app_store_button

google_play_button

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

Russia fines 33 telcos for surveillance non-compliance, AVCheck admin is arrested in Amsterdam, Poland repels an attack on its power grid, and voice cloning defenses can be bypassed.

 
 
 Show notes
 
 
 Risky Bulletin: Voice cloning defenses still weak, can be bypassed

Risky Bulletin: Russia fines 33 telcos for surveillance non-compliance

In this edition of Between Two Nerds Tom Uren and The Grugq about the role of cyber operations in the US capture of Venezuela’s president Nicolas Maduro.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Maduro's fall puts US cyber power in the spotlight
 
 Trump suggests US used cyberattacks to turn off lights in Venezuela during strikes
 
 Venezuela strike marks a turning point for US cyber warfare
 
 Power outages, but not cyber (from Oleg Shakirov)
 
 NYTimes Inside 'Operation Absolute Resolve'
 
 Spec Ops by William McRaven

Between Two Nerds: Lights out!

The Apex Legends game is hacked again, data about 17 million Instagram users put up for sale, Indonesia blocks X over pornographic content, and a ransomware attack hits major Chilean energy provider

 
 
 Show notes
 
 
 Risky Bulletin: Apex Legends streamers hacked again

Risky Bulletin: Apex Legends streamers hacked again

In this Risky Business News sponsored interview the CEO and founder of Prowler, Toni de la Fuente, explains how implementing AI systems brings new security challenges that differ for traditional cloud workloads. Toni also talks about ‘attack paths’ in the context of cloud infrastructure and using them to minimise risk.

 
 
 Show notes

Risky Bulletin: Belarus deploys spyware on journalists' phones

Tom Uren and Patrick Gray talk about America’s increasing dependence on Chinese manufacturers for electrical sector equipment. This doesn’t seem like a good idea when China is hacking electric utilities for sabotage and PLA researchers are dreaming up ways to attack the grid.

They also discuss the possibility that the US was responsible for a cyber attack on Venezuela’s state oil company and how Russian state-backed hacktivism is so dumb.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: Like Huawei, but for electricity

Most smart devices run outdated web browsers, Ukrainian hacktivists breach a major Russian defense contractor, ransomware hits Venezuela’s state-owned oil company, and hackers are trying to extort PornHub with stolen user data.

 
 
 Show notes
 
 
 Risky Bulletin: Most smart devices run outdated web browsers

Risky Bulletin: Most smart devices run outdated web browsers

In this edition of Between Two Nerds Tom Uren and The Grugq talk to Hamid Kashfi, CEO and founder of DarkCell, talk about the Iranian cyber espionage scene.

Kashfi talks about how the regime once forced people to hack and crushed the domestic security research scene. He describes how and why the government has changed its approach and is now reaping the rewards of improved Iranian capabilities.

This episode is available on Youtube.

 
 
 Show notes
 
 
 The "Mossad or not" threat model by James Mickens
 
 Shamoon wiper
 
 iLO rootkit

Between Three Nerds: The evolution of Iranian cyber espionage

Russia is hiring African freelancers for disinformation campaigns, the US is preparing to let contractors run offensive cyber operations, Germany blames Russia for the hack of its air traffic control agency, and Apple patches two WebKit zero-days.

 
 
 Show notes
 
 
 Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns

Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns

In this sponsored interview Casey Ellis is joined by Push Security’s Field CTO, Mark Orlando. They chat about the ways that browser-based attacks are evolving and how Push Security is finding and cataloging them.

 
 
 Show notes
 
 
 ConsentFix: Analysing a browser-native ClickFix-style attack that hijacks OAuth consent grants
 
 Introducing our guide to phishing detection evasion techniques

Risky Bulletin: Router APIs abused to send SMS spam

Lyt når som helst, hvor som helst

Other podcasts you might like ...