On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

Oracle’s long term CSO departs, and we’re not that sad about it
Canada’s House of Commons gets popped through a Microsoft bug
Russia degrades voice calls via Whatsapp and Telegram to push people towards Max
South-East Asian scam compounds are also behind child sextortion
Reports that the UK has backed down on Apple crypto are… strange
Oh and of course there’s a Fortinet bug! There’s always a Fortinet bug!

This week’s episode is sponsored by open source identity provider Authentik. CEO Fletcher Heisler joins the show this week, and explains the journey of implementing SSO backed login on Windows, Mac and Linux. You’ll never guess which one was a few lines of PAM config, and which was a multi-month engineering project!

This episode is also available on Youtube.

Show notes

Is Oracle facing headwinds? After layoffs, its 4-decade veteran Chief Security Officer Mary Ann Davidson departs
Oracle CSO blasted over anti-security research rant - iTnews
New York lawsuit against Zelle creator alleges features allowed $1 billion in thefts | The Record from Recorded Future News
Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme – Krebs on Security
How we found TeaOnHer spilling users' driver's licenses in less than 10 minutes | TechCrunch
UK has backed down on demand to access US Apple user data, spy chief says
DNI Tulsi Gabbard on X: "As a result, the UK has agreed to drop its mandate for"
Hackers target Workday in social engineering attack
Russia curbs WhatsApp, Telegram calls to counter cybercrime | The Record from Recorded Future News
Hackers reportedly compromise Canadian House of Commons through Microsoft vulnerability | The Record from Recorded Future News
Norway police believe pro-Russian hackers were behind April dam sabotage | The Record from Recorded Future News
US agencies, international allies issue guidance on OT asset inventorying | Cybersecurity Dive
FortMajeure: Authentication Bypass in FortiWeb (CVE-2025-52970)
U.S. State Dept - Near Eastern Affairs on X: "He did not claim diplomatic immunity and was released by a state judge"
493 Cases of Sextortion Against Children Linked to Notorious Scam Compounds | WIRED
.:: Phrack Magazine ::.
Accenture to buy Australian cyber security firm CyberCX - iTnews

Risky Business #803 -- Oracle's CSO Mary Ann Davidson quietly departs

Risky Business