Podcast
Risky Bulletin
Hosted by Risky Business Media · EN
Regular cybersecurity news updates from the Risky Business team...
450episodes
Episodes
Newest firstAll episodes
Sponsored: Knocknoc built a Greynoise integration
May 1000:10:22Summary readyIn this sponsored interview Patrick Gray chats with Knocknoc CEO Adam Pointon about their Greynoise integration. Knocknoc allowlists network connections from users’ IPs after they’ve been through an SSO challenge. It’s great for protecting vulnerable or risky assets that your org has to connect to the internet. But what happens when one of your users tries to authenticate from a bad IP? You probably don’t want to add that one to your allowlist! Thanks to Knocknoc’s new Greynoise integration, you don’t have to! Show notes
SummaryRisky Bulletin: State sponsored group exploits Palo 0day
May 800:07:55Summary readyPalo Alto Networks patches a firewall zero-day, Google patches an Android remote takeover bug, Ivanti also patches one, and a leak exposes Russia’s spy and hacker school. Show notes Risky Bulletin: Google patches Android remote takeover bug
SummarySrsly Risky Biz: After Mythos, US government weighs AI regulation
May 700:22:32Summary readyTom Uren and James Wilson talk about the sudden drive to put regulation around the releases of new AI models because of their cyber security implications. A standardised approach is desirable, but clamping down too hard won’t achieve as much as might be hoped. Experts with older or even open models can get just as far as novices with the latest models. They also discuss Australia’s new Cyber Incident Review Board. It has been hamstrung and won’t be as successful as it could be because it can’t assign blame. This episode is also available on YouTube Show notes
SummaryRisky Bulletin: Targeted supply chain attack hits DAEMON Tools
May 600:08:48Summary readyThe DAEMON Tools website was hit in a targeted supply chain attack, Australia gets its own CSRB, the US arrests a wanted VOIP server hacker after 17 years, and Oracle switches to monthly security updates. Show notes Risky Bulletin: Extremely targeted supply chain attack hits DAEMON Tools
SummaryBetween Two Nerds: How AI will upset state cyber competition
Apr 1300:29:52Summary readyIn this edition of Between Two Nerds Tom Uren and The Grugq discuss how the rise of AI, which is very good at vulnerability and exploit development, will change the cyber security industry and competition between states. This episode is also available on YouTube Show notes The Grugq on X: People are freaking out about an impending flood of 0days Patrick Gray with former NSA and CIA cyber leaders
SummaryRisky Bulletin: France takes first steps to ditch Windows for Linux
Apr 1300:06:36Summary readyFrance prepares to ditch Windows for Linux, OpenAI was impacted by the Axios supply chain attack, Rockstar Games gets hacked again, and Adobe patches a reader zero-day. Show notes Risky Bulletin: France takes first steps to ditch Windows for Linux
SummarySponsored: Corelight Agentic Triage helps defenders stay ahead
Apr 1200:16:19Summary readyIn this sponsored interview, Corelight’s Senior Director of Product Management, Dave Getman, tells James Wilson how Corelight Agentic Triage helps defenders stay ahead of AI-powered attacks. Corelight makes NDR hardware that runs a heavily optimised version of the Zeek network monitoring tool. Corelight Agentic Triage integrates with EDR and other data sources, and helps defenders make sense of all the data that NDR can generate. Show notes
SummaryRisky Bulletin: FBI extracted Signal chats from iPhone notifications logs
Apr 1000:06:49Summary readyThe FBI extracted Signal chats from iPhone notifications logs, Los Angeles police data was leaked online, a former Meta employee is under investigation for downloading private photos, and an Adobe Reader zero-day is being exploited in the wild. Show notes Risky Bulletin: FBI extracted Signal chats from iPhone notifications logs
SummarySrsly Risky Biz: American diplomats to fight foreign propaganda... on X
Apr 900:19:17Summary readyTom Uren and Amberleigh Jack talk about the State Department taking to X to counter foreign propaganda. US Secretary of State Marco Rubio dismantled the State Department’s counter-propaganda office when he took charge, but it turns out that giving adversary states free reign online is a bad idea. They also discuss how America’s lawful intercept systems are high value targets for Chinese hackers. It’s a big deal that part of the FBI’s lawful intercept system has been breached and it is high time that the security of these systems was reviewed. This episode is also available on Youtube. Show notes
SummaryRisky Bulletin: Cybercrime losses passed $20 billion last year
Apr 800:08:12Summary readyCybercrime losses surpassed $20 billion last year, authorities disrupt a Russian router botnet that intercepted email logins, Iran hacks PLCs across the US, and exploitation hits ComfyUI and Flowise-AI-servers. Show notes Risky Bulletin: Cybercrime losses passed $20 billion last year
Summary