Risky Business Risky Business #828 -- The Coruna exploits are truly exquisite
80 snips
Mar 11, 2026 Toni de la Fuente, founder and CEO of Prowler, a cloud security scanner creator. He discusses Prowler’s enterprise features while keeping it open source. Conversation touches on the Karuna iOS exploit toolkit and its clever JS-to-payload chaining. They also cover exploit signing bypasses and the role of unusual tool choices and LLMs in modern malware development.
AI Snips
Chapters
Transcript
Episode notes
New US Cyber Strategy Emphasizes Offensive Posture
- The White House 'cyber strategy' is short on substance and reads like a focus on offensive quick wins rather than long-term defensive programs.
- Hosts warned the document leans into flashy offensive operations and vague promises to 'disable' threats beyond cyberspace.
Use Seized Criminal Proceeds For Victim Restitution
- Consider directing seized proceeds of cybercrime to restitution funds rather than general budgets.
- James flagged implementation questions like funding scale, distribution and whether restitution shifts incentives for victims.
Anthropic Restriction Seen As Self-Defeating
- Proposed executive action to ban Anthropic from US government contracts is viewed as political and counterproductive given Anthropic's competitive model quality.
- James argued Anthropic offers straighter answers and banning it hands advantage to other providers and hurts US innovation.