Podcast
Risky Bulletin
Hosted by Risky Business Media · EN
Regular cybersecurity news updates from the Risky Business team...
458episodes
Episodes
Newest firstAll episodes
Between Two Nerds: Lights out!
Jan 1200:27:58Summary readyIn this edition of Between Two Nerds Tom Uren and The Grugq about the role of cyber operations in the US capture of Venezuela’s president Nicolas Maduro. This episode is also available on Youtube. Show notes Maduro's fall puts US cyber power in the spotlight Trump suggests US used cyberattacks to turn off lights in Venezuela during strikes Venezuela strike marks a turning point for US cyber warfare Power outages, but not cyber (from Oleg Shakirov) NYTimes Inside 'Operation Absolute Resolve' Spec Ops by William McRaven
SummaryRisky Bulletin: Apex Legends streamers hacked again
Jan 1100:06:05Summary readyThe Apex Legends game is hacked again, data about 17 million Instagram users put up for sale, Indonesia blocks X over pornographic content, and a ransomware attack hits major Chilean energy provider Show notes Risky Bulletin: Apex Legends streamers hacked again
SummarySponsored: What AI workloads mean for Cloud security
Jan 1100:15:17Summary readyIn this Risky Business News sponsored interview the CEO and founder of Prowler, Toni de la Fuente, explains how implementing AI systems brings new security challenges that differ for traditional cloud workloads. Toni also talks about ‘attack paths’ in the context of cloud infrastructure and using them to minimise risk. Show notes
SummaryRisky Bulletin: Belarus deploys spyware on journalists' phones
Dec 1900:06:58Summary readyBelarus deployed spyware on journalists’ phones, a man is arrested for installing malware on a ferry, France arrests the hacker behind an Interior Ministry email server breach, and new Cisco and SonicWall zero-days. Show notes Risky Bulletin: Belarus deploys spyware on journalists' phones
SummarySrsly Risky Biz: Like Huawei, but for electricity
Dec 1700:19:17Summary readyTom Uren and Patrick Gray talk about America’s increasing dependence on Chinese manufacturers for electrical sector equipment. This doesn’t seem like a good idea when China is hacking electric utilities for sabotage and PLA researchers are dreaming up ways to attack the grid. They also discuss the possibility that the US was responsible for a cyber attack on Venezuela’s state oil company and how Russian state-backed hacktivism is so dumb. This episode is also available on Youtube. Show notes
SummaryRisky Bulletin: Most smart devices run outdated web browsers
Dec 1700:07:39Summary readyMost smart devices run outdated web browsers, Ukrainian hacktivists breach a major Russian defense contractor, ransomware hits Venezuela’s state-owned oil company, and hackers are trying to extort PornHub with stolen user data. Show notes Risky Bulletin: Most smart devices run outdated web browsers
SummaryBetween Three Nerds: The evolution of Iranian cyber espionage
Dec 1500:49:56Summary readyIn this edition of Between Two Nerds Tom Uren and The Grugq talk to Hamid Kashfi, CEO and founder of DarkCell, talk about the Iranian cyber espionage scene. Kashfi talks about how the regime once forced people to hack and crushed the domestic security research scene. He describes how and why the government has changed its approach and is now reaping the rewards of improved Iranian capabilities. This episode is available on Youtube. Show notes The "Mossad or not" threat model by James Mickens Shamoon wiper iLO rootkit
SummaryRisky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns
Dec 1500:07:51Summary readyRussia is hiring African freelancers for disinformation campaigns, the US is preparing to let contractors run offensive cyber operations, Germany blames Russia for the hack of its air traffic control agency, and Apple patches two WebKit zero-days. Show notes Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns
SummarySponsored: ConsentFix and Push Security's browser attack taxonomy
Dec 1400:19:36Summary readyIn this sponsored interview Casey Ellis is joined by Push Security’s Field CTO, Mark Orlando. They chat about the ways that browser-based attacks are evolving and how Push Security is finding and cataloging them. Show notes ConsentFix: Analysing a browser-native ClickFix-style attack that hijacks OAuth consent grants Introducing our guide to phishing detection evasion techniques
SummaryRisky Bulletin: EU has a problem attracting and retaining cyber talent
Dec 1200:09:22Summary readyThe EU has a problem attracting and retaining cyber talent, the CEO of Coupang resigns following the company’s security breach, Microsoft expands its bug bounty program to cover third party code, and Chrome and Gogs patch zero-days. Show notes Risky Bulletin: EU has a problem attracting and retaining cyber talent
Summary