• Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful

  • Apr 30 2025
  • Length: 1 hr and 3 mins
  • Podcast

Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful

  • Summary

  • On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: British retail stalwart Marks & Spencer gets cyberedSouth Korean telco sets out to replace all its subscriber SIMs after (we assume) it lost the keymatIt’s a good exploit week! Bugs in Apple Airplay, SAP webservers, Erlang SSH and CommVault backupsJuice jacking! No, really! Some researchers actually did it (so still not in the wild, then)Anti-DOGE whistleblower sure sounds like he has a point This week’s episode is sponsored by Knocknoc, who let you glue your firewalls to your single sign on. Knocknoc’s CEO Adam Pointon talks about the joy that having end-to-end IPv6 would bring for zero-trust access control. He also touches on people using Knocknoc inside their network to isolate critical systems. Editors Note : Pat also gives Adam (Boileau) stick in the sponsor interview about the Risky Biz webserver not having IPv6 enabled, which fact-checking during the edit says is FAKE NEWS. Just uh, don’t look at how fresh that AAAA record in the DNS is, friends 😉 This episode is also available on Youtube. Show notes British retailer M&S confirms being hit by ‘cyber incident’ amid store delays | The Record from Recorded Future NewsM&S cyber-attack linked to hacking group Scattered Spider | Marks & Spencer | The GuardianBina Puri shares, Warrant B close sharply lower day after hackingBina Puri, Pos Malaysia tumble following hacking incident | FMTJapan warns of hundreds of millions of dollars in unauthorized trades from hacked accounts | The Record from Recorded Future NewsUS conducts cyberattacks against major Chinese commercial encryption provider: report - Global TimesIran says major cyberattack on infrastructure repelled | Iran InternationalSpain rules out cyber attack - but what could have caused power cut?South Korea's SK Telecom begins SIM card replacement after data breachAirBorne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security | Oligo SecurityiOS and Android juice jacking defenses have been trivial to bypass for years - Ars TechnicaHow Android 16's new security mode will stop USB-based attacks - Android AuthorityResearchers warn of critical flaw found in Erlang OTP SSH | Cybersecurity DiveCritical vulnerability in SAP NetWeaver under threat of active exploitation | Cybersecurity DiveCVE-2025-31324: Critical SAP Flaw Explained | StrobesFire In The Hole, We’re Breaching The Vault - Commvault Remote Code Execution (CVE-2025-34028)Risky Bulletin: NFC card malware keeps evolving in Russia, a bad omen for the future - Risky Business MediaHegseth had unsecured internet line in Pentagon for Signal, sources say | AP NewsWhistleblower: DOGE Siphoned NLRB Case Data – Krebs on Security2025_0414_Berulis-Disclosure-with-Exhibits.s.pdfCISA gets a deputy director as it braces for major layoffs | Cybersecurity DiveTwo top cyber officials resign from CISA | The Record from Recorded Future NewsEx-CISA chief Chris Krebs leaving SentinelOne following Trump pressure | ReutersFormer cyber official targeted by Trump speaks out after cuts to digital defenseTop Tier Target | What It Takes to Defend a Cybersecurity Company from Today's Adversaries | SentinelOneZachXBT on X: "Nine hours ago a suspicious transfer was made from a potential victim for 3520 BTC ($330.7M)"
    Show More Show Less
activate_mytile_page_redirect_t1

What listeners say about Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful

Average Customer Ratings

Reviews - Please select the tabs below to change the source of reviews.

In the spirit of reconciliation, Audible acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.