Risky Business

In this sponsored Soap Box edition of the show Patrick Gray talks to Island CEO Michael Fey about some of the cool tricks in the Island enterprise browser. You can use it to tick off so many compliance boxes, and not just cybersecurity boxes. This is largely a conversation about compliance, but it’s actually interesting and fun. These are words we never thought we’d type! You can find Island at https://island.io/ This episode is also available on Youtube. Show notes

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: This episode is sponsored by SpecterOps, who run a pretty top notch offsec/pentest team when they’re not busy making the Bloodhound Enterprise identity attack path enumeration software. SpecterOps’ Robby Winchester joins to talk about how pentest has changed, and how their customers get value from their testing. This episode is also available Youtube. Show notes SEC cyber incident reporting rule generates 71 filings in 11 months | Cybersecurity DiveUS senators, green groups call for accountability over hacking of Exxon critics | ReutersBiden Administration Takes First Step to Retaliate Against China Over Hack - The New York TimesUnfinished business for Trump: Ending the Cyber Command and NSA 'dual hat' | The Record from Recorded Future NewsEU opens investigation into TikTok and the Romanian election – POLITICOClop ransomware claims responsibility for Cleo data theft attacksCISA warns of ransomware gangs exploiting Cleo, CyberPanel bugs | The Record from Recorded Future NewsCVE-2024-55956 | AttackerKBApache issues patches for critical Struts 2 RCE bug • The RegisterJapanese game and anime publisher reportedly pays $3 million ransom to Russia-linked hackers | The Record from Recorded Future NewsIsraeli spyware firm Paragon acquired by US investment group, report says | ReutersHow Cryptocurrency Turns to Cash in Russian Banks – Krebs on SecurityArizona man arrested for alleged involvement in violent online terror networks | CyberScoopRussia bans Viber, claiming app facilitates terrorism and drug trafficking | The Record from Recorded Future News

In this edition of the Wild World of Cyber podcast Patrick Gray sits down with SentinelOne’s Chief Intelligence and Public Policy Officer Chris Krebs to talk all about Chinese cyber operations. They look at the Salt Typhoon and Volt Typhoon campaigns, the last 20 years of Chinese operations, and the evolution of the cyber roles of China’s Ministry of State Security and People’s Liberation Army. It’s a very dense hour of conversation! This podcast was recorded in front of an audience at the Museum of Contemporary Art in Sydney. This episode is also available on Youtube. Show notes

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: This week’s episode is sponsored by Thinkst, who love sneaky canary token traps. Jacob Torrey previews an upcoming Blackhat talk filled with interesting operating system tricks you can use to trigger canaries in your environment. You wont believe the third trick! Attackers hate him! This episode is also available on Youtube. Show notes Cleo Software Actively Being Exploited in the Wild CVE-2024-50623 | Huntress Blue Yonder investigating data leak claim following ransomware attack | Cybersecurity Dive Snowflake to phase out single-factor authentication by late 2025 | Cybersecurity Dive Treasury Sanctions Cybersecurity Company Involved in Compromise of Firewall Products and Attempted Ransomware Attacks | U.S. Department of the Treasury Another teenage hacker charged as feds continue Scattered Spider crackdown | The Record from Recorded Future News Germany arrests suspected admin of country’s largest criminal marketplace | The Record from Recorded Future News FCC, for first time, proposes cybersecurity rules tied to wiretapping law | CyberScoop Russian state hackers abuse Cloudflare services to spy on Ukrainian targets | The Record from Recorded Future News Cloudflare’s pages.dev and workers.dev Domains Increasingly Abused for Romania annuls presidential election over alleged Russian interference | The Record from Recorded Future News EU demands TikTok 'freeze and preserve data' over alleged Russian interference in Romanian elections | The Record from Recorded Future News Research Note: Meta’s Role in Romania’s 2024 Presidential Election - CheckFirst Key electricity distributor in Romania warns of ‘cyber attack in progress’ | The Record from Recorded Future News Backdoor slipped into popular code library, drains ~$155k from digital wallets - Ars Technica AMD’s trusted execution environment blown wide open by new BadRAM attack - Ars Technica New dog, old tricks: DaMAgeCard attack targets memory directly thru SD card reader – PT SWARM Telegram partners with child safety group to scan content for sexual abuse material Apple hit with $1.2B lawsuit after killing controversial CSAM-detecting tool - Ars Technica Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection - Flatt Security Research How do I turn on the Do Not Track feature? | Firefox Help

In this interview Patrick Gray talks to Yubico’s COO and President Jerrod Chong about a new Yubikey feature: pre-registration. You can now ship pre-registered Yubikeys to your staff so you don’t need to rely on your staff to enrol them. They’ve achieved this with really slick Okta and Entra ID integrations. Jerrod also talks about a recent trip to Singapore and concerns he has about the cybersecurity of critical infrastructure in the energy sector.

