App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

Tom Uren and Patrick Gray discuss how China’s Ministry of State Security is increasingly doxxing and threatening Taiwanese APT operators. In some ways this mirrors the US strategy of naming and shaming Chinese cyber operators in indictments that contain lots of supporting information. But although MSS statements are filled with propaganda rather than technical detail, naming Taiwanese military hackers has some bite.

They also discuss Russia’s ‘shadow war’ sabotage campaign across Europe. The Russian campaign mostly relies on traditional sabotage and finding local proxies to throw bombs. But it does make sense for Western governments to respond with destructive cyber operations.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 CSIS report on Russia's 'Shadow War'

Srsly Risky Biz: China's MSS gets personal

Hacktivists sabotage over 100 Iranian ships, Iran calls out China for hacking,
six new Paragon customers come to light, and North Korea creates a new cyber unit.

 
 
 Show notes

Risky Bulletin: Hacktivists claim cyber-sabotage of 116 Iranian ships

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Josh Kamdjou, co-founder and CEO of Sublime Security. Josh goes over recent trends in email badness, such as the increase in QR code abuse and the rise of SVG smuggling.

 
 
 Show notes
 
 
 Scripting Vector Grifts: SVG phishing with smuggled JS and adversary in the middle tactics
 
 Base64-encoding an SVG attack within an iframe and hiding it all in an EML attachment

Risky Bulletin: US removes Tornado Cash sanctions

In this edition of Between Two Nerds Tom Uren and The Grugq talk about why people studying cyber operations are fascinated by 0days. These are vulnerabilities or exploits that have been found in a system before the vendor or manufacturer is made aware of them and so therefore no fix exists.

This episode is also available on Youtube.

 
 
 Show notes

Between Two Nerds: The 0day fetish

Ukraine’s state railway hit by a cyberattack, a ransomware attack reduces Malaysia’s largest airport to writing flight details on a whiteboard, buggy exploits put DrayTek routers in a reboot loop, and the NIST CVE backlog grows bigger despite efforts to address it.

 
 
 Show notes

Risky Bulletin: Cyberattack hits Ukraine's state railway

Tom Uren and Patrick Gray discuss how the Signalgate messages betray an alarming lack of security nous at the highest levels of the US natsec leadership. It’s head-scratchingly bad.

They also discuss the possibility the Trump Administration will reconstitute the CSRB. The Board wasn’t perfect, but in our view it is better to get it started again rather than waiting for reviews to determine its perfect form.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: The Signalgate clown show

France runs a phishing test on two and a half million students, Google fixes a Chrome zero-day abused for espionage, China publishes new facial recognition rules, and the DragonForce ransomware group hacks two rivals.

 
 
 Show notes

Risky Bulletin: France runs phishing test on 2.5 million students

In this Risky Bulletin sponsor interview Ed Currie from Kroll Cyber talks to Tom Uren about the recent hack of the Gravy Analytics geolocation data provider. He explains the hack and how geolocation data can be used by malicious actors.

 
 
 Show notes
 
 
 Kroll's report on the risks of geolocation hacks

Risky Bulletin: Oracle's healthtech division hacked, customers extorted

In this edition of Between Two Nerds Tom Uren and The Grugq talk about cyber’s ‘hard problems’ and why they are intractable.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Cyber Hard Problems, from the National Academies of Sciences

Between Two Nerds: Cyber's hard problems

Lyt når som helst, hvor som helst

Other podcasts you might like ...