Risky Business #726 -- Okta owned while Cisco takes a massive L

Risky Biz

On this week’s show Patrick Gray talks through the news with Dmitri Alperovitch, NSA Cybersecurity director Rob Joyce and NSA CCC director Morgan Adamski. They discuss:

• The Okta breach
• 40-50k feral Ciscos
• Why the http/2 protocol flaw is a real headache
• The Ragnar Locker takedown
• What the NSA CCC has been thinking about

This week’s show is brought to you by Socket. Socket’s founder Feross Aboukhadijeh joins us this week to talk about their actually-not-crazy use of large language models in their product.

Show notes

• Hackers Stole Access Tokens from Okta’s Support Unit – Krebs on Security
• Almost 42K Cisco IOS XE devices exploited, no patch available | Cybersecurity Dive
• Critical Atlassian Confluence CVE under exploit by prolific state-linked actor | Cybersecurity Dive
• JetBrains vulnerability being exploited by North Korean gov’t hackers, Microsoft says
• Citrix Netscaler patch for critical CVE bypassed by malicious hackers | Cybersecurity Dive
• HTTP/2 Rapid Reset: A New Protocol Vulnerability Will Haunt the Web for Years | WIRED
• How North Korean Workers Tricked U.S. Companies into Hiring Them and Secretly Funneled Their Earnings into Weapons Programs
• Ragnar Locker takedown
• Europol: ‘Key target’ in Ragnar Locker ransomware operation arrested in Paris
• Hacker accused of breaching Finnish psychotherapy center facing 30,000 counts
• The US Congress Was Targeted With Predator Spyware
• Lloyd’s of London finds hypothetical cyberattack could cost world economy $3.5 trillion