Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Risky Business #793 -- Scattered Spider is hijacking MX records

May 28, 2025 1:04:52 12.12 MB ( 50.16 MB less) Downloads: 0

In this week’s edition of Risky Business Dmitri Alperovitch and Adam Boileau join Patrick Gray to talk through the week’s news, including:

  • EXCLUSIVE: A Scattered Spider-style crew is hijacking DNS MX entries and compromising enterprises within minutes
  • The SVG format brings the all horrors of HTML+JS to image files, and attackers have noticed
  • Brian Krebs eats a 6.3Tbps DDoS … ‘cause that’s how you demo your packet cannon
  • Law enforcement takes out Lumma Stealer, Qakbot, Danabot and some dark web drug traffickers
  • Iranian behind 2019 Baltimore ransomware mysteriously appears in North Carolina and pleads guilty
  • CISA’s leadership is fleeing in droves, even though the US needs them more than ever.

This week’s episode is sponsored by Thinkst Canary. Long time friend of the show Haroon Meer joins and talks through where he feels the industry is at, having just returned home from the AI-fueled hype at this year’s RSA conference.

This episode is also available on Youtube.

Show notes