Risky Business #679 -- A look at Uber's very bad week

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>A look at how Uber got owned so hard</li> <li>Why cleartext cookie storage in Microsoft Teams’ Electron-based app is actually a big deal</li> <li>Russian official: Starlink is a legitimate military target</li> <li>Wagner mercs get doxxed</li> <li>Kiwi Farms having a bad time</li> <li>Much, much more</li> </ul> <p>In this week’s sponsor interview we’ll be chatting to Nucleus’s CEO Steve Carter about CISA’s KEV list. He has feelings about the KEV list – they’re mostly positive, but he also has a few reasonable gripes and he joins me to talk about them.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://therecord.media/uber-attributes-hack-to-lapsus-working-with-fbi-and-doj-on-investigation/">Uber attributes hack to Lapsus$, working with FBI and DOJ on investigation - The Record by Recorded Future</a></li> <li><a href="https://therecord.media/uber-confirms-it-is-investigating-cybersecurity-incident/">Uber confirms it is investigating cybersecurity incident - The Record by Recorded Future</a></li> <li><a href="https://arstechnica.com/information-technology/2022/09/microsoft-teams-stores-cleartext-auth-tokens-wont-be-quickly-patched/">Microsoft Teams stores cleartext auth tokens, won’t be quickly patched | Ars Technica</a></li> <li><a href="https://www.volexit