Risky Business #632 -- The Kaseya incident wasn't nearly as big as we thought

<p>On this week’s show Patrick Gray and Adam Boileau discuss recent security news, including:</p> <ul> <li>Analysis suggests the Kaseya REvil incident was actually a bit of a fizzer</li> <li>They also obtained a decrypt key and no one knows how</li> <li>EU to follow US Treasury on Bitcoin controls</li> <li>Israeli Government has eyes on NSO fallout</li> <li>PetitPotam Active Directory technique is very bad news</li> <li>Much, much more…</li> </ul> <p>This week’s show is brought to you by Remediant. Remediant makes a PAM solution that’s, well, quite different from the traditional password-vault style solutions. That’s put them in an interesting situation lately with Gartner. Remediant scored an honourable mention as a PAM to take note of, alongside Microsoft, but the thing is they don’t even qualify as a PAM vendor under Gartner’s own criteria. This might mean the analyst firms need to re-jig the way they evaluate and rank tech given there are so many more ways to skin cats these days. Remediant co-founder Paul Lanzi will join me in this week’s sponsor slot to talk through all of that.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <dl> <dt><a href="https://www.huntress.com/blog/security-researchers-hunt-to-discover-origins-of-the-kaseya-vsa-mass-ransomware-incident">Security Researchers’ Hunt to Discover Origins of the Kaseya VSA Mass Ransomware Incident</a></dt> <dd></dd> <dt><a href="