Risky Business #714 -- Microsoft vs Wiz: pistols at dawn

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

• The dust-up between Microsoft and Wiz
• MobileIron/Ivanti 0day hoses Norwegian government agencies
• That’ll do TETRA, that’ll do…
• Microsoft finally agrees to offer decent logging without price gouging
• Much, much more

This week’s show is brought to you by Resoucely. Travis McPeak, Resourcely’s co-founder and CEO, is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

• Hackers exploited Ivanti zero-day to breach Norway’s government
• Citrix zero day exposes critical infrastructure, one provider hit | Cybersecurity Dive
• Interview with the ETSI Standards Organization That Created TETRA "Backdoor"
• Researchers Find ‘Backdoor’ in Encrypted Police and Military Radios
• Microsoft attackers may have data access beyond Outlook, researchers warn | Cybersecurity Dive
• Risky Biz News: Microsoft feels the heat, gives customers access to more cloud security logs
• Risky Biz News: JumpCloud compromised by APT group
• North Korean hackers breached a US tech company to steal crypto | Reuters
• North Korean hackers targeting JumpCloud mistakenly exposed their IP addresses, researchers say | TechCrunch
• Cyberattack on GitHub customers linked to North Korean hackers, Microsoft says
• Latest North Korean hack targeting cryptocurrency shows troubling evolution, experts say | CyberScoop
• White House secures safety commitments from 7 AI companies | Cybersecurity Dive
• Renewable technologies add risk to the US electric grid, experts warn | CyberScoop
• Statement on Labor’s rush to renewables leaves Australia vulnerable to catastrophic cyber attack
• Zenbleed
• Firmware vulnerabilities in millions of computers could give hackers superuser status | Ars Technica
• Satellites Are Rife With Basic Security Flaws | WIRED
• Russia’s vast telecom surveillance system crippled by withdrawal of Western tech, report says
• Apple issues third mobile OS update after zero-click spyware campaign | CyberScoop
• Apple slams UK surveillance-bill proposals - BBC News
• Bill that Would Stop the Government Buying Data Without a Warrant Passes Key Hurdle
• Kevin Mitnick Obituary - Las Vegas, NV