Risky Business

On this week’s show Patrick and Alex discuss the week’s security news, including:

NZ stock exchange felled by DDoS attack

DNI cancels in-person election security briefings for Democats

Russians didn’t hack Michigan voter data

Sendgrid having a bad time of its own making

US to doxes historical DPRK crypto laundering infrastructure, processes

This week’s sponsor interview is with VMRay co-founder and sandbox guru Carsten Willems.

Carsten is joining us to talk product this week – VMRay has brought out a stack of new integrations for its sandbox product, you can now connect it to a lot of your existing enterprise kit. He’ll pop in to tell us more.

Links to everything that we discussed are below and you can follow Patrickor Alex on Twitter if that’s your thing.

On this week’s show Patrick and Adam discuss the week’s security news, including:

Former Uber CSO Joe Sullivan charged with obstruction of justice

Whitehouse to concede WeChat carveouts for US operations in China

A bunch of news that sounds like it’s from 1997

This week’s sponsor interview is with Bugcrowd’s CTO Casey Ellis. He’s joining us to talk about some US election-related vulnerability disclosure programs that have kicked off in the USA. Voting machine maker ES&S has launched one as has the state of Ohio.

Links to everything that we discussed are below and you can follow Patrickor Adam on Twitter if that’s your thing.

On this week’s show Patrick, Adam and Sherrod DeGrippo discuss the week’s security news, including:

NSA and FBI doxx GRU malware. Lol.

Malicious Azure app snags SANS staffer

Oracle to acquire TikTok?

Trump weighs Snowden pardon

Much, much more

This week’s show is brought to you by Airlock Digital. They make allowlist/safelist software that is actually manageable at scale! David Cottingham, an Airlock co-founder, joins the show this week to talk through a few product updates.

Links to everything that we discussed are below and you can follow Patrick, Sherrod or Adam on Twitter if that’s your thing.

On this week’s show Patrick and Adam discuss the week’s security news, including:

WeChat joins TikTok in the naughty corner

TLS 1.3 with ESNI will have a massive impact on censorship AND security

Belarus goes dark after dodgy election

Capital One fined $80m

Much, much more

We’ll be hearing from Dan Guido of Trail of Bits in this week’s sponsor interview. They’ve developed a generic macOS EDR package that you, dear vendor, should absolutely license from them. Dan joins us to explain why.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

On this week’s show Patrick and Adam discuss the week’s security news, including:

Trump’s war on TikTok (featuring guest Alex Stamos)

Twitter hackers caught. Pretty embarrassing stuff, really.

NSO implants target Easter Bunny

Garmin may need a good OFAC lawyer (featuring comment from Dmitri Alperovitch)

Blackberry cracked after five years leads to multiple arrests in Australia

Much, much more

Matt Cauthorn of ExtraHop Networks is this week’s news guest. He’ll join us to talk about how the pivot to work from home has changed incident response workflows. The tl;dr is the north-south traffic might look a bit different these days but the east-west shenanigans are still the same.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Soap Box is the wholly sponsored podcast series we do here at Risky.Biz. That means everyone you hear on this podcast paid to be here. In this podcast you’re going to hear my latest interview with Jerrod Chong, Yubico’s Chief Solutions Officer.

Hardware security keys like Yubikeys have come a long way, even over the last couple of years. The biggest change is that the support for hardware keys is borderline ubiquitous now. FIDO2 support is in all the major browsers. You can even use Yubikeys with Google apps on an iPhone. The plumbing is here, it’s arrived.

But there are still some hurdles to overcome before the full potential of hardware security keys will be unlocked. One issue is that if you’re operating an at-scale service, you’re still stuck with the same old problems around account recovery. The process problems.

So in this interview I talk with Jerrod about how far things have come and where they might go next.

On this week’s show Patrick and Adam discuss the week’s security news, including:

Two Chinese nationals charged with freelancing for MSS

Russia, China hacking COVID-19 research

The world dodged a bullet on the Windows DNS bug

Twitter blue tick pwnapalooza

Much, much more.

This week’s show is brought to you by Corelight. The company’s Chief Product Officer, Brian Dye, will be along for a chat a bit later on. We look at how adopting a zero trust model, sadly, doesn’t mean you can just ignore your network completely, as much as that would be nice.

You can subscribe to the new Risky Business newsletter, Seriously Risky Business, here.

You can subscribe to our new YouTube channel here.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Normally these Soap Box podcasts – which are wholly sponsored – feature vendors trying to sell you stuff. But this time we’re doing something different: This podcast is an interview with two senior Facebook staffers:

Pedro Canahuati, VP of Engineering

Chris Bream, Security Engineering Director.

Why is facebook’s security engineering group sponsoring a Soap Box episode of Risky Biz? They figure lifting the veil a bit on how things are done over there will be good for them. They’re always hiring, right?

Enjoy!

(A reminder – there will be no weekly show this week or next. The weekly Risky Biz news podcast returns on July 29.)

On this week’s show Patrick and Adam discuss the week’s security news, including:

The latest on the EncroChat hack-related arrests

Details about the fresh F5 and Citrix bugs

Natanz go boom

Paying Wastedlocker ransoms violates Treasury sanctions

North Korea embraces Magecart (lol)

Much, much more…

This week’s show is brought to you by Cmd Security. They make a very useful Linux security agent. Essentially they add an additional layer of control to your Linux systems: you can restrict user actions, even for root.

Instead of having one of their own staff on to the show this week they’ve nominated a customer. HPE is a Cmd user, they actually heard about it on the podcast and wound up buying it. So HPE ITOC engineering lead Adam Cardillo and his colleague Curtis Simpson – the ITOC CISO – will both join us in this week’s sponsor interview to talk about how they’re using the software.

You can subscribe to the new Risky Business newsletter, Seriously Risky Business, here.

You can subscribe to our new YouTube channel here.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

This edition of the Soap Box podcast is brought to you by Proofpoint.

Today’s guest is Proofpoint’s EVP of Cybersecurity Strategy, Ryan Kalember, and the topic is business email compromise, or BEC.

BEC is a big deal, generating billions of dollars in losses every year across basically all industry verticals and levels of government. Until recently, there haven’t been many technical controls that help to mitigate it.

Trying to get on top of this issue is very much in Ryan Kalember’s job description. BEC is a diabolical problem, and as a company with a specialty in email security, Proofpoint is really expected to help clients get on top of it. In this conversation you’ll hear us talk a bunch about the problem and Proofpoint’s approach to trying to minimise BEC.