Risky Business #655 -- USG: Expect Russian cyber drama

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>Ukraine sanctions may lead to Russia going “cyber feral”</li> <li>Brian Krebs links Red Cross breach to Iranian actor</li> <li>APT10 uses cred stuffing as misdirection</li> <li>Report: Global logistics behemoth Expeditors ransomwared</li> <li>NFT thefts still hilarious</li> <li>Inside the epic KlaySwap hack</li> <li>Much, much more</li> </ul> <p>In this week’s sponsor interview Thinkst Canary’s Marco Slaviero talks about some work they’ve done on introducing a “<a href="https://blog.thinkst.com/2022/02/a-safety-net-for-aws-canarytokens.html" target="new">Safety Net</a>” against AWS token enumeration edge cases. That’s a very interesting interview.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.cyberscoop.com/ukraine-ddos-russia-attribution-white-house-neuberger/">White House attributes Ukraine DDoS incidents to Russia&#39;s GRU - CyberScoop</a></li> <li><a href="https://www.nbcnews.com/tech/security/us-issues-blanket-warning-potential-destructive-russian-hacks-rcna15969">U.S. issues blanket warning on potential of destructive Russian hacks</a></li> <li><a href="https://www.washingtonpost.com/national-security/2022/02/15/russia-ukraine-cyber-attacks/">Russian hackers have probably penetrated critical Ukraine computer networks, U.S. says - The Washington Post</a></li>