App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

A GitHub supply chain attack leaks secrets, the White House tells federal agencies to stop firing cyber staff, Germany exempts cybersecurity from debt limits, and the RCS standard adds support for end-to-end encryption.

 
 
 Show notes

Risky Bulletin: GitHub supply chain attack leaks secrets

In this edition of Between Two Nerds Tom Uren and The Grugq talk about how offensive cyber operations could do so much more than just ‘deny, disrupt, degrade and destroy’. Grugq thinks this thinking is rooted in military culture and he wonders why cyber operations are always so mean.

This episode is also available on Youtube.

 
 
 Show notes

Between Two Nerds: Sowing discord by being nice!

Google buys Wiz for $32 billion, China attributes the Poison Ivy APT group to the Taiwanese Military, APT groups abuse a Windows zero-day and a judge tells CISA to reinstate fired workers.

 
 
 Show notes

Risky Bulletin: Google buys Wiz for $32 billion

Tom Uren and Patrick Gray discuss how China’s Ministry of State Security is increasingly doxxing and threatening Taiwanese APT operators. In some ways this mirrors the US strategy of naming and shaming Chinese cyber operators in indictments that contain lots of supporting information. But although MSS statements are filled with propaganda rather than technical detail, naming Taiwanese military hackers has some bite.

They also discuss Russia’s ‘shadow war’ sabotage campaign across Europe. The Russian campaign mostly relies on traditional sabotage and finding local proxies to throw bombs. But it does make sense for Western governments to respond with destructive cyber operations.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 CSIS report on Russia's 'Shadow War'

Srsly Risky Biz: China's MSS gets personal

Hacktivists sabotage over 100 Iranian ships, Iran calls out China for hacking,
six new Paragon customers come to light, and North Korea creates a new cyber unit.

 
 
 Show notes

Risky Bulletin: Hacktivists claim cyber-sabotage of 116 Iranian ships

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Josh Kamdjou, co-founder and CEO of Sublime Security. Josh goes over recent trends in email badness, such as the increase in QR code abuse and the rise of SVG smuggling.

 
 
 Show notes
 
 
 Scripting Vector Grifts: SVG phishing with smuggled JS and adversary in the middle tactics
 
 Base64-encoding an SVG attack within an iframe and hiding it all in an EML attachment

Risky Bulletin: US removes Tornado Cash sanctions

In this edition of Between Two Nerds Tom Uren and The Grugq talk about why people studying cyber operations are fascinated by 0days. These are vulnerabilities or exploits that have been found in a system before the vendor or manufacturer is made aware of them and so therefore no fix exists.

This episode is also available on Youtube.

 
 
 Show notes

Between Two Nerds: The 0day fetish

Ukraine’s state railway hit by a cyberattack, a ransomware attack reduces Malaysia’s largest airport to writing flight details on a whiteboard, buggy exploits put DrayTek routers in a reboot loop, and the NIST CVE backlog grows bigger despite efforts to address it.

 
 
 Show notes

Risky Bulletin: Cyberattack hits Ukraine's state railway

Tom Uren and Patrick Gray discuss how the Signalgate messages betray an alarming lack of security nous at the highest levels of the US natsec leadership. It’s head-scratchingly bad.

They also discuss the possibility the Trump Administration will reconstitute the CSRB. The Board wasn’t perfect, but in our view it is better to get it started again rather than waiting for reviews to determine its perfect form.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: The Signalgate clown show

In this Risky Bulletin sponsor interview Shane Harding, CEO of Devicie, talks to Tom Uren about trends in the enterprise software and security market that he thinks will have huge impacts. Software is becoming smarter and aims to solve problems rather than simply provide capabilities and Microsoft has embarked on a big push into the SME security market.

 
 
 Show notes

Sponsored: Two big shifts that will change security

Lyt når som helst, hvor som helst

Other podcasts you might like ...