Risky Business Risky Business #772 -- Salt Typhoon is truly a national security disaster
25 snips
Nov 27, 2024 Matt Muller from Tines, a security automation expert, dives into the provocative assertion by Gartner that SOAR is dead. The chat reveals the complexities of ransomware attacks, focusing on Blue Yonder and the tough choices companies must make when traditional recovery fails. They also discuss how the evolving tactics of state-backed hackers, particularly Salt Typhoon's telecom assaults, have raised national security alarms. The conversation wraps up with insights on the integration of AI in security and the necessity for adaptive approaches in ever-changing cyber landscapes.
AI Snips
Chapters
Transcript
Episode notes
Blue Yonder Ransomware Attack
- Blue Yonder, a supply chain software provider, suffered a ransomware attack.
- The attack crippled their services, impacting major retailers like Starbucks.
APT28's Wi-Fi Hack
- APT28, a Russian APT group, hacked a nearby device to access their target's Wi-Fi.
- This tactic, while interesting, isn't unprecedented in cybersecurity.
Salt Typhoon Targets Telcos
- Salt Typhoon, a Chinese state-backed hacking group, targeted US telcos.
- The attacks exposed vulnerabilities in ancient and poorly secured telco equipment.