Risky Business #661 -- Viasat hack details firm up

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>Why Spring4Shell isn’t all hype</li> <li>How Viasat actually got owned</li> <li>Russian war crimes likely extend to coercing sysadmis</li> <li>Why lighter fluid and a box of matches is more effective than cyber in Belarus</li> <li>Much, much more</li> </ul> <p>This week’s sponsor interview is with Bernard Brantley, Corelight’s Chief Information Security Officer.</p> <p>Corelight makes a network sensor you can use to plug in to your SIEM, among other things. It’s based on Zeek, the open source network sensor that Corelight maintains. Corelight is absolutely the industry standard for this sort of thing.</p> <p>And they’ve just become the standard for something else, too: Microsoft Defender for IoT can now accept Corelight feeds. Bernard fills us in on that.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://arstechnica.com/information-technology/2022/04/explaining-spring4shell-the-internet-security-disaster-that-wasnt/">Explaining Spring4Shell: The Internet security disaster that wasn’t | Ars Technica</a></li> <li><a href="https://www.itnews.com.au/news/vmware-sprung-by-spring4shell-vulnerability-578267">VMware sprung by Spring4shell vulnerability - Security - iTnews</a></li> <li><a href="https://therecord.media/viasat-confirms-report-of-wiper-malware-used-in-ukraine-cyberattack/">V