Risky Bulletin

Risky Business Media

Regular cybersecurity news updates from the Risky Business team...

Listen in PodNod RSS feed Show website

100 episodes
Updated Friday

Episodes100

Newest first

July 3 · 9 min
Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices
FatFs bugs enable physical access attacks on industrial equipment, a clever password spraying attack bypasses M365 MFA, an AI agent is deploying ransomware in live attacks, and a webinar platform sues two security firms over bad IOCs. Show notes Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices
July 2 · 30 min
Srsly Risky Biz: America won't beat the distillation ecosystem
Tom Uren and James Wilson talk about Chinese AI labs stealing the special sauce of American AI models in ‘distillation attacks’. These attacks are fed by a grey market in which Chinese consumers buy access to American models, where one of the byproducts is logs of user requests and responses. These make wonderful inputs into distillation attacks and the whole market might be subsidised by Chinese AI Labs paying for these logs. They also discuss the possibility that last year’s hack of Jaguar Land Rover was caused by a group of Russian hackers. Was it Russians? Was it state-directed or endorsed? Who knows, but even the possibility that it was has some benefits for the Russian state. This episode is also available on YouTube Show notes
July 1 · 9 min
Risky Bulletin: Researcher drops giant cache of zero-days
An anonymous researcher has dropped a giant cache of zero-day exploits, a sensitive DHS network got hacked, the US Supreme Court restricts geofence warrants, and security firm Huntress has denied accusations of a malicious insider. Show notes Risky Bulletin: Researcher drops giant cache of zero-days
June 29 · 39 min
Between Two Nerds: Set cyberspace ablaze
In this edition of Between Two Nerds, Tom Uren and The Grugq discuss whether cyber organisations should actually be separated from Signals Intelligence organisations. The Grugq argues that having cyber expertise subordinate to intelligence collection means that many opportunities are never explored. This episode is also available on YouTube. Show notes All the Shah's Men - Wikipedia
June 29 · 7 min
Risky Bulletin: White House asks OpenAI to restrict GPT 5.6
The White House asks OpenAI to keep a tight grip on ChatGPT 5.6, the US Secret Service made some appalling OpSec mistakes, AMD has reintroduced a CPU security feature after consumer backlash, and an Iranian APT operator has been arrested in Montenegro. Show notes Risky Bulletin: Microsoft disrupts StegoAd operation
June 29 · 19 min
Sponsored: Corelight’s blueprint for AI-era defence
In this sponsored interview James Wilson chats with Corelight’s VP of Product Vijit Nair about defence strategies for the AI era. When agents can find and exploit vulnerabilities at machine speed, you need to balance between proactive and reactive measures. On the proactive side, you need modelling of assets and threats. On the reactive side you’ll need telemetry so you can act quickly if a threat becomes a reality. Corelight makes NDR hardware that runs a heavily optimised version of the Zeek network monitoring tool. Combined with its Agentic Triage product, customers can detect threats in their networks, and monitor the effectiveness of their mitigation strategies. Show notes
June 26 · 10 min
Risky Bulletin: Operation Endgame dismantles Amadey and StealerC
Law enforcement dismantles two more malware operations, Japan’s army used infected USB drives, Anthropic accuses Alibaba of distillation attacks, and Australia finds “digital dynamite” on critical networks. Show notes Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC
June 25 · 28 min
Srsly Risky Biz: Open weight models make the Mythos debate moot
Tom Uren and James Wilson talk about the Five Eyes cyber security agencies warning about the arrival of AI-enabled cyber threats. The call-to-action is driven by the recognition that it is no longer possible to limit AI’s offensive cyber security capabilities to benign actors. The genie is out of the bottle, regardless of export controls on frontier models. They also discuss the progress of Operation Endgame, the multinational joint operation that has been disrupting the cybercriminal ecosystem. It’s been a great success, but criminal enterprises bounce back. Keeping a lid on cybercrime will require continuous disruption programs. This episode is also available on YouTube. Show notes
June 24 · 8 min
Risky Bulletin: FortiBleed hacks involved a lot of traffic sniffing
The FortiBleed hacks are worse than a credentials leak, a new White House executive order sets out a hard 2031 post quantum cryptography deadline, Meta leaks employee keystroke data, and a third of Samsung and LG TVs act as proxies. Show notes Risky Bulletin: The FortiBleed incident is so much worse than a simple credentials leak
June 23 · 18 min
Sponsored: Trail of Bits and OpenAI patch the planet
In this sponsored interview James Wilson chats with Trail of Bits founder and CEO Dan Guido about its newly announced partnership with OpenAI. Together, they’ve started a new initiative called “Patch the Planet” to support open source maintainers. Being an open source maintainer is more difficult than ever. Just using frontier models to keep up with all the bug reports isn’t enough. Trail of Bits wants to help maintainers by combining its deep cybersecurity expertise with OpenAI’s GPT 5.5 Cyber. As Dan points out in this interview, this isn’t just about helping maintainers find and fix bugs. They’re spending just as much time on SDLC improvements, architecture changes, and the foundations needed to make open source sustainable in the AI era. Show notes
