App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Aaron Attarzadeh, Enterprise Security Engineer at Nucleus. Aaron goes into new concepts for the vulnerability management scene, such as asset correlation and asset linking.

 
 
 Show notes

Risky Bulletin: North Korean hackers steal $1.5 billion from Bybit

In this edition of Between Two Nerds Tom, Uren and The Grugq examine the fundamental principles of network exploitation as described in Matthew Monte’s ‘Network Attacks and Exploitation: A Framework’ book using recent hacks as case studies.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Network Attacks and Exploitation: A Framework
 
 Google's Signal hacking report
 
 Device code phishing

Between Two Nerds: Hacking's first principles

Signal threatens to leave Sweden over backdoor request, the EU sanctions a North Korean general linked to two APTs, Australia bans Kaspersky products on government systems and Google will use QR codes for Gmail authentication.

 
 
 Show notes

Risky Bulletin: Signal threatens to leave Sweden over backdoor request

Tom Uren and Patrick Gray talk about the White House apparently considering kicking Canada out of the Five Eyes intelligence alliance to apply pressure on the country. It’s a terrible idea and even thinking about it undermines the strength of the alliance.

They also discuss Sweden’s proposed legislation that would order apps like WhatsApp and Signal to store messages so they could be provided under warrant to authorities. The story is a vignette of the ongoing encryption debate, but we think apps like Signal will leave the country rather than comply.

Finally, they talk about how the illicit cryptocurrency ecosystem is evolving in response to government action such as takedowns and sanctions.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: Canada's expulsion from Five Eyes would be a disaster

Cellebrite bans Serbia from using its products, Chinese hackers breached the Belgian security service, the Republican National Committee hid a Chinese hack and Microsoft removes malicious extensions from the VSCode Marketplace.

 
 
 Show notes

Risky Bulletin: Cellebrite fires Serbia as a customer

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Toni de la Fuente, founder and CEO of cloud security firm Prowler. Toni talks about his company’s latest effort, the Open Cloud Security Movement, an initiative to get more cloud security vendors to open-source their core projects.

 
 
 Show notes
 
 
 Open Cloud Security
 
 Prowler on Github
 
 Risky Biz Product demo: Prowler, the free and open source cloud security platform

Risky Bulletin: Trump admin halts Russia cyber operations

In this edition of Between Two Nerds Tom Uren and The Grugq take a deep dive into incident response reports from Chinese cybersecurity firms that attribute the hack of one of the country’s top seven defence universities to the US National Security Agency. These reports were collated and translated into English by the security researcher known as Inversecos (https://x.com/inversecos).

This episode is also available on Youtube.

 
 
 Show notes
 
 
 NSA (Equation Group) TTPs from a Chinese lens
 
 Northwestern Polytechnical University at the China Defence Universities tracker
 
 Risky Business podcast discussion with Inversecos

Between Two Nerds: NSA's 9 to 5 hacking campaign

In this Risky Business Talks interview we invited Will Thomas to talk about the recent leak of internal chats from the Black Basta ransomware group. Will is a SANS Instructor, co-author of the SANS FOR589 course, and the co-founder of a community research project for CTI analysts called Curated Intelligence. Will walks us through the Black Basta leak and uses the group’s attack on US healthcare provider Ascension to break down how the gang operated.

 
 
 Show notes
 
 
 Risky Bulletin: BlackBasta implodes, internal chats leak online
 
 BlackBasta’s internal chats just got exposed
 
 BlackBasta Chat Logs
 
 BlackBastaGPT
 
 BlackBasta Leaks: Lessons from the Ascension Health attack
 
 Inside the Black Basta Leak: How Ransomware Operators Gain Access

RBTALKS6: Will Thomas on the Black Basta leaks

The Kaleidoscope ad fraud network infects 2.5 million devices a month, Germany seizes the eXch crypto-mixing service, the US takes down the Anyproxy botnet, and Chrome will use on-device AI to detect tech support scams.

 
 
 Show notes

Risky Bulletin: Kaleidoscope ad fraud network infects 2.5m devices a month

Lyt når som helst, hvor som helst

Other podcasts you might like ...