Podcasts

News, analysis and commentary

Srsly Risky Biz: When hacking customers is good business

Presented by

Tom Uren
Tom Uren

Policy & Intelligence

Patrick Gray
Patrick Gray

CEO and Publisher

In this podcast Tom Uren and Patrick Gray talk about how South Korean internet regulations inadvertently encouraged a large ISP to hack their own customers to cut down on torrent traffic.

They also look at state-backed hackers behaving very badly.

Srsly Risky Biz: When hacking customers is good business
0:00 / 0:00

Risky Business #755 -- SSH 0day! Polyfill drama! Entrust crushed!

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • Widely used polyfill javascript gets hijacked by its new owners
  • MacOS supply chain disaster bullet dodged
  • That OpenSSH remote code exec OH MY <3
  • Entrust gets its CA business kicked to the kerb by Google
  • South Korean telco intentionally viruses 600k customers
  • Microsoft continues to deeply underwhelm
  • And much, much more.

This week’s episode is sponsored by Greynoise. Founder Andrew Morris joins to talk about ways to track attackers across NAT and VPNs, as well as how you can join in the fun of running an internet-scale honeypot network.

Risky Business #755 -- SSH 0day! Polyfill drama! Entrust crushed!
0:00 / 0:00

Risky Biz News: Unauth RCE in OpenSSH—a scary combination of words

Presented by

Catalin Cimpanu
Catalin Cimpanu

News Editor

Claire Aird
Claire Aird

Newsreader

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Risky Biz News: Unauth RCE in OpenSSH—a scary combination of words
0:00 / 0:00

Between Two Nerds: Private enterprise is on its own

Presented by

Tom Uren
Tom Uren

Policy & Intelligence

The Grugq
The Grugq

Independent Security Researcher

In this edition of Between Two Nerds Tom Uren and The Grugq talk about why governments have failed to protect the private sector from state-backed cyber espionage.

Between Two Nerds: Private enterprise is on its own
0:00 / 0:00

Risky Biz News: Russia hacks TeamViewer

Presented by

Catalin Cimpanu
Catalin Cimpanu

News Editor

Claire Aird
Claire Aird

Newsreader

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.

You can find the newsletter version of this podcast here.

Risky Biz News: Russia hacks TeamViewer
0:00 / 0:00

Sponsored: Rad Security describes its concept of "verified runtime fingerprints"

Presented by

Catalin Cimpanu
Catalin Cimpanu

News Editor

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Jimmy Mesta, CTO and Co-Founder of Rad Security (formerly KSOC). Jimmy explains how Rad Security has replaced signature-based detections with a new concept the company calls “behavioral fingerprints” or “verified runtime fingerprints,” which can detect malicious activity in cloud environments using a wider set of indicators.

Sponsored: Rad Security describes its concept of "verified runtime fingerprints"
0:00 / 0:00

Risky Biz Soap Box: Why AI shouldn't really change your security controls

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

This is a sponsored Soap Box edition of the Risky Business podcast.

Abhishek Agrawal is the CEO and co-founder of Material Security, an email security company that locks down cloud email archives. Attackers have been raiding mailspools since hacking has existed, and with those mailspools now in the cloud with services like o365 and Google Workspace, guess where the attackers are going?

Material built a product that helps you lock up your email data, to archive and redact sensitive information. The idea is to really just limit what an attacker can do with email data if they pop an account.

Abhishek joined me to talk about a few things, like how non phishing resistant MFA is basically dead, how email content is very useful to security programs, and about how the gen AI won’t really change much on the defensive control side.

Risky Biz Soap Box: Why AI shouldn't really change your security controls
0:00 / 0:00

Srsly Risky Biz: Why the Optus breach was dumb

Presented by

Tom Uren
Tom Uren

Policy & Intelligence

Patrick Gray
Patrick Gray

CEO and Publisher

In this podcast Tom Uren and Patrick Gray talk about how Optus’s 2022 data breach went down and how the company had been vulnerable for years.

They also look at the US government’s ban on Kaspersky products, why it makes sense and why the ban took a long time to arrive.

Srsly Risky Biz: Why the Optus breach was dumb
0:00 / 0:00

Risky Business #754 -- Assange pleads guilty to espionage, walks free

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

  • Julian Assange finally cuts a deal, pleads guilty, and goes free
  • USA to ban Kaspersky - even updates
  • Car dealer SaaS provider CDK contemplates paying a ransom
  • Intolerable healthcare ransomware attacks continue
  • We revisit Windows proximity bugs via wifi and bluetooth
  • And much, much more.

This week’s episode is sponsored by enterprise browser maker Island. Crowdstrike co-founder Dmitri Alperovitch is an investor in Island, and joins on its behalf to discuss why an enterprise browser is really starting to make sense.

Risky Business #754 -- Assange pleads guilty to espionage, walks free
0:00 / 0:00

Risky Business #753 – Congress and vuln researchers maul Microsoft

Presented by

Patrick Gray
Patrick Gray

CEO and Publisher

Adam Boileau
Adam Boileau

Technology Editor

On this week’s retreat special, the entire Risky Business team is together in a tropical paradise for the first time. The team takes a break from the infinity pool to discuss the week’s security news:

  • Microsoft recalls Recall, but why did it have to be such a mess
  • And a Windows kernel wifi code-exec, really?
  • Passkeys and identity are hard
  • Scattered Spider bigwig arrested in Spain
  • The pentagon runs a deeply flawed info-op
  • Is it time E2E crypto nerds accept their place in the world?
  • And much, much more.

This week’s show is brought to you by Corelight… Corelight’s CEO Brian Dye will be along in this week’s sponsor interview to make a really compelling case for something that shouldn’t exist… which is NDR in cloud environments.

Risky Business #753 – Congress and vuln researchers maul Microsoft
0:00 / 0:00