Risky Business #659 -- Okta and Microsoft meet LAPSUS$

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>Okta’s somewhat awful comms around its LAPSUS$ incident</li> <li>Inside Microsoft’s brush with the same group</li> <li>How Elon Musk’s Starlink service is being used to drop bombs on Russian tanks</li> <li>US, UK governments warn of impending Russian cyberdoom</li> <li>Much, much more…</li> </ul> <p>This week’s sponsor interview is with Paul Lanzi, co-founder of Remediant. Paul joins the show this week to talk about cyber insurance. It’s a topic that has come up a lot for us lately – ransomware has borderline sunk the current cyber insurance model as payments ballooned and payouts made a lot of insurers adjust premiums to the. But all is not lost – Paul says this blowup means the insurance industry is actually adapting and could wind up being a driver of better security practices.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.reuters.com/technology/authentication-services-firm-okta-says-it-is-investigating-report-breach-2022-03-22/">Hackers hit authentication firm Okta, customers &#39;may have been impacted&#39; | Reuters</a></li> <li><a href="https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/">Updated Okta Statement on LAPSUS$ | Okta</a></li> <li><a href="https://therecord.media/microsoft-investigating-lapsus-claims-of-bing-cortana-data-theft/">Microsoft i