Cybersecurity Incidents and Ransomware-Related Costs

The Risky Biz main show returns from a break to the traditional internet-melting mess that happens whenever Patrick Gray takes a holiday. Pat and Adam Boileau talk through the week’s security news, including:

• Oh Crowdstrike, no, oh no, honey, no
• AT&T stored call records on Snowflake and you’ll never guess what happened next
• Squarespace buys Google Domains and makes a hash of it
• Some but not all of the SECs case against Solarwinds gets thrown out
• Pity the incident responders digging through a terabyte of Disney Slack dumps
• Internet Explorer rises from the grave, and it wants SHELLS RAAAAARGH SSHHEEELLLS
• And much, much more.

This week’s show is brought to you by Sublime Security, a flexible and modern email security platform. If you’re sick of using a black box email security solution, Sublime is a terrific option for you.

Show notes

• Risky Biz News: CrowdStrike faulty update affects 8.5 million Windows systems
• Low-level cybercriminals are pouncing on CrowdStrike-connected outage | CyberScoop
• CrowdStrike says flawed update was live for 78 minutes | Cybersecurity Dive
• Crooks Steal Phone, SMS Records for Nearly All AT&T Customers – Krebs on Security
• Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks – Krebs on Security
• Teenage suspect in MGM Resorts hack arrested in Britain
• Majority of SEC civil fraud case against SolarWinds dismissed, but core remains | Cybersecurity Dive
• How Russia-Linked Malware Cut Heat to 600 Ukrainian Buildings in Deep Winter | WIRED
• Kaspersky Lab Closing U.S. Division; Laying Off Workers
• Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages | WIRED
• Wallets tied to CDK ransom group received $25 million two days after attack | CyberScoop
• UnitedHealth’s cyberattack response costs to surpass $2.3B this year | Cybersecurity Dive
• Ransomware ecosystem fragmenting under law enforcement pressure and distrust
• Threat actors exploited Windows 0-day for more than a year before Microsoft fixed it | Ars Technica