Risky Business #675 -- The problem with Mudge's whistleblowing complaint

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>A deep look at Mudge’s sensational whistleblower complaint against Twitter</li> <li>Brazilian Federal Police raid Lapsus$ crew</li> <li>NSO CEO to stand down (again), 100 staff to be let go</li> <li>Signal users impacted in Twilio incident</li> <li>Tornado Cash OFACs around and finds out</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by Greynoise. Its founder, Andrew Morris, joins the show with a stinging critique of the wider threat intelligence industry. Don’t miss that one.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://twitter.com/riskybusiness/status/1562021582163558400">Patrick Gray on Twitter: &quot;Jesus… can open, worms everywhere. You basically can’t find anyone more credible than @dotMudge in infosec so this is a massive deal https://t.co/TaDQzTEtzR&quot; / Twitter</a></li> <li><a href="https://therecord.media/twitter-confirms-january-breach-urges-pseudonymous-accounts-to-not-add-email-or-phone-number/">Twitter confirms January breach, urges pseudonymous accounts to not add email or phone number - The Record by Recorded Future</a></li> <li><a href="https://www.wired.com/story/slack-hashed-passwords-exposed/">A Slack Bug Exposed Some Users’ Hashed Passwords for 5 Years | WIRED</a></li> <li><a href="https://www.vic