Risky Bulletin

Risky Business Media

Regular cybersecurity news updates from the Risky Business team...

Listen in podnod RSS feed Show website

100 episodes
Updated Friday

Episodes100

Newest first

April 22 · 9 min
Risky Bulletin: Former FBI official calls for terrorism designations for ransomware groups that target hospitals
A Former FBI official wants terrorism designations for some ransomware groups, China threatens the EU over new cybersecurity regulations, Europe commits to €180 million for a sovereign cloud and a novel data wiper was found in Venezuela during US military operations. Show notes Risky Bulletin: Former FBI official calls for terrorism designations for ransomware groups that target hospitals and critical infrastructure
April 20 · 33 min
Between Two Nerds: AI as the mythical 10x hacker
In this edition of Between Two Nerds Tom Uren and The Grugq take a deep dive into how a single hacker used OpenAI and Anthropic’s tools to help hack nine Mexican government organisations in quick time. This episode is also available on YouTube. Show notes Gambit security report
April 20 · 10 min
Risky Bulletin: ShinyHunters claim credit for Vercel hack
ShinyHunters claim credit for the Vercel hack, a malware strain attempted to sabotage Israel’s water system, the US government wants access to Mythos, and a Supreme Court hacker gets probation. Show notes Risky Bulletin: New malware tries to sabotage Israel's water system but fails because it's buggy
April 19 · 9 min
Sponsored: Nebulock on hunting shadow AI
In this Risky Business sponsor interview, Catalin Cimpanu talks with Sydney Marrone, Head of Threat Hunting at Nebulock, about hunting shadow AI agents on corporate networks. Show notes Sydney Marrone LinkedIn profile Hunting OpenClaw and Agentic AI Through Behavior
April 17 · 9 min
Risky Bulletin: NIST gives up enriching most CVEs
NIST says it won’t be enriching most CVEs, Russian hackers tried to disrupt a Swedish power plant, the EU releases its age verification app, and OpenAI announces its own private cyber model. Show notes Risky Bulletin: NIST gives up enriching most CVEs
April 16 · 20 min
Srsly Risky Biz: Time to ban sale of precise geolocation data
Tom Uren and Amberleigh Jack talk about a new Citizen Lab report into Webloc, a tool to identify and track mobile devices. It demonstrates how the collection and sale of mobile phone geolocation data presents privacy and national security risks. They also discuss a deep-dive into how a single hacker was able to breach nine Mexican government agencies in just weeks using AI assistants. They enabled the attacker to move much faster. This episode is also available on YouTube Show notes Citizen Lab's Webloc report Gambit's Mexican hack analysis
April 15 · 7 min
Risky Bulletin: Malicious LLM proxy routers found in the wild
Researchers find malicious LLM proxy routers, a fake Ledger crypto-wallet on the Mac App Store stole $10 million dollars, a ransomware crew leaks data from 38 law firms, and Google cracks down on back button hijacking. Show notes Risky Bulletin: Malicious LLM proxy routers found in the wild
April 13 · 29 min
Between Two Nerds: How AI will upset state cyber competition
In this edition of Between Two Nerds Tom Uren and The Grugq discuss how the rise of AI, which is very good at vulnerability and exploit development, will change the cyber security industry and competition between states. This episode is also available on YouTube Show notes The Grugq on X: People are freaking out about an impending flood of 0days Patrick Gray with former NSA and CIA cyber leaders
April 13 · 6 min
Risky Bulletin: France takes first steps to ditch Windows for Linux
France prepares to ditch Windows for Linux, OpenAI was impacted by the Axios supply chain attack, Rockstar Games gets hacked again, and Adobe patches a reader zero-day. Show notes Risky Bulletin: France takes first steps to ditch Windows for Linux
April 12 · 16 min
Sponsored: Corelight Agentic Triage helps defenders stay ahead
In this sponsored interview, Corelight’s Senior Director of Product Management, Dave Getman, tells James Wilson how Corelight Agentic Triage helps defenders stay ahead of AI-powered attacks. Corelight makes NDR hardware that runs a heavily optimised version of the Zeek network monitoring tool. Corelight Agentic Triage integrates with EDR and other data sources, and helps defenders make sense of all the data that NDR can generate. Show notes
April 10 · 6 min
Risky Bulletin: FBI extracted Signal chats from iPhone notifications logs
The FBI extracted Signal chats from iPhone notifications logs, Los Angeles police data was leaked online, a former Meta employee is under investigation for downloading private photos, and an Adobe Reader zero-day is being exploited in the wild. Show notes Risky Bulletin: FBI extracted Signal chats from iPhone notifications logs
April 9 · 19 min
Srsly Risky Biz: American diplomats to fight foreign propaganda... on X
Tom Uren and Amberleigh Jack talk about the State Department taking to X to counter foreign propaganda. US Secretary of State Marco Rubio dismantled the State Department’s counter-propaganda office when he took charge, but it turns out that giving adversary states free reign online is a bad idea. They also discuss how America’s lawful intercept systems are high value targets for Chinese hackers. It’s a big deal that part of the FBI’s lawful intercept system has been breached and it is high time that the security of these systems was reviewed. This episode is also available on Youtube. Show notes
April 8 · 8 min
Risky Bulletin: Cybercrime losses passed $20 billion last year
Cybercrime losses surpassed $20 billion last year, authorities disrupt a Russian router botnet that intercepted email logins, Iran hacks PLCs across the US, and exploitation hits ComfyUI and Flowise-AI-servers. Show notes Risky Bulletin: Cybercrime losses passed $20 billion last year
April 6 · 26 min
Between Two Nerds: Make cyber, not war
In this edition of Between Two Nerds Tom Uren and The Grugq discuss how Iran’s cyber forces have been used during the ongoing war so far. Show notes The Financial Times on the plan to kill Ali Khamenei Israel National News, 50 companies wiped
April 6 · 7 min
Risky Bulletin: New Cambodian law will put scam compound operators in prison for life
Cambodia prepares harsher prison terms for scam compound operators, an Italian museum moves valuables into a bank vault after a cyberattack, hackers exploit a bug in Vite-based apps and sites, and a supply chain attack hits an e-learning platform. Show notes Risky Bulletin: New Cambodian law will put scam compound operators in prison for life
April 5 · 17 min
Sponsored: Application allowlisting, but not as you know it
In this Risky Business sponsored interview, James Wilson chats with Airlock Digital co-founders, David Cottingham and Daniel Schell, about how they’re moving up the stack from file-based allowlisting to application-based allowlisting. David and Daniel explain how they’re making a seamless and quite logical move into application allowlisting, but with a new take on the technique. Show notes
April 3 · 8 min
Risky Bulletin: Russia will revoke licenses for unruly ISPs
Russia wants to revoke small ISP licenses, a cyberattack has disrupted access to US newspaper archives, Node.js pauses bug bounty program after its funding lapses and Apple backports patches for DarkSword. Show notes Risky Bulletin: Russia will revoke licenses for unruly ISPs
April 2 · 19 min
Srsly Risky Biz: America's next top (cyber) model
Tom Uren and Amberleigh Jack talk about how incredibly good AI models have gotten at finding and exploiting vulnerabilities. That will upend the cyber security industry and it has implications for state cyber organisations such as NSA and Cyber Command. They also discuss how broadband wireless communications links are critical in the war in Ukraine. After losing access to Starlink, Russian forces are doubling down on using equipment from American company Ubiquiti. This episode is also available on Youtube. Show notes
April 1 · 8 min
Risky Bulletin: Iranian password sprays came first, then came the missiles
Iranian password spraying targets Israel ahead of missile strikes, a major npm package gets hacked, Iran says it will bomb US tech firms in the Middle East, and Flint24 hackers are sentenced to prison in Russia. Show notes Risky Bulletin: Iranian password sprays came first, then came the missiles
March 30 · 26 min
Between Two Nerds: More secure but less safe
In this edition of Between Two Nerds Tom Uren and The Grugq talk about hacking and scams. While hacking is disappearing as a threat for most people, it is a new golden age for scammers. Even Tom has been scammed! This episode is also available on Youtube. Show notes We Are All Targets, How Renegade Hackers Invented Cyber War and Unleashed an Age of Global Chaos The $1.25 million scam

