Sign up to save your podcasts
Or
Share Risky Business
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Risky Business
Based on Podcast App listening data
Risky Business episodes
- Snake Oilers: Resourcely, Panther and Island
In this edition of Snake Oilers:
- Travis McPeak pitches Resourcely’s automagic Terraform cloud-provisioning technology
- Ken Westin pitches Panther – a cloud-native SIEM developed by former practitioners
- Brian Kenyon from Island talks about the company’s enterprise browser
Enjoy!
Show notes- Resourcely | Cloud resource creation and management
- Panther | A Cloud SIEM Platform for Modern Security Teams
- Island | The Enterprise Browser
42 min - Risky Business #704 -- Why LLMs aren't an exploit bonanza
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:
- Rob Joyce weighs in on AI and offsec
- Mysterious hacker doxes Russian intelligence agency bitcoin wallets
- Wired deep dives on SolarWinds
- AmeriCold food logistics giant suffers incident
- Iranian authorities roll low-tech spyware
- Much, much more
This week’s show is brought to you by Greynoise. Its founder and CEO Andrew Morris is this week’s sponsor guest.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes- NSA Cybersecurity Director Says ‘Buckle Up’ for Generative AI | WIRED
- 3 areas of generative AI the NSA is watching in cybersecurity | Cybersecurity Dive
- NSA cyber director warns of ransomware attacks on Ukraine, Western supply chains
- Palantir Demos AI to Fight Wars But Says It Will Be Totally Ethical Don’t Worry About It
- (1) Alex Banks on Twitter: "Yesterday Palantir announced its Artificial Intelligence Platform. Here's how it transforms the future of military and defence: https://t.co/TcgN29wN19" / Twitter
- Russian Bitcoin (BTC) Wallets Allegedly Exposed by Apparent Hacker
- DOJ Detected SolarWinds Breach Months Before Public Disclosure | WIRED
- SolarWinds: The Untold Story of the Boldest Supply-Chain Hack | WIRED
- Cold storage company Americold reports cyberattack to SEC
- CISA seeks public comment on software security attestation form | Cybersecurity Dive
- Secure Software Development Attestation Form Instructions
- DHS pushes Congress to formally establish Cyber Safety Review Board
- First draft of controversial UN Cybercrime Treaty slated for June
- Return of the EARN IT Act rekindles encryption debate at critical moment for privacy-protecting apps | CyberScoop
- Apple releases first ‘rapid’ security fixes for iPhones, iPads and Macs | TechCrunch
- BouldSpy: Android Spyware Tied to Iranian Police Targets Minorities | Lookout
- Evasive Panda APT group delivers malware via updates for popular Chinese software | WeLiveSecurity
- Hackers are breaking into AT&T email accounts to steal cryptocurrency | TechCrunch
- CISA, FDA warn of new Illumina DNA device vulnerability
- Apple and Google Set Joint Standards to Stop AirTag Stalking
- Many Public Salesforce Sites are Leaking Private Data – Krebs on Security
- Brother of man who ran Helix cryptocurrency mixer jailed for stealing 712 bitcoin
- Nearly 300 arrested in sprawling international dark web drug market takedown | CyberScoop
- Students’ psychological reports, abuse allegations leaked by ransomware hackers
- Mandiant CEO’s 7 tips for cyber defense | Cybersecurity Dive
- I Regret to Inform You That Bluesky Is Fun | WIRED
1 hr 4 min - Risky Business #703 -- Russia whines about its tech dependence on China
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:
- The supply chain attack in the supply chain attack
- Russia has a China dependency problem
- Recent research into TLS resumption flaws
- Google and Intel team up on hardware hacking
- DHS will hack enterprise kit
- Much, much more
This week’s show is brought to you by Corelight. Brian Dye, Corelight’s CEO, is this week’s sponsor guest. He’s talking about the (actually sensible) ChatGPT-driven features Corelight has built into its NDR platform.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes- Software Maker 3CX Was Compromised in First-of-its-Kind Threaded Supply-Chain Hack - Updated
- Russia China Worries Set Out in Private Memo on Tech Risk - Bloomberg
- Hackers to show they can take over a European Space Agency satellite
- DOJ urges CISOs to continue working with law enforcement ahead of Uber security chief’s sentencing
- To combat cybercrime, US law enforcement increasingly prioritizes disruption | CyberScoop
- Collaboration between CISA, Cyber Command thwarted dangerous cyberattacks, officials said | CyberScoop
- US gov’t stopped Iranian hackers who ‘gained access’ to 2020 election infrastructure
- Bill proposes new DHS centers for testing security of critical government tech
- UK says ‘Wagner-like cyber groups’ attacking critical infrastructure
- Russia's digital warriors adapt to support the war effort in Ukraine, Google threat researchers say | CyberScoop
- Bipartisan legislation aims to ‘arm Taiwan to the teeth in the cyber domain’
- Ex-NSA boss won $700,000 Saudi consulting deal after Khashoggi death - The Washington Post
- U.S. approves massive arms sale to Saudi Arabia, United Arab Emirates to counter Iran | PBS NewsHour
- Intel Let Google Cloud Hack Its New Secure Chips and Found 10 Bugs | WIRED
- Google’s Authenticator App Now Lets You Sync 2FA Codes Across Devices | WIRED
- We Really Need to Talk About Session Tickets | System Security Group
- Internet protocol vulnerability opens door to ‘massive’ DoS amplification attacks
- Exploit released for 9.8-severity PaperCut flaw already under attack | Ars Technica
- Finding PaperCut MF and NG servers
- DC health exchange breach traced back to misconfigured Amazon server
- Ukraine remains Russia’s biggest cyber focus in 2023
- The hacker Bassterlord in his own words: Portrait of an access broker as a young man
- Hacker Group Names Are Now Absurdly Out of Control | WIRED
56 min - Snake Oilers: Socket, Teleport and Mandiant's Purple Team
Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.
