Sign up to save your podcasts
Or
Share Risky Business
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Risky Business
Based on Podcast App listening data
Risky Business episodes
- Risky Business #683 -- OpenSSL bug is a fizzer, ASD responds to Medibank hack
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Twitter bluechecks face phishing barrage
- Australian government goes berserk on Medibank hack response
- Former WSJ journalist sues law firm over email hack and info op that got him fired
- OpenSSL bug lands with a whimper
- Apple macOS Ventura update breaks security tools
- Much, much more
This week’s show is brought to you by Thinkst Canary. Marco Slaviero, Thinkst’s head of engineering, joins us this week to talk through the company’s latest release, codenamed Quokka.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes- Twitter’s verification chaos is now a cybersecurity problem | TechCrunch
- Unconfirmed hack of Liz Truss’ phone prompts calls for “urgent investigation” | Ars Technica
- Chinese hackers are scanning state political party headquarters, FBI says - The Washington Post
- Former WSJ reporter says law firm used Indian hackers to sabotage his career | Reuters
- The source - Columbia Journalism Review
- Upcoming ‘critical’ OpenSSL update prompts feverish speculation | The Daily Swig
- OpenSSL vulnerability downgraded to ‘high’ severity | The Daily Swig
- Medibank says hackers had access to ‘all personal data’ belonging to all customers - The Record by Recorded Future
- Australia to tighten privacy laws, increase fines after series of data breaches - The Record by Recorded Future
- Votes in Slovakia's parliament suspended after alleged ‘cybersecurity incident’ - The Record by Recorded Future
- NY Post confirms hack after website, Twitter feed flooded with threats toward Biden, AOC - The Record by Recorded Future
- Apple MacOS Ventura Bug Breaks Third-Party Security Tools | WIRED
- Microsoft ties Vice Society hackers to additional ransomware strains - The Record by Recorded Future
- How Vice Society Got Away With a Global Ransomware Spree | WIRED
- FTC seeks action against Drizly — and its CEO — for cybersecurity failures - The Record by Recorded Future
- Critical authentication bug in Fortinet products actively exploited in the wild | The Daily Swig
- Google Play apps with >20M downloads depleted batteries and network bandwidth | Ars Technica
- Battle with Bots Prompts Mass Purge of Amazon, Apple Employee Accounts on LinkedIn – Krebs on Security
- Microsoft leaked 2.4TB of data belonging to sensitive customer. Critics are furious | Ars Technica
- Microsoft disputes report on Office 365 Message encryption issue after awarding bug bounty - The Record by Recorded Future
- Microsoft Office Online Server open to SSRF-to-RCE exploit | The Daily Swig
- Microsoft's Sociopathic Cybersecurity Pedantry
- Brazilian police announce arrest of alleged Lapsus$ member - The Record by Recorded Future
- Accused ‘Raccoon’ Malware Developer Fled Ukraine After Russian Invasion – Krebs on Security
- European gang that sold car hacking tools to thieves arrested - The Record by Recorded Future
- How a Microsoft blunder opened millions of PCs to potent malware attacks | Ars Technica
1 hr 3 min - Snake Oilers: Truffle Security, KSOC and Snyk
Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.
We’ll hear from three vendors in this edition of Snake Oilers:
- Truffle Security talks secrets discovery
- KSOC builds Kubernetes security tools
- Snyk has a new product to better secure Infrastructure as Code
Show notes- Unearth Your Secrets - Truffle Security
- KSOC: Kubernetes Security Operations Center
- Cloud Security across the SDLC with Policy as Code | Snyk
39 min - Snake Oilers: Tines, Code42 and Kroll
Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.
