Risky Business Podcast
February 05, 2025
Risky Business #778 -- Musk's child soldiers seize control of FedGov IT systems
Presented by
Co-host at large
CEO and Publisher
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
- DeepSeek leaves an unauthed database on the internet
- Russia hacked UK prime minister’s personal mail
- Australia sanctions a Telegram group… which is more sensible than it sounds
- Medical device backdoor turns out to be just poorly thought out upgrade feature
- Google abuses weak hashing to patch AMD CPU microcode
- And much, much more.
This week’s episode is sponsored by email security boffins Sublime. Their co-founder and CEO Josh Kamdjou joins to talk about how attackers’ abuse of legitimate services like Docusign is a challenge for email security vendors.
This episode is also available on Youtube.
Brought to you by Sublime Security
Agentic AI that stops email attacks at adversary speed
Show notes
Exclusive: Musk aides lock workers out of OPM computer systems | Reuters
Криптостилер SparkCat в магазинах Google Play и App Store | Securelist
PowerSchool hack: missed basic security step resulted in data breach
Interview with James Glenday, ABC News Breakfast | Australian Minister for Foreign Affairs
WhatsApp says spyware company Paragon Solutions targeted journalists
Spyware maker Paragon confirms US government is a customer | TechCrunch
Backdoor found in two healthcare patient monitors, linked to IP in China
Attackers exploit zero-day vulnerability in Zyxel CPE devices | Cybersecurity Dive
AMD: Microcode Signature Verification Vulnerability · Advisory · google/security-research · GitHub
22-year-old math wiz indicted for alleged DeFI hack that stole $65M - Ars Technica
A method to assess 'forgivable' vs 'unforgivable'... - NCSC.GOV.UK
Living Off the Land: Credential Phishing via Docusign abuse
Living Off the Land: Callback Phishing via Docusign comment
B2B freight-forwarding scams on the rise to evade financial fraud crackdowns
Callback phishing via invoice abuse and distribution list relays
Enhanced message groups: Improving efficiency in email incident response