エピソード

  • Snake Oilers: Sandfly Security, Permiso and Wiz

    Snake Oilers: Sandfly Security, Permiso and Wiz
    2024/10/01

    In this edition of Snake Oilers we hear pitches from three security vendors:

    • Sandfly Security: An agentless Linux security platform that actually sounds very cool
    • Permiso: An identity security platform founded by ex FireEye folks
    • Wiz: The cloud security giant is getting in on code security scanning

    You can watch this edition of Snake Oilers on YouTube here.
    続きを読む 一部表示
    40 分
  • Risky Business #765 -- The Kaspersky switcheroo

    Risky Business #765 -- The Kaspersky switcheroo
    2024/09/25

    Patrick Gray and Adam Boileau discuss the week’s infosec news with everyone’s favourite ex-NSA big-brain, Rob Joyce. They talk through:

    • Musk and Durov bow to government pressure
    • Tiktok rushes to ban authoritarian propagandists
    • The US doesn’t want Chinese software in its cars
    • Kaspersky replaces itself with an AV no one has ever heard of
    • Aussie police chalk up another crimephone takedown
    • Press Win-R Ctrl-V to prove you’re human
    • And much, much more.

    This week’s show is brought to you by Stairwell, and Stairwell’s founder Mike Wiacek will be along to talk about how people are using their platform to hunt down detection resistant malware.

    A video version of this episode is also available on Youtube.

    Show notes
    • Elon Musk backs down in his fight with Brazilian judges to restore X | Elon Musk | The Guardian
    • Telegram says it will share phone numbers and IP addresses of ‘bad actors’ to authorities
    • Jane Lytvynenko on X: "Ukrainian cybersecurity officials are limiting the use of Telegram for military, critical infrastructure, and other authorities. Budanov said he has “substantiated data” on Ru authorities having access to personal messages on TG, including removed ones. https://t.co/xOcnf7am9R" / X
    • TikTok blocks dozens of Kremlin-backed media accounts
    • Biden administration proposes rule banning Chinese, Russian connected vehicles and parts
    • Some Kaspersky customers receive surprise forced-update to new antivirus software | TechCrunch
    • Russian cyber firm Dr.Web says services are restored after ‘targeted cyberattack’
    • Police announce takedown and arrest mastermind behind criminal comms platform 'Ghost'
    • Turning Everyday Gadgets into Bombs is a Bad Idea « bunnie's blog
    • Iranian-linked election interference operation shows signs of recent access | CyberScoop
    • Republicans demand FBI hearing on Iran theft of Trump documents
    • Ermittlungen im Darknet: Strafverfolger hebeln Tor-Anonymisierung aus | tagesschau.de
    • DOJ charges hackers for stealing $230 million in crypto from individual
    • This Windows PowerShell Phish Has Scary Potential – Krebs on Security
    • You can now use Apple’s best iPhone Mirroring feature on your Mac and iPhone | TechRadar
    続きを読む 一部表示
    1 時間 6 分
  • Risky Business #764 -- Mossad expands into telecommunications services

    Risky Business #764 -- Mossad expands into telecommunications services
    2024/09/18
    On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including: Hezbollah’s attempts to avoid SIGINT with pagers ends in explosionsThe US shines many bright lights on RT’s disinfo roleAustralia counters Chinese bullying in the PacificValid accounts are the most prevalent entry point, says CISA’s dataIvanti and Fortinet vie for worst vendor of the weekKrebs writes up the shift towards charging The Com with terrorismAnd much, much more… This week’s episode is sponsored by Push Security, who bring security visibility to where it needs to be these days – the browser. Luke Jennings joins this week’s show to discuss how phish-kit crews are driving the arms race forward, and how detection has to adapt and go where the users are. This episode is also available on Youtube. Show notes Israel planted explosives in Hezbollah's Taiwan-made pagers, sources say | Reuters How Hezbollah used pagers and couriers to counter Israel's high tech surveillance | Reuters Biden administration unveils new evidence of RT’s key role in Russian intelligence operations globally | CNN Politics Meta bans RT days after U.S. accused Russian outlet of disinformation U.S. to file charges in Trump campaign hacking case, officials say China suspected of hacking diplomatic body for Pacific islands region Chinese-made port cranes in US included 'backdoor' modems, House report says Stolen account info still chief risk for federal agencies, annual CISA audit finds Notice of Recent Security Incident | Fortinet Blog WordPress.org to require two-factor authentication for plugin developers | CyberScoop Multiple attacks force CISA to order agencies to upgrade or remove end-of-life Ivanti appliance Ivanti Endpoint Manager and Ivanti Endpoint Manager Security Suite and Ivanti Cloud Service Application (CSA) - End Of Life (EOL) The Dark Nexus Between Harm Groups and ‘The Com’ – Krebs on Security Feds sentence 12 crypto thieves behind SIM swaps, home invasions Ex-CrowdStrike employees detail rising technical errors before July outage | Semafor Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel - SecurityWeek Apple seeks dismissal of its NSO Group lawsuit, citing risk of exposing ‘vital security information’ US hits Intellexa spyware maker with more sanctions (1) BolivarCucuta on X: "Encuentran muerto al ciudadano israelí Yariv Bokor en Medellín En un apartamento de El Poblado, Medellín, fue encontrado sin vida el ciudadano israelí Yariv Bokor, con aparentes signos de violencia. Bokor estaba vinculado a la empresa Sandvine, la cual tiene relación con NSO https://t.co/EeY1os1omW" / X Instagram to bolster privacy and safety features for millions of teen users Mastercard buys Recorded Future for $2.65 billion | CyberScoop
    続きを読む 一部表示
    1 時間 3 分
  • Risky Business #763 – Microsoft un-patches critical bug

