Risky Business #859 -- ARTEX damage approaches crisis levels

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including:

Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis

The French government attributes freezer hacks to Iran’s IRGC

Rob Joyce was right and the breachpocalypse has exhausted global IR resources

The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice!

Much, much more!

This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical again. Raj used OpenAI LLMs to bypass that SMB signing and come up with some unnatural ldap tricks as well. Those techniques are now patched, but Raj learned a lot about parallel discovery in the AI age.

This episode is also available on YouTube