We’ll hear from three vendors in this edition of Snake Oilers:
- Socket.dev, a software supply chain product that currently deploys as a GitHub addon
- Teleport, a company that makes a secure access gateway/single sign on product for engineers to securely access infrastructure
- Mandiant joins us to pitch its Purple Team engagement product
Enjoy!
Show notes- Socket - Secure your supply chain. Ship with confidence.
- Teleport: Identity-Native Infrastructure Access. Faster. More Secure.
- Purple Team Assessment | Improve Detection & Response
42 min - Risky Business #702 -- 3CX: It's like SolarWinds, but stupider
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:
- Why 3CX was the dumbest supply chain attack we’ve seen
- Why Wiz’s AzureAD research was a showstopper that didn’t get the attention it deserved
- How attackers are burning down cloud infrastructure
- The latest from the world of spyware
- Much, much more
This week’s show is brought to you by Nucleus Security. Chris Hughes from Aquia is this week’s sponsor guest. He appeared at Nucleus Security’s invitation.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes- Massive 3CX Supply-Chain Hack Targeted Cryptocurrency Firms | WIRED
- 3CX support tells customers to investigate malware warnings themselves | Ars Technica
- North Korean hackers linked to 3CX supply-chain attack, investigation finds
- BingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
- Microsoft leads effort to disrupt illicit use of Cobalt Strike, a dangerous hacking tool in the wrong hands | CyberScoop
- MERCURY and DEV-1084: Destructive attack on hybrid environment - Microsoft Security Blog
- CISA, Cisco highlight Russian military targeting of router vulnerabilities
- Israeli spyware software surveilling journalists, politicians
- Mercenary spyware hacked iPhone victims with rogue calendar invites, researchers say | TechCrunch
- Israeli Spyware Maker QuaDream Closes, Fires All Employees - National Security & Cyber - Haaretz.com
- Hackers used spyware made in Spain to target users in the UAE, Google says | TechCrunch
- Apple’s high security mode blocked NSO spyware, researchers say | TechCrunch
- US commits $25 million to Costa Rica for Conti ransomware recovery
- State Department, Congress working on formal program for US cyber aid
- CISA and partners issue secure-by-design principles for software manufacturers | FedScoop
- Time to Designate Space Systems as Critical Infrastructure
- Apple’s Macs Have Long Escaped Ransomware. That May Be Changing | WIRED
- Cyber company Darktrace gets caught up in LockBit gang's apparent blunder
- Payments giant says it is investigating ransomware incident that caused POS outage
- Cyberattack causing treatment delays at Canadian hospital
- German arms manufacturer Rheinmetall confirms cyberattack
- Hackers using Log4j bug to profit from victim IP addresses through ‘proxyjacking’ scheme
- Police arrest almost 120 people globally following Genesis Market takedown
- FBI accessed Genesis Market's backend servers as part of takedown
- LinkedIn Verification Now Lets You Verify Your Job and Account | WIRED
- Tech industry’s pain is NSA’s gain, cyber leader says about layoffs
- QueueJumper: Critical Unauthenticated RCE Vulnerability in MSMQ Service - Check Point Research
- Microsoft shifts to a new threat actor naming taxonomy - Microsoft Security Blog
- Leaked Pentagon Document Claims Russian Hacktivists Breached Canadian Gas Pipeline Company
- Did someone really hack into the Oldsmar, Florida, water treatment plant? New details suggest maybe not. | CyberScoop
- From Discord to 4chan: The Improbable Journey of a US Intelligence Leak - bellingcat
- U.S. intel agencies may change how they monitor social media, chatrooms after missing leaked U.S. documents for weeks
- Taiwan highly vulnerable to Chinese air attack, leaked documents show - The Washington Post
- Pentagon document leak raises questions about internal security - The Washington Post
- Leaked secret documents detail additional Chinese spy balloons - The Washington Post
1 hr 2 min - Risky Biz Soap Box: Haroon Meer on why the VC apocalypse is great news
In this Soap Box edition of the show, Thinkst Canary founder Haroon Meer joins us to talk about why the sudden pullback in venture funding in infosec is actually a good thing.
