Risky Business Weekly: Microsoft un-patches a critical bug

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including:

  • Russia’s disinformation peddlers face multifaceted sternness from the DoJ
  • Telegram is now law enforcement’s bestest new pal, all of a sudden
  • Iran’s banking industry arranges a payment plan for a ransom
  • Columbia investigates how it sent private jets full of cash to pay for Pegasus
  • Microsoft innovates with Un-Patch Tuesday
  • And much, much more.

This week’s sponsor is Kroll Cyber, and one of their incident responders Paul Wells joins to discuss that one weird trick that actually helps - preparing for an incident before hand, rather than learning all those hard lessons in the middle of a crisis.

Show notes/links:

Risky Biz News: Doppelganger gets a kick in the butt from Uncle Sam https://news.risky.biz/risky-biz-news-doppelganger-gets-a-kick-in-the-butt-from-uncle-sam/

Russia focusing on American social media stars to covertly influence voters | Reuters https://www.reuters.com/world/russia-focusing-american-social-media-stars-covertly-influence-voters-2024-09-09/

Russian pro-democracy nonprofit investigates alleged data breach by Kremlin-backed hackers https://therecord.media/free-russia-foundation-data-breach

Biden administration hits Russia with sanctions over efforts to manipulate U.S. opinion ahead of the election https://www.nbcnews.com/politics/2024-election/biden-administration-hit-russia-sanctions-trying-manipulate-us-opinion-rcna169541

US hits Chinese companies with new sanctions over Russia-Ukraine war https://thehill.com/policy/defense/4844254-us-hits-chinese-companies-with-new-sanctions-over-russia-ukraine-war/

Elon Musk’s Starlink backtracks to comply with Brazil’s ban on X | Elon Musk | The Guardian https://www.theguardian.com/technology/article/2024/sep/04/elon-musk-x-starlink-brazil

Why It’s So Hard to Fully Block X in Brazil | WIRED https://www.wired.com/story/brazil-x-ban-isp-blocking/

Durov says Telegram will tackle criticism of how it moderates content | Reuters https://www.reuters.com/technology/durov-says-telegram-will-take-new-approach-towards-moderation-2024-09-06/

Navalny allies accuse Telegram and other platforms of censorship | Economy News | Al Jazeera https://www.aljazeera.com/news/2021/9/20/navalny-allies-accuse-telegram-and-other-platforms-of-censorship

How India tamed Twitter and set a global standard for online censorship - The Washington Post https://www.washingtonpost.com/world/2023/11/08/india-twitter-online-censorship/

2 white supremacists tried to spark race war by soliciting murder and hate crimes on Telegram, feds say https://www.nbcnews.com/news/us-news/2-white-supremacists-tried-spark-race-war-soliciting-murder-hate-crime-rcna170284

Matthew Garrett: “Why clone a yubikey when you c…” - Nondeterministic Computer https://nondeterministic.computer/@mjg59/113078494207420111

Iran pays millions in ransom to end massive cyberattack on banks, officials say – POLITICO https://www.politico.eu/article/iran-millions-ransom-massive-cyberattack-banks/

Four Delaware men charged in international sextortion scheme that netted nearly $2 million | CyberScoop https://cyberscoop.com/sextortion-scam-charges-delaware-doj/

Colombian president suggests prior administration illegally sent $11 million in cash to Israel for spyware https://therecord.media/colombian-president-pegasus-spyware-israel-missing-money

Poland’s constitutional court finds commission investigating use of Pegasus spyware unconstitutional | Notes From Poland https://notesfrompoland.com/2024/09/10/polands-constitutional-court-finds-commission-investigating-use-of-pegasus-spyware-unconstitutional/

CISA says SonicWall bug being exploited as experts warn of ransomware gang use https://therecord.media/cisa-orders-patching-of-sonicwall-bug-ransomware

SonicWall SSLVPN access control flaw is now exploited in attacks https://www.bleepingcomputer.com/news/security/sonicwall-sslvpn-access-control-flaw-is-now-exploited-in-attacks/

Bug Left Some Windows PCs Dangerously Unpatched – Krebs on Security https://krebsonsecurity.com/2024/09/bug-left-some-windows-pcs-dangerously-unpatched/