Are 950m devices really at risk? Joshua Drake talks Stagefright bugs...
July 30th, 2015 --
This week we're checking in with Josh Drake of Zimperium. With exploitation of Stagefright via Josh's sweet, sweet exploit you'd think the mother of all worms is coming. Well, probably not. Later versions of Android are tricky to exploit, and the diversity of hardware in earlier versions means coming up with one exploit to rule them all isn't really feasible. We'll drill down into that with Josh in a little while.
Pwnage and carnage. You know, business as usual...
July 30th, 2015 --
Links to items discussed in episode 376 of the Risky Business information security podcast.
PLUS: Lame duck Obama goes YOLO...
July 24th, 2015 --
This is the podcast I do for shiggles with Australian comedian, radio and TV personality Dan Ilic. This week we're talking about the nationalist, anti-Islam rallies held across Australia over the last week or so. We also chat about Donald Trump being a douche and Barack Obama's new lease of life as a lame duck president. Oh, and we also talk about the Ashley Madison hack because, hey, who isn't...
PLUS Dave Jorm talks Red Star OS...
July 23rd, 2015 --
In this week's feature interview we're chatting with Dave Jorm, our resident North Korea watcher. Some of you might remember Dave, he was on the show a couple of years ago talking about his OSINT satellite data analysis of North Korea and more recently he popped by to talk about software defined networking security.
Infidelity and automotive, the gifts that keep on giving!
July 23rd, 2015 --
Links to items discussed in episode 375 of the Risky Business infosec podcast.
Anti Flashitism the new black...
July 16th, 2015 --
On this week's show we'll be checking in with Richard Forno on the fallout from the OPM breach. Richard has been kicking around in DC infosec circles for a long time now and he let's us know what the mood is like inside the beltway. In this week's sponsor interview we chat with Chris Gatford of HackLabs! HackLabs is an Australia-based pentesting and consulting firm and we're speaking to Chris about the changing nature of security consultancies. Adam Boileau, as usual, joins the show to discuss the week's news, which has been dominated by calls for the axing of the Flash plugin and the continued fallout from the Hacking Team breach.
The Hacking Team mirth continues...
July 16th, 2015 --
Links to items discussed in episode 374 of the Risky Business infosec podcast.
Good hackers. Horrible people.
July 9th, 2015 --
Obviously the Hacking Team breach is the big story of the week and we'll be jumping right into that. It's a jam packed podcast this week -- we check in with Dave Aitel of Immunity to talk about the impending Wassenaar Arrangement disaster about to hit America. We're also joined by Claudio Guarnieri. Claudio has spent years tracking Hacking Team's malware to the darkest regions of the planet. For a long time he's been claiming Hacking Team were up to no good, now we know he was right. We get him on to the show for a well-earned gloat.
Hacking Team exposed as terrible, terrible people...
July 9th, 2015 --
Links to items discussed in episode 373 of the Risky Business information security podcast.
How would a pilot respond to a hacked plane?
July 2nd, 2015 --
This week's feature interview is a bit left of field With all the talk about plane hacking flying around over the last couple of months (zing) I thought it might be an idea to talk to an actual airliner pilot. So this week we're joined by an Australian Airbus pilot. He works for an Asian airline but he was in Australia recently and I caught up with him to ask him for his thoughts on the topic.
News, wikis and salsa! (Music, not the kind with peas in it.)
July 2nd, 2015 --
Links to items discussed in episode 372 of the Risky Business information security podcast.
PLUS: Samsung doubles-down on its steamy, steamy pooch love...
June 25th, 2015 --
In this week's feature interview we chat with Richard Bejtlich. He serves as the chief security strategist at FireEye. He's a nonresident fellow with the Brookings Institute and he joins me this week to talk about the OPM breach, honeypots, China and Edward Snowden. This week's show is sponsored by Palo Alto Networks. This week's sponsor interview is with Ryan Olson of Palo's Threat Intelligence Unit 42 -- yes, that is a hitchhikers guide reference. He'll be joining us to discuss an APT campaign they uncovered in Asia -- it's called Lotus Blossom and it's yet another example of likely state sponsored APT activity targeting the region. Depressingly, it uses CVEs that start with 2012. Ugh.
News, opinion and more!
June 25th, 2015 --
Links to items discussed in episode 371 of the Risky Business podcast.
PLUS Dan Guido on the latest with DARPA's Cyber Grand Challenge...
June 18th, 2015 --
On this week's show we chat with Dan Guido of Trail of Bits about DARPA's Cyber Grand Challenge. There was a competition round last week and he tells us all about it.
For all your newsy needs...
June 18th, 2015 --
Links to items discussed in episode 370 of the Risky Business podcast...
PLUS Scanning for people-based threats...
June 11th, 2015 --
On this week's show we speak with Laura Bell about scanning people for vulnerabilities. Who in your organisation do you most need to worry about protecting? Well, it's not who you think. She'll be along soon to discuss that. This week's show is brought to you by Rapid7.
Kaspersky turns lemons into sweet, sweet marketing lemonade...
June 11th, 2015 --
Links to everything discussed in episode 369 of the Risky Business security podcast.
Is Brian Krebs really hated by his subjects?
June 5th, 2015 --
This week's edition of the show is a special edition recorded at AusCERT's 2015 conference on the Gold Coast, brought to you by Datacom TSS. In it, we speak with: * Brian Krebs, who talks about the weird symbiotic relationship he has with the criminal underworld * Eva Galperin of the EFF talks Wassenaar * David Litchfield who discusses his new database security tool * Datacom TSS practice manager Lou Robertson on outcomes-based security service contracts I hope you enjoy it!
Not many links this week...
June 5th, 2015 --
Links to items discussed in episode 368 of the Risky Business podcast. Only a few links this week because there's no news segment!
PLUS Haroon Meer with news!
May 28th, 2015 --
This week's show is a bit different. I've prepared it while in South Africa. I've been here for two weeks now, one week of holidays and another week at the ITWeb Security Summit in Johannesburg. While here I got a chance to meet and interview Roger Dingledine, the Tor Project leader, about the future of hidden services, the Anonabox controversy, and the possibility of major browser manufactures integrating Tor into their private browsing modes. That's this week's feature. This week's news guest is Haroon Meer of Thinkst.