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: This week’s sponsor interview with Vijit Nair from Corelight. We talk to him about doing detection in cloud environments, and how the varied nature of cloud systems makes the old ways - network monitoring - useful in new and interesting ways. If you’re in Sydney, Pat is recording a live episode of the Wide World of Cyber with Chris Krebs on 5 December. There might still be tickets left! This episode is also available on Youtube. Show notes SentinelOne: Risky Business LIVE FTC opens Microsoft antitrust investigation | AP News Exclusive: Exxon lobbyist investigated over hack-and-leak of environmentalist emails, sources say | Reuters Costa Rica state energy company calls in US experts to help with ransomware attack | The Record from Recorded Future News Blue Yonder Security Rating, Vendor Risk Report, and Data Breaches ENGlobal IT systems impacted by ransomware attack | Cybersecurity Dive Ransomware suspect Wazawaka reportedly arrested by Russia | The Record from Recorded Future News Russia delivers historic life sentence to suspected founder of darknet marketplace | The Record from Recorded Future News Vodka maker Stoli says August ransomware attack contributed to bankruptcy filing | The Record from Recorded Future News Hacker in Snowflake Extortions May Be a U.S. Soldier – Krebs on Security Uganda confirms cyberattack on central bank but minimizes extent of breach | The Record from Recorded Future News Press Release: HOME > Announcements/News > Announcements > Press Release U.S. officials urge Americans to use encrypted apps amid cyberattack With Threats to Encryption Looming, Signal’s Meredith Whittaker Says ‘We’re Not Changing’ | WIRED Japanese crypto service shuts down after theft of bitcoin worth $308 million | The Record from Recorded Future News He Got Banned From X. Now He Wants to Help You Escape, Too | WIRED cyberundergroundfeed on X: "🚨 Pro-Russian Group Allegedly Hacks #Australia #Melbourne Sewage System 🚨 Hackers claim to have compromised the Riversdale sewage pumping station in #Melbourne, #Australia, switching it to manual control and placing it in emergency mode." Pump station fears rebuffed - New Zealand News - NZ Herald NZ Navy ship runs aground off Samoa, catches fire and sinks

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: In this week’s sponsor interview Patrick Gray chats with Matt Muller from Tines about Gartner’s “spicy take” that the SOAR category is dead. SOAR is dead! Long live SOAR! This episode is also available on Youtube. Show notes Retailers struggle after ransomware attack on supply chain tech provider Blue Yonder | The Record from Recorded Future NewsCustomer UpdateRussian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack | WIREDChina’s Salt Typhoon hackers target telecom firms in Southeast Asia with new malware | The Record from Recorded Future NewsEmerging Details of Chinese Hack Leave U.S. Officials Increasingly ConcernedTop senator calls Salt Typhoon “worst telecom hack in our nation’s history” - The Washington PostPrivacy-focused mobile phone launches for high-risk individuals | CyberScoopChina’s Surveillance State Is Selling Citizen Data as a Side Hustle | WIREDFormer Verizon employee gets four-year sentence for sharing cyber secrets with Chinese government | The Record from Recorded Future NewsSurveillance Legislation (Confirmation of Application) Bill 2024 – Parliament of AustraliaParlInfo - BILLS : Surveillance Legislation (Confirmation of Application) Bill 2024 : Second ReadingParlInfo - Surveillance Legislation (Confirmation of Application) Bill 2024ParlInfo - Surveillance Legislation (Confirmation of Application) Bill 2024Chris Bing: "Regarding the reported hack of the Gaetz-ethics committee report, the file storage platform (FileShare) that held the document said they weren't hacked. But rather: "this file was shared anonymously which allowed anyone to download. This was not a breach"" — BlueskyTether Has Become a Massive Money Laundering Tool for Mexican Drug Traffickers, Feds SayPalo Alto Networks boasts as customers coalesce on its platforms | Cybersecurity DivePalo Alto Networks pushes back as Shadowserver spots 2K of its firewalls exploited | Cybersecurity DiveRSF investigation: the Indian cyber-security giant silencing media outlets worldwide | RSFPatrick Gray (@patrick.risky.biz) — Blueskymetlstorm (@metlstorm.risky.biz) — BlueskyCatalin Cimpanu (@campuscodi.risky.biz) — BlueskyTom Uren (@tom.risky.biz) — Bluesky

