Risky Business #709 -- Cl0p goes berserk with MOVEit 0day

Please oh please get rid of your file transfer servers...

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

  • Russia’s FSB uncovers “NSA malware” on iPhones
  • Cl0p mass harvests data from MOVEit file transfer servers
  • ASD discloses a bunch of operations against ISIS, criminals
  • Why China’s prepositioning is probably… prepositioning
  • Much, much more

This week’s show is brought to you by Thinkst Canary. Marco Slaviero is this week’s sponsor guest and he joins us to talk about indirect LLM prompt injection and the latest Canary release.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Srsly Risky Biz: Why Volt Typhoon is so worrying

PLUS: How Paragon succeeded where NSO Group failed…

In this edition of Seriously Risky Business Tom Uren and Patrick Gray talk about the recent Volt Typhoon report and why we need to take the IC’s assessment of China’s intent seriously.

They also talk about NSO Group’s restructure and the way its competitor, Paragon, managed to avoid similar problems.

Risky Business #708 – China's lolbin-powered adventures in US critical infrastructure

PLUS: Trend backs BlackBerry's Cuba call...

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

  • China’s lolbin-powered intrusions into critical infrastructure
  • Trend Micro backs BlackBerry’s Cuba call
  • Anonymous Sudan shakes down Scandanavian Airlines
  • Iranian opposition party MEK publishes gargantuan leak
  • Much, much more

This week’s show is brought to you by Kubernetes security company KSOC. Jimmy Mesta is this week’s sponsor guest and he joins us to talk about the big security challenges in Kubernetes.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Sponsored: Catalin Cimpanu talks CISA KEV with Nucleus Security

KEV is helpful when you can plug it in to your own data...

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Patrick Garrity, VP of Marketing and security researcher at Nucleus Security, on how the company has been tapping into CISA’s KEV database for insights on vulnerability management and vulnerability prioritization.

Risky Biz News: NSO Group has new owners

PLUS: The Pentagon has a new Cyber Strategy; hacker backdoors Emby media servers around the world; and PyPI to enforce 2FA, reduce stored IP addresses.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast click here.

Risky Biz Soap Box: Why your EDR won't save you

There's no point having the D without the R…

In this Soap Box podcast Patrick Gray talks to George Glass, the threat intelligence operations leader in the Cyber Risk practice at Kroll.

They talk about all sorts of things, like:

  • How the ransomware ecosystem is evolving into “ma and pa” operations
  • Some killer detections they’ve figured out
  • What separates the good networks from the bad ones
  • Why EDR is of limited value if you’re not actually monitoring it
  • Why not letting MDRs do the R part of their job is really, really, really dumb

Srsly Risky Biz: G-Men Gone Wild

The FBI's reckless overuse of Section 702...

In this podcast Patrick Gray talks to Tom Uren about the FBI’s overenthusiastic use of foreign intelligence data collected with the Foreign Intelligence Surveillance Act’s Section 702 powers.

Risky Biz News: FinFisher execs charged in Germany

PLUS: US Treasury sanctions North Korea's hacking school, two cyber units; White House nominates next NSA and CYBERCOM chief; spyware vendor code leaks on GitHub.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.

You can find the newsletter version of this podcast click here.

Risky Business #707 -- Inside China's information lockdown with Chris Krebs

PLUS: Germans charge Finfisher execs, FBI busted abusing 702 access...

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news. They cover:

  • Germans charge FinFisher executives
  • The got FBI busted misusing 702 data
  • Special guest Chris Krebs talks China
  • New research breaks Android fingerprint auth
  • Much, much more

This week’s show is brought to you by Trail of Bits. Dan Guido is this week’s sponsor guest and he joins us to talk about the work Trail of Bits is doing in securing AI systems, and making them safe.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Between Two Nerds: Cyber Pinch Points

When cyber operations go for the jugular...

In this edition of Between Two Nerds Tom Uren and The Grugq look at the concept of cyber “pinch points”, a place of vulnerability that can be targeted to bring an opponent to their knees. These points of vulnerability must surely but Tom and The Grugq wonder how easy they are to identify beforehand.

Risky Biz News: China bans American chips, FBI feels heat over "improper" FISA searches

PLUS: Cyber-attack cripples Suzuki's bike and scooter production; Apple bans employees from using ChatGPT; PyPI suspends new accounts and new uploads following surge of malicious packages.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.

You can find the newsletter version of this podcast click here.

Risky Biz Sponsor Interview: Haroon Meer on the importance of honeypots

Why honeypots have a bad name but make a lot of sense

In this Risky Business News sponsor interview Tom Uren asks Thinkst Canary’s Haroon Meer about Mandiant CEO Kevin Mandia’s seven tips for cyber defenders. Honeypots appear at position number three, but Tom wonders what they actually achieve and how mature your security program needs to be before they it can take advantage of them.


SUBSCRIBE NOW:
Risky Business main podcast feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Our extra podcasts feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Subscribe to our newsletters: