Best Soapbox Network Podcasts (2025)

1
Risky Business #799 -- Everyone's Sharepoint gets shelled 1:13:55

Play Pause

2d ago1:13:55

1:13:55

Risky Biz returns after two weeks off, and there sure is cybersecurity news to catch up on. Patrick Gray and Adam Boileau discuss: Microsoft tried to make outsourcing the Pentagon’s cloud maintenance to China okay (it was not) She shells Sharepoint by the sea-shore (by ‘she’ we mean ‘China’) Four (alleged) Scattered Spider members arrested (and bai…

1
Episode 128: One Last Buzz... For Now 🐝 2:57

10d ago2:57

2:57

All good things must (sometimes) pause... and after an incredible journey of conversations, laughter, learning, and buzzing with brilliant guests, this is the final episode of Bees with Ben – at least for a while. In today’s episode, I reflect on the wild ride this podcast has been – from talking bees and biosecurity to sharing stories from the pad…

1
Risky Biz Soap Box: Prowler, the open cloud security platform 32:08

10d ago32:08

32:08

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Toni de la Fuente, founder of open source multi-cloud security product Prowler. Toni explains how Prowler came to be, and how its journey followed his own learning about the cloud. The pair also discuss Prowler’s successful transition from an open-source projec…

1
Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses 1:02:19

23d ago1:02:19

1:02:19

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Australian airline Qantas looks like it got a Scattered Spider-ing Microsoft works towards blunting the next CrowdStrike disaster Changes are coming for Microsoft’s default enterprise app consenting setup Synology downplays hardcoded passwords for its M365 clou…

1
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators 1:02:16

1M ago1:02:16

1:02:16

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: We roll our eyes over the “16 billion credentials” leak hitting mainstream news Some interesting cyber angles emerge from the conflict in Iran Opensource maintainer of libxml2 is fed up with this hacker crap Shockingly, there are yet more ways to trick people i…

1
Episode 127: Norm Collins, 7 Decades of Beekeeping Wisdom! 33:51

1M ago33:51

33:51

Guest: Norm Collins – Seven Decades in Beekeeping In this special episode, I chat with Norm Collins, a true pioneer in Australian beekeeping. Once the largest beekeeper in Victoria, Norm recently turned 80, and he joins me to reflect on a lifetime of working with bees. We take a journey back to when Norm received his very first box of bees at just …

1
Risky Business #796 -- With special guest co-host Chris Krebs 1:01:04

1M ago1:01:04

1:01:04

On this week’s show Patrick Gray and Adam Boileau are joined by special guest Chris Krebs to discuss the week’s cybersecurity news. They talk through: Israeli “hacktivists” take out an Iranian state-owned bank Scattered-spider and friends pivot into attacking insurers Securing identities in a cloud-first world keeps us awake at night Microsoft take…

1
Soap Box: AI has entered the SOC, and it ain't going anywhere 30:58

1M ago30:58

30:58

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Dropzone AI founder Ed Wu about the role of LLMs in the SOC. The debate about whether AI agents are going to wind up in the SOC is over, they’ve already arrived. But what are they good for? What are they NOT good for? And where else will we see AI popping up in…

1
Risky Business #795 -- How The Com is hacking Salesforce tenants 1:07:34

1M ago1:07:34

1:07:34

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: New York Times gets a little stolen Russian FSB data as a treat iVerify spots possible evidence of iOS exploitation against the Harris-Walz campaign Researcher figures out a trick to get Google account holders’ full names and phone numbers Major US food distrib…

1
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242 58:22

2M ago58:22

58:22

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Cyber firms agree to deconflict and cross-reference hacker group names Russian nuclear facility blueprints gathered from public procurement websites Someone audio deepfaked the White House Chief of Staff, but for the dumbest reasons Germany identifies the Trick…

1
🎙️ Episode 126 – I’m Back! (Yes, Really!) 18:28

2M ago18:28

18:28

🎙️ Episode 126 – I’m Back! (Yes, Really!) Welcome back to Bees with Ben – and yes, you heard right… I’M BACK! It’s been a buzzing 12 months since the last episode, and I want to start by saying a huge thank you to everyone who’s stayed subscribed, messaged, or asked, “Where’s the podcast, Ben?” Life got wild – as it often does when you’re juggling …

1
Risky Business #793 -- Scattered Spider is hijacking MX records 1:04:52

2M ago1:04:52

1:04:52

In this week’s edition of Risky Business Dmitri Alperovitch and Adam Boileau join Patrick Gray to talk through the week’s news, including: EXCLUSIVE: A Scattered Spider-style crew is hijacking DNS MX entries and compromising enterprises within minutes The SVG format brings the all horrors of HTML+JS to image files, and attackers have noticed Brian …

1
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now 53:01

2M ago53:01

53:01

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: TeleMessage memory dumps show up on DDoSecrets Coinbase contractor bribed to hand over user data Telegram does seem to be actually cooperating with law enforcement Britain’s legal aid service gets 15 years worth of applicant data stolen Shocking no one, Ivanti …

1
Risky Biz Soap Box: Push Security's browser-first twist on identity security 34:24

2M ago34:24

34:24

In this wholly sponsored Soap Box edition of the show, Patrick Gray chats with Adam Bateman and Luke Jennings from Push Security. Push has built an identity security platform that collects identity information and events from your users’ browsers. It can detect phish kits and shut down phishing attempts, protect SSO credentials, and find shadow/per…

1
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys 57:52

2M ago57:52

57:52

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Struggling to find that pesky passwords.xlsx in Sharepoint? Copilot has your back! The ransomware ecosystem is finding life a bit tough lately SAP Netweaver bug being used by Chinese APT crew Academics keep just keep finding CPU side-channel attacks And of cour…

1
Wide World of Cyber: How state adversaries attack security vendors 52:42

3M ago52:42

52:42

In this edition of the Wide World of Cyber podcast Patrick Gray talks to SentinelOne’s Steve Stone and Alex Stamos about how foreign adversaries are targeting security vendors, including them. From North Korean IT workers to Chinese supply chain attacks, SentinelOne and its competitors are constantly fending off sophisticated hacking campaigns. Thi…

1
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate 56:12

3M ago56:12

56:12

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: White House’s off-brand Israeli Signal fork logs cleartext messages with hard coded creds while getting hacked (twice). Just … Wow. Ransomware attacks on UK retailers are linked, and Marks & Spencer has it extra bad After six years dormant, a Magento eCommerce …

1
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs 49:44

3M ago49:44

49:44

In this extended interview the Vice Chair of the Senate Select Committee on Intelligence, Senator Mark Warner, joins Risky Business host Patrick Gray to talk about: The latest developments in the Signalgate scandal Why America needs to be more aggressive in responding to Volt Typhoon How tariffs are affecting American alliances Why the Five Eyes al…

1
Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful 1:02:31

3M ago1:02:31

1:02:31

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: British retail stalwart Marks & Spencer gets cybered South Korean telco sets out to replace all its subscriber SIMs after (we assume) it lost the keymat It’s a good exploit week! Bugs in Apple Airplay, SAP webservers, Erlang SSH and CommVault backups Juice jack…

1
Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank 38:50

3M ago38:50

38:50

In this edition of the Snake Oilers podcast, three sponsors come along to pitch their products: LimaCharlie: A public cloud for SecOps Honeywell Cyber Insights: An OT security/discovery solution Fortra’s CobaltStrike and Outflank: Security tooling for red teamers This episode is also available on Youtube. Show notes…

1
Snake Oilers: Pangea, Cosive and Sysdig 47:45

3M ago47:45

47:45

In this edition of Snake Oilers three vendors pitch host Patrick Gray on their tech: Pangea: Guardrails and security for AI agents and applications (https://pangea.cloud) Worried about your AI apps going rogue, being mean to your customers or even disclosing sensitive information? Pangea exists to address these risks. Fascinating stuff. Cosive: A t…

1
Risky Business #788 -- Trump targets Chris Krebs, SentinelOne 53:35

3M ago53:35

53:35

On this week’s show Patrick Gray talks to former NSA Cybersecurity Director Rob Joyce about Donald Trump’s unprecedented, unwarranted and completely bonkers political persecution of Chris Krebs and his employer SentinelOne. They also talk through the week’s cybersecurity news, covering: Mitre’s stewardship of the CVE database gets its funding DOGE’…

1
Wide World of Cyber: How the Trump admin is changing the cybersecurity landscape 43:29

4M ago43:29

43:29

In this podcast, Patrick Gray chats with SentinelOne’s Chris Krebs and Alex Stamos about the huge changes afoot in the United States government and what they mean for the threat environment. From the director of NSA being fired to massive job cuts at CISA and huge foreign policy shifts, tomorrow’s threat environment is going to be very different to…

1
Risky Business #787 -- Trump fires NSA director, CISA cuts inbound 53:01

4M ago53:01

53:01

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Oracle quietly cops to being hacked, but immediately pivots into pretending it didn’t matter NSA and CyberCom leaders fired for not being MAGA enough US Treasury had some dusty corners it hadn’t found China in yet, looked, found China in them …which is a great …

1
Risky Business #786 -- Oracle is lying 55:14

4M ago55:14

55:14

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Yes, Oracle Health and Oracle Cloud did get hacked The fallout from Signalgate continues North Korean IT workers pivot to Europe Honeypot data suggests a storm is brewing for Palo Alto VPNs Canadian Anon gets arrested for hacking Texas GOP This week’s episode i…

1
Soap Box: Knocknoc glues your SSO to your firewalls for Just-in-Time network access 30:46

4M ago30:46

30:46

In this Soap Box edition of Risky Business host Patrick Gray talks to Knocknoc CEO Adam Pointon about how to easily rein in attack surface by glueing your single sign-on service to your network controls. Do your Palo Alto and Fortinet devices really need to be discoverable by ransomware crews? Does your file transfer appliance need to be open to th…

1
Risky Business #785 -- Signal-gate is actually as bad as it looks 59:05

4M ago59:05

59:05

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Yes, the Trump admin really did just add a journo to their Yemen-attack-planning Signal group The Github actions hack is smaller than we thought, but was targeting crypto Remote code exec in Kubernetes, ouch Oracle denies its cloud got owned, but that sure does…

1
Risky Business #784 -- GitHub supply chain attack steals secrets from 23k projects 56:58

4M ago56:58

56:58

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Github Actions supply chain attack loots keys and secrets from 23k projects Why a VC fund now owns a minority stake in Risky Business Media (!?!?) China doxes Taiwanese military hackers Microsoft thinks .lnk file whitespace trick isn’t worth patching but APTs s…

1
Risky Business #783 -- Evil webcam ransomwares entire Windows network 1:03:40

5M ago1:03:40

1:03:40

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news with special guest Rob Joyce, a Former Special Assistant to the US President and Director of Cybersecurity for NSA. They talk through: A realistic bluetooth-proximity phishing attack against Passkeys A very patient ransomware actor encrypts an entire enterprise …

1
Risky Business #782 -- Are the USA and Russia cyber friends now? 50:12

5M ago50:12

50:12

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Did the US decide to stop caring about Russian cyber, or not? Adam stans hard for North Korea’s massive ByBit crypto-theft Cellebrite firing Serbia is an example of the system working Starlink keeps scam compounds in Myanmar running Biggest DDoS botnet yet push…

