Risky Business News: Recent Episodes
risky.biz
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq examine how AI can help cyber criminals and scammers.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Red Canary Principal Readiness Engineer Gerry Johansen about the need to prepare IR plans in advance and why that’s just as important as the IR playbook itself.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren about proposed changes to the UK’s Investigatory Powers Act. Some pundits are saying the changes will clear the way for the government to prevent tech companies from rolling out security patches. They’re wrong.
They also look at a new Mandiant report that dives deeper into a recent Chinese group’s campaign that compromised Barracuda Email Security Gateways. The report provides a wonderful overview of the campaign.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq look at how asset inventory tools aren’t a substitute for knowing what a business values.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about how Ukraine has countered Russia’s cyber operations.
They also look at various initiatives the US government is taking to secure open source software and ask whether it is getting serious about FOSS.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq examine the history of CCTV hacking and what different groups they get out of these hacks.
In this Risky Business News sponsor interview Tom Uren talks to Dan Guido, CEO of Trail of Bits, about AI. Dan thinks AI technologies will be a “game changer”. But he also thinks the conversation around AI is not very sophisticated just yet.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq look at why ‘juice jacking’ is a forever fear even though its not a real-world threat.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this Risky Business News sponsor interview Tom Uren talks to Jacob Torrey, Thinkst’s Head of Labs. Jacob produces ThinkstScapes, a brilliant quarterly summary of the most interesting security research from around the world.
In this interview Jacob talks about his favourite research of this issue, why Thinkst invests the time and effort in producing ThinkstScapes and also talks about Thinkst Citation, a companion product that contains information about nearly 70,000 security talks going all the way back to 1993.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about how the Russian government is planning to alter databases to hide their spies from open source investigations. It’s a nice try, but we don’t think it will work.
They also look at contrasting stories that illustrate how law enforcement agencies can facial recognition technology responsibly, but can also royally screw things up.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq ask whether Chinese operations are becoming stealthier and why? Is it a top-down directive to be careful? Or do the operations themselves require more stealth?
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Tines co-founder and CEO Eoin Hinchy about how organisations can maximise the potential of their security teams during an economic downturn, with a concentration on why human error and burnout caused by excessive workloads on security teams can be a risk.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about how Microsoft’s lackadaisical cloud product security is attracting the ire of important politicians.
They also examine a presidential advisory board report into Section 702 collection and discuss why oversight in intelligence collection is important.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq look at the arguments against intellectual property theft and why there isn’t universal agreement that it should be prohibited.
In this Risky Business News sponsor interview, Catalin Cimpanu talks with GreyNoise founder and CEO Andrew Morris about the company’s vast network of honeypots, and how they’re preparing to take it to the next phase.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about draft US legislation that aims to stop law enforcement from circumventing the Fourth Amendment by simply buying data on US citizens. It’s a good move, but the overall data ecosystem needs broader reform.
They also discuss new reports into the ransomware ecosystem. There is both good news and bad news, but data gaps still make it difficult for policymakers to have a good handle on how to respond.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq look at when it makes sense for governments to invest in building their own secure phone
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Airlock Digital founders Daniel Schell and David Cottingham about vulnerable drivers, BYOVD attacks, and the problem with driver-based attacks.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about recent breaches of JumpCloud and Microsoft cloud services. It’s great they disclosed these incidents voluntarily, but cloud companies are so important that detailed postmortems shouldn’t be voluntary.
They also discuss the Biden administration’s cyber security strategy implementation plan and the opportunity to collect email destined for the US military by typo-squatting on the ‘.ml’ domain.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq look at the idea of actively shaping ransomware group behaviour to get the type of behaviour we’d prefer.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Kaitlyn Sawrey.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about Citizen Lab’s analysis of WeChat’s behaviour and its privacy policy. That report misses the point: WeChat is an integral part of the PRC’s architecture of censorship and repression, and the Chinese government isn’t constrained by WeChat’s privacy policy.
They also discuss a new report that proposes a human-centred framework for assessing client-side Child Sexual Abuse Material (CSAM) detection technologies. It’s a step forward because it makes clearer the tradeoffs that are being made when these technologies are suggested.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Scott Hanson, Head of Global Security Operations at Kroll, on how the company has adopted Detection-as-Code for its approach to writing, managing, and rolling out detection rules for its customers.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about the regular extradition battles that occur between the US and Russia whenever a Russian cybercriminal is arrested in a third country. It’s less about protecting cybercriminals and more about Russia trying to poke the USA in the eye.
