Risky Business

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

China’s super spies figure out Rob Joyce ran TAO ops

FBI, French authorities fly to Montenegro to investigate ransomware attack

NEWSFLASH: Cloudflare are still a bunch of Nazi cuddlers

SIM swap drama spills into real world shootings, firebombings

Yandex Taxi hack clogs Moscow streets

The TikTok breach that wasn’t

Project Raven veterans get wings clipped

Why recent BGP hijacks are getting a bit concerning

Much, much more

This week’s show is brought to you by Corelight, the company that maintains Zeek. Corleight’s Federal CTO Jean Schaffer joins us in this week’s sponsor interview to talk about whether or not the White House’s executive order on Zero Trust is actually changing anything.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

The Twilio breach was actually a big deal

How a Belarusian Cyber Partisans hack burned a GRU illegal

Who wants 25m hashed passwords from Russia?

An NFT we can get behind

How attackers are using game anti-cheat drivers to defeat EDR

Much, much more

This week’s sponsor interview is with Mike Benjamin, the VP of security research at Fastly. He pops in to argue that your red team needs to actually consider how your apps will cope with bot-driven attacks.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

A deep look at Mudge’s sensational whistleblower complaint against Twitter

Brazilian Federal Police raid Lapsus$ crew

NSO CEO to stand down (again), 100 staff to be let go

Signal users impacted in Twilio incident

Tornado Cash OFACs around and finds out

Much, much more

This week’s show is brought to you by Greynoise. Its founder, Andrew Morris, joins the show with a stinging critique of the wider threat intelligence industry. Don’t miss that one.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

In this edition of the Soap Box podcast Okta’s APAC CISO and former Risky Biz editor Brett Winterford talks about how attackers are getting much better at swiping session cookies via realtime phishing and malware.

He also talks about some mitigation strategies to combat this threat and introduces the concept of continuous authentication.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Taiwan tensions fail to conjure the cyber apocalypse

Crypto bridge exploit results in $150m feeding frenzy

Chainalysis evidence to be challenged in court

Post-quantum NIST candidate algorithm gets smoked

DSIRF’s Russia links

Much, much more

This week’s sponsor interview is with Jerrod Chong from Yubico. He’s joining the show to talk about why consumer-focussed implementations of Webauthn like Apple’s Passkeys aren’t a great enterprise solution.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Why Entrust being ransomwared is good news

UEFI bootkits turn hardware into landfill

Microsoft resumes macro blocking rollout

Pat and Adam talk about why plugging your IDP into legacy apps is a dreadful idea

Much, much more

This week’s sponsor guest is Paul “The Voice” Lanzi of Remediant. He’s popping along to talk about the emergence of a new product category – Identity Threat Detection and Response, or ITDR.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

A look at the DHS Cyber Safety Review Board’s Log4j report

Joshua Schulte no longer the “alleged” Vault7 leaker

Chinese APT crews targeted US political journalists before Jan 6

Ransomware gangs make leak sites searchable

Why recovering plaintext passwords from Okta is expected behaviour

US Government seizes North Korean ransomware payment

Much, much more

This week’s show is brought to you by Trail of Bits. Dan Guido is this week’s sponsor guest and he’ll tell us about work Trail of Bits did for DARPA on investigating blockchain security fundamentals.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

On this week’s show Patrick Gray and guest cohost Dmitri Alperovitch discuss the week’s security news, including:

Why an American defence contractor acquiring NSO Group would be a nonproliferation win

A look at Microsoft’s botched macro measures

iPhone’s Lockdown Mode

Ukraine goes big on Yubikeys

Aerojet Rocketdyne pays millions over poor security controls, CISO whistleblower gets bag of cash

Much, much more

This week’s show is sponsored by Proofpoint. Ryan Kalember, Proofpoint’s Executive Vice President of Cybersecurity Strategy, joins us in this week’s sponsor interview to talk about changes he’s observed in the criminal ecosystem.

NOTE: This podcast contains an error. We say that iOS Lockdown Mode prevents users from using an MDM profile on their devices. It doesn’t, it just stops new MDM profiles from being loaded while in Lockdown Mode, so corporate users will be able to turn it on just fine.

Links to everything that we discussed are below and you can follow Patrick or Dmitri on Twitter if that’s your thing.

Today’s soap box is brought to you by Nucleus Security.

Nucleus makes a platform that ingests vulnerability scan information from all your vuln scanning tech so that you can do things like assign different vulnerabilities to different teams to manage and remediate. Send these ones to infrastructure, send these ones to app teams, send everything up and down this stack to this department etc.

If you want to see Nucleus in action I have recorded a demo and it’s on our YouTube product demos page, I’ve linked through to it in the show notes for this podcast.

Our guest in this episode is Scott Kuffer, co-founder of Nucleus, and the topic is running a vulnerability management program in a very large enterprise.

On this week’s show Patrick Gray and guest cohost Mark Piper discuss the week’s security news, including:

A billion records leaked in China

China to develop desktop operating system

HackerOne fires insider for stealing hackers’ work and bounties

FSB officer charged with stealing hacker’s bitcoin

Why Microsoft is wrong on Russia and Ukraine

Much, much more

Red Canary’s Adam Mashinchi and Brian Donohue will be along in this week’s sponsor interview to talk about Atomic Red Team, the open source adversary emulation framework they help to maintain.

Links to everything that we discussed are below and you can follow Patrick on Twitter if that’s your thing.