Episode Details

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

• We roll our eyes over the “16 billion credentials” leak hitting mainstream news
• Some interesting cyber angles emerge from the conflict in Iran
• Opensource maintainer of libxml2 is fed up with this hacker crap
• Shockingly, there are yet more ways to trick people into pasting commands into Windows
• Veeam “patches” its backup software RCE like it’s 2002 … by breaking the public PoC

This week’s episode is sponsored by Internet-wide honeypot reconnaissance platform, Greynoise. Founder Andrew Morris joins to talk about their journey spotting Chinese ORB-builders hacking thousands of ASUS routers, and why they’re destined for the woodchipper.

This episode is also available on Youtube.

Show notes

• No, the 16 billion credentials leak is not a new data breach
• Canadian telecom hacked by suspected China state group - Ars Technica
• Telecom giant Viasat breached by China's Salt Typhoon hackers
• WarTranslated on X: "Iran’s jamming GPS in the Strait of Hormuz, messing with ~970 ships, per Windward. UKMTO confirms the interference. Faulty AIS coordinates are screwing up navigation in the Persian Gulf. The IRGC threatens to shut the strait down in hours. https://t.co/kdMJvshOGC" / X
• Dmitri Alperovitch on X: "Chairman of the Joint Chiefs Gen. Dan Caine says @US_CYBERCOM supported this strike mission" / X
• Top Pentagon spy pick rejected by White House - POLITICO
• DHS warns of heightened cyber threat as US enters Iran conflict | Cybersecurity Dive
• Exclusive: Early US intel assessment suggests strikes on Iran did not destroy nuclear sites, sources say
• U.S. braces for Iran's response after overnight strikes on nuclear sites
• Assessing the Damage to Iran’s Nuclear Program
• Iran Hacks Tirana Municipality in Retaliation Over MEK - Tirana Times
• Iran's government says it shut down internet to protect against cyberattacks | TechCrunch