Risky Business #717 -- The kids are okay. At ripping your face off.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

• More victims identified in Chinese breach of Microsoft email accounts
• Cyber Safety Review Board to investigate Microsoft
• We got some stuff wrong last week
• More details on Viasat hack revealed
• Special guest Heather Adkins talks about the CSRB’s Lapsus$ report
• Much, much more

This week’s show is brought to you by RunZero. Its co-founder HD Moore is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

• Chinese Microsoft hackers also hit GOP Rep. Don Bacon of Nebraska - The Washington Post
• US cyber board to investigate Microsoft hack of government emails | TechCrunch
• Richard: "@briankrebs @metlstorm @riskyb…" - Mastodon.Radio
• Mastodon.Radio
• An SSRF, privileged AWS keys and the Capital One breach | by Riyaz Walikar | Appsecco
• Chamber of Commerce urges SEC to delay cyber rule implementation | Cybersecurity Dive
• Satellite hack on eve of Ukraine war was a coordinated, multi-pronged assault | CyberScoop
• Microsoft to freeze license extensions for Russian companies
• Takedown of Lolek bulletproof hosting service includes arrests, NetWalker indictment
• Ransomware Diaries V. 3: LockBit's Secrets
• How the FBI goes after DDoS cyberattackers | TechCrunch
• Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’ – Krebs on Security
• Multiple zero days found affecting crypto platforms
• Lawmakers press FCC for action on Chinese-made cellular modules
• Panasonic Warns That IoT Malware Attack Cycles Are Accelerating | WIRED
• Rapid7 to cut 18% of workforce, shutter certain offices | Cybersecurity Dive
• SecureWorks layoffs affect 15% staff | TechCrunch
• Researcher says they were behind iPhone popups at Def Con | TechCrunch
• Review of the Attacks Associated with LAPSUS$ and Related Threat Groups
• US should crack down on SIM swapping following Lapsus$ attacks: DHS review
• Kevin Collier: "Def Con is over and nobody hac…" - Infosec Exchange