    Risky Business #763 – Microsoft un-patches critical bug
    2024/09/11
    On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including: Russia’s disinformation peddlers face multifaceted sternness from the DoJTelegram is now law enforcement’s bestest new pal, all of a suddenIran’s banking industry arranges a payment plan for a ransomColumbia investigates how it sent private jets full of cash to pay for PegasusMicrosoft innovates with Un-Patch TuesdayAnd much, much more. This week’s sponsor is Kroll Cyber, and one of their incident responders Paul Wells joins to discuss that one weird trick that actually helps - preparing for an incident before hand, rather than learning all those hard lessons in the middle of a crisis. This week’s episode is also available on Youtube. Show notes Risky Biz News: Doppelganger gets a kick in the butt from Uncle SamRussia focusing on American social media stars to covertly influence voters | ReutersRussian pro-democracy nonprofit investigates alleged data breach by Kremlin-backed hackersBiden administration hits Russia with sanctions over efforts to manipulate U.S. opinion ahead of the electionUS hits Chinese companies with new sanctions over Russia-Ukraine warElon Musk’s Starlink backtracks to comply with Brazil’s ban on X | Elon Musk | The GuardianWhy It's So Hard to Fully Block X in Brazil | WIREDDurov says Telegram will tackle criticism of how it moderates content | ReutersNavalny allies accuse Telegram and other platforms of censorship | Economy News | Al JazeeraHow India tamed Twitter and set a global standard for online censorship - The Washington Post2 white supremacists tried to spark race war by soliciting murder and hate crimes on Telegram, feds sayMatthew Garrett: "Why clone a yubikey when you c…" - Nondeterministic ComputerIran pays millions in ransom to end massive cyberattack on banks, officials say – POLITICOFour Delaware men charged in international sextortion scheme that netted nearly $2 million | CyberScoopColombian president suggests prior administration illegally sent $11 million in cash to Israel for spywarePoland’s constitutional court finds commission investigating use of Pegasus spyware unconstitutional | Notes From PolandCISA says SonicWall bug being exploited as experts warn of ransomware gang useSonicWall SSLVPN access control flaw is now exploited in attacksBug Left Some Windows PCs Dangerously Unpatched – Krebs on Security
    続きを読む 一部表示
    52 分
  • Snake Oilers: Authentik, Dropzone and SlashID

    Snake Oilers: Authentik, Dropzone and SlashID
    2024/09/06

    In this edition of Snake Oilers Patrick Gray gets pitches from three cybersecurity companies:

    • Authentik, an open source identity provider that a lot of large organisations are deploying on prem as an alternative to cloud-based IDPs
    • Dropzone AI, an LLM-based agent that can do the work of a Tier 1 SOC analyst
    • SlashID, an identity security company that can crunch your logs to find attackers

    You can watch this edition of Snake Oilers on YouTube here.

    Show notes
    • Welcome | authentik
    • Dropzone AI: Reinforce your SOC with AI Analysts
    • The identity stack to protect users and non-human identities | SlashID
    続きを読む 一部表示
    38 分
  • Risky Business #762 -- Brazil nukes X, Iranian APTs deploy ransomware

    Risky Business #762 -- Brazil nukes X, Iranian APTs deploy ransomware
    2024/09/04

    On this week’s show, Patrick Gray and Adam Boileau discuss the weeks security news, including:

    • Brazil’s supreme court bans X-formerly-Twitter,
    • Iranian cyber teams cooperate with ransomware crews
    • While North Koreans wield chrome-windows 0-day
    • Yubikey cloning attack is impressive, but doesn’t have us binning our keys quite yet
    • The White House is coming for your unsigned BGP announcements
    • And much, much more.