We’ll hear from three vendors in this edition of Snake Oilers:
- Tines, the no code security automation solution that people are going absolutely nuts over
- Code42, the insider threat detection solution maker
- Kroll talks about its MDR offering
38 min - Risky Business #682 -- Starlink goes dark on Ukraine's front line
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- Why former Uber CISO Joe Sullivan’s guilty verdict shouldn’t worry you
- United States puts chipmaking restrictions on China, APT activity is coming
- Elon blinks and Starlink goes dark on Ukraine’s front line
- Master cyber criminal arrested in Australia
- Much, much more
This week’s show is brought to you by runZero, the asset inventory and network visibility solution. runZero’s founding CTO and industry legend HD Moore is this week’s sponsor guest.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes- Risky Biz News: Good news for the Capital One hacker, bad news for the former Uber CSO
- Joe Sullivan guilty in Uber hacking case - The Washington Post
- Security chiefs fear ‘CISO scapegoating’ following Uber-Sullivan verdict - The Record by Recorded Future
- U.S. imposes foreign direct product rule on China for AI and supercomputing - The Washington Post
- Popular censorship circumvention tools face fresh blockade by China | TechCrunch
- 'Fear' driving Chinese state to manipulate tech ecosystem... - GCHQ.GOV.UK
- Risky Biz News: China blocks several protocols used to bypass the Great Firewall
- Joint_CSA_Top_CVEs_Exploited_by_PRC_cyber_actors_TLPWHITE - DocumentCloud
- Starlink goes dark
- Coverage of Killnet DDoS attacks plays into attackers' hands, experts say - The Record by Recorded Future
- Ukrainian cybersecurity officer killed by Russian missile strike - The Record by Recorded Future
- Biden signs new US-EU privacy framework, setting up surveillance safeguards - The Record by Recorded Future
- White House to unveil ambitious cybersecurity labeling effort modeled after Energy Star
- Australian teen charged with using leaked Optus data to blackmail customers - The Record by Recorded Future
- Report: Big U.S. Banks Are Stiffing Account Takeover Victims – Krebs on Security
- Hackers steal at least $100 million from Binance-linked blockchain - The Record by Recorded Future
- Someone is clogging up the Zcash blockchain with a spam attack
- Alberto Rodriguez, and Erik Hunstad - Stop writing malware! The Blue team has done it for you - YouTube
- CVE-2022-34689 - Security Update Guide - Microsoft - Windows CryptoAPI Spoofing Vulnerability
- Get root on macOS 12.3.1: proof-of-concepts for Linus Henze’s CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763) | Worth Doing Badly
- Risky Biz News: LofyGang runs amok in the npm ecosystem with minimal gains
1 hr 8 min - Risky Business #681 -- It's Exchangehog Day
On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:
- More Exchange 0days cause more havoc
- A look at some earlier Exchange hack incidents
- How the CIA got its agents killed with its truly awful online opsec
- Ex NSA staffer arrested for espionage
- Much, much more
This week’s show is brought to you by Proofpoint. Ryan Kalember, Proofpoint’s EVP of cybersecurity strategy, joins the show this week to talk about some overlooked detection opportunities – some simple stuff you can look for in your environment that should raise gigantic flashing red flags.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Show notes- Microsoft confirms two Exchange Server zero days are being used in cyberattacks - The Record by Recorded Future
- CISA: Multiple government hacking groups had ‘long-term’ access to defense company - The Record by Recorded Future
- Mexican president confirms ‘Guacamaya’ hack targeting regional militaries - The Record by Recorded Future
- Mexican journalists targeted by zero-click spyware infections - The Record by Recorded Future
- Ex-NSA employee charged with violating Espionage Act, selling U.S. cyber secrets
- Putin grants citizenship to Edward Snowden, who disclosed US eavesdropping - The Washington Post
- U.S. fails in bid to extradite Brit for helping North Korea evade sanctions with cryptocurrency - The Record by Recorded Future
- Bill Marczak on Twitter: "NEW REPORT today from @Reuters @JoelSchectman providing more detail about fatal flaws in the CIA's defunct communications network. Iran and China compromised the network in 2011, and killed dozens of CIA assets https://t.co/AwN8pQtWL2" / Twitter
