Risky Business #720 -- How cloud identity provider federation features can get you mega-owned

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:</p> <ul> <li>Why everyone should pay attention to some recent attacks on Okta customers</li> <li>Why third party comms apps are risky af</li> <li>Why are Russian espionage opps using Tor for C2?</li> <li>Surveillance firms abuse Fiji Telco Digicel’s SS7 access</li> <li>Much, much more!</li> </ul> <p>This week’s show is brought to you by Gigamon. Mark Jow, Gigamon’s EMEA Technical Director is this week’s sponsor guest.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://infosec.exchange/@riskybusiness">Patrick</a> or <a href="https://infosec.exchange/@metlstorm">Adam</a> on Mastodon if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://sec.okta.com/articles/2023/08/cross-tenant-impersonation-prevention-and-detection">Cross-Tenant Impersonation: Prevention and Detection | Okta Security</a></li> <li><a href="https://www.welivesecurity.com/en/eset-research/badbazaar-espionage-tool-targets-android-users-trojanized-signal-telegram-apps/">BadBazaar espionage tool targets Android users via trojanized Signal and Telegram apps</a></li> <li><a href="https://www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/infamous-chisel/NCSC-MAR-Infamous-Chisel.pdf">NCSC-MAR-Infamous-Chisel.pdf</a></li> <li><a href="https://therecord.media/ukraine-energy-facility-cyberattack-fancy-bear-email">Ukraine says an energy facility disrupted a Fancy Bear intrusion</a></li> <li><a href="https://krebsonsecurity.com/2