Talkin’ About Infosec News – 5/16/2022

ORIGINALLY AIRED ON MAY 16, 2022 Articles discussed in this episode: 00:56 – Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors – https://threatpost.com/microsofts-may-patch-tuesday-updates-cause-windows-ad-authentication-errors/179631/ 08:56 – Update rings for Windows 10 and later policy in Intune – https://docs.microsoft.com/en-us/mem/intune/protect/windows-10-update-rings 09:06 – Infosec Weather Report With Bud Patches – 12:26 – FBI, CISA, and NSA warn of hackers increasingly targeting MSPs – https://www.bleepingcomputer.com/news/security/fbi-cisa-and-nsa-warn-of-hackers-increasingly-targeting-msps/ 17:55 – Ransomware has gone down because sanctions against Russia are making life harder for attackers – https://www.zdnet.com/article/ransomware-has-gone-down-because-sanctions-against-russia-are-making-life-harder-for-attackers/ 26:37 – Conti Ransomware Attack Spurs State of Emergency in Costa Rica – https://threatpost.com/conti-ransomware-attack-emergency-costa-rica/179560/ 31:19 – BPFDoor — an active Chinese global surveillance tool – https://doublepulsar.com/bpfdoor-an-active-chinese-global-surveillance-tool-54b078f1a896 38:55 – Lincoln College to Close Permanently After Ransomware Attack – https://www.govtech.com/education/higher-ed/lincoln-college-to-close-permanently-after-ransomware-attack 43:47 – Certifried: Active Directory Domain Privilege Escalation (CVE-2022–26923) – https://research.ifcr.dk/certifried-active-directory-domain-privilege-escalation-cve-2022-26923-9e098fe298f4 53:20 – Malware Can Be Loaded Even Onto Phones That Are Turned Off, Researchers Show – https://www.vice.com/en/article/g5q4vj/malware-can-be-loaded-even-onto-phones-that-are-turned-off-researchers-show We are self-publishing free Infosec Zines called PROMPT#. PROMPT# will contain: