Risky Business Podcast

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Twitter bluechecks face phishing barrage
• Australian government goes berserk on Medibank hack response
• Former WSJ journalist sues law firm over email hack and info op that got him fired
• OpenSSL bug lands with a whimper
• Apple macOS Ventura update breaks security tools
• Much, much more

This week’s show is brought to you by Thinkst Canary. Marco Slaviero, Thinkst’s head of engineering, joins us this week to talk through the company’s latest release, codenamed Quokka.

Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.

We’ll hear from three vendors in this edition of Snake Oilers:

• Truffle Security talks secrets discovery
• KSOC builds Kubernetes security tools
• Snyk has a new product to better secure Infrastructure as Code

Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.

We’ll hear from three vendors in this edition of Snake Oilers:

• Tines, the no code security automation solution that people are going absolutely nuts over
• Code42, the insider threat detection solution maker
• Kroll talks about its MDR offering

On this week’s show Patrick Gray, Adam Boileau and Dmitri Alperovitch discuss the week’s security news, including:

• Why former Uber CISO Joe Sullivan’s guilty verdict shouldn’t worry you
• United States puts chipmaking restrictions on China, APT activity is coming
• Elon blinks and Starlink goes dark on Ukraine’s front line
• Master cyber criminal arrested in Australia
• Much, much more

This week’s show is brought to you by runZero, the asset inventory and network visibility solution. runZero’s founding CTO and industry legend HD Moore is this week’s sponsor guest.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• More Exchange 0days cause more havoc
• A look at some earlier Exchange hack incidents
• How the CIA got its agents killed with its truly awful online opsec
• Ex NSA staffer arrested for espionage
• Much, much more

This week’s show is brought to you by Proofpoint. Ryan Kalember, Proofpoint’s EVP of cybersecurity strategy, joins the show this week to talk about some overlooked detection opportunities – some simple stuff you can look for in your environment that should raise gigantic flashing red flags.

In this Soap Box podcast Patrick Gray interviews Airlock Digital CTO Daniel Schell and CEO David Cottingham about Microsoft’s new Smart Application Control feature, why controlling browser extensions via endpoint instrumentation is really hard and why PAM solutions don’t actually do allowlisting, even if they claim they do.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Lapsus$’s Teapot arrested by UK police
• Optus hacker issues grovelling apology after feeling AFP and ASD heat
• Ukraine claims Russia is planning massive attacks on its infrastructure
• RSOCKS bot herder begs for extradition to USA
• Russians scammed when seeking military service exemptions
• Much, much more

This week’s show is sponsored by Votiro. Ravi Srinivasan, Votiro’s CEO, joins the show this week to talk about how people are using content disarm and reconstruction.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• A look at how Uber got owned so hard
• Why cleartext cookie storage in Microsoft Teams’ Electron-based app is actually a big deal
• Russian official: Starlink is a legitimate military target
• Wagner mercs get doxxed
• Kiwi Farms having a bad time
• Much, much more

In this week’s sponsor interview we’ll be chatting to Nucleus’s CEO Steve Carter about CISA’s KEV list. He has feelings about the KEV list – they’re mostly positive, but he also has a few reasonable gripes and he joins me to talk about them.

In this edition of the Soap Box podcast Patrick Gray talks to Haroon Meer about Thinkst Canary’s new sensitive command token. It’s a great way to detect intruders on your Windows systems. Haroon also talks about how to use canaries strategically.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Albania suffers under another crippling Iranian attack
• Iran’s APT42 using clever, multi-persona phishing
• State Department cyber snitching program paying off
• Former NSA director Gen. Keith Alexander sued over alleged IronNet pump and dump
• Mudge fronts US Senate Judiciary Committee
• Much, much more…

This week’s show is brought to you by Stairwell. Mike Wiacek, Stairwell’s founder and CEO is this week’s sponsor guest and he talks about why they’ve pushed their Inception platform beyond YARA hunting. You can see a demo of Inception on our YouTube product demo page.