Player FM - Internet Radio Done Right
99 subscribers
Checked 15h ago
Đã thêm cách đây ba năm
コンテンツは Risky.biz によって提供されます。エピソード、グラフィック、ポッドキャストの説明を含むすべてのポッドキャスト コンテンツは、Risky.biz またはそのポッドキャスト プラットフォーム パートナーによって直接アップロードされ、提供されます。誰かがあなたの著作物をあなたの許可なく使用していると思われる場合は、ここで概説されているプロセスに従うことができますhttps://ja.player.fm/legal。
Player FM -ポッドキャストアプリ
Player FMアプリでオフラインにしPlayer FMう!
Player FMアプリでオフラインにしPlayer FMう!
Risky Bulletin
すべての項目を再生済み/未再生としてマークする
Manage series 3343211
コンテンツは Risky.biz によって提供されます。エピソード、グラフィック、ポッドキャストの説明を含むすべてのポッドキャスト コンテンツは、Risky.biz またはそのポッドキャスト プラットフォーム パートナーによって直接アップロードされ、提供されます。誰かがあなたの著作物をあなたの許可なく使用していると思われる場合は、ここで概説されているプロセスに従うことができますhttps://ja.player.fm/legal。
Regular cybersecurity news updates from the Risky Business team...
…
continue reading
672 つのエピソード
すべての項目を再生済み/未再生としてマークする
Manage series 3343211
コンテンツは Risky.biz によって提供されます。エピソード、グラフィック、ポッドキャストの説明を含むすべてのポッドキャスト コンテンツは、Risky.biz またはそのポッドキャスト プラットフォーム パートナーによって直接アップロードされ、提供されます。誰かがあなたの著作物をあなたの許可なく使用していると思われる場合は、ここで概説されているプロセスに従うことができますhttps://ja.player.fm/legal。
Regular cybersecurity news updates from the Risky Business team...
…
continue reading
672 つのエピソード
Alle episoder
×R
Risky Bulletin

1 Risky Bulletin: Research turns any Bluetooth device into an AirTag 5:54
5:54
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った5:54
Researchers turn any Bluetooth device into an AirTag tracker, VMware patches three ESXi zero-days, France debates encryption backdoors, and a fifth of the stolen Bybit funds are now untraceable. Show notes
R
Risky Bulletin

In this Risky Business Talks interview we invited Will Thomas to talk about the recent leak of internal chats from the Black Basta ransomware group. Will is a SANS Instructor, co-author of the SANS FOR589 course, and the co-founder of a community research project for CTI analysts called Curated Intelligence. Will walks us through the Black Basta leak and uses the group’s attack on US healthcare provider Ascension to break down how the gang operated. Show notes Risky Bulletin: BlackBasta implodes, internal chats leak online BlackBasta’s internal chats just got exposed BlackBasta Chat Logs BlackBastaGPT BlackBasta Leaks: Lessons from the Ascension Health attack Inside the Black Basta Leak: How Ransomware Operators Gain Access…
R
Risky Bulletin

1 Between Two Nerds: NSA's 9 to 5 hacking campaign 35:29
35:29
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った35:29
In this edition of Between Two Nerds Tom Uren and The Grugq take a deep dive into incident response reports from Chinese cybersecurity firms that attribute the hack of one of the country’s top seven defence universities to the US National Security Agency. These reports were collated and translated into English by the security researcher known as Inversecos (https://x.com/inversecos). This episode is also available on Youtube . Show notes NSA (Equation Group) TTPs from a Chinese lens Northwestern Polytechnical University at the China Defence Universities tracker Risky Business podcast discussion with Inversecos…
R
Risky Bulletin

1 Risky Bulletin: Trump admin halts Russia cyber operations 7:33
7:33
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った7:33
The Trump administration stops treating Russian hackers as a threat, Meta seeks a permanent NSO injunction, new Cellebrite zero-days come to light, and big name Russian cyber criminals get … home detention. Show notes
R
Risky Bulletin

1 Sponsored: Prowler on the Open Cloud Security Movement 13:53
13:53
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った13:53
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Toni de la Fuente, founder and CEO of cloud security firm Prowler. Toni talks about his company’s latest effort, the Open Cloud Security Movement, an initiative to get more cloud security vendors to open-source their core projects. Show notes Open Cloud Security Prowler on Github Risky Biz Product demo: Prowler, the free and open source cloud security platform…
R
Risky Bulletin

