App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether the cyber industry and intelligence agencies focus too much on technical details and ignore the bigger picture.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Director-General ASIO speech on Counting the Cost of Espionage

Between Two Nerds: Cyber myopia

Academics develop a 5G downgrade attack, ransomware hits car salvage yards across North America, multiple VPN apps share the same hardcoded password, and Bangladesh spent $190 million on hacking and surveillance tools.

 
 
 Show notes
 
 
 Risky Bulletin: Academics pull off novel 5G attack

Risky Bulletin: Academics pull off novel 5G attack

An HTTP-2 vulnerability enables DDoS attacks, Russia blocks Telegram and WhatsApp voice calls, attackers abuse a zero-day in N-able servers, and the US government is adding trackers to chip shipments.

 
 
 Show notes
 
 
 Risky Bulletin: MadeYouReset vulnerability enables unlimited HTTP/2 DDoS attacks

Risky Bulletin: HTTP2 flaw enables massive DDoS attacks

Tom Uren and Amberleigh Jack talk about a recent hack of the US courts document management system. It’s about as bad as can be, with multiple threat actors including states and possibly even drug cartels rummaging around in there, possibly for years.

They also discuss Microsoft’s involvement in an Israeli surveillance system and the head of Australia’s security organisation’s blunt warning about espionage.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: Drug cartels are the new APTs

Russia suspected of hacking a US Court system, researchers break the DarkBit ransomware’s encryption, a new attack can leak sensitive data from AMD processors, and a brute-force campaign targets Fortinet devices.

 
 
 Show notes
 
 
 Risky Bulletin: Crypto-thieves turn their sights to Open VSX

Risky Bulletin: Russia suspected of US Courts hack

A security researcher scores $250,000 for a Chrome bug, WinRAR patches another zero-day, new vulnerabilities found in the Tetra communications protocol, and a researcher gains access to Microsoft’s internal network for fun… and no profit.

 
 
 Show notes
 
 
 Risky Bulletin: Researcher scores $250,000 for Chrome bug

Risky Bulletin: Researcher scores $250,000 for Chrome bug

In this Risky Business News sponsor interview Tom Uren talks to Derek Hanson, Yubico’s Field CTO about making account recovery and onboarding for employees phishing-resistant. They also discuss the problems and opportunities of syncable passkeys.

 
 
 Show notes

Risky Bulletin: CISA tells federal agencies to mitigate on-prem-to-cloud Exchange attack

Russian companies must migrate to domestic ERP systems, Ohio’s public sector will have to approve ransom payments in public, Chanel and Cisco disclose data breaches, and a Thai hospital gets fined over the the dumbest data breach ever.

 
 
 Show notes
 
 
 Risky Bulletin: Russia to designate ERPs as "critical information infrastructure"

Risky Bulletin: Russia's war on foreign software continues

In this edition of Between Two Nerds Tom Uren and The Grugq dissect the Belarusian Cyber Partisans hack of Russian airline Aeroflot. Despite the short-term impact, the airline will likely bounce back quite quickly. But it is still a big win for the Cyber Partisans.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 The Belarusian Cyber Partisans post on the hack
 
 Meduza's analysis of the hack's aftermath

Sponsored: The phishing-resistant employee

Lyt når som helst, hvor som helst

Other podcasts you might like ...