Risky Business

Risky Business #785 -- Signal-gate is actually as bad as it looks

Listen Later

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

  • Yes, the Trump admin really did just add a journo to their Yemen-attack-planning Signal group
  • The Github actions hack is smaller than we thought, but was targeting crypto
  • Remote code exec in Kubernetes, ouch
  • Oracle denies its cloud got owned, but that sure does look like customer keymat
  • Taiwanese hardware maker Clevo packs its private keys into bios update zip
  • US Treasury un-sanctions Tornado Cash, party time in Pyongyang?

    • This week’s episode is sponsored by runZero. Long time hackerman HD Moore joins to talk about how network vulnerability scanning has atrophied, and what he’s doing to bring it back en vogue. Do you miss early 2000s Nessus? HD knows it, he’s got you fam.

    This episode is also available on Youtube.

    Show notes
    • The Trump Administration Accidentally Texted Me Its War Plans - The Atlantic
    • Using Starlink Wi-Fi in the White House Is a Slippery Slope for US Federal IT | WIRED
    • Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed
    • GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 3/21)
    • Critical vulnerabilities put Kubernetes environments in jeopardy | Cybersecurity Dive
    • Researchers back claim of Oracle Cloud breach despite company’s denials | Cybersecurity Dive
    • The Biggest Supply Chain Hack Of 2025: 6M Records Exfiltrated from Oracle Cloud affecting over 140k Tenants | CloudSEK
    • Capital One hacker Paige Thompson got too light a sentence, appeals court rules | CyberScoop
    • US scraps sanctions on Tornado Cash, crypto ‘mixer’ accused of laundering North Korea money | Reuters
    • Tornado Cash Delisting | U.S. Department of the Treasury
    • Major web services go dark in Russia amid reported Cloudflare block | The Record from Recorded Future News
    • Clevo Boot Guard Keys Leaked in Update Package
    • Six additional countries identified as suspected Paragon spyware customers | CyberScoop
    • The Citizen Lab’s director dissects spyware and the ‘proliferating’ market for it | The Record from Recorded Future News
    • Malaysia PM says country rejected $10 million ransom demand after airport outages | The Record from Recorded Future News
    • Hacker defaces NYU website, exposing admissions data on 1 million students | The Record from Recorded Future News
    • Notre Dame uni students say outage creating enrolment, graduation, assignment mayhem - ABC News
    • DNA of 15 Million People for Sale in 23andMe Bankruptcy
      • ...more
      View all episodesView all episodes
      Download on the App Store
      Risky BusinessBy Patrick Gray
      • 4.6
      • 4.6
      • 4.6
      • 4.6
      • 4.6

      4.6

      352 ratings

      More shows like Risky Business

      View all
      Security Now (Audio) by TWiT

      Security Now (Audio)

      1,960 Listeners

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

      634 Listeners

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

      368 Listeners

      Hacked by Hacked

      Hacked

      176 Listeners

      CyberWire Daily by N2K Networks

      CyberWire Daily

      1,011 Listeners

      Smashing Security by Graham Cluley & Carole Theriault

      Smashing Security

      305 Listeners

      Click Here by Recorded Future News

      Click Here

      386 Listeners

      Malicious Life by Malicious Life

      Malicious Life

      919 Listeners

      Darknet Diaries by Jack Rhysider

      Darknet Diaries

      7,841 Listeners

      Cybersecurity Today by Jim Love

      Cybersecurity Today

      142 Listeners

      CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

      CISO Series Podcast

      182 Listeners

      Hacking Humans by N2K Networks

      Hacking Humans

      308 Listeners

      Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

      Defense in Depth

      71 Listeners

      Cyber Security Headlines by CISO Series

      Cyber Security Headlines

      117 Listeners

      Risky Bulletin by risky.biz

      Risky Bulletin

      33 Listeners