- wöchentlichErscheinungsrhythmus
- 59 mintypische Länge
- vor 3 Tagenletzte Folge
Folgenzu den neuesten
Risky Business #813 -- FFmpeg has a point
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • We love some good vulnerability reporting drama, this time FFmpeg’s got beef with Google • OpenAI announces its Aardvark bug-gobbling syst
Risky Business #812 -- Alleged Trenchant exploit mole is ex-ASD
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • L3Harris Trenchant boss accused of selling exploits to Russia once worked at the Australian Signals Directorate • Microsoft WSUS bug being
Risky Business #811 -- F5 is the tip of the crap software iceberg
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • China has been rummaging in F5’s networks for a couple of years • Meanwhile China tries to deflect by accusing the NSA of hacking its nati
Wide World of Cyber: A deep dive on the F5 hack
In this edition of the Wide World of Cyber podcast Patrick Gray talks to Chris Krebs and Alex Stamos about the F5 incident. They talk about what happened, whether it’s a big deal, and why private equity ownership of mid-tier cybersecurity c
Risky Biz Soap Box: Why Mastercard is scaling its cybersecurity business
In this sponsored Soap Box edition of the Risky Business podcast, host Patrick Gray chats with Mastercard’s Executive Vice President and Head of Security Solutions, Johan Gerber, about how the card brand thinks about cybersecurity and why i
Risky Business #810 -- Data extortion attacks have a silver lining
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • FBI intervenes in Scattered Spider Salesforce leaksite • Clop loots Oracle E-Biz deployments • Plus so much more data extortion.. At least
Snake Oilers: Realm Security, Horizon3 and Persona
In this edition of the Snake Oilers podcast, three vendors pop in to pitch you all on their wares: • Realm Security (https://realm.security/riskybiz/): A security focussed, AI-first data pipeline platform • Horizon3 (https://horizon3.ai/):
Risky Business #809 -- Hackers try to pay a journalist for access to the BBC
On this week’s show Patrick Gray is on holiday so Amberleigh Jack and Adam Boileau hijack the studio to discuss the week’s cybersecurity news, including: • Hackers learn that trying to coerce a journalist just makes for … a great story? • A
Risky Business #808 -- Insane megabug in Entra left all tenants exposed
On this week’s show Patrick Gray and special guest Rob Joyce discuss the week’s cybersecurity news, including: • Secret Service raids a SIM farm in New York • MI6 launches a dark web portal • Are the 2023 Scattered Spider kids finally getti
Risky Business #807 -- Shai-Hulud npm worm wreaks old-school havoc
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Shai-Hulud worm propagates via npm and steals credentials • Jaguar Land Rover attack may put smaller suppliers out of business • Leaked da
Risky Biz Soap Box: runZero shakes up vulnerability management
In this sponsored Soap Box edition of the Risky Business podcast, industry legend HD Moore joins the show to talk about runZero’s major push into vulnerability management. With its new Nuclei integration, runZero is now able to get a very a
Risky Business #806 -- Apple's Memory Integrity Enforcement is a big deal
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Apple ruins exploit developers’ week with fresh memory corruption mitigations • Feross Aboukhadijeh drops by to talk about the big, dumb n
Snake Oilers: Nebulock, Vali Cyber and Cape
In this edition of the Snake Oilers podcasts, three vendors pop in to pitch you all on their wares: • Automated, AI-powered threat hunting with Nebulock (https://nebulock.io/) Damien Lewke from Nebulock joins the show to talk about how its
Risky Business #805 -- On the Salesloft Drift breach and "OAuth soup"
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • The Salesloft breach and why OAuth soup is a problem • The Salt Typhoon telco hackers turn out to be Chinese private sector, but state-dir
Risky Business #804 -- Phrack's DPRK hacker is probably a Chinese APT guy
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Australia expels Iranian ambassador • Hackers sabotage Iranian shipping satcoms • APT hacker got doxxed in Phrack. Kind of. They’re probab
Wide World of Cyber: Microsoft's China Entanglement
The Wide World of Cyber podcast is back! In this episode host Patrick Gray chats with Alex Stamos and Chris Krebs about Microsoft’s entanglement in China. Redmond has been using Chinese engineers to do everything from remotely support US Do
Risky Business #803 -- Oracle's CSO Mary Ann Davidson quietly departs
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Oracle’s long term CSO departs, and we’re not that sad about it • Canada’s House of Commons gets popped through a Microsoft bug • Russia d
Risky Biz Soap Box: How to measure vulnerability reachability
In this Soap Box edition of the Risky Business podcast Patrick Gray chats with Socket founder Feross Aboukhadijeh about how to measure the reachability of vulnerabilities in applications. It’s great to know there’s a CVE in a library you’re
Risky Business #802 -- Accessing internal Microsoft apps with your Hotmail creds
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • CISA warns about the path from on-prem Exchange to the cloud • Microsoft awards a crisp zero dollar bill for a report about what a mess it
Risky Business #801 -- AI models can hack well now and it's weirding us out
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. Google security engineering VP Heather Adkins drops by to talk about their AI bug hunter, and Risky Business producer Amberleigh Jack makes her main sh
Soap Box: Why AI can't fix bad security products
In this Soap Box edition of the show Patrick Gray chats with the CEO of email security company Sublime Security, Josh Kamdjou. They talk about where AI is useful, where it isn’t, and why AI can’t save vendors from their bad product design c
Risky Business #800 — The SharePoint bug may have leaked from Microsoft MAPP
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • Did the SharePoint bug leak out of the Microsoft MAPP program? • Expel retracts its FIDO bypass writeup • The mess surrounding the women-only dating-
Risky Business #799 -- Everyone's Sharepoint gets shelled
Risky Biz returns after two weeks off, and there sure is cybersecurity news to catch up on. Patrick Gray and Adam Boileau discuss: • Microsoft tried to make outsourcing the Pentagon’s cloud maintenance to China okay (it was not) • She shell
Risky Biz Soap Box: Prowler, the open cloud security platform
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Toni de la Fuente, founder of open source multi-cloud security product Prowler. Toni explains how Prowler came to be, and how its journey followed his
Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • Australian airline Qantas looks like it got a Scattered Spider-ing • Microsoft works towards blunting the next CrowdStrike disaster • Changes are com
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • We roll our eyes over the “16 billion credentials” leak hitting mainstream news • Some interesting cyber angles emerge from the conflict in Iran • Op
Risky Business #796 -- With special guest co-host Chris Krebs
On this week’s show Patrick Gray and Adam Boileau are joined by special guest Chris Krebs to discuss the week’s cybersecurity news. They talk through: • Israeli “hacktivists” take out an Iranian state-owned bank • Scattered-spider and frien
Soap Box: AI has entered the SOC, and it ain't going anywhere
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Dropzone AI founder Ed Wu about the role of LLMs in the SOC. The debate about whether AI agents are going to wind up in the SOC is over, they’ve alread
Risky Business #795 -- How The Com is hacking Salesforce tenants
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • New York Times gets a little stolen Russian FSB data as a treat • iVerify spots possible evidence of iOS exploitation against the Harris-Walz campaig
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • Cyber firms agree to deconflict and cross-reference hacker group names • Russian nuclear facility blueprints gathered from public procurement website
