On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

Widely used polyfill javascript gets hijacked by its new owners
MacOS supply chain disaster bullet dodged
That OpenSSH remote code exec OH MY <3
Entrust gets its CA business kicked to the kerb by Google
South Korean telco intentionally viruses 600k customers
Microsoft continues to deeply underwhelm
And much, much more.

This week’s episode is sponsored by Greynoise. Founder Andrew Morris joins to talk about ways to track attackers across NAT and VPNs, as well as how you can join in the fun of running an internet-scale honeypot network.

Show notes

Risky Business #755 -- SSH 0day! Polyfill drama! Entrust crushed!

Risky Business

Risky Business #755 -- SSH 0day! Polyfill drama! Entrust crushed!