Risky Business #715 -- Pressure mounts on Microsoft to explain itself

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:</p> <ul> <li>Ron Wyden’s “please explain” letter to Microsoft</li> <li>Chinese APT crews prepositioning to disrupt US military logistics</li> <li>China claims US hacked its seismology sensors</li> <li>Ivanti/MobileIron exploitation going vertical</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by Stairwell. Mike Wiacek, Stairwell’s founder and CEO, is this week’s sponsor guest. He’s joined by Eric Foster, Stairwell’s VP of Business Development.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://infosec.exchange/@riskybusiness">Patrick</a> or <a href="https://infosec.exchange/@metlstorm">Adam</a> on Mastodon if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.wyden.senate.gov/imo/media/doc/wyden_letter_to_cisa_doj_ftc_re_2023_microsoft_breach.pdf">Wyden letter to CISA, DOJ, FTC re 2023 Microsoft breach</a></li> <li><a href="https://therecord.media/senator-calls-on-doj-to-investigate-alleged-china-microsoft-hack">Senator calls on DOJ to investigate alleged China hack of Microsoft cloud tools</a></li> <li><a href="https://archive.md/FaQzL#selection-392.0-525.330">U.S. Hunts Chinese Malware That Could Disrupt American Military Operations - The New York Times</a></li> <li><a href="https://arstechnica.com/security/2023/08/multiple-chinese-apts-establish-major-beachheads-inside-us-infrastructure/">Multiple Chinese APTs establish major beachheads inside sensitive infrastructure | Ars Technica</a><