PODCAST · news
Risky Bulletin
by Risky Business Media
Regular cybersecurity news updates from the Risky Business team...
Episodes
-
Risky Bulletin: DataSuckers suspects arrested in Russia
Three DataSuckers hacking group suspects arrested in Russia, Al Jazeera employees targeted with Candiru spyware, the US disrupts 40 North Korean laptop farms, and an OpenAI employee was arrested for planting a spy device. Show notes Risky Bulletin: Russia arrests DataSuckers hacking group
-
Srsly Risky Biz: Russia's digital detox boomerang
Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for Ukraine’s retaliatory strikes. Karma! They also discuss how open-weight models are getting good at cyber tasks while safeguards are easily...
-
Risky Bulletin: Spyware chip found in Ledger crypto-wallets
Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in multiple countries following a cyberattack, and the EU wants smart glasses to beep loudly when they’re recording. Show notes Risky Bulletin: Spyware...
-
Between Two Nerds: The FBI and ShinyHunters are the same
In this edition of Between Two Nerds Tom Uren and The Grugq examine how ShinyHunters and the FBI both deceived themselves into believing they were immune to cyber threats. This episode is also available on YouTube. Show notes Krebs On Security FBI Director Kash Patel on ShinyHunters Brett...
-
Risky Bulletin: ShinyHunters suspects arrested in US and Jordan
Two ShinyHunters suspects arrested in Jordan and the US, hackers breach TLD registrars to get valid Google certs, Japanese authorities arrest a Qilin ransomware member and Google suspends its open-source bug bounty program after a flood of AI bug reports. Show notes Risky Bulletin: ShinyHunters...
-
Sponsored: AI is attacking… it needs to defend, too
In this Risky Business sponsored interview James Wilson chats with Prowler’s founder and CEO Toni de la Fuente about how AI now allows pretty much anyone to vibe-code “killer apps”. These custom apps are often internal for organisations and hosted on the cloud. The pair discuss why developers…
more -
Authorities dismantle KillSec group
Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts. Show notes Risky Bulletin: Authorities dismantle KillSec group, arrest members across Europe
-
Srsly Risky Biz: “Rogue AI” isn’t going anywhere
Amberleigh Jack and James Wilson chat about OpenAI agents’ recent escapades into Australian government websites. OpenAI has promised to “rebuild trust with Australians” but we’re likely getting a glimpse into the new normal, here. They also discuss how the ShinyHunters hacking group has found...
-
ShinyHunters suspect arrested in the Netherlands
A ShinyHunters suspect has been arrested in the Netherlands, Apple fixes an iOS zero-day found by Meta, recent Citrix zero-days see mass exploitation within hours and NVIDIA launches an AI sandboxing platform. Show notes Risky Bulletin: Sanctions force CAs to revoke TLS certs in Iran, Russia
-
Between Two Nerds: The AI crime machine
In this edition of Between Two Nerds Tom Uren and The Grugq talk about the rise of fully automated LLM-driven hacking campaigns among criminals and even state hacking groups. For those with the right risk appetite, a move fast and break things hacking approach using AI can pay off. This episode…
more -
Risky Bulletin: Intel ends paid bug bounties
Intel removes cash rewards from its bug bounty program, OpenAI agents probed dozens of organizations, Fraudsters scam €95 million from an Italian bank and Bitget is hacked for $350 million. Show notes Risky Bulletin: Intel ends paid bug bounties
-
Sponsored: Robo-Burp is coming for your web apps
In this Risky Business sponsored interview James Wilson chats to Kieron Hughes and Andrzej Matykiewicz from PortSwigger about the company’s latest AI pen-testing product, Burp AT. The model has different levels of autonomy modes and is natively integrated with Burp Suite so once it finds...
-
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol
A major vulnerability has been found in the ancient TACACS+ networking protocol, Australia’s Prime Minister claims an OpenAI agent hacked the country’s Medicare website, OpenAI gives Ukraine access to its Daybreak cyber-defense program and the UK will establish an anti-disinformation center. Show...
-
Srsly Risky Biz: Bring on the AI lawsuits
Tom Uren and Patrick Gray talk about US Treasury Secretary Scott Bessent ruling out liability exemptions for AI companies. Its a good move. Leaving the companies on the hook keeps the pressure on them to do better with their cyber security and testing controls. They also discuss a Russian...
