Risky Business #662 -- It's a bad month to be an electricity grid

<p>On this week’s show Patrick Gray, Adam Boileau and Dmitri Alperovitch discuss the week’s security news, including:</p> <ul> <li>Ukraine foils Russian ICS hack</li> <li>US Government burns someone’s ICS toolkit</li> <li>China gets all up in India’s energy gridz</li> <li>The Heroku/Hithub/Travis CI story is very confusing</li> <li>US DOJ removes GRU malware from Watchguard boxes under Rule 41</li> <li>North Korea behind $540m crypto hack</li> <li>Much, much more</li> </ul> <p>This week’s sponsor interview is with Scott Kuffer, co-founder of Nucleus Security, and Jared Semrau of Mandiant. They’ll be joining us to talk about how you can now plug Mandiant data into the Nucleus vulnerability scan aggregator.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a>, <a href="https://twitter.com/dalperovitch">Dmitri or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</a></p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.nbcnews.com/tech/security/ukraine-says-russian-cyberattack-sought-shut-energy-grid-rcna24026 ">Ukraine foiled Russian cyberattack that tried to shut down energy grid </a></li> <li><a href="https://twitter.com/campuscodi/status/1516706913962106884 ">(4) Catalin Cimpanu on Twitter: &quot;Days later... anyone managed to confirm or debunk this?&quot; / Twitter </a></li> <li><a href="https://twitter.com/mattgarrahan/status/1513243827846492175?s=21&t=_Lsz9AJTl1kFqHIbcJsgpg ">(4) Matthew Garrahan on Twitter: &quot;Ukraine has since adapted a government app so that people can more easil