Sponsored: runZero on keeping up with CISA's KEV list

And how SSH is a shambles

In this Risky Business News sponsored interview, Tom Uren talks to Rob King, Director of Security Research at runZero, about keeping up with the stream of vulnerabilities in the KEV list and OT devices and runZero’s research into the SSH protocol.

Risky Biz News: AT&T discloses massive hack

PLUS: Squarespace DNS hijack spree hits crypto sites; Russia plans to ban YouTube later this year; major hacking spree hits Magento stores.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Risky Biz News: Apple warns iPhone users of new spyware attacks

PLUS: BLOODSEC hackers detained in the Philippines; South Africa agency lost $16.6 million in 10 years to hacks; NATO to establish new cyber center.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Wide World of Cyber: State directed cybercrime

Patrick Gray explore the relationship between cybercrime and the state...

In this podcast Alex Stamos, Chris Krebs and Patrick Gray discuss the relationship between cybercrime and the state, which is often more complicated than it should be.

While the US Government and its allies fight the scourge of ransomware, other governments are using it to either raise revenue or irritate their foes. North Korea sees ransomware as a money spinner, while the Kremlin enjoys poking the west in the eye with it.

Join us for a breakdown of the relationships between governments who should know better and the worst types of people on the planet.

Risky Biz News: US takes down RT's Twitter bot farm

PLUS: Ukrainian APT hacked Russian elevators; Avast secretly developed a DoNeX ransomware decrypter months ago; Adobe Reader zero-day patch coming in August.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Srsly Risky Biz: When hacking customers is good business

PLUS: Why state-backed hackers drop ransomware

In this podcast Tom Uren and Patrick Gray talk about how South Korean internet regulations inadvertently encouraged a large ISP to hack their own customers to cut down on torrent traffic.

They also look at state-backed hackers behaving very badly.

Risky Business #755 -- SSH 0day! Polyfill drama! Entrust crushed!

It’s been a hell of a week…

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • Widely used polyfill javascript gets hijacked by its new owners
  • MacOS supply chain disaster bullet dodged
  • That OpenSSH remote code exec OH MY <3
  • Entrust gets its CA business kicked to the kerb by Google
  • South Korean telco intentionally viruses 600k customers
  • Microsoft continues to deeply underwhelm
  • And much, much more.

This week’s episode is sponsored by Greynoise. Founder Andrew Morris joins to talk about ways to track attackers across NAT and VPNs, as well as how you can join in the fun of running an internet-scale honeypot network.

Risky Biz News: Russia hacks TeamViewer

PLUS: Indonesia crippled by ransomware attack; Google yeets Entrust certificates; supply chain attack hits millions of sites.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Sponsored: Rad Security describes its concept of "verified runtime fingerprints"

Jimmy Mesta talks runtime fingerprints and Rad Security's new image catalog.

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Jimmy Mesta, CTO and Co-Founder of Rad Security (formerly KSOC). Jimmy explains how Rad Security has replaced signature-based detections with a new concept the company calls “behavioral fingerprints” or “verified runtime fingerprints,” which can detect malicious activity in cloud environments using a wider set of indicators.

Risky Biz Soap Box: Why AI shouldn't really change your security controls

Material Security CEO Abhishek Agrawal on how the more things change, the more they stay the same...

This is a sponsored Soap Box edition of the Risky Business podcast.

Abhishek Agrawal is the CEO and co-founder of Material Security, an email security company that locks down cloud email archives. Attackers have been raiding mailspools since hacking has existed, and with those mailspools now in the cloud with services like o365 and Google Workspace, guess where the attackers are going?

Material built a product that helps you lock up your email data, to archive and redact sensitive information. The idea is to really just limit what an attacker can do with email data if they pop an account.

Abhishek joined me to talk about a few things, like how non phishing resistant MFA is basically dead, how email content is very useful to security programs, and about how the gen AI won’t really change much on the defensive control side.

Srsly Risky Biz: Why the Optus breach was dumb

PLUS: Calling time on Kaspersky

In this podcast Tom Uren and Patrick Gray talk about how Optus’s 2022 data breach went down and how the company had been vulnerable for years.

They also look at the US government’s ban on Kaspersky products, why it makes sense and why the ban took a long time to arrive.

Risky Business #754 -- Assange pleads guilty to espionage, walks free

PLUS: Why we think CDK Global is paying a ransom…

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • Julian Assange finally cuts a deal, pleads guilty, and goes free
  • USA to ban Kaspersky - even updates
  • Car dealer SaaS provider CDK contemplates paying a ransom
  • Intolerable healthcare ransomware attacks continue
  • We revisit Windows proximity bugs via wifi and bluetooth
  • And much, much more.

This week’s episode is sponsored by enterprise browser maker Island. Crowdstrike co-founder Dmitri Alperovitch is an investor in Island, and joins on its behalf to discuss why an enterprise browser is really starting to make sense.

Risky Business #753 – Congress and vuln researchers maul Microsoft

PLUS: What we got wrong with Apple and iCloud...

On this week’s retreat special, the entire Risky Business team is together in a tropical paradise for the first time. The team takes a break from the infinity pool to discuss the week’s security news:

  • Microsoft recalls Recall, but why did it have to be such a mess
  • And a Windows kernel wifi code-exec, really?
  • Passkeys and identity are hard
  • Scattered Spider bigwig arrested in Spain
  • The pentagon runs a deeply flawed info-op
  • Is it time E2E crypto nerds accept their place in the world?
  • And much, much more.

This week’s show is brought to you by Corelight… Corelight’s CEO Brian Dye will be along in this week’s sponsor interview to make a really compelling case for something that shouldn’t exist… which is NDR in cloud environments.

Risky Biz News: Russia wants its own CISA

PLUS: Google patches Pixel zero-day; Black Basta ransomware gang had a private Windows zero-day for three months; Ukraine arrests bot farm operators linked to smishing attacks on its soldiers.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.