“If it is too good to be true….it is probably a fraud!”

Ron Weber.

Sharing a couple of interesting topics from recent Risky Business podcasts:

• In Risky Business Soapbox, Patrick Gray talks to Material Security’s CEO and co-founder Abhishek Agrawal about the security problems inherent in modern collaboration tools.  While Material Security’s solution is interesting, I think the insights from the broader discussion are also worth listening to, particularly the concept of limiting the “blast radius” from a compromise of email or other commonly used collaboration tools. This is a great example of designing a control with minimal inconvenience to legitimate users while significantly impeding an attacker.
• In Risky Business News, Adam Boileau and Tom Uren discuss the increasing regulatory focus on the allocation of liability between financial institutions and victims of fraud involving phishing scams.  While traditional payment instruments such traveller’s cheques and credit cards have well-established rules to balance accountability and liability for fraud losses, this is still an evolving area in person-to-person direct payments and is likely to be subject to further regulation in multiple jurisdictions.