Risky Bulletin

Risky Bulletin: Former FBI official calls for terrorism designations for ransomware groups that target hospitals

Between Two Nerds: AI as the mythical 10x hacker

Risky Bulletin: ShinyHunters claim credit for Vercel hack

Sponsored: Nebulock on hunting shadow AI

Risky Bulletin: NIST gives up enriching most CVEs

Srsly Risky Biz: Time to ban sale of precise geolocation data

Risky Bulletin: Malicious LLM proxy routers found in the wild

Between Two Nerds: How AI will upset state cyber competition

Risky Bulletin: France takes first steps to ditch Windows for Linux

Sponsored: Corelight Agentic Triage helps defenders stay ahead

Risky Bulletin: FBI extracted Signal chats from iPhone notifications logs

Srsly Risky Biz: American diplomats to fight foreign propaganda... on X

Risky Bulletin: Cybercrime losses passed $20 billion last year

Between Two Nerds: Make cyber, not war

Risky Bulletin: New Cambodian law will put scam compound operators in prison for life

Sponsored: Application allowlisting, but not as you know it

Risky Bulletin: Russia will revoke licenses for unruly ISPs

Srsly Risky Biz: America's next top (cyber) model

Risky Bulletin: Iranian password sprays came first, then came the missiles

Between Two Nerds: More secure but less safe