Risky Business Patrick Gray

In this podcast SentinelOne’s Chief Trust officer Alex Stamos and its Chief Intelligence and Public Policy Officer Chris Krebs join Patrick Gray to talk all about AI.

It’s been a year and a half since ChatGPT landed and freaked everyone out. Since then, AI has really entrenched itself as the next big thing. It’s popping up everywhere, and the use cases for cybersecurity are starting to come into focus.

Threat actors and defenders are using this stuff already, but it’s early days and as you’ll hear, things are really going to change, and fast.

This week Patrick Gray and Adam Boileau along special guest Lina Lau discuss the week’s news, including:


The ongoing Ascension healthcare disruption, and
Whether its reasonable for healthcare orgs to be pushing back
Platforming cybercriminals for interviews
Own the libs by… not using E2EE messaging?
CISA’s secure by design, we want to believe!
The $64billion scale of indusrialised fraud
And much, much more.


This week’s sponsor is network discovery specialist, Run Zero. Director of research Rob King joins to talk about the weird and wonderful delights in their new Research Report.

Patrick dials in from RSA in San Francisco to discuss the week’s security news with Adam, including:


The west doxxes LockbitSupp, who must now hide his hundred million dollars
Revil hacker behind Kasaya breach gets 14 years
Microsoft makes some positive sounding* noises on security
A fun flaw in nearly all VPN clients
Gitlab admins continue their never-ending incident response
And much, much more.


This week’s sponsor is Stairwell. Long time infosec researcher Silas Cutler joins us to talk through his adventures in attacker C2 systems, and how this feeds into Stairwell’s data.

* we’re still sceptical they’ll get it right, but they do at least seem to realise how deep the doo-doo they’re in is… Pat speculates they have … tentacles, and a regulatory-threat-gland.

On this week’s show Patrick and Adam discuss the week’s security news, including:


Microsoft reassures* us that they take security very seriously*
Cisco ASA firewalls get sneakily backdoored, but no one’s quite sure how
Change Healthcare was 1FA Citrix all along
The FTC, FCC and other government sticks get waved at tech
Lizard Squad Finn who hacked the Vastaamo therapy chain gets sentenced
And much, much more.


This week’s sponsor is Zero Networks, who make a network micro-segmentation product that is actually usable. Zero Networks CEO Benny Lakunishok joins us to talk through why firewalling everything everywhere is finally workable.

* You’ll forgive us for being… a tad sceptical.

In this edition of Snake Oilers we’ll be hearing from:


Push Security: A browser plugin-based security company that combats identity-based attacks. (Much more compelling that it sounds in this description.)
Knocknoc: The tool Risky Business uses to protect our own applications and services. (Restrict network/port access to users who are authenticated via SSO.)
iVerify: Mobile security and threat hunting for iOS and Android. (Caught Pegasus in the wild!)

In this special edition of the Risky Business podcast Patrick Gray chats with former Facebook CSO Alex Stamos and founding CISA director Chris Krebs about sovereignty and technology.

China and Russia are doing their level best to yeet American tech from their supply chains – hardware, software and cloud services. They’ll be rebuilding these supply chains – for government systems, at least – from components that they have complete visibility into, and control over.

Meanwhile, America’s government faces different supply chain challenges. It has a supply chain that won’t be weaponised against it by its adversaries, but it lacks the same sort of visibility and control that its adversaries will eventually achieve over their supply chains. So where does this leave the west? Where does it leave China and Russia?