Srsly Risky Biz: Neutering Volt Typhoon to deter China

PLUS: The lesson in Microsoft's security turnaround

In this podcast Tom Uren and Patrick Gray talk about the possibility of deterring Volt Typhoon, the Chinese group that is compromising US critical infrastructure to enable future disruption operations in the event of a conflict with US. Tom thinks it is not possible to deter Volt Typhoon, but things might work the other way. If the US can neuter Volt Typhoon and take away the PRC’s magic cyber bullet, it could make conflict less likely.

They also discuss the lessons for all companies in Microsoft’s security turnaround and how X and Telegram have folded in the face of government pressure.

The video version of this episode is also available on Youtube.

Risky Business #765 -- The Kaspersky switcheroo

PLUS: Elon Musk and Pavel Durov fold like cheap lawn furniture...

Patrick Gray and Adam Boileau discuss the week’s infosec news with everyone’s favourite ex-NSA big-brain, Rob Joyce. They talk through:

  • Musk and Durov bow to government pressure
  • Tiktok rushes to ban authoritarian propagandists
  • The US doesn’t want Chinese software in its cars
  • Kaspersky replaces itself with an AV no one has ever heard of
  • Aussie police chalk up another crimephone takedown
  • Press Win-R Ctrl-V to prove you’re human
  • And much, much more.

This week’s show is brought to you by Stairwell, and Stairwell’s founder Mike Wiacek will be along to talk about how people are using their platform to hunt down detection resistant malware.

A video version of this episode is also available on Youtube.

Risky Biz News: Stealer devs bypass Chrome's new cookie protection

PLUS: Sandvine to exit dozens of autocratic countries; Ukraine FINALLY bans Telegram on state devices; BingX hack is the 4th largest crypto-heist of the year.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Risky Biz News: A flurry of law enforcement takedowns

PLUS: US links Chinese APT botnet to Chinese tech firm; Tor Project plays down deanon attacks in Germany; Russian disinfo group spams newsrooms and fact-checkers.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Risky Business #764 -- Mossad expands into telecommunications services

PLUS: The US banhammers RT...

On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including:

  • Hezbollah’s attempts to avoid SIGINT with pagers ends in explosions
  • The US shines many bright lights on RT’s disinfo role
  • Australia counters Chinese bullying in the Pacific
  • Valid accounts are the most prevalent entry point, says CISA’s data
  • Ivanti and Fortinet vie for worst vendor of the week
  • Krebs writes up the shift towards charging The Com with terrorism
  • And much, much more…

This week’s episode is sponsored by Push Security, who bring security visibility to where it needs to be these days – the browser. Luke Jennings joins this week’s show to discuss how phish-kit crews are driving the arms race forward, and how detection has to adapt and go where the users are.

This episode is also available on Youtube.

Risky Biz News: Vo1d infects 1.3 million Android TV boxes

PLUS: Microsoft to support options for moving security products out of the kernel; Mastercard buys Recorded Future; Slovakia denies buying Pegasus.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Srsly Risky Biz: The three I's in Spyware

PLUS: Exposing Russia's disinformation apparatus

In this podcast Tom Uren and Patrick Gray talk about the structure of the spyware ecosystem. It’s concentrated, with lots of vendors in India, Israel and Italy. And its a small pool of talent, with many companies being founded by just a few individuals.

They also talk about the US government’s actions against Russia’s disinformation ecosystem. The US very clearly linked different ‘layers’ of that ecosystem directly to the Russian government. Employing influencers via cutouts also shows how Russian disinformation has responded as social media platforms have countered interference efforts.

This episode is also available on Youtube.

Risky Business #763 – Microsoft un-patches critical bug

PLUS: SpaceX capitulates on Brazil's X ban...

On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including:

  • Russia’s disinformation peddlers face multifaceted sternness from the DoJ
  • Telegram is now law enforcement’s bestest new pal, all of a sudden
  • Iran’s banking industry arranges a payment plan for a ransom
  • Columbia investigates how it sent private jets full of cash to pay for Pegasus
  • Microsoft innovates with Un-Patch Tuesday
  • And much, much more.

This week’s sponsor is Kroll Cyber, and one of their incident responders Paul Wells joins to discuss that one weird trick that actually helps - preparing for an incident before hand, rather than learning all those hard lessons in the middle of a crisis.

This week’s episode is also available on Youtube.

Risky Biz News: UK NCA "on its knees" and bleeding staff

PLUS: Poland's Pegasus inquiry reaches a roadblock; Americans lost $5.6 billion to crypto-fraud last year; Poland disrupts cyber sabotage group.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Risky Biz News: Two security enhancements coming to Windows

PLUS: ColdRiver hacks Russian pro-democracy foundation; backdoor found in EV charger model; sextortionist brothers get long prison time after victim's suicide.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.


SUBSCRIBE NOW:
Risky Business main podcast feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Our extra podcasts feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Subscribe to our newsletters: