Risky Business #711 -- Albanian authorities raid MEK camp over Iran hacks

06/20/23 • 59 min

2 Listeners

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

Albanian authorities raid MEK over Iran hacks
Microsoft admits “Anonymous Sudan” took down its services
US Government puts $10m bounty on CL0P
A deeper look at the Barracuda hack campaign
Much, much more

This week’s show is brought to you by Material Security. We’ll be hearing from one of Material’s friends – Courtney Healey, senior manager of insider threat at Coinbase – in this week’s sponsor interview.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

Albanian authorities raid MEK over Iran hacks
Microsoft admits “Anonymous Sudan” took down its services
US Government puts $10m bounty on CL0P
A deeper look at the Barracuda hack campaign
Much, much more

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Previous Episode

Risky Business #710 -- Why your corporate VPN will get you owned

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

Fortinet 0day Groundhog Day
CISA’s new binding directive on exposed management interfaces
Confirmed: US intelligence buying commercially available data
MOVEit drama rolls on
Much, much more

This week’s show is brought to you by Red Canary. Chris Rothe is this week’s sponsor guest and he joins us to talk about how MDR providers are helping customers deal with cloud monitoring.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Next Episode

Risky Biz Soap Box: Defeating Living of the Land

In this edition of the Soap Box podcast we’re going to be talking about a great topic – living off the land.

The recent Volt Typhoon report out of Microsoft chronicled the adventures of a Chinese APT crew in US critical infrastructure. But one of the most fascinating aspects of the Volt Typhoon campaign was that the attackers almost exclusively used so-called living off the land techniques.

So the question becomes – what can you do about an attacker in your environment who has privilege and isn’t using malware?

Guests David Cottingham and Daniel Schell, the CEO and CTO of Airlock Digital, join the show to talk it through.