Srsly Risky Biz: Why did Russia deploy hackers to war zones?

PLUS: The US Government push to secure open source software...

In this podcast Patrick Gray and Tom Uren talk about how Ukraine has countered Russia’s cyber operations.

They also look at various initiatives the US government is taking to secure open source software and ask whether it is getting serious about FOSS.

Risky Biz News: South Korea investigates Chinese "spy chips"

PLUS: Ecuador's election disrupted by cyberattack; Baghdad bans LED billboards after hack; and Ivanti patches another zero-day.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.

You can find the newsletter version of this podcast here.

Risky Business #718 -- Chaos and carnage, business as usual

PLUS: Why PowerShell Gallery needs to get its house in order…

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

(NOTE: This podcast was initially pushed out into the Risky Business News podcast feed in error. Sorry about that!)

  • US Government warnings to private space sector on cyber risk
  • Ukrainian hackers dump the inbox of Russian Duma deputy chair
  • Absentee voting in Ecuador’s election disrupted by DDoS attack
  • South Korea warns of Chinese “spy chips”
  • Much, much more!

This week’s show is brought to you by Airlock Digital. Its co-founders Daniel Schell and David Cottingham join this week’s show to talk about Powershell Constrained Language mode.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Feature Interview: How Sandworm prepared Ukraine for a cyber war

An interview with the Security Service of Ukraine's head of cyber Illia Vitiuk…

In this joint Risky Business and Geopolitics Decanted feature interview, Patrick Gray and Dmitri Alperovitch talk to Illia Vitiuk, the Head of the Department of Cyber and Information Security of the Security Service of Ukraine (SBU) about the cyber dimension to Russia’s invasion.

From turning off Ukraine’s power grid with a cyber attack in 2015 to the Viasat hack in 2022, Russia’s intelligence services are world renowned for executing creative destructive cyber campaigns. Despite this, after a year and a half of Russia waging war on Ukraine its power grid is up, its telcos are functioning and its banks are still processing transactions.

How has Ukraine been able to withstand Russia’s onslaught in the cyber domain? Vitiuk joins us to reveal insights into how Russian intelligence services are operating in Ukraine, and how the SBU is countering them.

Risky Biz Sponsor Interview: Using AI to do security research

Dan Guido from Trail of Bits talks about how to use AI to guide security research....

In this Risky Business News sponsor interview Tom Uren talks to Dan Guido, CEO of Trail of Bits, about AI. Dan thinks AI technologies will be a “game changer”. But he also thinks the conversation around AI is not very sophisticated just yet.

Risky Business #717 -- The kids are okay. At ripping your face off.

CSRB Vice Chair Heather Adkins talks about the CSRB's Lapsus$ report…

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

  • More victims identified in Chinese breach of Microsoft email accounts
  • Cyber Safety Review Board to investigate Microsoft
  • We got some stuff wrong last week
  • More details on Viasat hack revealed
  • Special guest Heather Adkins talks about the CSRB’s Lapsus$ report
  • Much, much more

This week’s show is brought to you by RunZero. Its co-founder HD Moore is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Risky Biz Sponsor Interview with Jacob Torrey of Thinkst Labs

Capturing knowledge from the security community with ThinkstScapes...

In this Risky Business News sponsor interview Tom Uren talks to Jacob Torrey, Thinkst’s Head of Labs. Jacob produces ThinkstScapes, a brilliant quarterly summary of the most interesting security research from around the world.

In this interview Jacob talks about his favourite research of this issue, why Thinkst invests the time and effort in producing ThinkstScapes and also talks about Thinkst Citation, a companion product that contains information about nearly 70,000 security talks going all the way back to 1993.

Risky Biz News: CSRB to investigate Microsoft hack

PLUS: UK Foreign Office hacked twice in 2021; Japan to build Indo-Pacific cyberdefense network; and Zyxel routers under attack.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.

You can find the newsletter version of this podcast here.

Risky Biz News: Russia blocks OpenVPN and WireGuard VPN protocols

PLUS: Northern Ireland police deals with a data breach; new TunnelCrack attack leaks VPN traffic; and a couple of crypto-wallet vulnerabilities.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.

You can find the newsletter version of this podcast here.

Srsly Risky Biz: Why Russia's Plan to Hide Spy Data Will Fail

PLUS: Facial recognition isn't probable cause...

In this podcast Patrick Gray and Tom Uren talk about how the Russian government is planning to alter databases to hide their spies from open source investigations. It’s a nice try, but we don’t think it will work.

They also look at contrasting stories that illustrate how law enforcement agencies can facial recognition technology responsibly, but can also royally screw things up.

Risky Business #716 -- This ain't your grandma's cloud

How complexity is biting Azure on its big, blue ass...

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

  • Tenable gives Microsoft a spray over Azure bug fix delay, quality
  • Lateral movement fun via Azure Active Directory Cross-Tenant Synchronization
  • Ransomware targets hospitals, special needs schools
  • Japan’s cybersecurity has some catching up to do
  • Much, much more

This week’s show is brought to you by Corelight. Brian Dye, Corelight’s CEO, is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Risky Biz News: Sandworm hackers target Ukraine's military systems

PLUS: DHS links pro-PRC info-op to Chinese municipal government; Russia cracks down on "gray" SIM cards; and Curve Finance hacker returns most of the stolen funds.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.

You can find the newsletter version of this podcast here.

Sponsored: Tines CEO Eoin Hinchy on burnout in SOC teams

It's a real thing...

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Tines co-founder and CEO Eoin Hinchy about how organisations can maximise the potential of their security teams during an economic downturn, with a concentration on why human error and burnout caused by excessive workloads on security teams can be a risk.


SUBSCRIBE NOW:
Risky Business main podcast feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Our extra podcasts feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Subscribe to our newsletters: