Risky Business #712 -- The 336,000 undead Fortigates of DOOM

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:</p> <ul> <li>The SEC is targeting SolarWinds executives</li> <li>UK to make banks liable for fraud</li> <li>NSA issues advice on UEFI trojan</li> <li>Microsoft blocks 100+ dodgy drivers</li> <li>The US IC knew what Prihozhin was up to. But what FSB doing?</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by Netwrix. Martin Cannard, Netwrix’s VP of Product Strategy, is this week’s sponsor guest. He talks about why zero standing privilege is a worthy goal.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://infosec.exchange/@riskybusiness">Patrick</a> or <a href="https://infosec.exchange/@metlstorm">Adam</a> on Mastodon if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.cybersecuritydive.com/news/sec-solarwinds-ciso-cfo-orion/653864/">SEC notifies SolarWinds CISO and CFO of possible action in cyber investigation | Cybersecurity Dive</a></li> <li><a href="https://www.abc.net.au/news/2023-07-11/uk-laws-force-to-banks-reimburse-scam-victims-unless-negligent/102563000">While Australian banks refuse most scam victims refunds, the UK is making them mandatory - ABC News</a></li> <li><a href="https://therecord.media/new-law-could-allow-uk-gchq-to-monitor-internet-logs-in-real-time">New law could allow GCHQ to monitor UK internet logs in real-time to tackle fraud</a></li> <li><a href="https://cyberscoop.com/ferc-cybersecurity-incentives-electric-grid/">Federal incentives could help utilities overcome