Risky Business #726 -- Okta owned while Cisco takes a massive L

<p>On this week’s show Patrick Gray talks through the news with Dmitri Alperovitch, NSA Cybersecurity director Rob Joyce and NSA CCC director Morgan Adamski. They discuss:</p> <ul> <li>The Okta breach</li> <li>40-50k feral Ciscos</li> <li>Why the http/2 protocol flaw is a real headache</li> <li>The Ragnar Locker takedown</li> <li>What the NSA CCC has been thinking about</li> </ul> <p>This week’s show is brought to you by Socket. Socket’s founder Feross Aboukhadijeh joins us this week to talk about their actually-not-crazy use of large language models in their product.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://krebsonsecurity.com/2023/10/hackers-stole-access-tokens-from-oktas-support-unit/">Hackers Stole Access Tokens from Okta’s Support Unit – Krebs on Security</a></li> <li><a href="https://www.cybersecuritydive.com/news/cisco-IOS-XE-exploited-no-patch/697188/">Almost 42K Cisco IOS XE devices exploited, no patch available | Cybersecurity Dive</a></li> <li><a href="https://www.cybersecuritydive.com/news/atlassian-confluence-vulnerability-china/696552/">Critical Atlassian Confluence CVE under exploit by prolific state-linked actor | Cybersecurity Dive</a></li> <li><a href="https://therecord.media/teamcity-vulnerability-targeted-by-nk-hackers">JetBrains vulnerability being exploited by North Korean gov’t hackers, Microsoft says</a></li> <li><a href="https://www.cybersecuritydive.com/news/citrix-netscaler-patch--bypassed-hackers/696976/">Citrix Netscaler patch for critical CVE bypassed by malicious hackers | Cybersecurity Dive</a></li>