Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

• White House’s off-brand Israeli Signal fork logs cleartext messages with hard coded creds while getting hacked (twice). Just … Wow.


• Ransomware attacks on UK retailers are linked, and Marks & Spencer has it extra bad


• After six years dormant, a Magento eCommerce platform backdoor comes to life


• The North Korean IT worker scam is truly webscale


• NSO group owes Meta $168m for hacking WhatsApp

This week’s episode is sponsored by vulnerability management wranglers, Nucleus Security. Aaron Unterberger joins to talk through the complexities of tracking vulnerabilities in cloud components - left to the source, right to the deployments, and …sideways into the sidecars?

This week’s show also features an excerpt from Pat’s interview with Senator Mark Warner - Scoot back one in your podcast feed to check out the full chat, or find it on Youtube.

This episode is available on Youtube too.

Show notes

• Mike Waltz Accidentally Reveals Obscure App the Government Is Using to Archive Signal Messages



• Despite misleading marketing, Israeli company TeleMessage, used by Trump officials, can access plaintext chat logs



• The Signal Clone the Trump Admin Uses Was Hacked



• App used by Mike Waltz suspends services after hacking claims



• Senator Demands Investigation into Trump Admin Signal Clone After 404 Media Investigation



• MG on X: "Looks like TeleMessage was probably procured and rolled out under Biden. There are public records for it. https://t.co/XCuZpi8PL3" / X



• Harrods becomes latest retailer to announce attempted cyberattack | The Record from Recorded Future News



• Co-op DragonForce cyber attack includes customer data, firm admits



• Co-op cyber attack: Staff told to keep cameras on in meetings



• Hundreds of e-commerce sites hacked in supply-chain attack - Ars Technica



• Microsoft’s new “passwordless by default” is great but comes at a cost - Ars Technica



• Windows RDP lets you log in using revoked passwords. Microsoft is OK with that. - Ars Technica



• North Korean operatives have infiltrated hundreds of Fortune 500 companies | CyberScoop



• US wants to cut off key player in Southeast Asian cybercrime industry | The Record from Recorded Future News



• Myanmar militia leader sanctioned by US over cyber scam connections | The Record from Recorded Future News



• Trump proposes major cut to CISA’s budget, citing false ‘censorship’ claims | Cybersecurity Dive



• NSA to cut up to 2,000 civilian roles as part of intel community downsizing | The Record from Recorded Future News



• NSO Group owes $168M in damages to WhatsApp over spyware infections, jury says | CyberScoop