Risky Business #714 -- Microsoft vs Wiz: pistols at dawn

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

The dust-up between Microsoft and Wiz
MobileIron/Ivanti 0day hoses Norwegian government agencies
That’ll do TETRA, that’ll do…
Microsoft finally agrees to offer decent logging without price gouging
Much, much more

This week’s show is brought to you by Resoucely. Travis McPeak, Resourcely’s co-founder and CEO, is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes


Hackers exploited Ivanti zero-day to breach Norway’s government


Citrix zero day exposes critical infrastructure, one provider hit | Cybersecurity Dive


Interview with the ETSI Standards Organization That Created TETRA "Backdoor"


Researchers Find ‘Backdoor’ in Encrypted Police and Military Radios


Microsoft attackers may have data access beyond Outlook, researchers warn | Cybersecurity Dive


Risky Biz News: Microsoft feels the heat, gives customers access to more cloud security logs


Risky Biz News: JumpCloud compromised by APT group


North Korean hackers breached a US tech company to steal crypto | Reuters


North Korean hackers targeting JumpCloud mistakenly exposed their IP addresses, researchers say | TechCrunch


Cyberattack on GitHub customers linked to North Korean hackers, Microsoft says


Latest North Korean hack targeting cryptocurrency shows troubling evolution, experts say | CyberScoop


White House secures safety commitments from 7 AI companies | Cybersecurity Dive


Renewable technologies add risk to the US electric grid, experts warn | CyberScoop


Statement on Labor’s rush to renewables leaves Australia vulnerable to catastrophic cyber attack


Zenbleed


Firmware vulnerabilities in millions of computers could give hackers superuser status | Ars Technica


Satellites Are Rife With Basic Security Flaws | WIRED


Russia’s vast telecom surveillance system crippled by withdrawal of Western tech, report says


Apple issues third mobile OS update after zero-click spyware campaign | CyberScoop


Apple slams UK surveillance-bill proposals - BBC News


Bill that Would Stop the Government Buying Data Without a Warrant Passes Key Hurdle


Kevin Mitnick Obituary - Las Vegas, NV