Risky Business Media

Mar 18 2025 10 ep. 19 mins 6.9k
Risky Business Media Podcast artwork

It's a jungle out there

  News  Technology
RSS feed Share
Copy RSS


Subscribe on Podcast Addict


Risky Business #784 -- GitHub supply chain attack steals secrets from 23k projects

Mar 18 2025 56 mins  
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Github Actions supply chain attack loots keys and secrets from 23k projects Why a VC fund now owns a minority stake in Risky Business Media (!?!?) China doxes Taiwanese military hackers Microsoft thinks .lnk file whitespace trick isn’t worth patching but APTs sure love it CISA deli

Risky Bulletin: Google buys Wiz for $32 billion

Mar 18 2025 5 mins  
Google buys Wiz for $32 billion, China attributes the Poison Ivy APT group to the Taiwanese Military, APT groups abuse a Windows zero-day and a judge tells CISA to reinstate fired workers.

Between Two Nerds: Sowing discord by being nice!

Mar 17 2025 27 mins  
In this edition of Between Two Nerds Tom Uren and The Grugq talk about how offensive cyber operations could do so much more than just ‘deny, disrupt, degrade and destroy’. Grugq thinks this thinking is rooted in military culture and he wonders why cyber operations are always so mean. This episode is also available on Youtube.

Risky Bulletin: GitHub supply chain attack leaks secrets

Mar 16 2025 8 mins  
A GitHub supply chain attack leaks secrets, the White House tells federal agencies to stop firing cyber staff, Germany exempts cybersecurity from debt limits, and the RCS standard adds support for end-to-end encryption.

Sponsored: Using carrots and sticks to get more secure software

Mar 16 2025 13 mins  
In this Risky Bulletin sponsor interview Matt Muller, field CISO of Tines, explains how governments are using carrots and sticks to improve the security of enterprise software. Matt discusses CISA’s ‘Secure by Design’ pledge and the UK NCSC’s effort to quantify ‘unforgivable bugs’

Risky Bulletin: FBI says online file converters are nasty

Mar 13 2025 6 mins  
The FBI warns of online file converters that distribute malware, China backdoors Juniper router, a wave of ransomware hits Taiwan, and North Korean spyware slips into the Play Store.

Srsly Risky Biz: Outside America, Musk's X is a foreign influence threat

Mar 12 2025 15 mins  
Tom Uren and Patrick Gray discuss how X is actively engaging in political interference outside the US. The risks mirror those of TikTok. American legislators moved against TikTok because it could potentially be a powerful tool for the Chinese government to interfere with American political discourse. X is a realised threat, not a potential one, so we expect that foreign governments

Risky Business #783 -- Evil webcam ransomwares entire Windows network

Mar 11 2025 63 mins  
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news with special guest Rob Joyce, a Former Special Assistant to the US President and Director of Cybersecurity for NSA. They talk through: A realistic bluetooth-proximity phishing attack against Passkeys A very patient ransomware actor encrypts an entire enterprise with a puny linux webcam

Risky Bulletin: Pro-Palestinian hacktivists claim X DDoS

Mar 11 2025 4 mins  
A Pro Palestinian group claims credit for the X DDoS, CISA gets a new director as DOGE fires its red teams, and Asian scam compounds keep growing.

Between Two Nerds: A European cyber command

Mar 10 2025 33 mins  
In this edition of Between Two Nerds Tom Uren and The Grugq talk about what Europe should do given that US security guarantees are evaporating. Should Europe grow its cyber capabilities, what it would get out of it and how should it go about doing it? This episode is also available on Youtube.