On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

Cleo file transfer products have a remote code exec, here we go again!
Snowflake phases out password-based auth
Chinese Sophos-exploit-dev company gets sanctioned
Romania’s election gets rolled back after Tiktok changed the outcome
AMD’s encrypted VM tech bamboozled by RAM with one extra address bit
Some cool OpenWRT research
And much, much more.

This week’s episode is sponsored by Thinkst, who love sneaky canary token traps. Jacob Torrey previews an upcoming Blackhat talk filled with interesting operating system tricks you can use to trigger canaries in your environment. You wont believe the third trick! Attackers hate him!

This episode is also available on Youtube.

Show notes

Risky Business #774 -- Cleo file transfer appliances under widespread attack

Risky Business

Risky Business #774 -- Cleo file transfer appliances under widespread attack