Podcasts

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Taiwan tensions fail to conjure the cyber apocalypse
• Crypto bridge exploit results in $150m feeding frenzy
• Chainalysis evidence to be challenged in court
• Post-quantum NIST candidate algorithm gets smoked
• DSIRF’s Russia links
• Much, much more

This week’s sponsor interview is with Jerrod Chong from Yubico. He’s joining the show to talk about why consumer-focussed implementations of Webauthn like Apple’s Passkeys aren’t a great enterprise solution.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

This podcast is a discussion between Patrick Gray and Tom Uren on the big stories affecting people in cyber policy.

It’s based on the latest Seriously Risky Business newsletter, which you can find here.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Why Entrust being ransomwared is good news
• UEFI bootkits turn hardware into landfill
• Microsoft resumes macro blocking rollout
• Pat and Adam talk about why plugging your IDP into legacy apps is a dreadful idea
• Much, much more

This week’s sponsor guest is Paul “The Voice” Lanzi of Remediant. He’s popping along to talk about the emergence of a new product category – Identity Threat Detection and Response, or ITDR.

Catalin Cimpanu will be back later this week with more Risky Business News podcasts, but until then we’ve got this great feature interview for you.

In this podcast interview Seriously Risky Business newsletter writer Tom Uren talks to The Grugq about the Belarusian Cyber Partisans. The group first emerged in 2019 to zero fanfare when its early campaigns fell flat. But its tactics have improved and these days it’s giving the Belarusian government some serious headaches.

They’ve disrupted railways, infiltrated intelligence agencies and stolen massive government databases and troves of Belarusian audio intercepts including Interior Ministry intercepts from foreign embassies in Belarus. But how did they evolve into an effective group?

We think it’s because they’ve independently reinvented how professional intelligence agencies do business. We talk about the Cyber Partisans and the intelligence cycle, which encompasses planning, collection, processing and exploitation, analysis and dissemination.

Grugq and Tom discuss the Cyber Partisans in relation to the intelligence cycle and how the group is not only doing collection and exploitation but has more recently invested in analysis and dissemination, turning raw intelligence into something that will have impact.

Yuriy Ackermann, VP of War Efforts at Hideez, talks to Risky Business about the company’s latest project to protect the Ukrainian government and its critical sector entities against Russian cyberattacks by rolling out tens of thousands of Yubikey security keys.

This podcast is a discussion between Patrick Gray and Tom Uren on the big stories affecting people in cyber policy.

It’s based on the latest Seriously Risky Business newsletter, which you can find here.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• A look at the DHS Cyber Safety Review Board’s Log4j report
• Joshua Schulte no longer the “alleged” Vault7 leaker
• Chinese APT crews targeted US political journalists before Jan 6
• Ransomware gangs make leak sites searchable
• Why recovering plaintext passwords from Okta is expected behaviour
• US Government seizes North Korean ransomware payment
• Much, much more

This week’s show is brought to you by Trail of Bits. Dan Guido is this week’s sponsor guest and he’ll tell us about work Trail of Bits did for DARPA on investigating blockchain security fundamentals.