Infosec Reading List - March 2022

On a monthly basis I will publish my reading recommendations which mainly focus on Information Security (InfoSec) and Outdoor Sports. All InfoSec Reading Lists can be found here. Text in italic represent quotes from the original article.

Quotes from the Twitterverse

---

---

---

InfoSec

• Lapsus$ found a spreadsheet of accounts as they breached Okta, documents show - [link]
• Leaked Details of the Lapsus$ Hack Make Okta’s Slow Response Look More Bizarre - [link]
• A Closer Look at the LAPSUS$ Data Extortion Group - [link]
• 7 Pressing Cybersecurity Questions Boards Need to Ask - [link]
• Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests” - [link]
• The Workaday Life of the World’s Most Dangerous Ransomware Gang - “The group even claimed to have an unnamed journalist on its payroll in April 2021, who would get a 5 percent cut by helping put pressure on victims to pay up.” - [link]
• PwC’s HSE hack post-incident report should be a corporate textbook - [link]
• The Battle for the World’s Most Powerful Cyberweapon - [link]

Outdoor

• Transcaucasian Trail - added to [todo] list - [link]