Risky Business #713 -- Microsoft activates PR weasels after State Department hack

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:</p> <ul> <li>Microsoft’s weasel-word response to the State Department email hack</li> <li>JumpCloud got owned, maybe by DPRK</li> <li>Citrix 0day is getting stuff rekt</li> <li>Two more spyware firms sanctioned by USA</li> <li>Scammers list fake phone numbers for major airlines on Google Maps</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by security focussed enterprise browser maker Island. Dan Amiga, Island’s CTO and co-founder, is this week’s sponsor guest. He talks about why widespread enterprise browser deployment is inevitable.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://infosec.exchange/@riskybusiness">Patrick</a> or <a href="https://infosec.exchange/@metlstorm">Adam</a> on Mastodon if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.nbcnews.com/tech/security/china-based-hackers-breached-email-accounts-microsoft-says-rcna93824">China-based hackers breach email accounts at State Department</a></li> <li><a href="https://www.cybersecuritydive.com/news/microsoft-hardens-key-issuance-after-breach/687995/">Microsoft hardens key issuance systems after state-backed hackers breach Outlook accounts | Cybersecurity Dive</a></li> <li><a href="https://arstechnica.com/security/2023/07/microsoft-takes-pains-to-obscure-role-in-0-days-that-caused-email-breach/">Microsoft takes pains to obscure role in 0-days that caused email breach | Ars Technica</a></li> <li><a href="https://www.mandiant