Risky Business #758 – Crowdstrike's postmortem underwhelms
On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Crowdstrike talks loud in its postmortem, but says very little
- Digicert fears the CA-Browser Forum, gets lawsuit from a customer
- Dmitri Alperovitch joins the show to talk about the Russian prisoner swap
- Cloudflare continues to harbour scum and villainy
- Professional ransomware crew … is an improvement?
- And much, much more.
This week’s episode is sponsored by Thinkst Canary. Marko Slaviero joins to discuss the unfashionable choice they made in hosting their platform one-VM-per-customer.
Show notes
- CrowdStrike investors file class action suit following global IT outage | Cybersecurity Dive
- CrowdStrike rebukes Delta’s negligence claims in fiery letter | Cybersecurity Dive
- Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf
- Sparks fly when lawyers meet a certificate revocation
- crt.sh | Alegeus
- U.S. releases Russian hackers in Evan Gershkovich prisoner swap
- U.S. Trades Cybercriminals to Russia in Prisoner Swap – Krebs on Security
- Who are the two major hackers Russia just received in a prisoner swap? | Ars Technica
- Hackers remotely wipe 13,000 students’ iPads and Chromebooks after breaching safety software
- Mobile Guardian Device Management Application to be removed | MOE
- Ford wants patent for tech allowing cars to surveil and report speeding drivers
- I'm Sorry, Dave, You're Speeding | WIRED
- Cloudflare once again comes under pressure for enabling abusive sites | Ars Technica
- Low-Drama ‘Dark Angels’ Reap Record Ransoms – Krebs on Security
- Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say | TechCrunch
- Unfashionably secure: why we use isolated VMs – Thinkst Thoughts
- Defending AI Model Files from Unauthorized Access with Canaries | NVIDIA Technical Blog
