20 episodes

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Risky Busines‪s‬ ITRadio.com.au

    • Technology

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

    Risky Business #620 -- Project Zero burns Western counterterrorism operation

    Risky Business #620 -- Project Zero burns Western counterterrorism operation

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    Ubiquiti insider blows whistle on breach
    Cyber insurer ransomwared
    Project Zero burned a Western counterterrorism operation
    Australian parliament, media, politicians all under attack
    Executive Order would require vendors to notify US government of incidents
    Much, much more…


    This week’s sponsor guest is a special one. Metasploit creator and Rumble.run founder HD Moore will join us to talk all about his new venture, the Rumble asset discovery tool. It’s an absolutely fantastic interview, as you’d expect from HD.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

    Risky Business #619 -- REvil crew demands $50m from Acer

    Risky Business #619 -- REvil crew demands $50m from Acer

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    REvil demands US$50m from Acer in ransomware attack
    Shell added to Accellion victim list
    Governments banding together to tackle ransomware
    BEC theft hits $1.8bn in 2021: FBI
    Exchange tyre fire is, surprisingly, almost under control
    MORE


    Remediant’s Paul Lanzi will pop along in this week’s sponsor interview to talk about how they’ve integrated their PAM solution with Carbon Black. It’s an integration that is actually somewhat obvious in hindsight: if a box has been popped then some accounts have, too, so tying these things together does make sense.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

    Risky Biz Soap Box: 12 years since Operation Aurora. Have we learned anything?

    Risky Biz Soap Box: 12 years since Operation Aurora. Have we learned anything?

    This is a wholly sponsored podcast brought to you by Okta.

    In this interview we chat with Marc Rogers, the executive director of Cybersecurity at Okta.

    The question that we’re exploring in this interview is whether or not we’ve managed to move the infosec needle since the Chinese government hacked Google back during the Operation Aurora attacks of 2009.

    There are some real echoes of Operation Aurora in today’s headlines, like the SVR’s Solarwinds hack and Chinese APT crews using Exchange 0day.

    Google did learn from Aurora and rearchitected its whole approach to minimise the chances of that sort of things happening again. They moved to their implementation of Zero Trust, Beyondcorp, and so far that looks like a good decision.

    The rest of the world has been slow to follow, and that leads us to the question: have we actually made things better since Operation Aurora hit the headlines back in 2009?

    Risky Business #618 -- MS security licensing faces congressional scrutiny

    Risky Business #618 -- MS security licensing faces congressional scrutiny

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    The latest on the Exchange tyre fire
    Lawmakers in the USA have had enough of Microsoft’s ridiculous licensing tiers
    White House mulls software security rating system
    Joseph Cox’s SMS adventures
    Things didn’t quite work out for APT6920 Arson Cats
    Much, much more


    This week’s show is brought to you by VMRay. They asked us to interview one of their customers in this week’s sponsor segment so Brad Marr, the CISO of Life Fitness, pops in to walk through his VMRay use case.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

    Risky Biz Feature Podcast: Chasing crooks through the blockchain

    Risky Biz Feature Podcast: Chasing crooks through the blockchain

    This podcast was made possible thanks to the support of the Hewlett Foundation’s Cyber Initiative. They’ve provided us with grant funding so we can do feature podcasts that will be of interest to people working in policy roles. The idea is educate people working in policy about issues that they’re in a position to do something about.

    In this interview we spoke with Kim Grauer, the head of research at Chainalysis.

    Chainalysis makes software that cryptocurrency exchanges, regulators, law enforcement and intelligence services use to get insight into what’s happening in terms of bitcoin and other cryptocurrencies moving around. You would have heard us talk about their reports in the news segment of Risky Biz a few times because they have a habit of publishing really interesting insights into things like the ransomware economy.

    Risky Business #617 -- Exchangapalooza '21

    Risky Business #617 -- Exchangapalooza '21

    On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:


    All the Exchange boxes on the planet have pretty much been owned lol
    See above
    Someone’s hacking Russian crime forums
    The Accellion scandal keeps on truckin’
    Dependency confusion attacks are going berserk in the wild
    Gab got owned. Again.
    John McAfee is in all sorts of trouble
    Much, much more


    This week’s show is brought to you by Nucleus Security. Its director of APAC operations, Gil Azaria, joins us in this week’s sponsor interview to talk about how he became a Nucleus customer before he joined the vendor as its APAC guy.

    Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.

Top Podcasts In Technology

Listeners Also Subscribed To