1 Risky Bulletin: Cellebrite fires Serbia as a customer 6:44
6:44
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った6:44
Cellebrite bans Serbia from using its products, Chinese hackers breached the Belgian security service, the Republican National Committee hid a Chinese hack and Microsoft removes malicious extensions from the VSCode Marketplace. Show notes
R
Risky Bulletin

1 Srsly Risky Biz: Canada's expulsion from Five Eyes would be a disaster 24:18
24:18
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った24:18
Tom Uren and Patrick Gray talk about the White House apparently considering kicking Canada out of the Five Eyes intelligence alliance to apply pressure on the country. It’s a terrible idea and even thinking about it undermines the strength of the alliance. They also discuss Sweden’s proposed legislation that would order apps like WhatsApp and Signal to store messages so they could be provided under warrant to authorities. The story is a vignette of the ongoing encryption debate, but we think apps like Signal will leave the country rather than comply. Finally, they talk about how the illicit cryptocurrency ecosystem is evolving in response to government action such as takedowns and sanctions. This episode is also available on Youtube . Show notes…
R
Risky Bulletin

1 Risky Bulletin: Signal threatens to leave Sweden over backdoor request 6:59
6:59
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った6:59
Signal threatens to leave Sweden over backdoor request, the EU sanctions a North Korean general linked to two APTs, Australia bans Kaspersky products on government systems and Google will use QR codes for Gmail authentication. Show notes
R
Risky Bulletin

In this edition of Between Two Nerds Tom, Uren and The Grugq examine the fundamental principles of network exploitation as described in Matthew Monte’s ‘Network Attacks and Exploitation: A Framework’ book using recent hacks as case studies. This episode is also available on Youtube . Show notes Network Attacks and Exploitation: A Framework Google's Signal hacking report Device code phishing…
R
Risky Bulletin

1 Risky Bulletin: North Korean hackers steal $1.5 billion from Bybit 6:56
6:56
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った6:56
North Korean hackers steal one and a half billion dollars from Bybit, Apple disables iCloud backup encryption in the UK, stream-jacking hits the e-sports world and Palau faces its third ransomware attack in six years. Show notes
R
Risky Bulletin

1 Sponsored: Nucleus Security on asset correlation and asset linking 12:23
12:23
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った12:23
In this Risky Business News sponsor interview, Catalin Cimpanu talks with Aaron Attarzadeh, Enterprise Security Engineer at Nucleus. Aaron goes into new concepts for the vulnerability management scene, such as asset correlation and asset linking. Show notes
R
Risky Bulletin

1 Risky Bulletin: BlackBasta implodes, internal chats leak online 6:00
6:00
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った6:00
The BlackBasta ransomware group implodes, Russian military hackers target Signal with QR codes, Microsoft patches a Power Pages zero-day, and Meta sues a man who hacked accounts and extorted users. Show notes
R
Risky Bulletin

1 Srsly Risky Biz: Why America needs its own Salt Typhoon 21:01
21:01
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った21:01
In this podcast Tom Uren and Patrick Gray talk about the idea of launching a retaliatory campaign to hack Chinese telcos in response to Salt Typhoon’s targeting of US ones. US Senator Mark Warner floated the idea as a way to persuade the Chinese government to pull back Salt Typhoon, but we think that kind of campaign has merit regardless. They also discuss how Samoa’s CERT calling out APT40 is a big deal. It’s striking to see a small country of 200,000 people calling out Chinese hacking. This episode is also available on Youtube . Show notes…
R
Risky Bulletin

1 Risky Bulletin: Insight Partners discloses security breach 4:16
4:16
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った4:16
VC giant Insight Partners gets social engineered, OpenSSH patches an attacker-in-the-middle bug, Ecuador’s parliament hit by cyberattacks, and a Monero zero-day awaits a patch. Show notes
R
Risky Bulletin

1 Between Two Nerds: Is 39 vulnerabilities a lot? 30:04
30:04
「あとで再生する」
「あとで再生する」
リスト
気に入り
気に入った30:04
In this edition of Between Two Nerds Tom Uren and The Grugq talk about the United State’s Vulnerabilities Equities Program, which balances the need for intelligence collection with the need to protect the public. The government recently revealed that in 2023 it released 39 vulnerabilities, but what does this really tell us? This episode is also available on Youtube . Show notes The unclassified VEP appendix Kim Zetter's Zero Day substack…
プレーヤーFMへようこそ!
Player FMは今からすぐに楽しめるために高品質のポッドキャストをウェブでスキャンしています。 これは最高のポッドキャストアプリで、Android、iPhone、そしてWebで動作します。 全ての端末で購読を同期するためにサインアップしてください。