Risky Business

Risky Business #693 -- Hive takedown is the beginning, not the end Feb 01, 2023

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

A look at the Hive takedown
UK’s Royal Mail still struggling
GitHub’s code signing certificates stolen
TSA misses the point on no-fly list theft
Much, much more

This week’s show is brought to you by Remediant, which is now a part of Netwrix.

Tim Keeler is co-founder of Remediant and joins us to talk about how the PAM market – and the tech that makes it up – is changing.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Risky Biz Soap Box: Tools alone won't solve your vuln management problems Jan 25, 2023

In this Soap Box edition of the show Nucleus Security’s Scott Kuffer discusses Stakeholder-Specific Vulnerability Categorization (SSVC) and why tools alone can’t fix a dysfunctional vulnerability management program.

Risky Business #692 -- Google search results spew malware, phishing sites Jan 25, 2023

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Google’s search results have become a malware-riddled sh*tshow
Ransomware payment values dropped by 40% YoY in 2022
Kraken takes over Solaris the old school way
Grand Theft Auto RCE is wreaking havoc
ManageEngine customers are all getting owned
So you know, pretty much business as usual

This week’s show is brought to you by Kroll.

Jim Hung co-leads the special projects and applied research team at Kroll and joins us to talk about the big changes happening in the incident response discipline.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Risky Business #691 -- LockBit and "Pablo Escobar syndrome" Jan 18, 2023

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Royal Mail attack was LockBit and GCHQ will probably “bust some heads”
CircleCI’s incident report and the problem with malwared endpoints in the Zero Trust age
Cloudflare backs Mastodon
Paul Nakasone: NSA did some great stuff! It was really good!
Cisco won’t patch SMB routers sold in 2020
Much, much more

This week’s show is brought to you by Material Security. Material co-founder Ryan Noon and Snowflake’s head of cybersecurity strategy Omer Singer are this week’s sponsor guests.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Risky Business #690 -- 2023 will be a rough year for critical online services Jan 11, 2023

On this week’s show Patrick Gray and Adam Boileau discuss the news we missed while on break. Because it’s the first show of the year, we split the discussion into themes:

Attacks against critical online services like Okta, CircleCI, Slack and Lastpass will increase in volume
All the latest global intrigue, from NSO being noped by the US Supreme Court to DDoS attacks in Serbia, Turla’s latest campaign, supply chain attacks against Ukraine, why Russia has been more active than we realised and much more
A ransomware wrap, a discussion about the rise of data extortion and why it’s unlikely to remain a huge problem
Why automotive security research will actually be interesting this year
PLUS: A bunch of random news!

This week’s show is brought to you by Trail of Bits. Dan Guido is this week’s sponsor guest and he joins us to talk about something they’ve developed – a zero knowledge proof of exploit technique. Very interesting stuff!

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Risky Business #689 -- FBI baulks at Apple's iCloud encryption push Dec 14, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Apple to introduce user-encrypted backups, FBI is sad
Twitter ices e2ee plans for DMs
RackSpace is getting sued over its hosted Exchange ransomware incident
Dodgy driving: Microsoft signs some shady stuff
Japan to change laws, release the Shibas
A look at the US NDAA
Much, much more

This week’s show is sponsored by Obsidian Security. Obsidian co-founder Ben Johnson joins the show this week to talk through SaaS configuration security and visibility/monitoring.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Risky Biz Soap Box: Attack Path Management is the New Hotness Dec 13, 2022

In this sponsored podcast Patrick Gray and Ryan Kalember talk about Proofpoint’s acquisition of Illusive, a company that started off in the “deception” space and then moved towards doing attack path analysis and management.

Show notes

Proofpoint Signs Definitive Agreement to Acquire Illusive

Risky Business #688 -- APT41 pickpockets Uncle Sam Dec 07, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Samsung, LG Android signing keys pinched
LastPass gets owned again
APT41 steal covid relief money
Amnesty International hacked in Canada
Much, much more

This week’s show is brought to you by Airlock Digital. Its CEO and CTO join host Patrick Gray this week to talk about admin to kernel as a security boundary, and the limitations of kernel driver blocklists.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Risky Business #687 -- Shady deeds in sunny places: Ransomware smashes Vanuatu, Guadeloupe Nov 30, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

UK, USA ban Chinese security cameras
What is the Boa webserver and why is it everywhere?
Vanuatu, Guadeloupe smashed by ransomware
REvil back with more dumps despite ASD attention
Much, much more

This week’s sponsor guest is Jake King from Elastic Security, who joins us to talk through the company’s most recent threat report. There’s a link to the report in our show notes.

Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that’s your thing.

