Risky Business #681 -- It's Exchangehog Day

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>More Exchange 0days cause more havoc</li> <li>A look at some earlier Exchange hack incidents</li> <li>How the CIA got its agents killed with its truly awful online opsec</li> <li>Ex NSA staffer arrested for espionage</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by Proofpoint. Ryan Kalember, Proofpoint’s EVP of cybersecurity strategy, joins the show this week to talk about some overlooked detection opportunities – some simple stuff you can look for in your environment that should raise gigantic flashing red flags.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://therecord.media/microsoft-confirms-two-exchange-server-zero-days-are-being-used-in-cyberattacks/">Microsoft confirms two Exchange Server zero days are being used in cyberattacks - The Record by Recorded Future</a></li> <li><a href="https://therecord.media/cisa-multiple-government-hacking-groups-had-long-term-access-to-defense-company/">CISA: Multiple government hacking groups had ‘long-term’ access to defense company - The Record by Recorded Future</a></li> <li><a href="https://therecord.media/mexican-president-confirms-guacamaya-hack-targeting-regional-militaries/">Mexican president confirms ‘Guacamaya’ hack targeting regional militaries - The Record by Recorded Future</a></li>