Hello, welcome to the Thursday, June 9th, 2020 edition of the Sansonet Storm Center's Stormcast.

My name is Johannes Ulrich, and today I'm recording from San Francisco, California.

Today, of course, we had our panel here at RSA.

Thanks to everybody attending, and thanks to my co-panelists for letting me play again.

I want to quickly summarize what we talked about here as well as I can do it within the time

allotted here.

Katie Nichols talked about living off the cloud attack.

That's a concept we covered here a couple times in the

recent months when an attacker is using benign cloud service in order to, for example,

exfiltrate data or establish command and control channels. She also talked about the use

of multifactor authentication occasion bypass techniques.

Myselfi talked about how backup systems can turn into a risk if they're not patched and

configured correctly. Heller Mahalik was talking about some of the risks from stockware, including the still-present

Pegasus tool, which of course goes back to the NSO group.

And some of the risks involved in the use of these tools, in particular, from more advanced

adversaries.

And finally, we did have Rob Lee talk about some of the attacks against satellite systems

back at the end of February as Russia increased its attack on Ukraine.

And Rob particularly emphasized how this attack inhibited some of the ability of the Ukraine. And Rob particularly emphasized how this attack inhibited some of the ability of the

Ukrainian military to, for example, connect to artillery systems and efficiently direct its

defense in the early days of the war. Also, how then of course Starlink was used to restore some of that capability and how

Starlink and satellite systems in general are now actually more recognized as a component

...