Risky Business Podcast

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Samsung, LG Android signing keys pinched
• LastPass gets owned again
• APT41 steal covid relief money
• Amnesty International hacked in Canada
• Much, much more

This week’s show is brought to you by Airlock Digital. Its CEO and CTO join host Patrick Gray this week to talk about admin to kernel as a security boundary, and the limitations of kernel driver blocklists.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• UK, USA ban Chinese security cameras
• What is the Boa webserver and why is it everywhere?
• Vanuatu, Guadeloupe smashed by ransomware
• REvil back with more dumps despite ASD attention
• Much, much more

This week’s sponsor guest is Jake King from Elastic Security, who joins us to talk through the company’s most recent threat report. There’s a link to the report in our show notes.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Half of all UK COBRA meetings are ransomware related
• Ransomware biggest risk to US port security
• White House to move on spyware industry
• EU to launch its own Starlink equivalent
• Much, much more

AttackIQ’s Jonathan Reiber will be joining us in this week’s sponsor interview to talk about how companies and their boards are really moving towards outcomes-based security programs.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

In this podcast we speak with Randall Degges who leads the Developer Relations & Community team at Snyk. He’s here to talk to us about how to get developers enthusiastic about security, how to get them to use the right tooling, and how this tooling will evolve in the future to actually help developers fix bugs in their code.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Australia lets ASD loose on ransomware crews, but will it work? (Tom Uren joins us to chat about this one)
• Twitter’s wheels haven’t fallen off yet but they sure are wobbling
• Hundreds of millions stolen from FTX mid implosion
• Security researchers start looking at Mastodon and… yeah
• Much, much more!

This week’s show is brought to you by Gigamon. George Sandford from Gigamon pops in for this week’s sponsor interview to talk about how to successfully stand up an NDR program.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• DoJ seizes 50k bitcoin stolen from Silk Road, charges thief
• Australian health insurer Medibank refuses to pay ransom, data leaked
• Inside Qatar’s $386m world cup espionage operation
• EU Parliament report into spyware lands
• SolarWinds settles shareholder lawsuit, faces SEC enforcement action
• Much, much more

This week’s sponsor guest is Andrew Morris from Greynoise Intelligence.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Twitter bluechecks face phishing barrage
• Australian government goes berserk on Medibank hack response
• Former WSJ journalist sues law firm over email hack and info op that got him fired
• OpenSSL bug lands with a whimper
• Apple macOS Ventura update breaks security tools
• Much, much more

This week’s show is brought to you by Thinkst Canary. Marco Slaviero, Thinkst’s head of engineering, joins us this week to talk through the company’s latest release, codenamed Quokka.

Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.

We’ll hear from three vendors in this edition of Snake Oilers:

• Truffle Security talks secrets discovery
• KSOC builds Kubernetes security tools
• Snyk has a new product to better secure Infrastructure as Code

Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.

We’ll hear from three vendors in this edition of Snake Oilers:

• Tines, the no code security automation solution that people are going absolutely nuts over
• Code42, the insider threat detection solution maker
• Kroll talks about its MDR offering

On this week’s show Patrick Gray, Adam Boileau and Dmitri Alperovitch discuss the week’s security news, including:

• Why former Uber CISO Joe Sullivan’s guilty verdict shouldn’t worry you
• United States puts chipmaking restrictions on China, APT activity is coming
• Elon blinks and Starlink goes dark on Ukraine’s front line
• Master cyber criminal arrested in Australia
• Much, much more

This week’s show is brought to you by runZero, the asset inventory and network visibility solution. runZero’s founding CTO and industry legend HD Moore is this week’s sponsor guest.