAuth phishing, what hope do most Microsoft customers have?