They also discuss recent Ukrainian hacktivist operations that have been extremely successful, but also don’t seem to have had any really meaningful impact.
In this edition of Between Two Nerds Tom Uren and The Grugq look at the EU’s proposed media freedom act and how one of its goals is to protect journalists from spyware.
In this Risky Business News sponsor interview Tom Uren talks to RunZero’s CEO Chris Kirsch about how RunZero has evolved from an IT network active scanning product to one that can now discover assets on OT and cloud environments using both active and passive scanning approaches.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about the US Securities Exchange Commission warning SolarWinds executives that it is planning to bring enforcement actions against them. This is a big deal and really signifies that the SEC wants companies to be much more open about cybersecurity incident disclosures.
They also discuss the outcomes from a European law enforcement operation against the EncroChat ‘crimephone’. It was an absolutely stunning success, but what does it mean for the future of the access debate?
Show notes
- The boom, the bust and the adjust | by Maor Shwartz | Jun, 2023 | Medium
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about the PRC’s campaign compromising Barracuda Email Security Gateways. It doesn’t quite break international “norms”, but it is definitely on the nose.
They also discuss Albania’s police raid of an Iranian opposition refugee camp which is said to be hosting a hacking cell that targeted Iran’s government.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq look at three different state operations that have recently been outed and what these operations tell us about how these states are behaving.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this podcast Patrick Gray and Tom Uren talk about a new report examining how the US intelligence communities uses data it buys. It finds that data you can buy now rivals or exceeds what intelligence agencies can collect, but the IC overall doesn’t treat the data with the sensitivity and care that it deserves. Fixing IC policy is one thing, but that won’t help at all with foreign adversaries or even local US law enforcement. US needs good data privacy law that cleans up the whole field.
They also look at new research that examines how lawyers’ incentives to protect clients mean that incident response is hamstrung when it comes to discovering root causes and learning lessons.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq talk about the elements that make them think an operation is state-backed.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast click here.
In this podcast Patrick Gray and Tom Uren talk about why China and Russia are increasingly outing US cyber espionage operations and what they hope to get out of it. They also discuss a new documentary that reveals more information about some of ASD’s offensive cyber operations and and also looks at how the organisation helped track down the Bali bombers.
Description: A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast click here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast click here.
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Chris St. Myers, Threat Intelligence Lead at Stairwell, on the how the company Inception platform can be used for finding old or new threats that sometimes may go unnoticed.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.
You can find the newsletter version of this podcast click here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird. You can find the newsletter version of this podcast here.
In this podcast Patrick Gray talks to Tom Uren about US-China technological decoupling and the lack of an observable strategy so far. They also find that the use of geofence warrants in the Capital riot seems perfectly reasonable, and examine how Chinese twitter uses trying to find news about recent Covid protests are being deluged with spam. You can read the newsletter this podcast is based on here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird. You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq have some good news for a change — ransomware has peaked and they examine why criminals will look for different sources of income. Of course, every silver lining has a cloud, and ransomware will be replaced by other types of cyber crime.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird. You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.You can find the newsletter version of this podcast here.
In this podcast Patrick Gray talks to Tom Uren about which national security concerns around TikTok are actually the “real ones” in light of Christopher Wray’s congressional testimony last week. They also talk about changes to NSPM-13, the rules governing Cyber Command operations and the looming Executive Order on commercial spyware. You can read the newsletter this podcast is based on here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq examine some recommendations in a recent draft report from a European Parliament inquiry into the use of Pegasus and similar spyware. The report contains an interesting overview of the European spyware market but makes some recommendations that are not just ineffective but positively counterproductive — they’ll actually make the world a less safe place.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird. You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.You can find the newsletter version of this podcast here.
In this podcast Tom Uren interviews Google’s VP of Security Engineering Heather Adkins about what changed at Google after the infamous 2009 Aurora attacks.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: The spyware industry has found a cozy home in the EU
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: Microsoft says Chinese APTs used the most zero-days last year
What’s the point of having military cyber capability? It seems that states in the European Union don’t know either. In this edition of Between Two Nerds Tom Uren and The Grugq discuss why states in the EU are no good at military cyber operations.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: OPERA1ER group hits African banks for $30 million
In this podcast Patrick Gray talks to Tom Uren about the alleged hack of former UK Prime Minister Liz Truss’s smartphone by Russian intelligence services and what governments might be able to do to better protect politicians against similar hacks.
Show notes
- When Expediency Trumps National Security
REPOST: This podcast initially went out linking to the wrong audio recording. Apologies for the inconvenience.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.
You can find the newsletter version of this podcast here.
A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and presented by Claire Aird.
You can find the newsletter version of this podcast here.
In this edition of Between Two Nerds Tom Uren and The Grugq discuss why some states seem to favour small dispersed groups that are contractors rather than large centralised organisations like the NSA and GCHQ. Do they see positive benefits in that approach? Or do they use contractors out of necessity?
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast also features an appearance from Pearce Barry, principal security researcher at runZero, this episode’s sponsor.
Show notes
- Risky Biz News: Microsoft rolls out number matching to counter MFA push notification spam attacks
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast also features an appearance from Pearce Barry, principal security researcher at runZero, this episode’s sponsor.
Show notes
- Risky Biz News: Raccoon Stealer dev didn't die in Ukrainian war; he was arrested in the Netherlands
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show guests include Benoit Ancel, malware analyst at CSIS, and Pearce Barry, principal security researcher at runZero, this episode’s sponsor.
Show notes
- Risky Biz News: GitHub aflood with fake and malicious PoCs
In this edition of Between Two Nerds Tom Uren and The Grugq discuss internet giants such as Google, Amazon, Yandex and AliBaba and explore their relationships with the state.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: URSNIF goes from banking trojan to backdoor, dreaming of ransomware profits
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Sherrod DeGrippo, Proofpoint’s Vice President of Threat Research and Detection, this episode’s sponsor.
Show notes
- Risky Biz News: IRGC installed malware on phones of Iranian protesters following their arrest
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Sherrod DeGrippo, Proofpoint’s Vice President of Threat Research and Detection, this episode’s sponsor.
Show notes
- Risky Biz News: Russia is building a centralized video surveillance system
In this edition of Between Two Nerds Tom Uren and The Grugq discuss whether destructive cyber effects can be integrated effectively with tactical conventional warfare. There are some wrinkles: how do soldiers on the ground know what cyber ops can be used for, can you execute them fast enough and what can they even do anyway?
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: China does a funny and tries to pose as IntrusionTruth
In this edition of Seriously Risky Business Patrick Gray and Tom Uren talk about US President Joe Biden’s Executive Order on SIGINT collection and why Albania almost invoking Article 5 over a cyberattack probably isn’t a gigantic big deal.
Show notes
- Biden's SIGINT Executive Order Is Kafkaesque, but We Like It
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast also features an appearance from Robert Lipovsky, Principal Threat Intelligence Researcher at ESET.
Show notes
- Risky Biz News: White House working on cybersecurity labels for IoT products
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: LofyGang runs amok in the npm ecosystem with minimal gains
In this edition of Between Two Nerds Tom Uren and The Grugq talk about the idea of using the big cyber agencies to go after foreign criminals.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from David Cottingham, CEO of Airlock Digital, this episode’s sponsor.
Show notes
- Risky Biz News: Good news for the Capital One hacker, bad news for the former Uber CSO
In this episode of Seriously Risky Biz Patrick Gray and Tom Uren talk about the CIA’s catastrophically moronic covert communications system, the North Korean smartphone hacking scene and the significance of a Netwalker affiliate’s 20 year prison sentence.
Show notes
- Subscribe to the Seriously Risky Business Newsletter
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show guests include Itay Shohat, Director of Incident Response and Threat Hunting at Sygnia, and David Cottingham, CEO of Airlock Digital, this episode’s sponsor.
Show notes
- Risky Biz News: China blocks several protocols used to bypass the Great Firewall
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Daniel Schell, co-founder of AirLock Digital, this episode’s sponsor.
Show notes
- Risky Biz News: Interpol arrests scammers linked to Nigerian "Air Lords" crime syndicate
In this episode of Between Two Nerds Tom Uren talks to The Grugq about how large SIGINT organisations like NSA have limitations and are constrained in all sorts of ways.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show guests include Danny Adamitis, security researcher at Lumen’s Black Lotus Labs, and Pearce Barry, principal security researcher at runZero, this episode’s sponsor.
Show notes
- Risky Biz News: Twitch limits browser logins as it deals with massive bot attack
In this week’s edition of Seriously Risky Business Patrick Gray and Tom Uren talk about the Australian government’s response to the Optus hack, why Viasat was a massively significant attack despite a lack of clarity on how it affected battlefield communications, and how Germany’s late warning on Kaspersky software betrays larger problems with its strategic thinking.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast also features an appearance from Pearce Barry, principal security researcher at runZero (formerly Rumble Network Discovery), this episode’s sponsor.
Show notes
- Risky Biz News: Facebook exposes large network of (low quality) fake news sites pushing Russian propaganda
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features appearances from Pearce Barry, principal security researcher at runZero (formerly Rumble Network Discovery), this episode’s sponsor.
Show notes
- Risky Biz News: XakNet "hacktivists" linked to APT28 and Russia's GRU intelligence service
In this episode of Between Two Nerds Tom Uren talks to The Grugq about how Ukraine could make better use of its so-called “IT Army”.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Sherrod DeGrippo, Proofpoint’s Vice President of Threat Research and Detection, this episode’s sponsor.
Show notes
- Risky Biz News: EU data supervisor sues the EU and Europol for skirting data protection rules
In this week’s edition of Seriously Risky Biz Patrick Gray and Tom Uren talk about the new chaotic normal. Should policymakers abandon efforts to wind back the cyber chaos or should they start focussing more on how to adapt to it? They also talk about some research from the Atlantic Council into Chinese vulnerability disclosure rules and their effect on the pipeline of vuln information from China to other countries.
Show notes
- Seriously Risky Business
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: US Ransomware Task Force to go after ransomware top dogs
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: KiwiFarms discloses security breach, says user data may have been stolen
In this edition of Between Two Nerds Tom Uren and The Grugq talk about how SIGINT agencies in different regions have different cultures, and how these differences are rooted in the military traditions and hacker cultures of various countries.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast also features an appearance from Rafe Pilling, Senior Security Researcher at Secureworks.
Show notes
- Risky Biz News: Poland refuses to cooperate with the EU in spyware scandal
In this week’s edition of Seriously Risky Business Patrick Gray and Tom Uren talk about the important bits of Mudge’s disclosures about Twitter’s security practices and why the West’s response to Iran’s norm-shattering attacks on Albania matter.
Show notes
- Seriously Risky Business Substack
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast also features an appearance from Yael Kishon, cyber threat intelligence analyst at KELA.
Show notes
- Risky Biz News: Iranian hackers sure love their social engineering
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: Albania-Iran cyber drama far from over
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: Albania cuts diplomatic ties with Iran in first-ever cyber-related escalation
In this edition of Seriously Risky Business Patrick Gray and Tom Uren talk about the Albanian government’s decision to break off diplomatic ties with Iran in the wake of a wiper attack in July. They also weigh in on the Fog Reveal tool that sells mobile location data to law enforcement agencies via a pretty interface. They also discuss Cloudflare’s ridiculous hate speech policies.
Show notes
- Seriously Risky Biz Newsletter
In this podcast, Seriously Risky Business editor Tom Uren talks to The Grugq about how OSINT is making clandestine HUMINT very difficult these days.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: Encryption and privacy pioneer Peter Eckersley has died
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features appearances from Pearce Barry, principal security researcher at runZero (formerly Rumble Network Discovery), this episode’s sponsor.
Show notes
- Risky Biz News: Academics find a tiny crack in Apple's Private Relay
In this edition of Seriously Risky Business Patrick Gray and Tom Uren talk about why overt western propaganda is good, actually. They also talk about why western intelligence agencies should embrace the investigative methodologies pioneered by OSINT organisations like Bellingcat.
Show notes
- Seriously Risky Business | Substack
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features appearances from Pearce Barry, principal security researcher at runZero (formerly Rumble Network Discovery), this episode’s sponsor.