Show notes

Risky Business #686 -- White House to move on spyware industry Nov 23, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Half of all UK COBRA meetings are ransomware related
Ransomware biggest risk to US port security
White House to move on spyware industry
EU to launch its own Starlink equivalent
Much, much more

AttackIQ’s Jonathan Reiber will be joining us in this week’s sponsor interview to talk about how companies and their boards are really moving towards outcomes-based security programs.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Show notes

Risky Biz Soap Box: How to get your developers invested in security Nov 21, 2022

In this podcast we speak with Randall Degges who leads the Developer Relations & Community team at Snyk. He’s here to talk to us about how to get developers enthusiastic about security, how to get them to use the right tooling, and how this tooling will evolve in the future to actually help developers fix bugs in their code.

Show notes

The Big Fix | Snyk

Risky Business #685 -- Australia releases the hounds, and it might just work Nov 16, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Australia lets ASD loose on ransomware crews, but will it work? (Tom Uren joins us to chat about this one)
Twitter’s wheels haven’t fallen off yet but they sure are wobbling
Hundreds of millions stolen from FTX mid implosion
Security researchers start looking at Mastodon and… yeah
Much, much more!

This week’s show is brought to you by Gigamon. George Sandford from Gigamon pops in for this week’s sponsor interview to talk about how to successfully stand up an NDR program.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Show notes

Risky Business #684 -- DoJ seizes 50,000 stolen bitcoins from popcorn tin Nov 09, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

DoJ seizes 50k bitcoin stolen from Silk Road, charges thief
Australian health insurer Medibank refuses to pay ransom, data leaked
Inside Qatar’s $386m world cup espionage operation
EU Parliament report into spyware lands
SolarWinds settles shareholder lawsuit, faces SEC enforcement action
Much, much more

This week’s sponsor guest is Andrew Morris from Greynoise Intelligence.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Show notes

Risky Business #683 -- OpenSSL bug is a fizzer, ASD responds to Medibank hack Nov 02, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Twitter bluechecks face phishing barrage
Australian government goes berserk on Medibank hack response
Former WSJ journalist sues law firm over email hack and info op that got him fired
OpenSSL bug lands with a whimper
Apple macOS Ventura update breaks security tools
Much, much more

This week’s show is brought to you by Thinkst Canary. Marco Slaviero, Thinkst’s head of engineering, joins us this week to talk through the company’s latest release, codenamed Quokka.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Show notes

Snake Oilers: Truffle Security, KSOC and Snyk Oct 19, 2022

Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.

We’ll hear from three vendors in this edition of Snake Oilers:

Truffle Security talks secrets discovery
KSOC builds Kubernetes security tools
Snyk has a new product to better secure Infrastructure as Code

Show notes

Snake Oilers: Tines, Code42 and Kroll Oct 14, 2022

Snake Oilers isn’t our regular weekly podcast, it’s a wholly sponsored series we do at Risky.Biz where vendors come on to the show to pitch their products to you, the Risky Business listener. To be clear – everyone you hear in one of these editions, paid to be here.

We’ll hear from three vendors in this edition of Snake Oilers:

Tines, the no code security automation solution that people are going absolutely nuts over
Code42, the insider threat detection solution maker
Kroll talks about its MDR offering

Risky Business #682 -- Starlink goes dark on Ukraine's front line Oct 12, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Why former Uber CISO Joe Sullivan’s guilty verdict shouldn’t worry you
United States puts chipmaking restrictions on China, APT activity is coming
Elon blinks and Starlink goes dark on Ukraine’s front line
Master cyber criminal arrested in Australia
Much, much more

This week’s show is brought to you by runZero, the asset inventory and network visibility solution. runZero’s founding CTO and industry legend HD Moore is this week’s sponsor guest.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Show notes

Risky Business #681 -- It's Exchangehog Day Oct 05, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

More Exchange 0days cause more havoc
A look at some earlier Exchange hack incidents
How the CIA got its agents killed with its truly awful online opsec
Ex NSA staffer arrested for espionage
Much, much more

This week’s show is brought to you by Proofpoint. Ryan Kalember, Proofpoint’s EVP of cybersecurity strategy, joins the show this week to talk about some overlooked detection opportunities – some simple stuff you can look for in your environment that should raise gigantic flashing red flags.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Show notes

Risky Biz Soap Box: Why Microsoft's Smart Application Control is very strange Sep 29, 2022

In this Soap Box podcast Patrick Gray interviews Airlock Digital CTO Daniel Schell and CEO David Cottingham about Microsoft’s new Smart Application Control feature, why controlling browser extensions via endpoint instrumentation is really hard and why PAM solutions don’t actually do allowlisting, even if they claim they do.

Risky Business #680 -- Uber, Rockstar Games hacker arrested Sep 28, 2022

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

Lapsus$’s Teapot arrested by UK police
Optus hacker issues grovelling apology after feeling AFP and ASD heat
Ukraine claims Russia is planning massive attacks on its infrastructure
RSOCKS bot herder begs for extradition to USA
Russians scammed when seeking military service exemptions
Much, much more

This week’s show is sponsored by Votiro. Ravi Srinivasan, Votiro’s CEO, joins the show this week to talk about how people are using content disarm and reconstruction.

Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.