- Numerous orgs hacked after installing weaponized open source apps | Ars Technica
- 'Poisoned' Tor Browser tracks Chinese users' online history, location
- Mystery Hackers Are ‘Hyperjacking’ Targets for Insidious Spying | WIRED
- A Matrix Update Patches Serious End-to-End Encryption Flaws | WIRED
- LA officials confirm ransomware group leaked students’ personal data - The Record by Recorded Future
- Nearly 700 ransomware incidents traced back to wholesale access markets: report - The Record by Recorded Future
- Semiconductor industry faced 8 attacks from ransomware groups, extortion gangs in 2022 - The Record by Recorded Future
- CISA directs federal agencies to track software and vulnerabilities - The Record by Recorded Future
- Fake CISO Profiles on LinkedIn Target Fortune 500s – Krebs on Security
- House Democrats debut new bill to limit US police use of facial recognition | TechCrunch
- EP000: Operation Aurora | HACKING GOOGLE - YouTube
53 min - Risky Biz Soap Box: Why Microsoft's Smart Application Control is very strangeIn this Soap Box podcast Patrick Gray interviews Airlock Digital CTO Daniel Schell and CEO David Cottingham about Microsoft’s new Smart Application Control feature, why controlling browser extensions via endpoint instrumentation is really hard and why PAM solutions don’t actually do allowlisting, even if they claim they do.29 min
- Risky Business #680 -- Uber, Rockstar Games hacker arrestedOn this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:Lapsus$’s Teapot arrested by UK policeOptus hacker issues grovelling apology after feeling AFP and ASD heatUkraine claims Russia is planning massive attacks on its infrastructureRSOCKS bot herder begs for extradition to USARussians scammed when seeking military service exemptionsMuch, much moreThis week’s show is sponsored by Votiro. Ravi Srinivasan, Votiro’s CEO, joins the show this week to talk about how people are using content disarm and reconstruction.Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.52 min
- Risky Business #679 -- A look at Uber's very bad weekOn this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:A look at how Uber got owned so hardWhy cleartext cookie storage in Microsoft Teams’ Electron-based app is actually a big dealRussian official: Starlink is a legitimate military targetWagner mercs get doxxedKiwi Farms having a bad timeMuch, much moreIn this week’s sponsor interview we’ll be chatting to Nucleus’s CEO Steve Carter about CISA’s KEV list. He has feelings about the KEV list – they’re mostly positive, but he also has a few reasonable gripes and he joins me to talk about them.Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.59 min
- Risky Biz Soap Box: Haroon Meer on "sensitive command tokens"In this edition of the Soap Box podcast Patrick Gray talks to Haroon Meer about Thinkst Canary’s new sensitive command token. It’s a great way to detect intruders on your Windows systems. Haroon also talks about how to use canaries strategically.31 min
- Risky Business #678 -- Iranians Gone WildOn this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:Albania suffers under another crippling Iranian attackIran’s APT42 using clever, multi-persona phishingState Department cyber snitching program paying offFormer NSA director Gen. Keith Alexander sued over alleged IronNet pump and dumpMudge fronts US Senate Judiciary CommitteeMuch, much more…This week’s show is brought to you by Stairwell. Mike Wiacek, Stairwell’s founder and CEO is this week’s sponsor guest and he talks about why they’ve pushed their Inception platform beyond YARA hunting. You can see a demo of Inception on our YouTube product demo page.Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.52 min
About Risky Business
From the publisher's feed
Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for…
information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
Best of Risky Business
Ranked by our users in the last 21 days
More shows like Risky Business
Hacked
189 Listeners
Security Now (Audio)
2,010 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
373 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
650 Listeners
CyberWire Daily
1,024 Listeners
Smashing Security
318 Listeners
Click Here
417 Listeners
Darknet Diaries
8,070 Listeners
Cybersecurity Today
178 Listeners
Hacking Humans
314 Listeners
CISO Series Podcast
193 Listeners
Defense in Depth
73 Listeners
Cybersecurity Headlines
138 Listeners
Risky Bulletin
47 Listeners
Hacker And The Fed
167 Listeners