Risky Business #728 -- The Citrixbleed ransomware disaster

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:</p> <ul> <li>The Citrixbleed ransomware crisis</li> <li>Why the FBI hasn’t arrested Scattered Spider members</li> <li>DPRK is in your supply chains</li> <li>Microsoft has a brainwave and buys a HSM</li> <li>When civil war meets pig butchering</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by Airlock Digital. David Cottingham and Daniel Schell are this week’s sponsor guests.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://infosec.exchange/@riskybusiness">Patrick</a> or <a href="https://infosec.exchange/@metlstorm">Adam</a> on Mastodon if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://therecord.media/citrix-bleed-bug-targeted-cisa">‘Citrix Bleed’ vulnerability targeted by nation-state and criminal hackers: CISA</a></li> <li><a href="https://therecord.media/australian-ports-operator-recovering-from-large-cyber-incident">Australian ports operator recovering after major cyber incident</a></li> <li><a href="https://www.afr.com/companies/transport/minister-lashes-dp-world-hack-failure-20231128-p5eney">Minister lashes DP World hack failure</a></li> <li><a href="https://www.reuters.com/technology/cybersecurity/icbc-paid-ransom-after-hack-that-disrupted-markets-cybercriminals-say-2023-11-13/">Gang says ICBC paid ransom over hack that disrupted US Treasury market | Reuters</a></li> <li><a href="https://edition.cnn.com/2023/11/27/politics/cyberattack-hospital-diverts-ambu