On this week’s show, Patrick Gray and Adam Boileau discuss the week’s security news, including:

The insurance industry’s reaction to CrowdStrike’s mess
Google’s Workspace email validation flaw and its consequences for OAuth’d applications
Is the VMWare ESX group membership feature a CVE or an FYI?
Secureboot continues to under-deliver
North Korea’s revenue neutral intelligence services
And much, much more

This episode is sponsored by allowlisting software vendor Airlock Digital. Airlock uses a kernel driver on Windows, so Chief Executive David Cottingham joined to discuss what the CrowdStrike kernel driver bug drama means for security vendors.

This episode is also available on Youtube. If you want to ruin the magic of radio and see the faces behind the show, well, now you can!

Show notes

Risky Business #757 – The ClownStrike cleanup continues

Risky Business