He thinks this will give founders licence to slow down and actually focus on making good products, instead of trying to build a company around vapourware or a minimum viable product.
34 min - Risky Business #701 -- Why infosec is wrong about TikTok
NOTE: Patrick’s audio is a bit degraded in a few parts of this episode. It’s still clear enough, but if you hear some degradation in parts then yes, it’s us, not you.
On this week’s show Patrick Gray, Adam Boileau and Tom Uren discuss the week’s security news. They cover:
- The Biden White House’s executive order on spyware
- Why the infosec community writ large is wrong on TikTok
- Clop campaign: it’s time to ditch your file transfer gateways
- Major Android app booted from store because it was full of 0day privesc exploits lol
- More detail on the BreachForums admin arrest
- Much, much more
This week’s show is brought to you by runZero. HD Moore, co-founder of runZero, is this week’s sponsor guest.
Links to everything that we discussed are below and you can follow Patrick, Adam and Tom on Mastodon if that’s your thing.
Show notes- At least 50 U.S. government employees hit with spyware, White House says
- Kevin McCarthy says House 'will be moving forward' with TikTok legislation
- US lawmakers tell TikTok CEO the app ‘should be banned’
- Between Two Nerds: The Real Problem with TikTok - Risky Business
- New victims come forward after mass-ransomware attack | TechCrunch
- UK Pension Protection Fund latest victim of GoAnywhere hack
- Crown Resorts investigating potential data breach after being contacted by hacking group - ABC News
- Fortra told breached companies their data was safe | TechCrunch
- When to use Dropbox vs. MFT: Best Versatile File Sharing and Security | GoAnywhere MFT
- City of Toronto and Virgin confirm hackers accessed data through file transfer systems
- Tasmania investigating attack after Clop ransomware group adds to victim list
- Latitude Financial faces possible class action after millions affected by data breach | Australia news | The Guardian
- Android app from China executed 0-day exploit on millions of devices | Ars Technica
- Telecom giant Lumen says it discovered two separate cyber intrusions
- Tennessee city hit with ransomware attack
- FBI, CISA investigating cyberattack on Puerto Rico’s water authority
- British hospital investigating impact of ‘contained’ cyber incident
- Largest telecom in Guam starts restoring services after cyberattack
- Frustrated Dish customers still spending hours on hold weeks after ransomware attack, they say
- UK National Crime Agency reveals it ran fake DDoS-for-hire sites to collect users’ data
- How the FBI caught the BreachForums admin | TechCrunch
- Hacker tied to D.C. Health Link breach says attack 'born out of Russian patriotism' | CyberScoop
- North Korean APT group ‘Kimsuky’ targeting experts with new spearphishing campaign
- North Korea Is Now Mining Crypto to Launder Its Stolen Loot | WIRED
- “Committed Partners in Cyberspace”: Following cyberattack, US conducts first defensive Hunt Operation in Albania > U.S. Cyber Command > News
- Bad magic: new APT found in the area of Russo-Ukrainian conflict | Securelist
- Beloved hacking veteran Kelly ‘Aloria’ Lum passes away at 41 | TechCrunch
59 min - Risky Business #700 -- Yevgeny Prigozhin's empire gets owned
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news in front of a live audience at AISA’s CyberCon in Canberra.
