Risky Business #612 -- DPRK slides into researcher DMs

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including: DPRK offers free 0day to researchers, with a pretty significant catch SonicWall gets owned because it runs SonicWall gear. Big mistake. Chinese trains didn’t stop running because Flash died :( Dominion to sue Rudy Giuliani for $1.3bn over insecurity claims The sudo bug. Lol. This week’s show is brought to you by Cmd Security, the Linux security company. Its focus has traditionally been on restricting the type of bash commands users can enter. It’s like a control plane for Linux systems. But some of its customers manage their Linux endpoints through different, non-bash entry points. So they’ve added some features to their product to deal with that, which has also resulted in them having an IDR capability. It’s all pretty sensible stuff though, and Cmd co-founder and CEO Jake King will be along to talk us through all of that. Links to everything that we discussed are below and you can follow Patrick or Adam on Twitter if that’s your thing.