App Store

Google Play

SE - Details page - Device banner - 894x1036

Kliv in i en oändlig värld av stories

Lyssna när som helst, var som helst

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

Mobile browsers patch a passkey phishing vector, researchers find undocumented commands in a common IoT chip, the US government cuts election security funding, and a hacker steals – and then returns – funds from DeFi platform 1inch.

 
 
 Show notes

Risky Bulletin: Major browsers patch passkey phishing flaw

In this edition of Between Two Nerds Tom Uren and The Grugq talk about what Europe should do given that US security guarantees are evaporating. Should Europe grow its cyber capabilities, what it would get out of it and how should it go about doing it?

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Zero Day on the Trump Administration order that US Cyber Command stand down it's Russian cyber operations

Between Two Nerds: A European cyber command

A Pro Palestinian group claims credit for the X DDoS, CISA gets a new director as DOGE fires its red teams, and Asian scam compounds keep growing.

 
 
 Show notes

Risky Bulletin: Pro-Palestinian hacktivists claim X DDoS

Tom Uren and Patrick Gray discuss how X is actively engaging in political interference outside the US. The risks mirror those of TikTok. American legislators moved against TikTok because it could potentially be a powerful tool for the Chinese government to interfere with American political discourse. X is a realised threat, not a potential one, so we expect that foreign governments will start to consider a ban.

They also explore why mass firing of probationary employees in NSA and intelligence agencies is particularly damaging.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: Outside America, Musk's X is a foreign influence threat

The FBI warns of online file converters that distribute malware, China backdoors Juniper router, a wave of ransomware hits Taiwan, and North Korean spyware slips into the Play Store.

 
 
 Show notes

Risky Bulletin: FBI says online file converters are nasty

A GitHub supply chain attack leaks secrets, the White House tells federal agencies to stop firing cyber staff, Germany exempts cybersecurity from debt limits, and the RCS standard adds support for end-to-end encryption.

 
 
 Show notes

Risky Bulletin: GitHub supply chain attack leaks secrets

In this Risky Bulletin sponsor interview Matt Muller, field CISO of Tines, explains how governments are using carrots and sticks to improve the security of enterprise software. Matt discusses CISA’s ‘Secure by Design’ pledge and the UK NCSC’s effort to quantify ‘unforgivable bugs’

 
 
 Show notes

Between Two Nerds: Sowing discord by being nice!

Google buys Wiz for $32 billion, China attributes the Poison Ivy APT group to the Taiwanese Military, APT groups abuse a Windows zero-day and a judge tells CISA to reinstate fired workers.

 
 
 Show notes

Risky Bulletin: Google buys Wiz for $32 billion

Tom Uren and Patrick Gray discuss how China’s Ministry of State Security is increasingly doxxing and threatening Taiwanese APT operators. In some ways this mirrors the US strategy of naming and shaming Chinese cyber operators in indictments that contain lots of supporting information. But although MSS statements are filled with propaganda rather than technical detail, naming Taiwanese military hackers has some bite.

They also discuss Russia’s ‘shadow war’ sabotage campaign across Europe. The Russian campaign mostly relies on traditional sabotage and finding local proxies to throw bombs. But it does make sense for Western governments to respond with destructive cyber operations.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 CSIS report on Russia's 'Shadow War'

Srsly Risky Biz: China's MSS gets personal

Law enforcement takes down the DanaBot and Lumma Stealer malware operations, the US government wants a centralized data broker platform, Turkey dismantles a Chinese IMSI catcher spy ring, and Russia hacked border cameras to track Ukrainian military aid.

 
 
 Show notes

Risky Bulletin: DanaBot and Lumma Stealer taken down

Lyssna när som helst, var som helst

Andra podcasts som du kanske gillar...