Risky Business Podcast
May 07, 2025
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
Presented by
Technology Editor
CEO and Publisher
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:
- White House’s off-brand Israeli Signal fork logs cleartext messages with hard coded creds while getting hacked (twice). Just … Wow.
- Ransomware attacks on UK retailers are linked, and Marks & Spencer has it extra bad
- After six years dormant, a Magento eCommerce platform backdoor comes to life
- The North Korean IT worker scam is truly webscale
- NSO group owes Meta $168m for hacking WhatsApp
This week’s episode is sponsored by vulnerability management wranglers, Nucleus Security. Aaron Unterberger joins to talk through the complexities of tracking vulnerabilities in cloud components - left to the source, right to the deployments, and …sideways into the sidecars?
This week’s show also features an excerpt from Pat’s interview with Senator Mark Warner - Scoot back one in your podcast feed to check out the full chat, or find it on Youtube.
This episode is available on Youtube too.
Brought to you by Nucleus Security
Unified Vulnerability Management | Application Security
Show notes
Mike Waltz Accidentally Reveals Obscure App the Government Is Using to Archive Signal Messages
The Signal Clone the Trump Admin Uses Was Hacked
App used by Mike Waltz suspends services after hacking claims
Senator Demands Investigation into Trump Admin Signal Clone After 404 Media Investigation
Co-op DragonForce cyber attack includes customer data, firm admits
Co-op cyber attack: Staff told to keep cameras on in meetings
Hundreds of e-commerce sites hacked in supply-chain attack - Ars Technica
Microsoft’s new “passwordless by default” is great but comes at a cost - Ars Technica
Windows RDP lets you log in using revoked passwords. Microsoft is OK with that. - Ars Technica
North Korean operatives have infiltrated hundreds of Fortune 500 companies | CyberScoop
Trump proposes major cut to CISA’s budget, citing false ‘censorship’ claims | Cybersecurity Dive
NSO Group owes $168M in damages to WhatsApp over spyware infections, jury says | CyberScoop