Security News Roundup: Grid Supply Chains, Botnets and a Healthcare Breach

Summary

The panel discusses U.S. grid supply-chain risks, reported phone-location tracking in the Iran conflict, a disrupted botnet and a healthcare breach attributed to Shiny Hunters.

Key points

The panel discusses a U.S. national emergency concerning foreign-made bulk power components and questions how quickly equipment could be replaced.
The speakers cite reporting that SS7 was abused to locate soldiers for a kinetic attack and discuss the location risks of phones and fitness tracking.
The FBI reportedly disrupted a Chinese botnet used to target U.S. critical infrastructure; the panel says the targets were not necessarily compromised.
The panel says a healthcare incident involving McKesen was confirmed, but Shiny Hunters' claim of 284 million patient records was not confirmed. The speakers report a $55 million ransom demand.
Two alleged team PCP hackers were reportedly arrested in Australia; the panel associates the group with software supply-chain and CI/CD attacks.
The panel recommends patching UniFi equipment and discusses the challenge of discovering and fixing vulnerabilities in edge devices.

Article Details

Topics: [19:11] Bulk power supply-chain security and replacement challenges
[24:45] SS7 and fitness-tracking location risks for military personnel
[30:42] Disruption of a botnet targeting critical infrastructure
[33:05] Healthcare breach and Shiny Hunters' patient-record claim
[37:57] Arrests associated with team PCP
[53:43] Patching and vulnerabilities in network and edge devices
[57:47] International cybercrime arrests and calls to strengthen defenses