Risky Business #623 -- Ransomware threatens US energy security

<p>On this week’s show Patrick Gray, Adam Boileau and Chris Krebs discuss the week’s security news, including:</p> <ul> <li>An analysis of the Colonial pipeline ransomware attack</li> <li>More ransomware news</li> <li>UK and US expose APT29’s preferred exploits (again)</li> <li>IntrusionTruth drops a new post</li> <li>128m Apple devices were hit by XCodeGhost</li> <li>Much, much more</li> </ul> <p>This week’s sponsor interview is with Aaron Parecki, a Senior Security Architect at Okta. He’s also been a spec editor and member of the oath working group at IETF for nearly 11 years, so he knows a thing or two about OAuth. He’ll be joining me after the week’s news to talk through the latest OAuth guidance the IETF is going to release.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <dl> <dt><a href="https://therecord.media/biden-no-evidence-russian-government-is-involved-in-colonial-ransomware-attack/ ">Biden: No evidence Russian government is involved in Colonial ransomware attack | The Record by Recorded Future </a></dt> <dd> </dd> <dt><a href="https://therecord.media/15-of-2020-ransomware-payments-carried-a-sanctions-violations-risk/ ">15% of 2020 ransomware payments carried a sanctions violations risk | The Record by Recorded Future </a></dt> <dd> </dd> <dt><a href="https://krebsonsecurity.com/2021/05/a-closer-lo