Podcasts

An OpenSSH authentication bypass bug hits Alpine Linux and OpenWRT, hackers attempt to raise fridge temperatures at French blood banks, a French bank gets hacked for $133 million, and the Thai opposition has been targeted with spyware.

Tom Uren and Amberleigh Jack talk about North Korea’s hack of the Binance cryptocurrency exchange. Binance’s founder CZ says it is a wake up call for real banks, but he’s wrong. Even though they are probably just as hackable as crypto exchanges, real banks cooperate to reverse fraudulent transactions and it is far harder to get away with billions.

They also discuss the pressure being felt in tech firms everywhere to speed up software development using AI. From a security perspective, results will be mixed.

This episode is also available on YouTube.

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including:

• The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess
• Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute!
• A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking”
• An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more!

This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gray to chat about fear around the looming post-quantum cryptography crisis, and how CISOs can use it as an opportunity to clean up house and finally take all the end-of-life products out to pasture.

This episode is also available on YouTube

Hackers brick Chinese EVs in Russia, a second wave of hacks defrost European supermarket freezers, the US boots Acronis from government networks and the major distros patch a Linux kernel RCE.

In this edition of Between Two Nerds Tom Uren and The Grugq discuss CISO’s expectations and priorities regarding budgets and what they will spend their money on. AI features heavily in 2027 priorities, but what will it deliver?

This episode is also available on YouTube.

The FBI links the Binance hack to North Korea, game developers are being extorted with game-cloning threats, the Belarusian CyberPartisans hack Russia’s statistics service and Apple sends new mercenary spyware notifications.

In this podcast Patrick Gray and The Grugq chat to Nazar Tymoshyk about Russia’s use of AI in recent state-back cyberattacks against Ukraine.

Nazar is the founder and CEO of Ukraine-based cybersecurity firm UnderDefence. He also spent the first few years of the war working for Ukraine’s CERT.

The three discuss the speed and impact of these automated attacks and how organisations can best prepare themselves against AI-scaled attacks.

This episode is also available on YouTube.

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Luke Wescott, Threat Detection Engineer at Sublime Security. Luke talks through the rise of calendar-based phishing campaigns over the past year and the reasons behind it.

Billions stolen from Binance in a crypto hack, Last week’s PHP2Shell bugs are being exploited to hack Palo Alto Networks firewalls, The Brotli bugs also get a run, Belarusian state hackers carry out a wiper attack, and a hacker leaks the data of 41,000 DHS employees.

In this edition of the Snake Oilers podcast, three vendors drop by to pitch their products.

Minimal.dev: A sandbox for AI agents! Co-Founder and CEO Jake King explains what the company is and how it works.

Request Rocket: Runtime access control for AI agents and APIs. Founder and CTO Alex Ferguson drops by to talk about the problem the company is trying to solve.

TRM Labs: All-source threat intelligence. Global Strategic Accounts Director Simon Warren talks about the company’s platform Ardence.

This episode is also available on YouTube.