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: This week’s episode is sponsored by Greynoise. The always excitable Andrew Morris joins to remind us that the edge-device vulnerabilities Pat and Adam complain about on the show are in fact actually even worse than we make them out to be. Andrew also tells us about a zero-day Greynoise’ AI system truffle-pigged out of their data set. This episode is also available on Youtube. Show notes Windows security and resiliency: Protecting your business | Windows Experience BlogMicrosoft revamps how it will disclose vulnerabilities | Cybersecurity DiveNIST says exploited vulnerability backlog cleared but end-of-year goal for full list unlikelyPots and Pans, AKA an SSLVPN - Palo Alto PAN-OS CVE-2024-0012 and CVE-2024-9474Palo Alto Networks customers grapple with another actively exploited zero-day | Cybersecurity DiveUnpatched zero-days in Fortinet and Palo Alto Networks softwarePalo Alto Networks’ customer migration tool hit by trio of CVE exploits | Cybersecurity DiveReadout of President Joe Biden’s Meeting with President Xi Jinping of the People’s Republic of China | The White HouseEasterly to step down from CISA director role on Inauguration Day | Cybersecurity DiveTop White House cyber official urges Trump to focus on ransomware, ChinaRansomware gang Akira leaks unprecedented number of victims’ data in one dayHacker Is Said to Have Gained Access to File With Damaging Testimony About Gaetz1,400 Pegasus spyware infections detailed in WhatsApp’s lawsuit filingsNSO Group admits cutting off 10 customers because they abused its Pegasus spyware, say unsealed court documents | TechCrunchRansomware gang Akira leaks unprecedented number of victims’ data in one dayOhio man behind Helix cryptocurrency mixer gets 3-year sentenceO2 unveils Daisy, the AI granny wasting scammers’ time - Virgin Media O2Understanding the Efficacy of Phishing Training in PracticeBunnings facial recognition cameras breach Privacy Act, retailer to challenge ruling | news.com.au — Australia’s leading news siteNudity, punches in newly released Bunnings CCTV as company found to breach Privacy Act | news.com.au — Australia’s leading news siteBitfinex Hack Launderer Heather 'Razzlekhan' Morgan Sentenced to 18 Months in Prison

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: This week’s feature guest is former FBI agent Chris Tarbell, who arrested Silk Road operator Ross Ulbricht way back in 2013. As suggestions swirl that an incoming Trump administration might release Ulbricht, Chris talks about the reality of the Dread Pirate Roberts. This episode is sponsored by software supply chain security firm Socket.dev. Founder Feross Aboukhadijeh thinks that we need a CVE-like catalogue for supply-chain attacks, and he makes a solid argument. The show is also available on Youtube. Show notes Jason Koebler: "New: We’ve confirmed Apple quietly introduced a feature in the new iOS that is preventing cops from hacking iPhones that they have confiscated as evidence. Apple really did say ACAB www.404media.co/apple-quietl..." — BlueskyApple Quietly Introduced iPhone Reboot Code Which is Locking Out CopsExclusive | U.S. Agency Warns Employees About Phone Use Amid Ongoing China Hack - WSJSurge in exploits of zero-day vulnerabilities is ‘new normal’ warns Five Eyes allianceThe Elusive GoblinRAT: How a Linux Backdoor Infiltrated Government InfrastructuresMicrosoft Bookings – Facilitating Impersonation | Cyberis LimitedTrustedSec | EKUwu: Not just another AD CS ESCRussia’s internet watchdog blocks thousands of websites that use Cloudflare's privacy serviceDefending the Tor network: Mitigating IP spoofing against Tor | The Tor ProjectLaw enforcement operation takes down 22,000 malicious IP addresses worldwide - Ars TechnicaPress Conference - Parliament House, Canberra | Prime Minister of AustraliaDHS nominee Kristi Noem stood alone for rejecting department cyber grants to state, local governments | CyberScoopPatrick Gray: "Allies will feel comfortable until these guys get fired in their first 100 days for opposing Trump’s proposed annexation of Iceland or something. People have forgotten… Trump is out of his gourd" — Bluesky

In this edition of the Risky Business Soap Box we’re talking all about email security with Sublime Security co-founder Josh Kamdjou. Email security is one of the oldest product categories in security, but as you’ll hear, Josh thinks the incumbents are just doing it wrong. He joins Risky Business host Patrick Gray for this interview about Sublime’s origin story and its new approach to email security.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Special guest Sophos CISO Ross McKerchar joined us to talk about its “hacking back” campaign. The full interview is available on Youtube for those who want to really live vicariously through Sophos doing what every vendor probably wants to do. This week’s episode is sponsored by attack surface mapping vendor runZero. Founder and CEO HD Moore joins to talk about marrying up the outside and inside views of your network. You can also watch this episode on Youtube Show notes Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security AdvisoryDoes bcrypt have a maximum password length? - Information Security Stack ExchangeLocal Administrator Protection | Privilege ProtectionInside Sophos' 5-Year War With the Chinese Hackers Hijacking Its Devices | WIREDA Deeper Look at FortiJump (FortiManager CVE-2024-47575) | Bishop FoxMan Arrested for Snowflake Hacking Spree Faces US Extradition | WIREDGoogle uses large language model to discover real-world vulnerabilityGreyNoise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AIThousands of hacked TP-Link routers used in yearslong account takeover attacks - Ars TechnicaCISA warns of foreign threat group launching spearphishing campaign using malicious RDP files | Cybersecurity DiveChinese state-backed hackers breached 20 Canadian government networks over four years, agency warnsIndia-Canada row: Canadian officials confess to leaking 'intel' against India to Washington Post - India TodayAmid diplomatic row, Canada names India in ‘cyberthreat adversary’ list, accuses it of ‘likely spying’ | World News - The Indian ExpressThe Untold Story of Trump's Failed Attempt to Overthrow Venezuela's President | WIREDRisky Biz News: The mystery at Mango ParkNorth Korean hackers seen collaborating with Play ransomware group, researchers say

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: This week’s episode is sponsored by Material Security, who help navigate the mess of cloud productivity data security. Daniel Ayala - Chief Security and Trust Officer at Dotmatics - is a Material customer, and joins Pat and Material Security’s Rajan Kapoor to talk about how to wrangle securing data that ends up in corporate cloud email and file stores. This episode is also available on Youtube. Show notes Apple 10 day certificates Chinese hackers said to have collected audio of American calls U.S. Panel to Probe Cyber Failures in Massive Chinese Hack of Telecoms How a series of opsec failures led US authorities to the alleged developer of the Redline password-stealing malware Operation Magnus Hacker Returns $19.3 Million to Drained US Government Crypto Wallet Meet ZachXBT, the Masked Vigilante Tracking Down Billions in Crypto Scams and Thefts | WIRED Radar systems in Iran breached prior to Israel's Saturday counter-strike - report Delta sues CrowdStrike after widespread IT outage that caused thousands of cancellations Tens of thousands of taxpayer accounts hacked as CRA repeatedly paid out millions in bogus refunds Microsoft CEO asked board to cut pay in connection with security overhaul | Cybersecurity Dive Four REvil members sentenced to more than four years in prison Russia says it might build its own Linux community after removal of several kernel maintainers Nigerian court drops charges against detained Binance executive Tigran Gambaryan Apple will pay security researchers up to $1 million to hack its private AI cloud | TechCrunch SonicWall firewalls the common access point in spreading ransomware campaign | Cybersecurity Dive Fortinet zero-day attack spree hits at least 50 customers | Cybersecurity Dive Cisco warns actively exploited CVE can lead to DoS attacks against VPN services | Cybersecurity Dive Chinese influence operation targets US down-ballot races, Microsoft says | Reuters Exclusive: Accused Iranian hackers successfully peddle stolen Trump emails | Reuters Viral video of ripped-up Pennsylvania ballots is fake and Russian-made, intelligence agencies say Product Demo: Securing M365 and Google Workspace with Material Security

In this Soap Box edition of the podcast Patrick Gray chats with Thinkst Canary founder Haroon Meer about his “decade of deception”, including:

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: This week’s episode is sponsored by Proofpoint. Chief Strategy Officer Ryan Kalember joins to talk about their work keeping up with prolific threat actor SocGholish. This episode is also available on Youtube. Show notes Four cyber companies fined for SolarWinds disclosure failuresU.S. charges Sudanese men with running powerful cyberattack-for-hire gangHacker Charged With Seeking to Kill Using Cyberattacks on Hospitals | WIREDRisky Biz News: Anonymous Sudan's Russia Links Are (Still) ObviousMicrosoft confirms partial loss of security log data on multiple platforms | Cybersecurity DiveRisky Biz News: Apple wants to reduce the lifespan of TLS certificates to 10 daysEncrypted Chat App ‘Session’ Leaves Australia After Visit From PoliceCrypto platform Radiant Capital says $50 million in digital coins stolen following account compromisesNorth Korean hackers use newly discovered Linux malware to raid ATMs - Ars TechnicaBrazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach – Krebs on SecurityHere’s how SIM swap in alleged bitcoin pump-and-dump scheme worked - Ars TechnicaCritical Veeam CVE actively exploited in ransomware attacks | Cybersecurity DiveFortiGate admins report active exploitation 0-day. Vendor isn’t talking. - Ars TechnicaHackers reportedly impersonate cyber firm ESET to target organizations in IsraelThe latest in North Korea’s fake IT worker scheme: Extorting the employers

On this week’s show Patrick Gray and Adam Boileau discuss the week’s infosec news, including: This week’s episode is sponsored by detection-as-code vendor Panther. Casey Hill, Panther’s Director Product Management joins to discuss why the old “just bung it all in a data lake and… ???… “ approach hasn’t worked out, and what smart teams do to handle their logs. This episode is also available on [Youtube].(https://youtu.be/86zy6DcwtbE) Show notes White House forms emergency team to deal with China espionage hack - The Washington PostDDoS attacks on Internet Archive continue after data breach impacting 31 millionMicrosoft Digital Defense Report 2024Ransomware encryption down amid surge of attacks, Microsoft says | CyberScoopRussian court websites down after breach claimed by pro-Ukraine hackersUkrainian anti-corruption agency reportedly finds no violations in disclosures of top cyber officialTrump campaign turns to secure hardware after hacking incident | ReutersFBI creates its own crypto token to nab suspects in alleged fraud schemeDistrict of Massachusetts | Eighteen Individuals and Entities Charged in International Operation Targeting Widespread Fraud and Manipulation in the Cryptocurrency Markets | United States Department of JusticeCritical CVE in 4 Fortinet products actively exploited | Cybersecurity DiveFortinet FortiGate CVE-2024-23113 - A Super Complex Vulnerability In A Super Secure Appliance In 2024Palo Alto Expedition: From N-Day to Full CompromiseIvanti up against another attack spree as hackers target its endpoint manager | Cybersecurity Dive1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies · GitHubRecently-patched Firefox bug exploited against Tor browser usersTwo never-before-seen tools, from same group, infect air-gapped devices - Ars TechnicaA Single Cloud Compromise Can Feed an Army of AI Sex Bots – Krebs on SecurityOpinion | The Cyber Sleuth - Washington Post

In this edition of Snake Oilers we hear pitches from three security vendors: Sandfly SecurityPermisoWiz You can watch this edition of Snake Oilers on YouTube here.

Patrick Gray and Adam Boileau discuss the week’s infosec news with everyone’s favourite ex-NSA big-brain, Rob Joyce. They talk through: This week’s show is brought to you by Stairwell, and Stairwell’s founder Mike Wiacek will be along to talk about how people are using their platform to hunt down detection resistant malware. A video version of this episode is also available on Youtube. Show notes Elon Musk backs down in his fight with Brazilian judges to restore X | Elon Musk | The Guardian Telegram says it will share phone numbers and IP addresses of ‘bad actors’ to authorities Jane Lytvynenko on X: "Ukrainian cybersecurity officials are limiting the use of Telegram for military, critical infrastructure, and other authorities. Budanov said he has “substantiated data” on Ru authorities having access to personal messages on TG, including removed ones. https://t.co/xOcnf7am9R" / X TikTok blocks dozens of Kremlin-backed media accounts Biden administration proposes rule banning Chinese, Russian connected vehicles and parts Some Kaspersky customers receive surprise forced-update to new antivirus software | TechCrunch Russian cyber firm Dr.Web says services are restored after ‘targeted cyberattack’ Police announce takedown and arrest mastermind behind criminal comms platform 'Ghost' Turning Everyday Gadgets into Bombs is a Bad Idea « bunnie's blog Iranian-linked election interference operation shows signs of recent access | CyberScoop Republicans demand FBI hearing on Iran theft of Trump documents Ermittlungen im Darknet: Strafverfolger hebeln Tor-Anonymisierung aus | tagesschau.de DOJ charges hackers for stealing $230 million in crypto from individual This Windows PowerShell Phish Has Scary Potential – Krebs on Security You can now use Apple’s best iPhone Mirroring feature on your Mac and iPhone | TechRadar

On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including: This week’s episode is sponsored by Push Security, who bring security visibility to where it needs to be these days – the browser. Luke Jennings joins this week’s show to discuss how phish-kit crews are driving the arms race forward, and how detection has to adapt and go where the users are. This episode is also available on Youtube. Show notes Israel planted explosives in Hezbollah's Taiwan-made pagers, sources say | Reuters How Hezbollah used pagers and couriers to counter Israel's high tech surveillance | Reuters Biden administration unveils new evidence of RT’s key role in Russian intelligence operations globally | CNN Politics Meta bans RT days after U.S. accused Russian outlet of disinformation U.S. to file charges in Trump campaign hacking case, officials say China suspected of hacking diplomatic body for Pacific islands region Chinese-made port cranes in US included 'backdoor' modems, House report says Stolen account info still chief risk for federal agencies, annual CISA audit finds Notice of Recent Security Incident | Fortinet Blog WordPress.org to require two-factor authentication for plugin developers | CyberScoop Multiple attacks force CISA to order agencies to upgrade or remove end-of-life Ivanti appliance Ivanti Endpoint Manager and Ivanti Endpoint Manager Security Suite and Ivanti Cloud Service Application (CSA) - End Of Life (EOL) The Dark Nexus Between Harm Groups and ‘The Com’ – Krebs on Security Feds sentence 12 crypto thieves behind SIM swaps, home invasions Ex-CrowdStrike employees detail rising technical errors before July outage | Semafor Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel - SecurityWeek Apple seeks dismissal of its NSO Group lawsuit, citing risk of exposing ‘vital security information’ US hits Intellexa spyware maker with more sanctions (1) BolivarCucuta on X: "Encuentran muerto al ciudadano israelí Yariv Bokor en Medellín En un apartamento de El Poblado, Medellín, fue encontrado sin vida el ciudadano israelí Yariv Bokor, con aparentes signos de violencia. Bokor estaba vinculado a la empresa Sandvine, la cual tiene relación con NSO https://t.co/EeY1os1omW" / X Instagram to bolster privacy and safety features for millions of teen users Mastercard buys Recorded Future for $2.65 billion | CyberScoop

On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including: This week’s sponsor is Kroll Cyber, and one of their incident responders Paul Wells joins to discuss that one weird trick that actually helps - preparing for an incident before hand, rather than learning all those hard lessons in the middle of a crisis. This week’s episode is also available on Youtube. Show notes Risky Biz News: Doppelganger gets a kick in the butt from Uncle SamRussia focusing on American social media stars to covertly influence voters | ReutersRussian pro-democracy nonprofit investigates alleged data breach by Kremlin-backed hackersBiden administration hits Russia with sanctions over efforts to manipulate U.S. opinion ahead of the electionUS hits Chinese companies with new sanctions over Russia-Ukraine warElon Musk’s Starlink backtracks to comply with Brazil’s ban on X | Elon Musk | The GuardianWhy It's So Hard to Fully Block X in Brazil | WIREDDurov says Telegram will tackle criticism of how it moderates content | ReutersNavalny allies accuse Telegram and other platforms of censorship | Economy News | Al JazeeraHow India tamed Twitter and set a global standard for online censorship - The Washington Post2 white supremacists tried to spark race war by soliciting murder and hate crimes on Telegram, feds sayMatthew Garrett: "Why clone a yubikey when you c…" - Nondeterministic ComputerIran pays millions in ransom to end massive cyberattack on banks, officials say – POLITICOFour Delaware men charged in international sextortion scheme that netted nearly $2 million | CyberScoopColombian president suggests prior administration illegally sent $11 million in cash to Israel for spywarePoland’s constitutional court finds commission investigating use of Pegasus spyware unconstitutional | Notes From PolandCISA says SonicWall bug being exploited as experts warn of ransomware gang useSonicWall SSLVPN access control flaw is now exploited in attacksBug Left Some Windows PCs Dangerously Unpatched – Krebs on Security

In this edition of Snake Oilers Patrick Gray gets pitches from three cybersecurity companies: You can watch this edition of Snake Oilers on YouTube here. Show notes Welcome | authentikDropzone AI: Reinforce your SOC with AI AnalystsThe identity stack to protect users and non-human identities | SlashID