Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Risky Business · Risky.biz
May 14, 202557m 52s
Audio is streamed directly from the publisher (dts.podtrac.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:
- Struggling to find that pesky passwords.xlsx in Sharepoint? Copilot has your back!
- The ransomware ecosystem is finding life a bit tough lately
- SAP Netweaver bug being used by Chinese APT crew
- Academics keep just keep finding CPU side-channel attacks
- And of course… bugs! Asus, Ivanti, Fortinet… and a Nissan LEAF?
This week’s episode is sponsored by Resourcely, who will soothe your Terraform pains. Founder and CEO Tracis McPeak joins to talk about how to get from a very red dashboard full of cloud problems to a workable future.
This episode is also available on Youtube.
Show notes
- Exploiting Copilot AI for SharePoint | Pen Test Partners
- MrBruh's Epic Blog
- Ransomware group Lockbit appears to have been hacked, analysts say | Reuters
- "CONTI LEAK: Video they tried to bury! 6+ Conti members on a private jet. TARGET’s birthday — $10M bounty on his head. Filmed by TARGET himself. Original erased — we kept a copy."
- Mysterious hackers who targeted Marks and Spencer's computer systems hint at political allegiance as they warn other tech criminals not to attack former Soviet states
- The organizational structure of ransomware groups is evolving rapidly.
- SAP NetWeaver exploitation enters second wave of threat activity
- China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures
- DOGE software engineer’s computer infected by info-stealing malware
- Hackers hijack Japanese financial accounts to conduct nearly $2 billion in trades
- FBI and Dutch police seize and shut down botnet of hacked routers
- Poland arrests four in global DDoS-for-hire takedown
- School districts hit with extortion attempts after PowerSchool breach
- EU launches vulnerability database to tackle cybersecurity threats
- Training Solo - vusec
- Branch Privilege Injection: Exploiting Branch Predictor Race Conditions – Computer Security Group
- Remote Exploitation of Nissan Leaf: Controlling Critical Body Elements from the Internet
- PSIRT | FortiGuard Labs
- EPMM Security Update | Ivanti