Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

• We roll our eyes over the “16 billion credentials” leak hitting mainstream news

• Some interesting cyber angles emerge from the conflict in Iran

• Opensource maintainer of libxml2 is fed up with this hacker crap

• Shockingly, there are yet more ways to trick people into pasting commands into Windows

• Veeam “patches” its backup software RCE like it’s 2002 … by breaking the public PoC

This week’s episode is sponsored by Internet-wide honeypot reconnaissance platform, Greynoise. Founder Andrew Morris joins to talk about their journey spotting Chinese ORB-builders hacking thousands of ASUS routers, and why they’re destined for the woodchipper.

This episode is also available on Youtube (youtu.be/CHiBh88nrtQ).

Show notes

• No, the 16 billion credentials leak is not a new data breach (bleepingcomputer.com/news/security/no-the-16-b…)

• Canadian telecom hacked by suspected China state group - Ars Technica (arstechnica.com/security/2025/06/suspected-chi…)

• Telecom giant Viasat breached by China's Salt Typhoon hackers (bleepingcomputer.com/news/security/telecom-gia…)

• WarTranslated on X: "Iran’s jamming GPS in the Strait of Hormuz, messing with ~970 ships, per Windward. UKMTO confirms the interference. Faulty AIS coordinates are screwing up navigation in the Persian Gulf. The IRGC threatens to shut the strait down in hours. t.co/kdMJvshOGC"; / X (x.com/wartranslated/status/1936742379567935575…)

• Dmitri Alperovitch on X: "Chairman of the Joint Chiefs Gen. Dan Caine says @US_CYBERCOM supported this strike mission" / X (x.com/dalperovitch/status/1936769659275264355?…)

• Top Pentagon spy pick rejected by White House - POLITICO (politico.com/news/2025/06/20/richard-angle-nsa…)

• DHS warns of heightened cyber threat as US enters Iran conflict | Cybersecurity Dive (cybersecuritydive.com/news/dhs-warns-of-height…)

• Exclusive: Early US intel assessment suggests strikes on Iran did not destroy nuclear sites, sources say (edition.cnn.com/2025/06/24/politics/intel-asse…)

• U.S. braces for Iran's response after overnight strikes on nuclear sites (nbcnews.com/world/iran/iran-trump-nuclear-isra…)

• Assessing the Damage to Iran’s Nuclear Program (podcast.silverado.org/e/assessing-the-damage-t…)

• Iran Hacks Tirana Municipality in Retaliation Over MEK - Tirana Times (tiranatimes.com/iran-hacks-tirana-municipality…)

• Iran's government says it shut down internet to protect against cyberattacks | TechCrunch (techcrunch.com/2025/06/20/irans-government-say…)

• Aflac discloses cyber intrusion linked to wider crime spree targeting insurance industry | Cybersecurity Dive (cybersecuritydive.com/news/aflac-cyber-crime-s…)

• Tonga Ministry of Health hit with cyberattack affecting website, IT systems | The Record from Recorded Future News (therecord.media/tonga-ministry-of-health-hit-w…)

• Alleged Ryuk ransomware gang member arrested in Ukraine and extradited to US | The Record from Recorded Future News (therecord.media/alleged-ryuk-member-arrest-ukr…)

• Russia releases REvil members after convictions for payment card fraud | The Record from Recorded Future News (therecord.media/revil-cybercrime-gang-members-…)

• OneLogin, Many Issues: How I Pivoted from a Trial Tenant to Compromising Customer Signing Keys - SpecterOps (specterops.io/blog/2025/06/10/onelogin-many-is…)

• Triaging security issues reported by third parties (#913) · Issue · GNOME/libxml2 (gitlab.gnome.org/GNOME/libxml2/-/issues/913)

• README: Set expectations straight (35d04a08) · Commits · GNOME / libxml2 · GitLab (gitlab.gnome.org/GNOME/libxml2/-/commit/35d04a…)

• What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia | Google Cloud Blog (cloud.google.com/blog/topics/threat-intelligen…)

• FileFix - A ClickFix Alternative | mr.d0x (mrd0x.com/filefix-clickfix-alternative)

• Address bar shows hp.com. Browser displays scammers’ malicious text anyway. - Ars Technica (arstechnica.com/security/2025/06/tech-support-…)

• Researchers urge vigilance as Veeam releases patch to address critical flaw | Cybersecurity Dive (cybersecuritydive.com/news/veeam-patch-critica…)

• ASUSpicious Flaw - Millions of Users’ Information Exposed Since 2022 | MrBruh's Epic Blog (mrbruh.com/asus_p2)

• Perth dad who created ‘evil twin’ Wi-Fi did so to access pictures of women (watoday.com.au/national/western-australia/pert…)

• GreyNoise Discovers Stealthy Backdoor Campaign Affecting Thousands of ASUS Routers (greynoise.io/blog/stealthy-backdoor-campaign-a…)