Show notes
- Risky Biz News: Greece tries to downplay its spyware scandal
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features appearances from Pearce Barry, principal security researcher at runZero (formerly Rumble Network Discovery), this episode’s sponsor.
Show notes
- Risky Biz News: Cybercrime groups got bored of RU/UA hacktivism
In this podcast, Seriously Risky Business newsletter author Tom Uren and espionage connoisseur The Grugq talk about why they hate the term cyberwar. What is it even supposed to mean?
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Sherrod DeGrippo, Proofpoint’s Vice President of Threat Research and Detection, this episode’s sponsor.
Show notes
- Risky Biz News: Rare pro-Western influence operation caught and exposed
This podcast is a discussion between Patrick Gray and Tom Uren on the big stories affecting people in cyber policy.
It’s based on the latest Seriously Risky Business newsletter, which you can find here.
Show notes
- Act of God or Act of Hacker, It's All the Same to Us
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Sherrod DeGrippo, Proofpoint’s Vice President of Threat Research and Detection, this episode’s sponsor.
Show notes
- Risky Business #675 -- The problem with Mudge's whistleblowing complaint
- Risky Biz News: Explosive whistleblower report exposes Twitter's shoddy security
Vitali Kremez, CEO of Advanced Intelligence, talks to Risky Business about the impending downfall of the Ransomware-as-a-Service ecosystem, as major ransomware gangs are slowly moving to corporate hack-steal-extort-or-leak schemes, with no encryption involved.
In this conversations, Vitali explains how the proliferation of backup solutions in recent years and the broad-spectrum sanctions imposed on Russia following its invasion of Ukraine have “negatively” impacted the ransomware landscape, where groups are having a hard time getting paid by companies that either have backups or don’t want to break sanctions by accident.
Show notes
- Graff Diamonds Sues Insurance for Losses After Paying $7.5M Ransom to Hackers
- Vitali's Twitter thread on the downfall of RaaS operations
In this podcast, Seriously Risky Business newsletter author Tom Uren and espionage connoisseur The Grugq discuss Predatory Sparrow’s remarkably responsible attacks.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: Bitcoin ATMs hacked
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Rob Pantazopoulos, Senior Security Researcher, Secureworks Counter Threat Unit.
Show notes
- Risky Biz News: Clarifying the "DOD can't use software with vulnerabilities" misunderstanding
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Dario Durando, Senior Mobile Malware Threat Analyst at ThreatFabric.
Show notes
- Risky Biz News: Programmers will need to learn to love MFA, even if they like it or not
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Show notes
- Risky Biz News: Is ransomware going after the Global South? Sure looks like it!
In this podcast, Seriously Risky Business newsletter author Tom Uren and espionage connoisseur The Grugq discuss why some APT crews have zero interest in maintaining secrecy in their operations.
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features appearances from Dan Lorenc, CEO and Founder of Chainguard, and Pearce Barry, principal security researcher at Rumble Network Discovery, this episode’s sponsor.
Show notes
- Risky Biz News: FIRST releases TLP v2.0
This podcast is a discussion between Patrick Gray and Tom Uren on the big stories affecting people in cyber policy.
It’s based on the latest Seriously Risky Business newsletter, which you can find here.
Show notes
- On Spyware, More Sanctions Please - by Tom Uren
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Pearce Barry, principal security researcher at Rumble Network Discovery, this episode’s sponsor.
Show notes
- Risky Biz News: Would a tax relief for SMBs improve cybersecurity postures and ransomware defenses?
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Pearce Barry, principal security researcher at Rumble Network Discovery, this episode’s sponsor.
Show notes
- Risky Biz News: Confluence servers under attack due to hardcoded password
This podcast is a discussion between Patrick Gray and Tom Uren on the big stories affecting people in cyber policy.
It’s based on the latest Seriously Risky Business newsletter, which you can find here.
Show notes
- Director of National Intelligence to Monitor Commercial Spyware Industry
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Daniel Schell, co-founder of AirLock Digital, this episode’s sponsor.
Show notes
- Risky Biz News: Microsoft puts the limelight on another spyware maker—DSIRF from Austria
A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.
You can find the newsletter version of this podcast here.
Today’s podcast features an appearance from Daniel Schell, co-founder of AirLock Digital, this episode’s sponsor.
Show notes
- Risky Biz News: Microsoft mitigates PPL exploit after four years