Risky Business #716 -- This ain't your grandma's cloud

Risky Biz

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

• Tenable gives Microsoft a spray over Azure bug fix delay, quality
• Lateral movement fun via Azure Active Directory Cross-Tenant Synchronization
• Ransomware targets hospitals, special needs schools
• Japan’s cybersecurity has some catching up to do
• Much, much more

This week’s show is brought to you by Corelight. Brian Dye, Corelight’s CEO, is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

• Tenable CEO accuses Microsoft of negligence in addressing security flaw | CyberScoop
• Microsoft resolves vulnerability following criticism from Tenable CEO
• New Microsoft Azure AD CTS feature can be abused for lateral movement
• Hackers force hospital system to take its national computer system offline
• Israeli hospital redirects new patients following ransomware attack
• Russia-linked cybercriminals target school for children with learning difficulties
• Hackers accessed 16 years of Colorado public school student data in June ransomware attack
• Marine industry giant Brunswick Corporation lost $85 million in cyberattack, CEO confirms
• China hacked Japan’s classified defense cyber networks, officials say - The Washington Post
• Comrades in Arms? | North Korea Compromises Sanctioned Russian Missile Engineering Company - SentinelOne
• Ukraine says it thwarted attempt to breach military tablets
• The Mystery of Chernobyl’s Post-Invasion Radiation Spikes | WIRED
• Radiation Spikes at Chernobyl: A Mystery Few Seem Interested in Solving
• U.K. election regulator says hackers had access for over a year but elections still secure
• Exclusive: DHS Used Clearview AI Facial Recognition In Thousands Of Child Exploitation Cold Cases
• Eight Months Pregnant and Arrested After False Facial Recognition Match - The New York Times
• New ‘Downfall’ Flaw Exposes Valuable Data in Generations of Intel Chips | WIRED
• New Inception attack leaks sensitive data from all AMD Zen CPUs
• Spyware maker LetMeSpy shuts down after hacker deletes server data | TechCrunch
• ‘Crypto couple’ pleads guilty to money laundering, as husband admits to carrying out Bitfinex hack
• Google Online Security Blog: Android 14 introduces first-of-its-kind cellular connectivity security features
• Risky Biz News: Russian bill will hide the PII data of military, police, and intelligence agents