They cover:
- Yevgeny Prigozhin’s entire enterprise got majorly owned
- Kremlin bans iPhones among President’s staff
- A look at those Android handset baseband bugs (woof)
- A discussion of the acropalypse issue
- Why you need to sort out your egress filtering in light of the latest Outlook bug
- Shanna Daly joins us on stage to talk about why the infosec industry sucks
- Plus much much more
This week’s show is sponsored by Stairwell. Mike Wiacek, Stairwell’s founder, is this week’s sponsor guest.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes- Dossier Center Investigation: Prigozhin's Cyber Troops
- Unwanted communications - Newspaper Kommersant No. 46 (7491) dated 03/20/2023
- Google tells users of some Android phones: Nuke voice calling to avoid infection | Ars Technica
- Google finds 18 zero-day vulnerabilities in Samsung Exynos chipsets
- Severe exploit could expose sensitive data on Pixel screenshots previously cropped
- Microsoft Outlook Vulnerability Could Be 2023's 'It' Bug
- Ransomware gang exploited a zero-day in Microsoft security feature, Google says
- Feds Charge NY Man as BreachForums Boss “Pompompurin” – Krebs on Security
- After BreachForums arrest, new site administrator says the platform will live on
- 3xp0rt on Twitter: "BreachForums is offline everywhere https://t.co/Q2o133e9Oy" / Twitter
- Two U.S. Men Charged in 2022 Hacking of DEA Portal – Krebs on Security
- Crypto ‘Mixer’ Laundered $700 Million For Customers, Including Russian And North Korean Spies, DOJ Says
- China-linked hackers exploit Fortinet zero-day in new spying campaign
- Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server | CISA
- Clop ransomware is victimizing GoAnywhere MFT customers
- Security firm Rubrik is latest to be felled by GoAnywhere vulnerability | Ars Technica
- Crypto ATM manufacturer General Bytes hacked, at least $1.5 million stolen
58 min - Risky Business #699 -- BYOD risks ramp up
Threat actors are really enjoying home networks and BYOD these days…
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Why our LastPass/DPRK hunch weakened
- CISA launches ransomware warning program
- Is the Ring data extortion real?
- White House flags cloud service security regulation
- Pig Butchering overtakes BEC as top cybercrime earner
- Much more!
This week’s show is sponsored by Yubico. The company’s COO, Jerrod Chong, is this week’s sponsor guest.
Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.
Show notes- Stealing the LIGHTSHOW (Part One) — North Korea's UNC2970 | Mandiant
- Stealing the LIGHTSHOW (Part Two) — LIGHTSHIFT and LIGHTSHOW | Mandiant
- North Korean hackers target security researchers with a new backdoor | Ars Technica
- Ring won’t say if it was hacked after ransomware gang claims attack | TechCrunch
- Biden admin’s cloud security problem: ‘It could take down the internet like a stack of dominos’ - POLITICO
- CISA unveils ransomware warning pilot for critical infrastructure
- Data breach hits lawmakers and staff on Capitol Hill
- Hacker posts more D.C. Health Link data online, exposing lawmakers' personal information | CyberScoop
- Cancer patient sues medical provider after ransomware group posts her photos online | CyberScoop
- Telehealth startup Cerebral shared millions of patients’ data with advertisers | TechCrunch
- The FBI Just Admitted It Bought US Location Data | WIRED
- ‘Pig Butchering’ Scams Are Now a $3 Billion Threat | WIRED
- Malware infecting widely used security appliance survives firmware updates | Ars Technica
- People Used Facebook's Leaked AI to Create a 'Based' Chatbot that Says the N-Word
- OpenAI releases GPT-4, artificial intelligence that can 'see' and do taxes
- Australian official demands Russia bring criminal hackers ‘to heel’
- DEV-1101 enables high-volume AiTM campaigns with open-source phishing kit - Microsoft Security Blog
- Sued by Meta, Freenom Halts Domain Registrations – Krebs on Security
- Twitter’s Most Important Anti-Censorship Tool Is Currently Dead
- CVE-2023-23415 - Security Update Guide - Microsoft - Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
- CVE-2023-23397 - Security Update Guide - Microsoft - Microsoft Outlook Elevation of Privilege Vulnerability
1 hr - Risky Biz Soap Box: Six degrees of Domain Admin
Today’s soap box is an absolute cracker. We’re talking to Andy Robbins, the principal product architect at SpecterOps and one of the three original creators of the original open source version of Bloodhound.
If you don’t know what Bloodhound is, it’s a tool that grabs Active Directory information and turns it into a navigable graph. So if you’re an attacker you land on a network, enumerate directory information, and then map out a path to domain admin.
Bloodhound has been extremely popular with red teamers for years – to the point that it’s just a standard tool in the red team toolkit. But the team behind Bloodhound is now turning their attention to making Bloodhound a defensive tool as well as an offensive tool.
43 min
About Risky Business
From the publisher's feed
Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for…
information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
Best of Risky Business
Ranked by our users in the last 21 days
More shows like Risky Business
Hacked
189 Listeners
Security Now (Audio)
2,008 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
373 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
650 Listeners
CyberWire Daily
1,025 Listeners
Smashing Security
318 Listeners
Click Here
417 Listeners
Darknet Diaries
8,064 Listeners
Cybersecurity Today
178 Listeners
Hacking Humans
314 Listeners
CISO Series Podcast
193 Listeners
Defense in Depth
73 Listeners
Cybersecurity Headlines
138 Listeners
Risky Bulletin
47 Listeners
Hacker And The Fed
167 Listeners