Risky Business #676 -- Okta, Authy users among Twilio hack targets

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>The Twilio breach was actually a big deal</li> <li>How a Belarusian Cyber Partisans hack burned a GRU illegal</li> <li>Who wants 25m hashed passwords from Russia?</li> <li>An NFT we can get behind</li> <li>How attackers are using game anti-cheat drivers to defeat EDR</li> <li>Much, much more</li> </ul> <p>This week’s sponsor interview is with Mike Benjamin, the VP of security research at Fastly. He pops in to argue that your red team needs to actually consider how your apps will cope with bot-driven attacks.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.wired.com/story/twilio-breach-phishing-supply-chain-attacks/">Why the Twilio Breach Cuts So Deep | WIRED</a></li> <li><a href="https://arstechnica.com/information-technology/2022/08/phishers-who-hit-twilio-and-cloudflare-stole-10k-credentials-from-136-others/">Phishers who hit Twilio and Cloudflare stole 10k credentials from 136 others | Ars Technica</a></li> <li><a href="https://arstechnica.com/information-technology/2022/08/the-number-of-companies-caught-up-in-the-twilio-hack-keeps-growing/">The number of companies caught up in recent hacks keeps growing | Ars Technica</a></li> <li><a href="https://krebsonsecurity.com/2022/08/how-1-time-passcodes-became-a-corporate-liability/">How 1-Time Passcod