21 episodes

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Risky Business ITRadio.com.au

    • Technology

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

    Risky Biz Feature Interview: Mark Dowd on the 0day market and future of exceptional access

    Risky Biz Feature Interview: Mark Dowd on the 0day market and future of exceptional access

    This feature podcast was made possible by the Hewlett Foundation’s Cyber Initiative. The foundation has given us grant funding to produce this podcast series, which is designed to educate policymakers in cybersecurity so they can make better decisions.

    In this edition you’ll hear an interview I recorded with Mark Dowd.

    Mark is a world-renowned security researcher who, some years ago, co-founded a company called Azimuth Security. As you’ll hear, the original plan was to provide security research and consulting services to vendors. But, pretty quickly, Azimuth became a serious player in offensive security, selling exploits and other tools to government agencies in the Five Eyes countries.

    We recorded this interview touching on the history of Azimuth, what the public gets wrong when talking about 0day and surveillance, and were this whole thing could go – especially considering writing memory corruption exploits is getting so much harder.

    Risky Business #642 -- Brits, Dutch and Aussies embrace Hounds Doctrine

    Risky Business #642 -- Brits, Dutch and Aussies embrace Hounds Doctrine

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    UK, Netherlands and Australia promise offensive response to big ticket ransomware
    Wave of major cyber regulation and legislation in USA
    Iran up in yer O365s, Russians in yer gmails
    Submarine spy guy would have been fine, if he didn’t make one very big mistake
    Much, much more


    Jonathan Reiber is this week’s sponsor guest. He’s senior director of cybersecurity at AttackIQ and he’s joining us to talk through the US Government’s executive order on Zero Trust. Jonathan says it is actually born of a realisation the US Government needs to do something differently, that the old approaches aren’t working.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

    Risky Business #641 -- Lawsuit: Ransomware contributed to baby's death

    Risky Business #641 -- Lawsuit: Ransomware contributed to baby's death

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    Group-IB CEO arrested in Russia for treason
    Lawsuit alleges ransomware contributed to hospitalised baby’s death
    Nakasone outs self as hound release advocate
    Syniverse owned, but we don’t know how badly
    Why Google keyword warrants are awesome
    Much, much more…


    Nucleus co-founder Scott Kuffer is this week’s sponsor guest and the topic is actually a bit hilarious. They’ve found a killer use case that customers are clamouring for: Being able to map vulnerabilities to org groups within your enterprise so you can see who’s slacking off when it comes to patching.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

    Risky Biz Snake Oilers: Mike Wiacek launches Stairwell, Red Canary on modern MDR and Datadog pitches full stack monitoring

    Risky Biz Snake Oilers: Mike Wiacek launches Stairwell, Red Canary on modern MDR and Datadog pitches full stack monitoring

    In this edition of the Snake Oilers we’ll hear pitches from three vendors:


    Stairwell! A new startup from Chronicle Security co-founder Mike Wiacek
    Red Canary explains what modern managed detection and response looks like
    Pierre Betouin from Datadog talks about the challenges around bringing together DevOps and Security while providing full-stack security


    Links to everything we talked about are in the show notes.

    [CORRECTION: Mike Wiacek was originally described as the co-founder of VirusTotal in this podcast. He is in fact a co-founder of Chronicle Security, which absorbed VirusTotal after launching.]

    Risky Business #640 -- Huh. The CIA really was out to neck Assange

    Risky Business #640 -- Huh. The CIA really was out to neck Assange

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    The amazing Yahoo! News story on the former CIA director’s awesome brainwaves
    Hostage diplomacy pays off for Huawei CFO
    NSA releases great guidance on VPN security
    Microsoft has actually hired a cybersecurity executive
    Much, much more


    This week’s show is brought to you by Material Security. Material’s co-founder Ryan Noon will be along in this week’s sponsor interview to talk about smarter ways to do email retention and destruction. They have a product that interfaces with your mail provider’s API – whether you’re on Google Workspace or O365 – to do things like archive and redact email, and they’re finding their customers are using these features to actually implement retention email strategies.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

    Risky Business #639 -- USA's ransomware non-policy fails to meet its unstated objective

    Risky Business #639 -- USA's ransomware non-policy fails to meet its unstated objective

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    BlackMatter is back in the USA’s critical supply chain
    The FBI and friends apparently got up in REvil’s business
    The Azure OMI thing is totally the disaster we were expecting
    Much, much more


    Brett Winterford is this week’s sponsor guest. These days Brett is a senior director of cybersecurity strategy at Okta, but the reason you might recognise his name is because he took a year off working for vendors to be our newsletter author – he was the founding editor of the Seriously Risky Business newsletter.

    He’ll be along to talk about legacy auth and why vendors should have deprecation policies.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Top Podcasts In Technology

You Might Also Like