Risky Business
Risky Business
#technology #technews

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Risky Business #784 -- GitHub supply chain attack steals secrets from 23k projects

March 18, 2025 0:56:58 54.71 MB Downloads: 0

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

  • Github Actions supply chain attack loots keys and secrets from 23k projects
  • Why a VC fund now owns a minority stake in Risky Business Media (!?!?)
  • China doxes Taiwanese military hackers
  • Microsoft thinks .lnk file whitespace trick isn’t worth patching but APTs sure love it
  • CISA delivers government efficiency by re-hiring fired staff… to put them on paid leave
  • …and Google acquires Wiz for $32bn

This week’s show is sponsored by Zero Networks, and they have sent along a happy customer to talk about their experience. Aaron Steinke is Head of Infrastructure at La Trobe Financial, an asset management firm in Australia. Aaron talks through bringing modern zero-trust goodness to the reality of a technology environment that’s been around 40 years.

This episode is also available on Youtube.

Show notes