Risky Business Weekly (798): Mexican cartel surveilled the FBI to identify, kill witnesses

Описание: On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

Australian airline Qantas looks like it got a Scattered Spider-ing
Microsoft works towards blunting the next CrowdStrike disaster
Changes are coming for Microsoft's default enterprise app consenting setup
Synology downplays hardcoded passwords for its M365 cloud backup agent
The next Citrix Netscaler memory disclosure looks nasty
Drug cartels used technical surveillance to find, fix and finish FBI informants and witnesses

This week's episode is sponsored by RAD Security. Co-founder Jimmy Mesta joins to talk through how they use AI automation to assess the security posture of sprawling cloud environments.


Show notes:

Qantas hit by cyber attack, leaving 6 million customer records at risk of data breach
https://www.abc.net.au/news/2025-07-0...

Scattered Spider appears to pivot toward aviation sector | Cybersecurity Dive
https://www.cybersecuritydive.com/new...

Microsoft to make Windows more resilient following 2024 IT outage | Cybersecurity Dive
https://www.cybersecuritydive.com/new...

(384) The Ultimate Guide to App Consent in Microsoft Entra - YouTube
   • The Ultimate Guide to App Consent in Micro...  

When Backups Open Backdoors: Accessing Sensitive Cloud Data via "Synology Active Backup for Microsoft 365" / modzero
https://modzero.com/en/blog/when-back...

AT&T deploys new account lock feature to counter SIM swapping | CyberScoop
https://cyberscoop.com/att-wireless-a...

Iran-linked hackers threaten to release Trump aides' emails | Reuters
https://www.reuters.com/legal/governm...

US government warns of new Iran-linked cyber threats on critical infrastructure | Cybersecurity Dive
https://www.cybersecuritydive.com/new...

Actively exploited vulnerability gives extraordinary control over server fleets - Ars Technica
https://arstechnica.com/security/2025...

Critical vulnerability in Citrix Netscaler raises specter of exploitation wave | Cybersecurity Dive
https://www.cybersecuritydive.com/new...

Identities of More Than 80 Americans Stolen for North Korean IT Worker Scams | WIRED
https://www.wired.com/story/identitie...

Cloudflare confirms Russia restricting access to services amid free internet crackdown | The Record from Recorded Future News
https://therecord.media/cloudflare-ru...

Mexican drug cartel used hacker to track FBI official, then killed potential FBI informants, government audit says | CNN Politics
https://edition.cnn.com/2025/06/28/po...

Audit of the FBI's Efforts to Mitigate the Effects of Ubiquitous Technical Surveillance - Redacted Report
https://oig.justice.gov/sites/default...

NATO members aim for spending 5% of GDP on defense, with 1.5% eligible for cyber | The Record from Recorded Future News
https://therecord.media/nato-agreemen...

US sanctions bulletproof hosting provider for supporting ransomware, infostealer operations | CyberScoop
https://cyberscoop.com/bulletproof-ho...

US, French authorities confirm arrest of BreachForums hackers | TechCrunch
https://techcrunch.com/2025/06/26/us-...

Spanish police arrest five over $542 million crypto investment scheme | The Record from Recorded Future News
https://therecord.media/spain-europol...

Scam compounds labeled a 'living nightmare' as Cambodian government accused of turning a blind eye | The Record from Recorded Future News
https://therecord.media/cambodia-scam...