Risky Business #843 -- Fortibleed is kinda awesome, actually

Presented by

James Wilson
James Wilson

Technology Editor

Patrick Gray
Patrick Gray

CEO and Publisher

On this week’s show special guest co-host Rob Joyce joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. Rob served as an advisor to Donald Trump during his first term as president and also served at NSA for 34 years. While at the agency, Joyce led Tailored Access Operations (TAO), and later became NSA’s Director of Cybersecurity.

They cover:

  • The surprisingly well done Fortibleed campaign
  • Stolen Klue OAuth tokens lead to Salesforce data theft
  • OpenAI wants to patch the planet
  • runZero gets acquired by Accenture, congrats HD Moore!
  • Much, much more!

This episode is also available on YouTube.

Risky Business #843 -- Fortibleed is kinda awesome, actually
0:00 / 63:35

Show notes

FortiBleed campaign used custom FortiGate sniffer to steal credentials | BleepingComputer

FortiBleed: Fortinet device credential compromise expands into broader credential-attack guidance | unit42.paloaltonetworks.com

Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world | TechCrunch Security

Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks | BleepingComputer

Polymarket (@Polymarket) on X | X (formerly Twitter)

The Korean telecom giant at the center of Anthropic’s Mythos controversy | wrd.cm

Beyond Fable: Can a Local LLM Replace Cloud AI for Security Code Reviews - SRLabs Research | SRLabs

OpenAI Launches Full-Scale Effort to Patch Open-Source Bugs as It Takes on Anthropic’s Mythos | wired.com

Sponsored: Trail of Bits and OpenAI patch the planet | Risky Bulletin

Intel agencies: Frontier AI models will reshape cybersecurity faster than expected | cyberscoop.com

Embedding Forbidden Text in Spyware to Discourage AI Analysis | Schneier on Security

A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak | TechCrunch Security

USB worm spreads crypto-stealing malware via Windows shortcut files | BleepingComputer

Android verification is coming: Google confirms timeline and supported app stores | Ars Technica

California water utility probes breach claim by Iran-linked actor | Cybersecurity Dive

Suspected cyberattack triggers false emergency alerts across parts of Brazil | The Record

Tesco moving 40,000 server workloads off VMware amid Broadcom's "abusive conduct" | Ars Technica

Trump directs federal agencies to protect US data from quantum threats | therecord.media

Accenture shells out $4.18B on three companies in big industrial cybersecurity push | cyberscoop.com