Risky Business #644 -- USA sanctions NSO Group, hits REvil

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>US sanctions NSO, Candiru, COSEINC and Positive Technologies</li> <li>We wrap up the action in ransomware</li> <li>Why exploit tournaments are boring in America and exciting in China</li> <li>More malicious npm packages in the wild</li> <li>Pentagon updates CMMC to 2.0</li> <li>Much, much more</li> </ul> <p>We’ll hear from Corelight’s CISO Bernard Brantley in this week’s sponsor interview. We’re talking about how attackers think in graphs and defenders think in lists.. Microsoft’s John Lambert wrote a post about that back in 2015, and Bernard joins the show this week to talk about why it’s just as relevant as ever. Stick around for that one.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <dl> <dt><a href="https://www.washingtonpost.com/technology/2021/11/03/pegasus-nso-entity-list-spyware/">U.S. sanctions Israel’s NSO Group over Pegasus spyware - The Washington Post</a></dt> <dd></dd> <dt><a href="https://risky.biz/RB310/">Risky Business #310 -- Export exploits? Wassenaar says no - Risky Business</a></dt> <dd></dd> <dt><a href="https://therecord.media/positive-technologies-says-us-sanctions-had-little-or-no-effect-on-its-business/">Positive Technologies says US sanctions had little or no effect on its