Risky Biz News: Crypto-wallet service seized for helping ransomware gangs launder stolen funds

PLUS: DARPA launches program to convert C code to Rust; a Chinese APT hacks an ISP to hijack software updates; class-action lawsuits filed over massive 2.9 billion record breach at background-check firm.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Srsly Risky Biz: When Israeli national security trumps US lawsuits

PLUS: election interference gets professional

In this podcast Tom Uren and Patrick Gray discuss the Israeli government seizing documents from NSO Group so that they couldn’t be shared with opposition counsel in a US lawsuit during discovery. It’s a terrible look.

They also talk about foreign adversaries turning to commercial firms to buy election interference services in the lead up to the presidential election. Tom argues that is fundamentally good news.

A video version of this episode is available on YouTube.

Risky Business #757 – The ClownStrike cleanup continues

PLUS: How Google's faulty WorkSpace verification put your SaaS accounts at risk…

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • The insurance industry’s reaction to CrowdStrike’s mess
  • Google’s Workspace email validation flaw and its consequences for OAuth’d applications
  • Is the VMWare ESX group membership feature a CVE or an FYI?
  • Secureboot continues to under-deliver
  • North Korea’s revenue neutral intelligence services
  • And much, much more

This episode is sponsored by allowlisting software vendor Airlock Digital. Airlock uses a kernel driver on Windows, so Chief Executive David Cottingham joined to discuss what the CrowdStrike kernel driver bug drama means for security vendors.

This episode is also available on Youtube. If you want to ruin the magic of radio and see the faces behind the show, well, now you can!

Risky Biz News: NVD backlog unlikely to be addressed by September

PLUS: The CrowdStrike lawsuits are coming; ESXi servers targeted in a wave of ransomware; crypto-exchange to "socialize" hack losses among all users.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Wide World of Cyber: Why we should show CrowdStrike no mercy

Alex Stamos and Chris Krebs are not impressed...

In this episode of Wide World of Cyber, Risky Business host Patrick Gray discusses the recent CrowdStrike incident and its implications for security software that operates in kernel space with Chris Krebs and Alex Stamos of SentinelOne, a CrowdStrike Competitor. The conversation also delves into Microsoft’s role in this whole disaster and the potential changes it could make to its operating system to prevent similar incidents in the future.

A video version of this episode is also available on Youtube!

Sponsored: How AI can train SOC analysts

Tines' Thomas Kinsella on how a black box isn't a silver bullet

In this Risky Business News sponsored interview, Tom Uren talks to Thomas Kinsella, co-founder and Chief Customer Officer of Tines about figuring out what AI is really good for and taking advantage of it in automating workflows.

Srsly Risky Biz: Chinese Illegal Gambling's Worldwide Tentacles

PLUS: Narrowly focussing on CrowdStrike a mistake

In this podcast Tom Uren and Patrick Gray discuss the wild story of a Chinese illegal gambling operation that involves human trafficking, shell companies, money laundering, hundreds of thousands of websites and sponsorship of European football teams.

They also talk about why a potential CSRB review of CrowdStrike’s disaster should focus… not on CrowdStrike, but instead on the legacy practice of security vendors having kernel-level access to Windows.

Finally, Tom is happy that the FTC is going to investigate ‘surveillance pricing’.

Risky Business #756 -- Move fast and break everything

Crowdstrike is apparently not a big believer in testing…

The Risky Biz main show returns from a break to the traditional internet-melting mess that happens whenever Patrick Gray takes a holiday. Pat and Adam Boileau talk through the week’s security news, including:

  • Oh Crowdstrike, no, oh no, honey, no
  • AT&T stored call records on Snowflake and you’ll never guess what happened next
  • Squarespace buys Google Domains and makes a hash of it
  • Some but not all of the SECs case against Solarwinds gets thrown out
  • Pity the incident responders digging through a terabyte of Disney Slack dumps
  • Internet Explorer rises from the grave, and it wants SHELLS RAAAAARGH SSHHEEELLLS
  • And much, much more.

This week’s show is brought to you by Sublime Security, a flexible and modern email security platform. If you’re sick of using a black box email security solution, Sublime is a terrific option for you.

Sponsored: Socket CEO Feross Aboukhadijeh on how tracking vulnerabilities isn't enough for open source repositories

Tracking the untrackable

In this Risky Business News sponsored interview, Tom Uren talks to Feross Aboukhadijeh, CEO and Founder of Socket about how open source repositories are riddled with horrible software. Feross explains why it makes a difference if a package is vulnerable, malicious or just unwanted and how current transparency mechanisms such as CVEs and the NVD just aren’t suitable for the challenge of open source repositories.

Risky Biz News: Trickbot dev arrested in Moscow

PLUS: Indian crypto exchange hacked for $230 million; UK wants mandatory ransomware reporting; new Port Shadow attack on VPNs.

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Srsly Risky Biz: World vs China cyber security reporting duel

PLUS: Why US Fedgov security is full of holes

In this podcast Tom Uren and Adam Boileau talk about how countries are using cyber security reports and advisories to win friends and influence people; why having gaping holes in US federal government security is situation normal; and efforts to make up for the disappearance of Twitter’s trust and safety team.


SUBSCRIBE NOW:
Risky Business main podcast feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Our extra podcasts feed:
Listen on Apple Podcasts Listen on Overcast Listen on Pocket Casts Listen on Spotify Subscribe with RSS
Subscribe to our newsletters: