Risky Business #738 -- LockBit is down but not out. Yet.

Risky Biz

In this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They talk about:

• LockBit gets back up after takedown
• Russia arrests Medibank hacker… for something else
• ConnectWise gives out free updates, but customers aren’t happy
• Microsoft gives in to demands for more logs
• Sandvine gets entity-listed
• And much much more.

Dmitri Alperovitch also joins the show to discuss Starlink, Starshield and a row with Congress about its availability in Taiwan.

In this week’s sponsor interview, Airlock Digital’s Daniel Schell talks about his adventures with WDAC, and Dave Cottingham predicts Windows 12 will go all in on signed code.

Show notes

• LockBit group revives operations after takedown | Cybersecurity Dive
• Lockbit ransomware group administrative staff have released a lengthy response to the FBI and bystanders
• FBI’s LockBit Takedown Postponed a Ticking Time Bomb in Fulton County, Ga. – Krebs on Security
• Russia detains hacker behind Australia’s Medibank attack
• Russia arrests three alleged SugarLocker ransomware members
• Change Healthcare incident drags on as report pins it on ransomware group
• Ransomware Groups Are Bouncing Back Faster From Law Enforcement Busts
• ‘Alarming’ cyberattack hits Canada’s federal police, criminal investigation launched
• ConnectWise ScreenConnect faces new attacks involving LockBit ransomware | Cybersecurity Dive
• Microsoft rolls out expanded logging six months after Chinese breach | CyberScoop
• Sandvine added to US Entity List
• Earth Lusca Uses Geopolitical Lure to Target Taiwan Before Elections
• FACT SHEET: ONCD Report Calls for Adoption of Memory Safe Programming Languages and Addressing the Hard Research Problem of Software Measurability
• Risky Biz News: Backdoor code found in Tornado Cash
• House China committee demands Elon Musk open SpaceX Starshield internet to U.S. troops in Taiwan
• The UK Is GPS-Tagging Thousands of Migrants | WIRED
• How the Pentagon Learned to Use Targeted Ads to Find Its Targets—and Vladimir Putin | WIRED
• New Biden order would stem flow of Americans’ sensitive data to China - The Washington Post