Risky Business

Risky Business #810 -- Data extortion attacks have a silver lining

Listen Later

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

  • FBI intervenes in Scattered Spider Salesforce leaksite
  • Clop loots Oracle E-Biz deployments
  • Plus so much more data extortion.. At least it’s not ransomware … we guess?
  • The US still can’t decide who’s gonna be in charge of NSA & Cybercom
  • Cambodian scam compounds get sanctioned and $15b in crypto is seized
  • NSO gets sold for pocket-lint-grade money
  • Bugs! Redis CVSS 10, Ivanti, Crowdstrike and… Internet Explorer?! zeroday?! In the wild?!!!?

    • This week’s episode is sponsored by Stairwell. Founder Mike Wiacek talks about how Stairwell brings VirusTotal-like visibility to private files, and about integrating the insights that brings into your SOC workflow.

    This episode is also available on Youtube.

    Show notes
    • FBI takedown banner appears on BreachForums site as Scattered Spider promotes leak | The Record from Recorded Future News
    • Dozens of Oracle customers impacted by Clop data theft for extortion campaign | CyberScoop
    • Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882)
    • Clop is a Big Fish, But Not Worth Hunting - Risky Business Media
    • ShinyHunters Wage Broad Corporate Extortion Spree – Krebs on Security
    • The company Discord blamed for its recent breach says it wasn't hacked
    • Qantas confirms cybercriminals released stolen customer data | The Record from Recorded Future News
    • Red Hat confirms breach of GitLab instance, which stored company’s consulting data | CyberScoop
    • Risky Bulletin: Microsoft revamps Edge's "IE Mode" after zero-day attacks - Risky Business Media
    • Teenagers arrested in England over cyberattack on nursery chain Kido | The Record from Recorded Future News
    • Acting US Cyber Command, NSA chief won’t be nominated for the job, sources say | The Record from Recorded Future News
    • Layoffs, reassignments further deplete CISA | Cybersecurity Dive
    • Trump’s scandalous directive to AG Pam Bondi reached the public by accident
    • Feds sanction Cambodian conglomerate over cyber scams, seize $15 billion from chairman | The Record from Recorded Future News
    • US Congress committee investigating Musk-owned Starlink over Myanmar scam centres | Myanmar | The Guardian
    • Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data | WIRED
    • Netherlands invokes special powers against Chinese-owned semiconductor company Nexperia | The Record from Recorded Future News
    • Spyware maker NSO Group confirms acquisition by US investors | TechCrunch
    • Apple Announces $2 Million Bug Bounty Reward for the Most Dangerous Exploits | WIRED
    • Wiz Finds Critical Redis RCE Vulnerability: CVE‑2025‑49844 | Wiz Blog
    • SonicWall admits attacker accessed all customer firewall configurations stored on cloud portal | CyberScoop
    • SonicWall SSLVPN devices compromised using valid credentials | Cybersecurity Dive
    • Issues Affecting CrowdStrike Falcon Sensor for Windows
    • ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities - SecurityWeek
    • Jaguar Land Rover launches phased restart at factories after cyber-attack | Jaguar Land Rover | The Guardian
    • Windows 10 support ends today — here's who's affected and what you need to do
      • ...more
      View all episodesView all episodes
      Download on the App Store
      Risky BusinessBy Patrick Gray
      • 4.6
      • 4.6
      • 4.6
      • 4.6
      • 4.6

      4.6

      364 ratings

      More shows like Risky Business

      View all
      Hacked by Hacked

      Hacked

      190 Listeners

      Security Now (Audio) by TWiT

      Security Now (Audio)

      2,002 Listeners

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

      Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

      374 Listeners

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

      SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

      652 Listeners

      CyberWire Daily by N2K Networks

      CyberWire Daily

      1,022 Listeners

      Smashing Security by Graham Cluley

      Smashing Security

      319 Listeners

      Click Here by Recorded Future News

      Click Here

      418 Listeners

      Darknet Diaries by Jack Rhysider

      Darknet Diaries

      8,017 Listeners

      Cybersecurity Today by Jim Love

      Cybersecurity Today

      177 Listeners

      Hacking Humans by N2K Networks

      Hacking Humans

      315 Listeners

      CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

      CISO Series Podcast

      188 Listeners

      Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

      Defense in Depth

      74 Listeners

      Cyber Security Headlines by CISO Series

      Cyber Security Headlines

      136 Listeners

      Risky Bulletin by risky.biz

      Risky Bulletin

      46 Listeners

      Hacker And The Fed by Chris Tarbell & Hector Monsegur

      Hacker And The Fed

      171 Listeners