Risky Business

Risky Business #804 -- Phrack's DPRK hacker is probably a Chinese APT guy

Listen Later

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

  • Australia expels Iranian ambassador
  • Hackers sabotage Iranian shipping satcoms
  • APT hacker got doxxed in Phrack. Kind of. They’re probably Chinese, not DPRK?
  • Trail of Bits uses image-downscaling to sneak prompts into Google Gemini
  • The Com’s King Bob gets ten years in the slammer
  • It’s a day that ends in -y, so of course there’s a new Citrix Netscaler RCE being used in the wild.

    • This week’s episode is brought to you by Corelight. Chief Strategy Officer Greg Bell talks through how they’ve been implementing AI for sifting through your network data. A model-context-protocol server that can rummage in all those packet logs for you while you keep investigating? Yes please.

    This episode is also available on Youtube.

    Show notes
    • Embassy staff flee Canberra in dead of night | news.com.au — Australia’s leading news site for latest headlines
    • Swedish security service says Iran uses criminal networks in Sweden | Reuters
    • Risky Bulletin: Hackers sabotage Iranian ships at sea, again - Risky Business Media
    • Microsoft scales back Chinese access to cyber early warning system | Reuters
    • Microsoft Didn’t Disclose Key Details to U.S. Officials of China-Based Engineers, Record Shows — ProPublica
    • .:: Phrack Magazine ::.
    • Uncovering the Chinese Proxy Service Used in APT Campaigns
    • Weaponizing image scaling against production AI systems -The Trail of Bits Blog
    • FBI, Cisco warn of Russia-linked hackers targeting critical infrastructure organizations | Cybersecurity Dive
    • CrowdStrike warns of uptick in Silk Typhoon attacks this summer | CyberScoop
    • Kevin Beaumont: "There’s a bunch of new Netscal…" - Cyberplace
    • US charges Oregon man in vast botnet-for-hire operation | Cybersecurity Dive
    • South Korea arrests suspected Chinese hacker accused of targeting BTS singer and other celebrities | The Record from Recorded Future News
    • SIM-Swapper, Scattered Spider Hacker Gets 10 Years – Krebs on Security
    • Chinese national who sabotaged Ohio company’s systems handed four-year jail stint | The Record from Recorded Future News
    • Nevada state offices close after wide-ranging 'network security incident' | Reuters
    • DSLRoot, Proxies, and the Threat of ‘Legal Botnets’ – Krebs on Security
    • Russia weighs Google Meet ban as part of foreign tech crackdown | The Record from Recorded Future News
    • Kremlin-Mandated Messaging App Max Is Designed To Spy On Users
    • Иеромонах РПЦ Макарий призвал помолиться за мессенджер MAX
      • ...more
      View all episodesView all episodes
      Download on the App Store
      Risky BusinessBy Patrick Gray
      • 4.6
      • 4.6
      • 4.6
      • 4.6
      • 4.6

      4.6

      358 ratings

      More shows like Risky Business

      View all
      Security Now (Audio) by TWiT

      Security Now (Audio)

      1,986 Listeners

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

      638 Listeners

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

      370 Listeners

      Hacked by Hacked

      Hacked

      183 Listeners

      CyberWire Daily by N2K Networks

      CyberWire Daily

      1,020 Listeners

      Smashing Security by Graham Cluley

      Smashing Security

      317 Listeners

      Click Here by Recorded Future News

      Click Here

      405 Listeners

      Malicious Life by Malicious Life

      Malicious Life

      925 Listeners

      Darknet Diaries by Jack Rhysider

      Darknet Diaries

      7,971 Listeners

      Cybersecurity Today by Jim Love

      Cybersecurity Today

      173 Listeners

      CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

      CISO Series Podcast

      189 Listeners

      Hacking Humans by N2K Networks

      Hacking Humans

      315 Listeners

      Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

      Defense in Depth

      77 Listeners

      Cyber Security Headlines by CISO Series

      Cyber Security Headlines

      129 Listeners

      Risky Bulletin by risky.biz

      Risky Bulletin

      43 Listeners