Risky Business #716 -- This ain't your grandma's cloud

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:</p> <ul> <li>Tenable gives Microsoft a spray over Azure bug fix delay, quality</li> <li>Lateral movement fun via Azure Active Directory Cross-Tenant Synchronization</li> <li>Ransomware targets hospitals, special needs schools</li> <li>Japan’s cybersecurity has some catching up to do</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by Corelight. Brian Dye, Corelight’s CEO, is this week’s sponsor guest.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://infosec.exchange/@riskybusiness">Patrick</a> or <a href="https://infosec.exchange/@metlstorm">Adam</a> on Mastodon if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://cyberscoop.com/tenable-microsoft-negligence-security-flaw/">Tenable CEO accuses Microsoft of negligence in addressing security flaw | CyberScoop</a></li> <li><a href="https://therecord.media/microsoft-resolves-vulnerability-following-criticism">Microsoft resolves vulnerability following criticism from Tenable CEO</a></li> <li><a href="https://www.bleepingcomputer.com/news/security/new-microsoft-azure-ad-cts-feature-can-be-abused-for-lateral-movement/">New Microsoft Azure AD CTS feature can be abused for lateral movement</a></li> <li><a href="https://www.nbcnews.com/tech/security/hackers-force-hospital-system-take-national-computer-system-offline-rcna98212">Hackers force hospital system to take its national computer system offline</a></li> <li><a href="https: