The Security box, podcast 48: What the hell is going on with Russia’s security practices?

Hello folks, welcome to another podcast of the security box. I’d personally like to thank Michael in Tennessee for coming on our program for this one.

We’ve got quite a lot for you today in this 2 and a half hour podcast, and I hope that you enjoy the program as much as I have bringing it together for you!

Do you not have RSS access and want a copy of the show? No problem! Here is the 134.7mb file for everyone to use as your download.

Below, please find the show notes with links to all of the stories that we have for you today.

Some of the stories we have we did not cover in full for news notes, but some may have been covered on this blog in commentary by me.

Welcome to the Security Box, podcast 48. On this edition of the podcast, we’ve got two topics for you. The first is probably one you can file in the “I can’t believe I read this crap” department, while the second deals with Windows Update and what we had to look forward to there. We’ve got news notes with quite a number of very interesting items, as well as taking your calls, voice messages and stories to boot.

Topics

• Adventures in Contacting the Russian FSB Krebs on Security
• June Patch Tuesday: Internet Explorer Finally Laid to Rest from Trend Micro and Microsoft Patches Six Zero-Day Security Holes from Krebs should be read for Patch Tuesday. Worth the read as usual.

News and notes from around the landscape

We may have a lot of the things listed here in articles and commentary on the blog. Feel free to check out the articles and have your voice heard.

• This is not a drill: VMware vuln with 9.8 severity rating is under attack Ars Technica
• Trickbot indictment demonstrates how one hacking tool built on older malware Cyberscoop
• Ransomware hits iConstituent, a service lawmakers use to communicate with voters Cyberscoop
• Biden revokes TikTok ban, issues new guidance for evaluating foreign apps Cyberscoop
• 47% Phishing Increase in Q1 Phishlabs blog
• Unpatched vulnerability in Samsung phones could let hackers read your messages Phone Arena
• MoviePass settles with the FTC over exposing private information, misleading consumers Cyberscoop
• RockYou2021 Breach: How to Keep Your Data Secure Now Lastpass

Other Articles

Here are other articles that we’ve read but can’t cover in full in the rundown. All articles are linked.

• Insurer Chubb paid $65,000 to help a city unlock ransomware in 2018. A second hack was more expensive. Cyberscoop
• McDonald’s discloses hack of customer data in South Korea and Taiwan Cyberscoop
• Meat supplier JBS says it paid $11 million ransom to keep attackers from stealing data Cyberscoop
• Hackers reportedly used EA Games’ Slack to breach network, access source code Cyberscoop
• Burgeoning ransomware gang Avaddon appears to shut down, mysteriously Cyberscoop
• Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang Krebs on Security

Thanks so much for listening, and do leave those comments!

Please leave comments via email/imessage/text or call 602-887-5198. Thanks again for all your support!

Again, Download TSB048_2021-06-16.mp3 from SendSpace if you do not have RSS capabilities.