Risky Business

De: Patrick Gray
  • Resumen

  • Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
    Copyright 2007-2024 Patrick Gray
    Más Menos
Episodios
  • Risky Business #759 – Why Iran's hack and leak will amount to naught
    Aug 14 2024
    On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news and recap the best research presented at Black Hat and DEF CON in Las Vegas last week. They cover: Iran tries an election hack’n’leak like its still 2016Crowdstrike takes home the Pwnie for Epic Fail at DEF CONUK healthcare SaaS faces six million pound fine for lack of MFAUS circuit courts disagree on geofence warrantsOur roundup of juicy Blackhat/DEF CON researchAnd much, much more. This week’s episode is sponsored by Trail of Bits. CEO Dan Guido is fresh back from the DARPA AI Cyber Challenge at DEF CON, where the Trail of Bits team moved through into the finals. Dan talks through the challenge of finding, reporting and fixing bugs with AI systems. You can also watch this week’s show on Youtube. Show notes Trump campaign points finger at Iranian hackers for documents leakFBI says it's investigating efforts to hack Trump and Biden-Harris campaignsIranian hackers ramping up US election interference, Microsoft warnsState Dept puts $10 million bounty on IRGC-CEC hackersCrowdStrike snafu was a ‘dress rehearsal’ for critical infrastructure disruptions, CISA director says | Cybersecurity DiveDominic White 👾 on X: "CrowdStrike accepting the @PwnieAwards for “most epic fail” at @defcon. Class act. https://t.co/e7IgYosHAE" / XRussia's Kursk region suffers 'massive' DDoS attack amid Ukraine offensiveElon Musk on X: "@markpinc Yeah" / XProgress Software says SEC declines to pursue action related to MOVEit exploitation spree | Cybersecurity DiveNHS software supplier Advanced faces £6m fine over ransomware attack failingsSecurity bugs in ransomware leak sites helped save six companies from paying hefty ransoms | TechCrunch5th Circuit rules geofence warrants illegal in win for phone users’ privacy | Ars TechnicaCustoms and Border Protection agents need a warrant to search your phone - The VergeHackers could spy on cell phone users by abusing 5G baseband flaws, researchers say | TechCrunch‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections | WIREDDowngrade Attacks Using Windows Updates | SafeBreachListen to the whispers: web timing attacks that actually work | PortSwigger ResearchBucket Monopoly: Breaching AWS Accounts Through Shadow ResourcesConfusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server! | DEVCORETrail of Bits Advances to AIxCC Finals | Trail of Bits Blog
    Más Menos
    1 h y 5 m
  • Soap Box: Making security tech more people friendly
    Aug 12 2024

    In this sponsored Soap Box edition of the show we talk to Proofpoint’s Chief Strategy Officer Ryan Kalember about making security tech more people centric.

    We often talk about how we can use signals from users to drive some of our security tech. But what about using our security tech to drive user behaviour?

    Ryan thinks there are some opportunities here, particularly around identity security.

    Más Menos
    35 m
  • Risky Business #758 – Crowdstrike's postmortem underwhelms
    Aug 7 2024

    On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

    • Crowdstrike talks loud in its postmortem, but says very little
    • Digicert fears the CA-Browser Forum, gets lawsuit from a customer
    • Dmitri Alperovitch joins the show to talk about the Russian prisoner swap
    • Cloudflare continues to harbour scum and villainy
    • Professional ransomware crew … is an improvement?
    • And much, much more.

    This week’s episode is sponsored by Thinkst Canary. Marko Slaviero joins to discuss the unfashionable choice they made in hosting their platform one-VM-per-customer.

    Show notes
    • CrowdStrike investors file class action suit following global IT outage | Cybersecurity Dive
    • CrowdStrike rebukes Delta’s negligence claims in fiery letter | Cybersecurity Dive
    • Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf
    • Sparks fly when lawyers meet a certificate revocation
    • crt.sh | Alegeus
    • U.S. releases Russian hackers in Evan Gershkovich prisoner swap
    • U.S. Trades Cybercriminals to Russia in Prisoner Swap – Krebs on Security
    • Who are the two major hackers Russia just received in a prisoner swap? | Ars Technica
    • Hackers remotely wipe 13,000 students’ iPads and Chromebooks after breaching safety software
    • Mobile Guardian Device Management Application to be removed | MOE
    • Ford wants patent for tech allowing cars to surveil and report speeding drivers
    • I'm Sorry, Dave, You're Speeding | WIRED
    • Cloudflare once again comes under pressure for enabling abusive sites | Ars Technica
    • Low-Drama ‘Dark Angels’ Reap Record Ransoms – Krebs on Security
    • Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say | TechCrunch
    • Unfashionably secure: why we use isolated VMs – Thinkst Thoughts
    • Defending AI Model Files from Unauthorized Access with Canaries | NVIDIA Technical Blog
    Más Menos
    53 m

Lo que los oyentes dicen sobre Risky Business

Calificaciones medias de los clientes
Total
  • 5 out of 5 stars
  • 5 estrellas
    1
  • 4 estrellas
    0
  • 3 estrellas
    0
  • 2 estrellas
    0
  • 1 estrella
    0
Ejecución
  • 5 out of 5 stars
  • 5 estrellas
    1
  • 4 estrellas
    0
  • 3 estrellas
    0
  • 2 estrellas
    0
  • 1 estrella
    0
Historia
  • 5 out of 5 stars
  • 5 estrellas
    1
  • 4 estrellas
    0
  • 3 estrellas
    0
  • 2 estrellas
    0
  • 1 estrella
    0

Reseñas - Selecciona las pestañas a continuación para cambiar el origen de las reseñas.