1
Risky Business #781 -- How Bybit oopsied $1.4bn 1:02:40

5M ago1:02:40

1:02:40

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: North Korea pulls off a 1.5 billion dollar crypto heist Apple pulls Advanced Data Protection from the UK Black Basta ransomware gang’s internal chats leak Russians snoop on Signal with QR codes And Myanmar ships thousands of freed scam compound workers to Thail…

1
Wide World of Cyber: DeepSeek lobs an AI hand grenade 41:02

5M ago41:02

41:02

In this episode of the Wide World of Cyber podcast Risky Business host Patrick Gray chats with SentinelOne’s Chris Krebs and Alex Stamos about AI, DeepSeek, and regulation. From its bad transport security to its Chinese ownership and the economic implications of China “entering the chat”, everyone’s freaking out over this new model. But should they…

1
Risky Business #780 -- ASD torched Zservers data while admins were drunk 1:00:35

5M ago1:00:35

1:00:35

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Australian spooks scrubbed Medibank data off Zservers bulletproof hosting Why device code phishing is the latest trick in confusing poor users about cloud authentication Cloudflare gets blocked in Spain, but only on weekends and because of… football?…

1
Risky Biz Soap Box: Run your own open source IDP with Authentik 38:02

5M ago38:02

38:02

In this SoapBox edition of the show Patrick Gray chats to Fletcher Heisler, the CEO of open-source identity provider Authentik. The whole idea of Authentik is you can take control of an essential IT and security function: identity. Because Authentik is open source it’s extremely flexible, and if you’re running it yourself, you get to decide where y…

1
Risky Business #779 -- DOGE staffer linked to The Com 58:48

6M ago58:48

58:48

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Musk’s DOGE kid has a history with The Com Paragon fires Italy as a spyware customer Thailand cuts power to scam compounds… … and arrests Phobos/8Base Russian cybercrims The CyberCX DFIR report shows non-U2F MFA is well and truly over And much, much …

1
Risky Business #778 -- Musk's child soldiers seize control of FedGov IT systems 56:28

6M ago56:28

56:28

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: DeepSeek leaves an unauthed database on the internet Russia hacked UK prime minister’s personal mail Australia sanctions a Telegram group… which is more sensible than it sounds Medical device backdoor turns out to be just poorly thought out upgrade f…

1
Risky Business #777 -- It's SonicWall's turn 51:26

6M ago51:26

51:26

Coming to you from the same room in Risky Business headquarters Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. They talk through: Sonicwall firewalls hand out remote code exec like candy Mastercard make a slapstick-grade mistake with their DNS The data breach at PowerSchool and other niche SaaS providers Academic research prop…

1
Risky Business #776 -- Trump will flex American cyber muscles 1:03:53

6M ago1:03:53

1:03:53

Risky Business returns for its 19th year! Patrick Gray and Adam Boileau discuss the week’s cybersecurity news and there is a whole bunch of it. They discuss: The incoming Trump administration guts the CSRB Biden’s last cyber Executive Order has sensible things in it China’s breach of the US Treasury gets our reluctant admiration Ross Ulbricht - the…

1
A Recent Look At The Boston Celtics #NBA #Basketball #BostonCeltics 16:08

7M ago16:08

16:08

#nba #basketball #boston #celtics #bostonceltics #jaysontatum #jaylenbrown In This One I go over the Celtics first test of the season with their 4 game road trip out west. (Timberwolves, Rockets, Thunder, Nuggets).Then I take a look at the Celtics since December 1st and try to calm everyone concerns about the sluggish play.…

1
THE MIAMI HEAT FAILED JIMMY BUTLER, THEN SUSPENDED HIM! 20:19

7M ago20:19

20:19

#nba #jimmybutler #trade #basketball #news #fyp In this one I discuss the Miami Heat & Jimmy Butler situation. Ultimately how The Miami Heat filed to build around Jimmy Butler & How certain runs just come to an end. Like, Comment, Subscribe! Helps The Channel

