Episode Details

Risky Biz returns after two weeks off, and there sure is cybersecurity news to catch up on. Patrick Gray and Adam Boileau discuss:

• Microsoft tried to make outsourcing the Pentagon’s cloud maintenance to China okay (it was not)
• She shells Sharepoint by the sea-shore (by ‘she’ we mean ‘China’)
• Four (alleged) Scattered Spider members arrested (and bailed) in the UK
• Hackers spend $2700 to buy creds for a Brazilian payment system, steal $100M
• Fortinet has SQLI in the auth header, Citrix mem leak is weaponised, HP hardcodes creds and Sonicwalls get user-moderootkits. Just security vendor things!

This week’s episode is sponsored by Airlock Digital. CEO David Cottingham talks through what it takes to build a mature, resilient management platform for a security critical system.

This episode is also available on Youtube.

Show notes

• Update on DOD’s cloud services
• Microsoft to stop using engineers in China for tech support of US military, Hegseth orders review
• A Little-Known Microsoft Program Could Expose the Defense Department to Chinese Hackers
• While DOD policy bans unauthorized apps like TikTok from being on employees phones over national security risks
• Microsoft Fix Targets Attacks on SharePoint Zero-Day – Krebs on Security
• National Guard was hacked by China's 'Salt Typhoon' group, DHS says
• Suspected contractor for China’s Hafnium group arrested in in Italy | Cybersecurity Dive
• Singapore accuses Chinese state-backed hackers of attacking critical infrastructure networks | The Record from Recorded Future News
• UK Arrests Four in ‘Scattered Spider’ Ransom Group – Krebs on Security
• Four people bailed after arrests over cyber attacks on M&S, Co-op and Harrods
• Brazilian police arrest IT worker over $100 million cyber theft | The Record from Recorded Future News
• At Least 750 US Hospitals Faced Disruptions During Last Year’s CrowdStrike Outage, Study Finds | WIRED

• Listen Now