Risky Business #625 -- Iranians wipe some machines, Israelis kaboom some

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>The latest news on the health system ransomware crisis in Ireland</li> <li>TSA to force pipeline operators to disclose attacks they probably aren’t detecting anyway</li> <li>Colonial paying ransom angers US congresspeople who really haven’t thought this through</li> <li>Iran targets Israeli systems with new wipers</li> <li>Israel targets Hamas systems with guided munitions that go bang</li> <li>Much, much more</li> </ul> <p>This week’s sponsor guest is Ryan Kalember, EVP of Cybersecurity Strategy at Proofpoint. He joins us to talk about how compromised o365 accounts are powering all sorts of threat actors right now – from ransomware operators to BEC crews and APT units, everyone loves a popped mailbox.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <dl> <dt><a href="https://www.washingtonpost.com/business/2021/05/19/darkside-hack-colonial-cyber-command/ ">U.S. didn’t hack DarkSide group that hacked Colonial Pipeline - The Washington Post </a></dt> <dd> </dd> <dt><a href="https://arstechnica.com/gadgets/2021/05/darkside-ransomware-makers-accused-of-skipping-town-without-paying-affiliates/ ">Hear ye, DarkSide! This honorable ransomware court is now in session | Ars Technica </a></dt> <dd> </dd> <dt><a hr