Risky Business cover image

Risky Business

Risky Business #736 -- Azure misconfigurations are 2024's looming threat

Feb 13, 2024
Expert Feross Aboukhadijeh discusses the influx of malicious code in repositories. Topics include Azure misconfigurations, Ivanti exploits, Starlink in Ukraine, and Canada's Flipper Zero crackdown. The podcast delves into the challenges in detecting and blocking malicious packages, cybersecurity trends like crypto attacks, and Discord token theft. A mix of security news and insightful discussions.
53:18

Podcast summary created with Snipd AI

Quick takeaways

  • Malicious packages are a growing threat in JavaScript, Python, and Go ecosystems.
  • Lack of public threat information from major repositories like GitHub poses risks to users.

Deep dives

Significant Volume of Malicious Packages Detected Weekly

Sockit is identifying and blocking around 100 malicious packages every week in JavaScript, Python, and Go ecosystems. This includes various threats like typo squatting, dependency confusion, and malicious code, among others.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode