App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

An HTTP-2 vulnerability enables DDoS attacks, Russia blocks Telegram and WhatsApp voice calls, attackers abuse a zero-day in N-able servers, and the US government is adding trackers to chip shipments.

 
 
 Show notes
 
 
 Risky Bulletin: MadeYouReset vulnerability enables unlimited HTTP/2 DDoS attacks

Risky Bulletin: HTTP2 flaw enables massive DDoS attacks

Tom Uren and Amberleigh Jack talk about a recent hack of the US courts document management system. It’s about as bad as can be, with multiple threat actors including states and possibly even drug cartels rummaging around in there, possibly for years.

They also discuss Microsoft’s involvement in an Israeli surveillance system and the head of Australia’s security organisation’s blunt warning about espionage.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: Drug cartels are the new APTs

Russia suspected of hacking a US Court system, researchers break the DarkBit ransomware’s encryption, a new attack can leak sensitive data from AMD processors, and a brute-force campaign targets Fortinet devices.

 
 
 Show notes
 
 
 Risky Bulletin: Crypto-thieves turn their sights to Open VSX

Risky Bulletin: Russia suspected of US Courts hack

A security researcher scores $250,000 for a Chrome bug, WinRAR patches another zero-day, new vulnerabilities found in the Tetra communications protocol, and a researcher gains access to Microsoft’s internal network for fun… and no profit.

 
 
 Show notes
 
 
 Risky Bulletin: Researcher scores $250,000 for Chrome bug

Risky Bulletin: Researcher scores $250,000 for Chrome bug

In this Risky Business News sponsor interview Tom Uren talks to Derek Hanson, Yubico’s Field CTO about making account recovery and onboarding for employees phishing-resistant. They also discuss the problems and opportunities of syncable passkeys.

 
 
 Show notes

Risky Bulletin: CISA tells federal agencies to mitigate on-prem-to-cloud Exchange attack

Russian companies must migrate to domestic ERP systems, Ohio’s public sector will have to approve ransom payments in public, Chanel and Cisco disclose data breaches, and a Thai hospital gets fined over the the dumbest data breach ever.

 
 
 Show notes
 
 
 Risky Bulletin: Russia to designate ERPs as "critical information infrastructure"

Risky Bulletin: Russia's war on foreign software continues

In this edition of Between Two Nerds Tom Uren and The Grugq dissect the Belarusian Cyber Partisans hack of Russian airline Aeroflot. Despite the short-term impact, the airline will likely bounce back quite quickly. But it is still a big win for the Cyber Partisans.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 The Belarusian Cyber Partisans post on the hack
 
 Meduza's analysis of the hack's aftermath

Between Two Nerds: The Aeroflot hack

China accuses the US of new cyberattacks, a $14.5b crypto hack discovered five years later, the US National Cyber Director is named, and Lovense considers legal action over a security flaw disclosure.

 
 
 Show notes
 
 
 Risky Bulletin: China with the accusations again

Risky Bulletin: China with the accusations again

In this week’s sponsor interview, Tines’ Field CISO, Matt Muller, chats to Casey Ellis about the interesting and out-of-the-box ways they’ve seen people using the platform. Tines is a platform designed to automate repetitive tasks for IT and security teams. And, as it turns out, it can be used to … gamify shift handover?

 
 
 Show notes

Risky Bulletin: Microsoft rolls out linkable token identifiers to help IR teams

Lyt når som helst, hvor som helst

Other podcasts you might like ...