1
Risky Biz Soap Box: Cool compliance tricks with the Island enterprise browser 26:40

7M ago26:40

26:40

In this sponsored Soap Box edition of the show Patrick Gray talks to Island CEO Michael Fey about some of the cool tricks in the Island enterprise browser. You can use it to tick off so many compliance boxes, and not just cybersecurity boxes. This is largely a conversation about compliance, but it’s actually interesting and fun. These are words we …

1
Risky Business #775 -- Cl0p is back, SEC hack disclosures disappoint 1:01:06

7M ago1:01:06

1:01:06

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: The SEC’s cyber incident reporting isn’t very exciting after all China Telecom on the way to being thrown out of the US The NSA/Cybercom might get two separate hats The Cl0p ransomware crew are back and taking responsibility for the Cleo hacks (Yet …

1
Wide World of Cyber: SentinelOne's Chris Krebs on Chinese cyber operations 50:04

8M ago50:04

50:04

In this edition of the Wild World of Cyber podcast Patrick Gray sits down with SentinelOne’s Chief Intelligence and Public Policy Officer Chris Krebs to talk all about Chinese cyber operations. They look at the Salt Typhoon and Volt Typhoon campaigns, the last 20 years of Chinese operations, and the evolution of the cyber roles of China’s Ministry …

1
Risky Business #774 -- Cleo file transfer appliances under widespread attack 1:02:28

8M ago1:02:28

1:02:28

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Cleo file transfer products have a remote code exec, here we go again! Snowflake phases out password-based auth Chinese Sophos-exploit-dev company gets sanctioned Romania’s election gets rolled back after Tiktok changed the outcome AMD’s encrypted V…

1
Risky Biz Soapbox: Enterprise Yubikeys can now be pre-registered 29:56

8M ago29:56

29:56

In this interview Patrick Gray talks to Yubico’s COO and President Jerrod Chong about a new Yubikey feature: pre-registration. You can now ship pre-registered Yubikeys to your staff so you don’t need to rely on your staff to enrol them. They’ve achieved this with really slick Okta and Entra ID integrations. Jerrod also talks about a recent trip to …

1
Risky Business #773 -- Cybercriminals are dropping like flies in Russia 57:02

8M ago57:02

57:02

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: The FTC decides its time to take another look at Microsoft Exxon’s opponents targeted by hackers Russian hackers keep getting sentenced and it confuses us The Feds recommend Signal, because throwing hackers out of telcos ain’t gonna happen A South K…

1
Risky Business #772 -- Salt Typhoon is truly a national security disaster 1:01:05

8M ago1:01:05

1:01:05

On this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: A ransomware attack has crippled US supply chain software provider Blue Yonder Russian spies hack nearby wifi to get to their targets, but that doesn’t seem surprising? Salt Typhoon’s attacks on telcos are hard to solve and big on impact China’s sur…

1
Risky Business #771 -- Palo Alto's firewall 0days are very, very stupid 1:01:12

8M ago1:01:12

1:01:12

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Microsoft introduces some sensible sounding post-Crowdstrike changes Palo Alto patches hella-stupid bugs in its firewall management webapp CISA head Jen Easterly to depart as Trump arrives AI grandma tarpits phone scammers in family-tech-support hell…

1
Risky Business #770 -- A Russian IR guy discovers extremely cool spookware 1:03:29

9M ago1:03:29

1:03:29

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Apple frustrates law enforcement with iOS auto-reboot CISA says most KEV vulnerabilities in 2023 were first used as zero days Russians roll incident response on some sweet Linux spookware Regular users can create mailboxes in M365? Tor tracks down th…

1
Risky Biz Soap Box: Why black box email security is dead 36:12

9M ago36:12

36:12

In this edition of the Risky Business Soap Box we’re talking all about email security with Sublime Security co-founder Josh Kamdjou. Email security is one of the oldest product categories in security, but as you’ll hear, Josh thinks the incumbents are just doing it wrong. He joins Risky Business host Patrick Gray for this interview about Sublime’s …