Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
Risky Business #778 -- Musk's child soldiers seize control of FedGov IT systems
      
        February 04, 2025
      
      
        0:56:28
      
      
        
          54.22 MB
        
      
      
        Downloads: 0
      
    
    
      On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
- DeepSeek leaves an unauthed database on the internet
 - Russia hacked UK prime minister’s personal mail
 - Australia sanctions a Telegram group… which is more sensible than it sounds
 - Medical device backdoor turns out to be just poorly thought out upgrade feature
 - Google abuses weak hashing to patch AMD CPU microcode
 - And much, much more.
 
This week’s episode is sponsored by email security boffins Sublime. Their co-founder and CEO Josh Kamdjou joins to talk about how attackers’ abuse of legitimate services like Docusign is a challenge for email security vendors.
This episode is also available on Youtube.
Show notes
- Exclusive: Musk aides lock workers out of OPM computer systems | Reuters
 - Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History | Wiz Blog
 - Криптостилер SparkCat в магазинах Google Play и App Store | Securelist
 - Russian hackers suspected of compromising British PM’s personal email account | The Record from Recorded Future News
 - PowerSchool hack: missed basic security step resulted in data breach
 - Australia sanctions ‘Terrorgram’ white supremacist online group | The Record from Recorded Future News
 - ‘Paid actors’ could be behind some antisemitic attacks, Albanese says | Australian security and counter-terrorism | The Guardian
 - Interview with James Glenday, ABC News Breakfast | Australian Minister for Foreign Affairs
 - WhatsApp says spyware company Paragon Solutions targeted journalists
 - Spyware maker Paragon confirms US government is a customer | TechCrunch
 - Former Polish justice minister arrested in sprawling spyware probe | The Record from Recorded Future News
 - Sweden releases suspected ship, says cable break ‘clearly’ not sabotage | The Record from Recorded Future News
 - Backdoor found in two healthcare patient monitors, linked to IP in China
 - Attackers exploit zero-day vulnerability in Zyxel CPE devices | Cybersecurity Dive
 - AMD: Microcode Signature Verification Vulnerability · Advisory · google/security-research · GitHub
 - 22-year-old math wiz indicted for alleged DeFI hack that stole $65M - Ars Technica
 - A method to assess 'forgivable' vs 'unforgivable'... - NCSC.GOV.UK
 - Living Off the Land: Credential Phishing via Docusign abuse
 - Living Off the Land: Callback Phishing via Docusign comment
 - B2B freight-forwarding scams on the rise to evade financial fraud crackdowns
 - Callback phishing via invoice abuse and distribution list relays
 - Enhanced message groups: Improving efficiency in email incident response