Risky Business Podcast

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• A look at how Uber got owned so hard
• Why cleartext cookie storage in Microsoft Teams’ Electron-based app is actually a big deal
• Russian official: Starlink is a legitimate military target
• Wagner mercs get doxxed
• Kiwi Farms having a bad time
• Much, much more

In this week’s sponsor interview we’ll be chatting to Nucleus’s CEO Steve Carter about CISA’s KEV list. He has feelings about the KEV list – they’re mostly positive, but he also has a few reasonable gripes and he joins me to talk about them.

In this edition of the Soap Box podcast Patrick Gray talks to Haroon Meer about Thinkst Canary’s new sensitive command token. It’s a great way to detect intruders on your Windows systems. Haroon also talks about how to use canaries strategically.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Albania suffers under another crippling Iranian attack
• Iran’s APT42 using clever, multi-persona phishing
• State Department cyber snitching program paying off
• Former NSA director Gen. Keith Alexander sued over alleged IronNet pump and dump
• Mudge fronts US Senate Judiciary Committee
• Much, much more…

This week’s show is brought to you by Stairwell. Mike Wiacek, Stairwell’s founder and CEO is this week’s sponsor guest and he talks about why they’ve pushed their Inception platform beyond YARA hunting. You can see a demo of Inception on our YouTube product demo page.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• China’s super spies figure out Rob Joyce ran TAO ops
• FBI, French authorities fly to Montenegro to investigate ransomware attack
• NEWSFLASH: Cloudflare are still a bunch of Nazi cuddlers
• SIM swap drama spills into real world shootings, firebombings
• Yandex Taxi hack clogs Moscow streets
• The TikTok breach that wasn’t
• Project Raven veterans get wings clipped
• Why recent BGP hijacks are getting a bit concerning
• Much, much more

This week’s show is brought to you by Corelight, the company that maintains Zeek. Corleight’s Federal CTO Jean Schaffer joins us in this week’s sponsor interview to talk about whether or not the White House’s executive order on Zero Trust is actually changing anything.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• The Twilio breach was actually a big deal
• How a Belarusian Cyber Partisans hack burned a GRU illegal
• Who wants 25m hashed passwords from Russia?
• An NFT we can get behind
• How attackers are using game anti-cheat drivers to defeat EDR
• Much, much more

This week’s sponsor interview is with Mike Benjamin, the VP of security research at Fastly. He pops in to argue that your red team needs to actually consider how your apps will cope with bot-driven attacks.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• A deep look at Mudge’s sensational whistleblower complaint against Twitter
• Brazilian Federal Police raid Lapsus$ crew
• NSO CEO to stand down (again), 100 staff to be let go
• Signal users impacted in Twilio incident
• Tornado Cash OFACs around and finds out
• Much, much more

This week’s show is brought to you by Greynoise. Its founder, Andrew Morris, joins the show with a stinging critique of the wider threat intelligence industry. Don’t miss that one.

In this edition of the Soap Box podcast Okta’s APAC CISO and former Risky Biz editor Brett Winterford talks about how attackers are getting much better at swiping session cookies via realtime phishing and malware.

He also talks about some mitigation strategies to combat this threat and introduces the concept of continuous authentication.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Taiwan tensions fail to conjure the cyber apocalypse
• Crypto bridge exploit results in $150m feeding frenzy
• Chainalysis evidence to be challenged in court
• Post-quantum NIST candidate algorithm gets smoked
• DSIRF’s Russia links
• Much, much more

This week’s sponsor interview is with Jerrod Chong from Yubico. He’s joining the show to talk about why consumer-focussed implementations of Webauthn like Apple’s Passkeys aren’t a great enterprise solution.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Why Entrust being ransomwared is good news
• UEFI bootkits turn hardware into landfill
• Microsoft resumes macro blocking rollout
• Pat and Adam talk about why plugging your IDP into legacy apps is a dreadful idea
• Much, much more

This week’s sponsor guest is Paul “The Voice” Lanzi of Remediant. He’s popping along to talk about the emergence of a new product category – Identity Threat Detection and Response, or ITDR.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• A look at the DHS Cyber Safety Review Board’s Log4j report
• Joshua Schulte no longer the “alleged” Vault7 leaker
• Chinese APT crews targeted US political journalists before Jan 6
• Ransomware gangs make leak sites searchable
• Why recovering plaintext passwords from Okta is expected behaviour
• US Government seizes North Korean ransomware payment
• Much, much more

This week’s show is brought to you by Trail of Bits. Dan Guido is this week’s sponsor guest and he’ll tell us about work Trail of Bits did for DARPA on investigating blockchain security fundamentals.