Risky Business #729 -- Why patching faster won't save us

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:</p> <ul> <li>Iran-linked attacks on US water infrastructure</li> <li>Why the ownCloud bug isn’t the end of the world</li> <li>The D-Link 0day that… never existed?</li> <li>In defence of Okta</li> <li>Much, much more</li> </ul> <p>This week’s show is brought to you by Proofpoint. Ryan Kalember, Proofpoint’s EVP of Cybersecurity Strategy, is this week’s sponsor guest.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://infosec.exchange/@riskybusiness">Patrick</a> or <a href="https://infosec.exchange/@metlstorm">Adam</a> on Mastodon if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.cybersecuritydive.com/news/cisa-threat-exploiting-unitronics-water/700999/">CISA warns of threat groups exploiting Unitronics PLCs in water treatment hacks | Cybersecurity Dive</a></li> <li><a href="https://www.cybersecuritydive.com/news/north-texas-water-utility-ransomware/701144/">North Texas water utility the latest suspected industrial ransomware target | Cybersecurity Dive</a></li> <li><a href="https://therecord.media/florida-water-agency-ransomware-cisa-warning-utilities">Florida water agency latest to confirm cyber incident as feds warn of nation-state attacks</a></li> <li><a href="https://arstechnica.com/security/2023/11/owncloud-vulnerability-with-a-maximum-10-severity-rating-comes-under-mass-exploitation/">ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitation | Ars Technica</a></li>