app_store_button

google_play_button

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

In this edition of Between Two Nerds Tom Uren and The Grugq dissect a recent Chinese CERT report that the NSA had hacked China’s national time keeping service.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 MSS Weixin post 
 
 CN-CERT technical analysis
 
 Global Times on X
 
 BTN110: The NSA's nine to five hacking campaign

Between Two Nerds: NSA gets its mojo back!

A bug in Microsoft WSUS is under attack, Thailand revokes the citizenship of scam-linked businessman, the US charges high tech poker cheat, and Iran’s top hacking school is breached.

 
 
 Show notes
 
 
 Risky Bulletin: Russian bill would require researchers to report bugs to the FSB

Risky Bulletin: WSUS bug under attack

In this sponsored podcast Patrick Gray chats with Knocknoc CEO Adam Pointon about why true Zero Trust architectures never really got there. Spinning up ZTNA access to core applications and slapping SSO prompts on everything else is great, but if we’re honest, it’s not really Zero Trust. So, how and why did we get here?

 
 
 Show notes

Risky Bulletin: iOS 26 change deletes clues of old spyware infections

Tom Uren and Amberleigh Jack talk about how America can better use its private sector to scale up offensive cyber activities, including espionage and disruption operations. Involving it to tackle ransomware and cryptocurrency scammers makes a lot of sense.

They also talk about how the ransomware ecosystem is splintering, and one operator’s relatively quick journey from being an affiliate to a platform operator.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 From Chaos to Capability: Building the US Market for Offensive Cyber
 
 Devman's RaaS Launch

Srsly Risky Biz: Hacking for Godot

A worm hits VS Code users, F5 was breached via its own devices back in 2023, Korea Telecom’s CEO says he’ll resign following a recent security breach, and the Boy Scouts will award cybersecurity merit badges.

 
 
 Show notes
 
 
 Risky Bulletin: Clever worm hits the DevOps scene

Risky Bulletin: Clever worm hits the VS Code scene

In this edition of Between Two Nerds Tom Uren and The Grugq talk to Joe Devanny, senior lecturer from King’s College London, all about India’s missing cyber power. It has all the ingredients to become a cyber superpower, but so far, hasn’t shown the motivation.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Interpreting India's Cyber Statecraft by Joe Devanny and Arthur Laudrain
 
 Dr Joeseph Devanny
 
 Sponsor interview: How AI turbocharges SOC analysts h

Between Three Nerds: India, the sleeping cyber superpower

A Romanian inmate hacks his prison’s IT system, hackers leak the data of DHS and DOJ employees, classified material was stolen from John Bolton’s AOL account and authorities seize a SIM farm in Latvia.

 
 
 Show notes
 
 
 Risky Bulletin: Prisoner hacks prison IT system, goes wild!

Risky Bulletin: Prisoner hacks his prison IT system, goes wild!

In this sponsor interview, Edward Wu, CEO and founder of Dropzone AI talks to Tom Uren about a study that measured how AI practically helps SOC analysts triage real-world problems. Analysts were faster, more accurate and got less tired with AI assistance. Edward thinks the technology won’t replace human analysts, but will speed their skill development.

 
 
 Show notes
 
 
 The Cloud Security Alliance AI SOC study

Risky Bulletin: F5 says an APT stole source code, vulnerability reports

Redis patches a remote code execution vulnerability, Oracle out-of-band-fixes a zero-day used in a recent extortion campaign, Medusa ransomware group was behind a recent Fortra zero-day, and India fixes a tax filing system flaw;

 
 
 Show notes
 
 
 Risky Bulletin: Redis vulnerability impacts all versions released in the last 13 years

Risky Bulletin: Redis vulnerability impacts all versions released in the last 13 years

Lyt når som helst, hvor som helst

Other podcasts you might like ...