התחל במצב לא מקוון עם האפליקציה Player FM !
Risky Business #778 -- Musk's child soldiers seize control of FedGov IT systems
Manage episode 465029628 series 1386146
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
- DeepSeek leaves an unauthed database on the internet
- Russia hacked UK prime minister’s personal mail
- Australia sanctions a Telegram group… which is more sensible than it sounds
- Medical device backdoor turns out to be just poorly thought out upgrade feature
- Google abuses weak hashing to patch AMD CPU microcode
- And much, much more.
This week’s episode is sponsored by email security boffins Sublime. Their co-founder and CEO Josh Kamdjou joins to talk about how attackers’ abuse of legitimate services like Docusign is a challenge for email security vendors.
This episode is also available on Youtube.
Show notes
- Exclusive: Musk aides lock workers out of OPM computer systems | Reuters
- Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History | Wiz Blog
- Криптостилер SparkCat в магазинах Google Play и App Store | Securelist
- Russian hackers suspected of compromising British PM’s personal email account | The Record from Recorded Future News
- PowerSchool hack: missed basic security step resulted in data breach
- Australia sanctions ‘Terrorgram’ white supremacist online group | The Record from Recorded Future News
- ‘Paid actors’ could be behind some antisemitic attacks, Albanese says | Australian security and counter-terrorism | The Guardian
- Interview with James Glenday, ABC News Breakfast | Australian Minister for Foreign Affairs
- WhatsApp says spyware company Paragon Solutions targeted journalists
- Spyware maker Paragon confirms US government is a customer | TechCrunch
- Former Polish justice minister arrested in sprawling spyware probe | The Record from Recorded Future News
- Sweden releases suspected ship, says cable break ‘clearly’ not sabotage | The Record from Recorded Future News
- Backdoor found in two healthcare patient monitors, linked to IP in China
- Attackers exploit zero-day vulnerability in Zyxel CPE devices | Cybersecurity Dive
- AMD: Microcode Signature Verification Vulnerability · Advisory · google/security-research · GitHub
- 22-year-old math wiz indicted for alleged DeFI hack that stole $65M - Ars Technica
- A method to assess 'forgivable' vs 'unforgivable'... - NCSC.GOV.UK
- Living Off the Land: Credential Phishing via Docusign abuse
- Living Off the Land: Callback Phishing via Docusign comment
- B2B freight-forwarding scams on the rise to evade financial fraud crackdowns
- Callback phishing via invoice abuse and distribution list relays
- Enhanced message groups: Improving efficiency in email incident response
575 פרקים
Manage episode 465029628 series 1386146
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
- DeepSeek leaves an unauthed database on the internet
- Russia hacked UK prime minister’s personal mail
- Australia sanctions a Telegram group… which is more sensible than it sounds
- Medical device backdoor turns out to be just poorly thought out upgrade feature
- Google abuses weak hashing to patch AMD CPU microcode
- And much, much more.
This week’s episode is sponsored by email security boffins Sublime. Their co-founder and CEO Josh Kamdjou joins to talk about how attackers’ abuse of legitimate services like Docusign is a challenge for email security vendors.
This episode is also available on Youtube.
Show notes
- Exclusive: Musk aides lock workers out of OPM computer systems | Reuters
- Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History | Wiz Blog
- Криптостилер SparkCat в магазинах Google Play и App Store | Securelist
- Russian hackers suspected of compromising British PM’s personal email account | The Record from Recorded Future News
- PowerSchool hack: missed basic security step resulted in data breach
- Australia sanctions ‘Terrorgram’ white supremacist online group | The Record from Recorded Future News
- ‘Paid actors’ could be behind some antisemitic attacks, Albanese says | Australian security and counter-terrorism | The Guardian
- Interview with James Glenday, ABC News Breakfast | Australian Minister for Foreign Affairs
- WhatsApp says spyware company Paragon Solutions targeted journalists
- Spyware maker Paragon confirms US government is a customer | TechCrunch
- Former Polish justice minister arrested in sprawling spyware probe | The Record from Recorded Future News
- Sweden releases suspected ship, says cable break ‘clearly’ not sabotage | The Record from Recorded Future News
- Backdoor found in two healthcare patient monitors, linked to IP in China
- Attackers exploit zero-day vulnerability in Zyxel CPE devices | Cybersecurity Dive
- AMD: Microcode Signature Verification Vulnerability · Advisory · google/security-research · GitHub
- 22-year-old math wiz indicted for alleged DeFI hack that stole $65M - Ars Technica
- A method to assess 'forgivable' vs 'unforgivable'... - NCSC.GOV.UK
- Living Off the Land: Credential Phishing via Docusign abuse
- Living Off the Land: Callback Phishing via Docusign comment
- B2B freight-forwarding scams on the rise to evade financial fraud crackdowns
- Callback phishing via invoice abuse and distribution list relays
- Enhanced message groups: Improving efficiency in email incident response
575 פרקים
כל הפרקים
×ברוכים הבאים אל Player FM!
Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.