Tom Uren

That didn't occur to me and I think it unlikely to be the *direct* cause. But there could be distrust because of the vibe surrounding export control and material from Snowden leaks etc.

Tbh, I was hoping someone might reply and tell me what the reason was!

Bonjour, Fellow IT Workers Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray. It's supported by Lawfare with help from the William and Flora Hewlett Foundation. This week's edit...

Good update from @tom.risky.biz about the evolving North Korea IT Worker threat and the pivot to Europe...and extortion.

Was great to get @tom.risky.biz’s thoughts on the Signal drama in today’s seriously risky biz

Audio: risky.biz/SRB114/
Video: risky.biz/video/srsly-...
Written analysis: risky.biz/the-signalga...

thanks for your thoughts in this one Nathan!

Outside America, Musk's X is a Foreign Influence Threat Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray. It's supported by Lawfare with help from the William and Flora Hewlett Foundation. This week's edit...

Fantastic piece by @tom.risky.biz --couldn't agree more.

news.risky.biz/outside-amer...

Have you watched or listened to Between Two Nerds with @tom.risky.biz and @thegrugq.bsky.social yet? You should!

Deny, degrade, discombobulate!

Audio: risky.biz/BTN109/

Video: www.youtube.com/watch?v=XEXg...

Thanks Bill. The audio got out of sync during editing but we pushed out a fixed version. I guess that came out after you’d downloaded or listened. Sorry!

I suppose the broader point of the whole episode is that compromising telcos' lawful intercept was not necessary. I think you broadly agree? I hope the CSRB will be reconstituted and we might find out actually what happened.

Re: complete coverage. According to reporting Salt Typhoon has been very targeted. When your goal is intel from specific devices, lack of global coverage is neither here nor there. 3/4

Re: protocol stacks being different and undocumented. That's a problem sigint agencies deal with and overcome. When an agency has potential access to presidential-level comms, complex protocols are just something they deal with. 2/4

Hi Konrad,

thanks for this, I'm sure you are right and we undersold the difficulty of intercepting calls, contractors & detecting badness, etc and it is good to get feedback. 1/4

YouTube video by Risky Business Media Srsly Risky Biz: Why two hats are better than two heads

My colleague @tom.risky.biz makes a compelling argument that two hats are better than two heads when it comes to how NSA and Cyber Command are run.

Written analysis:

risky.biz/two-hats-are...

Audio discussion:

risky.biz/SRB106/

Video discussion:

www.youtube.com/watch?v=RNw5...

The Latest Between Two Nerds podcats with @tom.risky.biz and @thegrugq.bsky.social is out now:

risky.biz/BTN105/

YouTube video by Risky Business Media Between Two Nerds: How loose is too loose?

Between Two Nerds with @thegrugq.bsky.social and @tom.risky.biz is now available on YouTube as well as all audio podcast platforms!

www.youtube.com/watch?v=VFuh...

The PLA's Cyber Operations Go Dark The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

This week's Seriously Risky Business looks at Russia's use of cybercriminals to support its war effort in Ukraine, new Australian cyber security legislation, and more. Read the weekly newsletter by @tom.risky.biz:

Expect More Covert Action Under Trump The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

This week's Seriously Risky Business looks at what a second Trump term may mean for cybersecurity, a UN draft cybercrime treaty, why Italy is a hub for spyware, and more. Read the weekly newsletter by @tom.risky.biz:

Expect More Covert Action Under Trump Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray. It's supported by Lawfare with help from the William and Flora Hewlett Foundation. This week's edit...

This is a good read from @tom.risky.biz on Trump's expected cybersecurity policy initiatives during his 2nd term

news.risky.biz/r/dc1486a0?m...

Russia's GRU Thugs Double Down on Recruiting Cybercrooks The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

This week's Seriously Risky Business looks at Russia's use of cybercriminals to support its war effort in Ukraine, new Australian cyber security legislation, and more. Read the weekly newsletter by @tom.risky.biz:

RUnet Under Attack: Cyber Conflict Implications for Russia - Hitachi Center for Technology and International Affairs Please join the Hitachi Center on Wednesday, October 9th at 12pm in Cabot 206 to hear from Oleg Shakirov from Johns Hopkins SAIS's research on the repercussions of cyber warfare in Russia.

How is cyber conflict viewed from Russia and what implications does it have?

I'm presenting this Wednesday at the The Fletcher School at Tufts University Hitachi Center. Stop by if you are around Boston.

myfletcher.tufts.edu/hctia/rsvp_b...

Neutering Volt Typhoon to Deter China The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

This week's Seriously Risky Business looks at Microsoft's update to its Secure Future Initiative, Indonesia's new cyber force, China's claim that Taiwan is running an influence campaign inside its borders, and more. Read the weekly newsletter by @tom.risky.biz:

How Chinese Illegal Gambling Infiltrates European Football The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

This week's Seriously Risky Business looks at how the Cyber Safety Review Board should investigate the CrowdStrike incident, the fragmenting of the ransomware ecosystem, Russian malware attacks against Ukraine, and more. Read the weekly newsletter by @tom.risky.biz:

Not just according to us!
www.foodrepublic.com/1318428/how-...

White House's Software Engineering Advice + Child Safety and Encryption Bans The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

This week's Seriously Risky Business looks at the recent White House report on the adoption of memory-safe programming languages, a £350k fine for the U.K. Ministry of Defence, and more. Read the weekly newsletter by @tom.risky.biz.

My take is that it is up to companies to use services that support proper archiving and storage. If Signal doesn't want to serve that market they don't have to do anything.

I know that AWS built that capability into Wickr, for example, so there are products that are tailored for that.

This week's Seriously Risky Business:
- The PRC's freewheeling cyber espionage market
- Disruption kicks off
- How state cyber groups use AI

Thanks to Dakota Cary and Dr Huong Le Thu for their thoughts.

listen: podcasts.apple.com/au/podcast/s...
or read: news.risky.biz/risky-biz-br...