Risky Business #784 -- GitHub supply chain attack steals secrets from 23k projects

March 19, 202556m 58s

Audio is streamed directly from the publisher (dts.podtrac.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.

Original episode page

Show Notes

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

Github Actions supply chain attack loots keys and secrets from 23k projects
Why a VC fund now owns a minority stake in Risky Business Media (!?!?)
China doxes Taiwanese military hackers
Microsoft thinks .lnk file whitespace trick isn’t worth patching but APTs sure love it
CISA delivers government efficiency by re-hiring fired staff… to put them on paid leave
…and Google acquires Wiz for $32bn

This week’s show is sponsored by Zero Networks, and they have sent along a happy customer to talk about their experience. Aaron Steinke is Head of Infrastructure at La Trobe Financial, an asset management firm in Australia. Aaron talks through bringing modern zero-trust goodness to the reality of a technology environment that’s been around 40 years.

This episode is also available on Youtube.

Show notes

← All episodes of Risky Business