Risky Bulletin: npm attack uses AI prompts to steal creds, crypto-wallet keys
An npm supply chain attack uses AI to steal credentials and crypto-wallet keys, Google establishes a cyber disruption unit, a ransomware attack disrupts more than 200 Swedish municipalities, and Salt Typhoon hacks have now hit more than 80 countries.
Show notes
Risky Bulletin: npm attack uses AI prompts to steal creds, crypto-wallet keys
-------- Â
7:38
--------
7:38
Srsly Risky Biz: America wants to hack the planet
Tom Uren and Amberleigh Jack talk about proposed legislation that would allow the President to license private sector hackers to go after cybercrime groups. The bill won’t pass, but letting hackers loose on industrial-scale scam farms actually makes sense.
They also talk about Microsoft’s blind spot regarding China. It has trusted China-based engineers with sensitive work, and is now only just realising that China’s security interests are not compatible with Microsoft’s.
This episode is also available on Youtube.
Show notes
-------- Â
17:29
--------
17:29
Risky Bulletin: FCC removes 1,200 voice providers from US phone network
The FCC removes 1,200 voice providers from the US phone network, a cyberattack shuts down Nevada’s state government services; hackers breach Salesloft and pivot into Salesforce accounts, and Citrix patches yet another zero-day.
Show notes
Risky Bulletin: FCC removes 1,200 voice providers from US phone network
-------- Â
6:36
--------
6:36
Between Two Nerds: Teenage hackers are like goldfish
In this edition of Between Two Nerds, Tom Uren and The Grugq talk about how the teenage hacking groups Scattered Spider, Lapsus$ and Shiny Hunters are collaborating. They examine whether this is bad news and what will it take to slow these wrecking crews down. Plus, how teenage hackers are like goldfish.
This episode is also available on Youtube.
Show notes
The Register, Three notorious cybercrime gangs appear to be collaborating
Between Two Nerds episode 103
Sponsor interview with Brett Winterford from Okta
-------- Â
29:25
--------
29:25
Risky Bulletin: Hackers sabotage Iranian ships at sea, again
Hackers sabotage Iranian ships for a second time this year, mass cybercrime arrests across Africa, South Korea extradites a Chinese man behind celebrity hacks, and a French supermarket chain discloses a data breach.
Show notes
Risky Bulletin: Hackers sabotage Iranian ships at sea, again
South Africa