Skip to content
Sign in
Artwork for Risky Bulletin
NewsTech NewsTechnology

Risky Bulletin

Risky Business Media

#22 in News this week

Regular cybersecurity news updates from the Risky Business team...

Play
Open in
  • 170 episodes
  • daily
  • Avg 16 min
  • English

Episodes 170

NewestOldestLongest
All20Unplayed20In progress0Played0
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • Today · 8 min

    Risky Bulletin: Hackers brick Chinese EVs in Russia

    Hackers brick Chinese EVs in Russia, a second wave of hacks defrost European supermarket freezers, the US boots Acronis from government networks and the major distros patch a Linux kernel RCE. Show notes Risky Bulletin: Hackers lock out and extort Li Auto EV owners in Russia

  • Monday · 31 min

    Between Two Nerds: Finding bugs does not mean security

    In this edition of Between Two Nerds Tom Uren and The Grugq discuss CISO’s expectations and priorities regarding budgets and what they will spend their money on. AI features heavily in 2027 priorities, but what will it deliver? This episode is also available on YouTube. Show notes The New Security Agenda

  • Monday · 10 min

    FBI confirms North Korea behind Binance hack

    The FBI links the Binance hack to North Korea, game developers are being extorted with game-cloning threats, the Belarusian CyberPartisans hack Russia’s statistics service and Apple sends new mercenary spyware notifications. Show notes Risky Bulletin: Game devs are being extorted with AI game-cloning threats

  • Sunday · 12 min

    Sponsored: Sublime Security on the rise of ISC calendar phishing

    In this Risky Business News sponsor interview, Catalin Cimpanu talks with Luke Wescott, Threat Detection Engineer at Sublime Security. Luke talks through the rise of calendar-based phishing campaigns over the past year and the reasons behind it. Show notes Luke Wescott on LinkedIn Sublime observes massive uptick in ICS phishing and calendar-based malware attacks

  • Friday · 9 min

    Billions stolen in Binance hack

    Billions stolen from Binance in a crypto hack, Last week’s PHP2Shell bugs are being exploited to hack Palo Alto Networks firewalls, The Brotli bugs also get a run, Belarusian state hackers carry out a wiper attack, and a hacker leaks the data of 41,000 DHS employees. Show notes Risky Bulletin: Belarusian state hackers get on the data-wiping train

  • Thursday · 19 min

    Srsly Risky Biz: Chinese AI can learn to love the West

    Tom Uren and Amberleigh Jack talk about new research that shows that Chinese open-weight AI models can be reeducated to remove pro-CCP bias. Good news for American businesses that want cheap AI, but we suspect that many knives will still be out for Chinese open-weight models. They also discuss the near-misses from the PHP and Brotli bugs. We collectively dodged the bullet so that we only got grazed, but the good luck won’t last forever. Finally, Tom looked at CISA’s 2030 strategy. Amazingly, it doesn’t really mention AI at all. Bizarre! This episode is also available on YouTube. Show notes

  • October 28 · 7 min

    Risky Bulletin: Moldovan public services crippled by cyberattack

    Moldova takes down more than 80 public services after a cyberattack, the White House launches a new cybersecurity pilot program, South Korea arrests an AI-assisted cybercrime ring, and the Electrum wallet patches a crypto-stealing bug. Show notes Risky Bulletin: Moldova takes down 80+ public services after cyberattack

  • October 26 · 27 min

    Between Two Nerds: Why frontier lab security will always suck

    In this edition of Between Two Nerds Tom Uren and The Grugq talk about security culture. The PHP foundation seems to have had a change of heart about security, but what are the chances that OpenAI or other frontier AI labs will start to take it seriously? This episode is also available on YouTube. Show notes Today's PHP Security Release, and How We're Strengthening PHP Security Stefan Esser's month of PHP bugs Andon cord

  • October 26 · 7 min

    Risky Bulletin: Brotli RCE is wrecking what's left of the internet

    While everyone was distracted by PHP, another RCE has been wrecking the internet, Australia’s ABC wipes some staff devices, a third PHP RCE is incoming and researchers discover a new DDoS attack vector in HTTP/3. Show notes Risky Bulletin: While everyone was looking at PHP, another RCE is wrecking what's left of the internet

  • October 25 · 18 min

    Sponsored: Should your threat hunt become a detection?

    In this Risky Business sponsored interview James Wilson chats to Nebulock’s Head of Detection Strategy Alex Hurtado about the company’s threat hunting evaluation framework, GATES. The pair talk through the five steps of Nebulock’s new acronym, and how they help remove gut feelings and guesswork when asking the question: “Should this threat hunt find be promoted to a detection rule”? Show notes The GATES Method: when a hunt becomes a detection

  • October 22 · 18 min

    Srsly Risky Biz: OpenAI's Kazoo-Grade Spying Incident

    Tom Uren and Amberleigh Jack talk about the weird bugging incident at OpenAI. It doesn’t look at all like it was normal state-backed espionage, but there are still good reasons the frontier labs should ensure that their crown jewels are safe. They also discuss how cybercriminals are rapidly evolving their use of AI. The technology and harnesses available are getting better and the criminals are also discovering business models where they can sit back while AI automates most of the work. This episode is also available on YouTube. Show notes

  • October 21 · 10 min

    Risky Bulletin: Hacker hijacks 10% of Tor exit nodes

    A hacker hijacks more than 10% of Tor’s exit nodes, a second ransomware negotiator has been linked to ShinyHunters, a Chinese crime ring hacked Staples, and a hacker leaks emails from German far-right party AfD. Show notes Risky Bulletin: Hacker hijacks 10% of Tor exit nodes

  • October 19 · 23 min

    Between Two Nerds: Why AI will mean infinite bugs

    In this edition of Between Two Nerds Tom Uren and The Grugq discuss whether the rise of AI coding will result in more or less bugs and whether it will ultimately make software more secure. This episode is also available on YouTube. Show notes

  • October 19 · 11 min

    Risky Bulletin: Linux patches PwnEscape KVM vulnerability

    A serious vulnerability lets attackers escape Kernel-based virtual machines, OpenCode users become collateral damage in a distillation attack, supply chain incidents hit AOMEI and ConnectWise and Intel will discontinue SGX. Show notes Risky Bulletin: PwnEscape vulnerability lets you escape KVM

  • October 18 · 27 min

    Sponsored: Agents don’t care about human ideas of right and wrong

    In this Risky Business sponsored interview James Wilson chats with Sondera co-founder and CEO, Josh Devon, about how AI agents are highly capable, but they’re not the best rule followers or decision makers. The pair find themselves in the philosophical weeds about why agents lack the ability to determine, or care about, right from wrong before getting into how Sondera’s autoformalisation, that gives specific behaviour guardrails to agents, can help. Show notes

  • October 16 · 10 min

    Risky Bulletin: DataSuckers suspects arrested in Russia

    Three DataSuckers hacking group suspects arrested in Russia, Al Jazeera employees targeted with Candiru spyware, the US disrupts 40 North Korean laptop farms, and an OpenAI employee was arrested for planting a spy device. Show notes Risky Bulletin: Russia arrests DataSuckers hacking group

  • October 15 · 20 min

    Srsly Risky Biz: Russia's digital detox boomerang

    Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for Ukraine’s retaliatory strikes. Karma! They also discuss how open-weight models are getting good at cyber tasks while safeguards are easily bypassed. There is no chance of international regulation that will rein in these models, so it is time to loosen cyber safety restrictions on American frontier models. This episode is also available on YouTube Show notes

  • October 14 · 6 min

    Risky Bulletin: Spyware chip found in Ledger crypto-wallets

    Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in multiple countries following a cyberattack, and the EU wants smart glasses to beep loudly when they’re recording. Show notes Risky Bulletin: Spyware chip found in Ledger crypto-wallets

  • October 12 · 35 min

    Between Two Nerds: The FBI and ShinyHunters are the same

    In this edition of Between Two Nerds Tom Uren and The Grugq examine how ShinyHunters and the FBI both deceived themselves into believing they were immune to cyber threats. This episode is also available on YouTube. Show notes Krebs On Security FBI Director Kash Patel on ShinyHunters Brett Leatherman, the FBI Assistant Director for Cyber on ShinyHunters Hacker's Manifesto, 1986 FBI and Ubiquitous Technical Surveillance FBI padding the top 10 list arrest numbers

Showing 1–20 of 170 episodes