June 22 · 35 min
Between Two Nerds: The PRC vs AI
In this edition of Between Two Nerds Tom Uren and The Grugq discuss the idea that the People’s Republic of China has mobilised its influence operations against the construction of US data centres and its build out of AI capacity. This episode is also available on YouTube. Show notes Red Rap Two Sessions Get on the Beers
June 22 · 8 min
Risky Bulletin: Klue breach impacts security firms
A data breach at business analytics platform Klue spreads to security firms, a hacker breaches Brazil’s national alert system, North Koreans are behind the Mastra supply chain attack, and a new, unfixable vulnerability has been found in Apple’s A12 and A13 chips. Show notes Risky Bulletin: Klue breach impacts security firms
June 19 · 11 min
Risky Bulletin: Creds for 74,000 Fortinet devices leaked
A LOT of Fortinet creds have leaked online, Canada’s spy agency allowed to remove a botnet from Canadian devices, a supply chain attack hits the Mastra AI framework, and Europol disrupts SocGolish. Show notes Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices
June 18 · 31 min
Srsly Risky Biz: Anthropic has artificial, but not emotional, intelligence
Tom Uren and James Wilson talk about Anthropic rolling out its latest models only to have them effectively banned by the US government within days. Although the administration’s process for assessing new models is, ahem, amorphous, Anthropic is doing itself no favours by dismissing its concerns. The company needs to show some emotional intelligence and learn how to manage upwards. They also discuss Section 702 Foreign Intelligence Surveillance Act collection. The law authorising it has lapsed amidst political shenanigans, but it looks like collection can continue until next year. Plenty of time for kicking of political footballs! This episode is also available on YouTube Show notes
June 17 · 10 min
Risky Bulletin: China arrests Silver Fox cybercrime group suspects
66 members of the Silver Fox cybercrime group arrested in China, the EU will help Ukraine in the event of a major cyberattack, MS-ISAC loses 70% of its members after a DHS funding cut, and S-BOMs are still not widely adopted. Show notes Risky Bulletin: China arrests Silver Fox cybercrime group suspects
June 15 · 28 min
Between Two Nerds: Why NATO and cyber don't mix
In this edition of Between Two Nerds Tom Uren and The Grugq talk about how NATO is set up to deter conventional conflict, and how that approach is fundamentally unsuited for ongoing, everyday cyber operations that are intended to confound adversaries. This episode is also available on YouTube. Show notes
June 15 · 11 min
Risky Bulletin: Arch Linux supply chain attack hits 1,900 packages
Almost 2,000 Arch Linux packages have been infected with malware in a supply chain attack, FISA surveillance powers expire for the first time since 2008, the FBI takes down a Chinese phishing service, and a major supply chain attack hits the WordPress ecosystem. Show notes Risky Bulletin: Arch Linux supply chain attack spreads to 1,900+ AUR packages
June 14 · 19 min
Sponsored: Ent on using AI to track human behavior on the endpoint
In this Risky Business sponsored interview, Catalin Cimpanu talks with Brandon Dixon, co-founder and CTO of Ent AI, about the company’s innovative use of local LLMs to track user behavior on the endpoint, and add context to suspicious events to detect or prevent malicious activity. Show notes Brandon Dixon on LinkedIn
June 12 · 9 min
Risky Bulletin: CISA tightens patching rules amid bug deluge
CISA changes federal patching rules due to AI, a House Republican was hacked by Russia, ShinyHunters go on an Oracle hacking spree, and npm will block auto-run install scripts by default. Show notes Risky Bulletin: In the age of AI, CISA changes federal patching rules
June 12 · 15 min
Sponsored: Understanding CI/CD attack paths
In this sponsored episode, James Wilson chats with SpecterOps CTO Jared Atkinson about the central role that GitHub has played in recent supply chain compromises. GitHub is where code gets built, tested, and shipped to devices, cloud, and on-prem environments. Understanding the paths an attacker can use to get into GitHub, and where they can pivot to from there, is essential to securing your GitHub repos and CI/CD pipelines. Show notes

Risky Bulletin

Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices

Srsly Risky Biz: America won't beat the distillation ecosystem

Risky Bulletin: Researcher drops giant cache of zero-days

Between Two Nerds: Set cyberspace ablaze

Risky Bulletin: White House asks OpenAI to restrict GPT 5.6

Sponsored: Corelight’s blueprint for AI-era defence

Risky Bulletin: Operation Endgame dismantles Amadey and StealerC

Srsly Risky Biz: Open weight models make the Mythos debate moot

Risky Bulletin: FortiBleed hacks involved a lot of traffic sniffing

Sponsored: Trail of Bits and OpenAI patch the planet

Between Two Nerds: The PRC vs AI

Risky Bulletin: Klue breach impacts security firms

Risky Bulletin: Creds for 74,000 Fortinet devices leaked

Srsly Risky Biz: Anthropic has artificial, but not emotional, intelligence

Risky Bulletin: China arrests Silver Fox cybercrime group suspects

Between Two Nerds: Why NATO and cyber don't mix

Risky Bulletin: Arch Linux supply chain attack hits 1,900 packages

Sponsored: Ent on using AI to track human behavior on the endpoint

Risky Bulletin: CISA tightens patching rules amid bug deluge

Sponsored: Understanding CI/CD attack paths