Risky Business #648 -- Adios, 2021, it's been real

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>NSO Group tools found on US embassy staff phones in Uganda</li> <li>Mitto is up to shady bidnez</li> <li>Ubiquiti “whistleblower” charged over hack</li> <li>Hounds everywhere</li> <li>Planned Parenthood breached</li> <li>Much, much more</li> </ul> <p>This week’s sponsor interview is with Andrew Morris of Greynoise.</p> <p>Greynoise has a bunch of sensors out there on the Internets, so they can tell you when and IP that’s hitting you is also hitting everyone else. If you work in a SOC, you know this is very useful. Greynoise has just signed a $30m deal with the US Department of Defense. As Andrew will explain in just a moment, this means if you work in a DoD agency it’s now very easy for you to get a subscription. In this interview I also talk to Andrew about his adventures chasing down one of the people spamming Internet attached receipt printers with the antiwork manifesto from Reddit.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.washingtonpost.com/technology/2021/12/03/israel-nso-pegasus-hack-us-diplomats/">NSO Pegasus spyware used to hack U.S. diplomats’ phones - The Washington Post</a></li> <li><a href="https://www.bloomberg.com/news/articles/2021-12-06/this-swiss-tech-exec-is-said-to-have-operated-a-secret-surveillance-operation">This Swiss Firm Exec Is Said To Have Operated A Secret Surve