Risky Business #758 – Crowdstrike's postmortem underwhelms

Risky Biz

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Crowdstrike talks loud in its postmortem, but says very little
• Digicert fears the CA-Browser Forum, gets lawsuit from a customer
• Dmitri Alperovitch joins the show to talk about the Russian prisoner swap
• Cloudflare continues to harbour scum and villainy
• Professional ransomware crew … is an improvement?
• And much, much more.

This week’s episode is sponsored by Thinkst Canary. Marko Slaviero joins to discuss the unfashionable choice they made in hosting their platform one-VM-per-customer.

Show notes

• CrowdStrike investors file class action suit following global IT outage | Cybersecurity Dive
• CrowdStrike rebukes Delta’s negligence claims in fiery letter | Cybersecurity Dive
• Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf
• Sparks fly when lawyers meet a certificate revocation
• crt.sh | Alegeus
• U.S. releases Russian hackers in Evan Gershkovich prisoner swap
• U.S. Trades Cybercriminals to Russia in Prisoner Swap – Krebs on Security
• Who are the two major hackers Russia just received in a prisoner swap? | Ars Technica
• Hackers remotely wipe 13,000 students’ iPads and Chromebooks after breaching safety software
• Mobile Guardian Device Management Application to be removed | MOE
• Ford wants patent for tech allowing cars to surveil and report speeding drivers
• I'm Sorry, Dave, You're Speeding | WIRED
• Cloudflare once again comes under pressure for enabling abusive sites | Ars Technica
• Low-Drama ‘Dark Angels’ Reap Record Ransoms – Krebs on Security
• Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say | TechCrunch
• Unfashionably secure: why we use isolated VMs – Thinkst Thoughts
• Defending AI Model Files from Unauthorized Access with Canaries | NVIDIA Technical Blog