Risky Business Podcast
December 04, 2019
Risky Business #565 -- Crypto bro takes Jong turn
Presented by
CEO and Publisher
Technology Editor
On this week’s show Patrick and Adam discuss the week’s security news, including:
- Ethereum developer Virgil Griffith charged for allegedly teaching DPRK about cryptocurrency
- DHS/CISA government vulnerability disclosure program takes shape, looks good
- Adobe discloses Magento Marketplace data breach
- Fully patched Android devices targeted
- IM-RAT takedown
- Much, much more
This week’s sponsor interview is with Brian Robison of BlackBerry Cylance. He pops along to talk about some interesting research they’ve done on mobile malware.
Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.
Brought to you by Cylance
BlackBerry Cybersecurity AI-Powered Cyberattack Prevention
Show notes
Cryptocurrency expert arrested for giving talk to North Korea about avoiding sanctions | ZDNet
DHS issues draft order to require vulnerability disclosure policies at civilian agencies
cyber.dhs.gov - Binding Operational Directive 20-01
New Zealand's gun buyback website 'a shopping list for criminals' | World news | The Guardian
It’s Way Too Easy to Get a .gov Domain Name — Krebs on Security
Adobe discloses security breach impacting Magento Marketplace users | ZDNet
Vulnerability in fully patched Android phones under active attack by bank thieves | Ars Technica
Trend Micro finds new mobile malware masquerading as a chat app
Authorities take down 'Imminent Monitor' RAT malware operation | ZDNet
Australian and European police shut down access to popular criminal hacking tool
SMS Replacement is Exposing Users to Text, Call Interception Thanks to Sloppy Telecos - VICE
Now even the FBI is warning about your smart TV’s security | TechCrunch
FBI assesses Russian apps may be counterintelligence threat
HPE tells users to patch SSDs to prevent failure after 32,768 hours of operation | ZDNet
Splunk tells users to patch ‘Y2K-style’ flaw
BlackDirect: Microsoft Azure Account Takeover | CyberArk
Hacker stole unreleased music and then tried to frame someone else | ZDNet
Microsoft: Malware, ransomware, and cryptominer detections are down in 2019 | ZDNet
Hacker’s paradise: Louisiana’s ransomware disaster far from over | Ars Technica
Mozilla removes Avast and AVG extensions from add-on portal over snooping claims | ZDNet
FBI Asked Sony for Data on User Who Allegedly Used PlayStation Network to Sell Cocaine - VICE
Mobile Malware and APT Espionage: Prolific, Pervasive, and Cross-Platform