    This week’s episode is sponsored by Okta, and specifically their Identity Security Posture Management product. Okta recently acquired Spera Security, and co-founder Ariel Kadyshevitch joins to talk through the messy reality of modern identity. Pat even gets the giggles at how terrible everything is!

    You can also watch this episode on Youtube.

    Show notes
    • Brazil X ban: Top court judges uphold block of Musk's platform
    • Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations | CISA
    • Malicious North Korean packages appear again in open source code repository
    • North Korean threat actor Citrine Sleet exploiting Chromium zero-day | Microsoft Security Blog
    • SEC.gov | SEC Charges Transfer Agent Equiniti Trust Co. with Failing to Protect Client Funds Against Cyber Intrusions
    • Chinese ‘Spamouflage’ operatives are mimicking disillusioned Americans online
    • Researchers uncover ‘SlowTempest’ espionage campaign within China
    • City of Columbus sues man after he discloses severity of ransomware attack | Ars Technica
    • Bypassing airport security via SQL injection
    • Cyberattack hits agency responsible for London’s transport network
    • German air traffic control agency confirms cyberattack, says operations unaffected
    • White House calls attention to ‘hard problem’ of securing internet traffic routing
    • Cambodian scam giant handled $49 billion in crypto transactions since 2021, researchers say
    • YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel | Ars Technica
    • CrowdStrike takes a revenue hit as global IT outage reckoning lingers | Cybersecurity Dive
    • Owners of 1-Time Passcode Theft Service Plead Guilty – Krebs on Security
    続きを読む 一部表示
    1 時間 5 分
  • Risky Business #761 – Telegram v frogs. Fight!

    Risky Business #761 – Telegram v frogs. Fight!
    2024/08/28

    On this week’s show, Patrick Gray and Adam Boileau discusses the week’s security news, including:

    • Telegram founder’s arrest in France
    • Volt Typhoon 0days some SD-WAN gear
    • Russia frets about Ukraine all up in Kursk’s webcams
    • Cybercriminals social engineer payment card NFC relay attacks in the wild
    • The slow burn of Active Directory name collisions
    • And much, much more.

    This week’s episode is sponsored by Nucleus Security. Aaron Unterberger joins to discuss how vulnerability management starts out easy, but gets serious very quickly.

    You can also watch this week’s show on Youtube.

    Show notes
    • Pavel Durov: Telegram CEO's arrest part of larger investigation
    • Keep Pavel Durov LOCKED UP
    • Internet mogul Kim Dotcom to be extradited to the US, NZ justice minister says
    • New 0-Day Attacks Linked to China’s ‘Volt Typhoon’ – Krebs on Security
    • Oil industry giant Halliburton confirms 'issue' following reported cyberattack
    • Seattle airport confronts 4th day of cyberattack outages | Cybersecurity Dive
    • Russia calls for restrictions on surveillance cameras, dating apps in cities under attack from Ukraine
    • In a Kyiv hangar, Ukraine launches a cyber range for everyone
    • U.S. military, on Tinder, says to swipe left on Iran-backed militants - The Washington Post
    • CISA officials credit Microsoft security log expansion for improved threat visibility | Cybersecurity Dive
    • Suspect in $14 billion cryptocurrency pyramid scheme extradited to China
    • Android malware used to steal ATM info from customers at three European banks
    • Novel technique allows malicious apps to escape iOS and Android guardrails | Ars Technica
    • Local Networks Go Global When Domain Names Collide – Krebs on Security
    • Attack tool update impairs Windows computers
    • SonicWall pushes patch for critical vulnerability in SonicOS platform | CyberScoop
    • “YOLO” is not a valid hash construction
    続きを読む 一部表示
    1 時間 5 分
  • Feature interview: ASIO Director General Mike Burgess on encryption and access

    Feature interview: ASIO Director General Mike Burgess on encryption and access
    2024/08/26

    Mike Burgess is the director general of ASIO. But the thing about Mike is he’s actually a cybersecurity guy. He joined ASD, Australia’s NSA, back in 1995 when it was still the Defence Signals Directorate. He was there for 18 years before he bounced out to the private sector for a while to work as the CISO for Australia’s largest telco, Telstra. In 2017 he returned to ASD to run it, and in 2019 he was appointed director general of ASIO.

    Back in April, Burgess made a series of comments on the topic of encrypted messaging during a Press Club speech in Canberra. Our right to privacy, he said, is not absolute, and he implied that if certain providers didn’t start helping Australian authorities out a little more, he’d use some of the provisions in Australia’s Assistance and Access bill to force them to provide access to certain content.

    So I reached out to organise this interview to get some more detail from him about exactly what sort of cooperation he’s seeking and why.
    続きを読む 一部表示
    30 分