Risky Business Podcast

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• “Shields Up” advice is now provably meaningless
• Russia to ditch offshore comms apps like WhatsApp
• Evil Corp’s Lockbit sanctions evasion attempt backfires
• Binance is a cesspit of shady financial dealings
• Apple’s passkey release foreshadows FIDO mass adoption
• Much, much more

This week’s sponsor interview is about Elastic’s teardown on some really interesting APT linux malware called BPFdoor. Jake King and Colson Wilhoit joined the show for that interview.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• The msdt/office lolbinapalooza
• Microsoft to introduce sensible defaults to Azure
• Twitter fined $150m for sms 2fa spam
• It turns out npm got owned in that Heroku/Travis CI thing
• AWS cred-stealing supply chain attack was research your honour, I swear!
• Much, much more

We’ll be chatting with Airlock Digital co-founder and CTO Daniel Schell in this week’s sponsor interview. He’ll be walking us through some of his own research into how to own Microsoft boxes via document-embedded office add-ins.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Conti’s war against Costa Rica
• DoJ revises CFAA guidance
• Naughty kids get access to DEA portal
• A look at a Russian disinfo tool
• PyPI and PHP supply chain drama
• Much, much more

This week’s show is brought to you by Thinkst Canary. Its founder Haroon Meer will join us in this week’s sponsor interview to talk about what might happen to infosec programs now the world economy is getting all funky.

The following is a sample of our latest podcast, Risky Business News, which is published into a new RSS feed. It’s a short podcast published three times a week that updates listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu. You can find the newsletter version of this podcast here.

In this Soap Box edition of the show Proofpoint’s EVP of Cybersecurity Strategy Ryan Kalember joins host Patrick Gray to talk about why some security spending is just misguided. So much of the infosec industry is geared towards protecting organisations against exotic threats when, really, the trifecta of ransomware, BEC and staff being careless with data are the thing that will sink them.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Spanish PM’s phone infected by Pegasus
• Microsoft drops Ukraine research report
• We can’t make heads or tails out of the FBI’s transparency report
• France hit with coordinated fibre sabotage campaign
• Why Musk’s algorithm pledge is meaningless
• Much, much more

This week’s sponsor interview is with ExtraHop Networks’ CEO Patrick Dennis. He’s joining us this week to talk about how you can turn “Shield’s Up!” advice into something actionable.

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Israel Ministry of Defence is denying a lot of spyware export licences
• Private detective in New York pleads guilty over BellTroX shenanigans
• Scammers enrol stolen credit cards into Apple Pay
• The Blackcat ransomware crew is very active right now
• VirusTotal shells lol
• Much, much more

This week’s sponsor interview is with Okta’s Brett Winterford, who talks in detail about the company’s brush with the Lapsus$ hacking crew. It’s unusual for a sponsor interview to be a must listen, but here we are.

On this week’s show Patrick Gray, Adam Boileau and Dmitri Alperovitch discuss the week’s security news, including:

• Ukraine foils Russian ICS hack
• US Government burns someone’s ICS toolkit
• China gets all up in India’s energy gridz
• The Heroku/Hithub/Travis CI story is very confusing
• US DOJ removes GRU malware from Watchguard boxes under Rule 41
• North Korea behind $540m crypto hack
• Much, much more

This week’s sponsor interview is with Scott Kuffer, co-founder of Nucleus Security, and Jared Semrau of Mandiant. They’ll be joining us to talk about how you can now plug Mandiant data into the Nucleus vulnerability scan aggregator.

Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.

We’ll hear from three vendors in this edition of Snake Oilers:

• Kevin Kennedy from Vectra talks about the company’s cloud native detection – it crunches stuff like CloudTrail and AzureAD logs and correlates it with network event information
• Paul McCarty from SecureStack on its software composition analysis and “SBOM plus” tool
• Google Cloud’s Anton Chuvakin talks about cloud-based SIEMs like Chronicle

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• Why Spring4Shell isn’t all hype
• How Viasat actually got owned
• Russian war crimes likely extend to coercing sysadmis
• Why lighter fluid and a box of matches is more effective than cyber in Belarus
• Much, much more

This week’s sponsor interview is with Bernard Brantley, Corelight’s Chief Information Security Officer.

Corelight makes a network sensor you can use to plug in to your SIEM, among other things. It’s based on Zeek, the open source network sensor that Corelight maintains. Corelight is absolutely the industry standard for this sort of thing.

And they’ve just become the standard for something else, too: Microsoft Defender for IoT can now accept Corelight feeds. Bernard fills us in on that.