Risky Bulletin: Most smart devices run outdated web browsers
Most smart devices run outdated web browsers, Ukrainian hacktivists breach a major Russian defense contractor, ransomware hits Venezuela’s state-owned oil company, and hackers are trying to extort PornHub with stolen user data.
Show notes
Risky Bulletin: Most smart devices run outdated web browsers
-------- Â
7:39
--------
7:39
Between Three Nerds: The evolution of Iranian cyber espionage
In this edition of Between Two Nerds Tom Uren and The Grugq talk to Hamid Kashfi, CEO and founder of DarkCell, talk about the Iranian cyber espionage scene.
Kashfi talks about how the regime once forced people to hack and crushed the domestic security research scene. He describes how and why the government has changed its approach and is now reaping the rewards of improved Iranian capabilities.
This episode is available on Youtube.
Show notes
The "Mossad or not" threat model by James Mickens
Shamoon wiper
iLO rootkit
-------- Â
49:56
--------
49:56
Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns
Russia is hiring African freelancers for disinformation campaigns, the US is preparing to let contractors run offensive cyber operations, Germany blames Russia for the hack of its air traffic control agency, and Apple patches two WebKit zero-days.
Show notes
Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns
-------- Â
7:51
--------
7:51
Sponsored: ConsentFix and Push Security's browser attack taxonomy
In this sponsored interview Casey Ellis is joined by Push Security’s Field CTO, Mark Orlando. They chat about the ways that browser-based attacks are evolving and how Push Security is finding and cataloging them.
Show notes
ConsentFix: Analysing a browser-native ClickFix-style attack that hijacks OAuth consent grants
Introducing our guide to phishing detection evasion techniques
-------- Â
19:36
--------
19:36
Risky Bulletin: EU has a problem attracting and retaining cyber talent
The EU has a problem attracting and retaining cyber talent, the CEO of Coupang resigns following the company’s security breach, Microsoft expands its bug bounty program to cover third party code, and Chrome and Gogs patch zero-days.
Show notes
Risky Bulletin: EU has a problem attracting and retaining cyber talent