{"podcast":{"title":"The Backup Wrap-Up","slug":"the-backup-wrap-up-758069","podcast_index_feed_id":758069,"rss_url":"https://feeds.captivate.fm/backupwrapup/","website_url":"https://www.backupwrapup.com","image_url":"https://artwork.captivate.fm/4670d4e3-81d6-4770-aeca-fe0331f5ce9e/IO00Uwof5u-hiUJElhkbBmKT.jpg","author":"W. Curtis Preston (Mr. Backup)","episode_count":355,"summary":"Formerly known as \"Restore it All,\" The Backup Wrap-up podcast turns unappreciated backup admins into cyber recovery heroes. After a brief analysis of backup-related news, each episode dives deep into one topic that you can use to better protect your organization from data loss, be it from accidents, disasters, or ransomware. The Backup Wrap-up is hosted by W. Curtis Preston (Mr. Backup) and his co-host Prasanna Malaiyandi. Curtis' passion for backups began over 30 years ago when his employer, a $35B bank, lost its purchasing database – and the backups he was in charge of were worthless. After miraculously not being fired, he resolved to learn everything he could about a topic most people try to get away from. His co-host, Prasanna, saw similar tragedies from the vendor side of the house and also wanted to do whatever he could to stop that from happening to others. A particular focus lately has been the scourge of ransomware that is plaguing IT organizations across the globe. That's why in addition to backup and disaster recovery, we also touch on information security techniques you can use to protect your backup systems from ransomware. If you'd like to go from being unappreciate…","last_synced_at":"2026-07-06T22:18:00.235096+00:00","page_url":"https://stenobird.com/podcast/the-backup-wrap-up-758069"},"episode":{"title":"The REDCap Attack that Phishing-Resistant MFA Could Have Stopped","slug":"the-redcap-attack-that-phishing-resistant-mfa-could-have-stopped","published_at":"2026-06-22T11:00:00+00:00","page_url":"https://stenobird.com/podcast/the-backup-wrap-up-758069/the-redcap-attack-that-phishing-resistant-mfa-could-have-stopped","show_page_url":"https://stenobird.com/podcast/the-backup-wrap-up-758069","url":"https://www.backupwrapup.com/redcap-attack-phishing-resistant-mfa","audio_url":"https://episodes.captivate.fm/episode/51ad4ba7-1e3e-4dba-8291-04473d0c0128.mp3","summary":"Phishing-resistant MFA could have stopped a Chinese state-sponsored threat actor from spending over a year inside North American academic and medical research networks — and we're going to tell you exactly how it happened and what you need to do about it. A group called UNC5608, tracked by Google's Threat Intelligence Group (GTIG), exploited a vulnerability unique to REDCap — a research data platform that allows multiple software versions to run simultaneously. They got in via stolen admin credentials, planted custom malware called Infinite.red directly into REDCap's upgrade process, harvested credentials for over a year, then used those credentials to log into Google Workspace as a domain admin and create fake compliance rules to silently forward sensitive research emails — military strategy, geostrategic policy, advanced tech, specific pathogens — straight to Gmail accounts they controlled. And nobody noticed for a very long time. Prasanna and I break down the full attack chain, then walk through every prevention layer that could have stopped it: inventory management, patching, password hygiene, SSO, phishing-resistant MFA, passkeys, DBSC, context-aware access, compliance rule monitoring, credential separation across security domains, and logging. We also get into what backups can and can't do for you in a long-dwell-time attack like this — and why infrastructure-as-code and truly immutable golden images matter more than you might think. If you're running any kind of research platform, academic institution, or medical network — or honestly any organization that uses Google Workspace — this one's for you. Chapters: 00:00 — Intro: The attack that phishing-resistant MFA could have stopped 01:03 — Show intro & woodworking banter 03:26 — What is a living-off-the-land…","meta_description":"Phishing-resistant MFA could have stopped a Chinese state-sponsored threat actor from spending over a year inside North American academic and medical rese…","key_points":[],"chapters":[],"topics":[],"duration_seconds":2041,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/the-backup-wrap-up-758069/episodes/the-redcap-attack-that-phishing-resistant-mfa-could-have-stopped/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/the-backup-wrap-up-758069/the-redcap-attack-that-phishing-resistant-mfa-could-have-stopped.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}