-
Risky Bulletin: Team Cymru unmasks shady Chinese proxy network
A network of 10,000 AI servers is masking malicious Chinese AI activity, Ukrainian hackers leak Russia’s naval secrets, ShinyHunters hacks the FBI, and the EvilTokens phishing service is disrupted by tech companies. Show notes Risky Bulletin: Team Cymru unmasks shady Chinese proxy network
-
Between Two Nerds: Real-time cyber defence
In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether there is such a thing as real-time cyber defence. Will agentic AI save us from hacking AI? This episode is also available on YouTube. Show notes Clem Delangue | X
-
Risky Bulletin: Gemini finally did some crimes
Google’s Gemini hacked three companies, hackers claim a breach of Russia’s election commission, OpenAI was behind RubyGems’ May incident, and the Coast Guard and FBI board two ships to investigate cyberattacks. Show notes Risky Bulletin: Gemini hacked three companies too
-
Sponsored: SpecterOps on the impact of AI agents on BloodHound
In this Risky Business sponsored interview, Catalin Cimpanu talks with Justin Kohler, Chief Product Officer at SpecterOps. Justin explains how Entra Agent ID can introduce new identity relationships and potential attack paths. Show notes Justin Kohler on LinkedIn SpecterOps, Introduction to...
-
Risky Bulletin: Anthropic agents went hacking again
Anthropic agents went hacking again, South Korea increases its data breach fines, Apple notifies three Turkish ministers of mercenary spyware attacks, and CISA is ready to hire 250 staff. Show notes Risky Bulletin: Anthropic agents went hacking again
-
Srsly Risky Biz: America's drivers licence breach is a national security disaster
Tom Uren and James Wilson talk about how Chinese intelligence services will take advantage of a massive breach of 150 million American drivers licences. They also discuss the steps the US military is taking to counter adtech device tracking. It’s too slow and not enough. Finally, they talk about...
-
Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal
Ukraine’s top prosecutor resigns amid a scam call center scandal, the US accuses Chinese AI companies of industrial-scale distillation, a cyberattack hits medical practices in Luxembourg, and the Liquid Network attacker returns some stolen Bitcoin, but keeps a $50 million bounty. Show notes Risky...
-
Between Two Nerds: Can AI defend critical infrastructure?
In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether AI will help cyber defence in critical infrastructure and organisations that are below the cyber poverty line. This episode is also available on YouTube. Show notes Heather Adkins X post Clem X post Secure connectivity...
-
Risky Bulletin: BEC campaign steals €35 million from French notaries
Hackers steal €35 million euros from French notaries, OpenAI agents hacked a German wiki, a new bill will allow the Pentagon to use cyber contractors, and the Five Eyes members tell hacked companies to drop PR spin. Show notes Risky Bulletin: BEC campaign steals €35 million from French notaries
-
Sponsored: Authentik is rethinking PAM for AI agents
In this Risky Business sponsored interview, James Wilson chats with Authentik Security CEO Fletcher Heisler about how AI is driving a need for privileged access management to adapt. Fletcher explains Authentik’s approach: each agent has its own identity, begins with no permissions and is tied to…
more -
Risky Bulletin: Russia tells data centers to deploy drone defenses
Russia tells data centers to deploy drone defenses, Dropbox discloses a security breach, a new spyware wave hits Serbia, and CISA scraps six free cybersecurity assessment programs. Show notes Risky Bulletin: Russia tells data centers to deploy drone defenses
-
Srsly Risky Biz: China's botnets are worth disrupting
Tom Uren and James Wilson talk about China’s long-term shift to getting private companies to build botnets for cyberespionage. A disruption effort from the US this week is good news, but China has been using these networks for a surprisingly long time and will rebuild. They also discuss a hack at...
-
Risky Bulletin: BGP hijack delivers malicious Virtualizor updates
A BGP hijack delivered malicious Virtualizor updates, the White House launches Project Watershed 250, Indian authorities take down a Telegram doxing bot, and Composer packages deliver iOS badness. Show notes Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates
-
Between Two Nerds: The perfect hacker
In this edition of Between Two Nerds Tom Uren and The Grugq talk about how AI is the perfect hacker, but what makes it perfect for states is the opposite of what makes it perfect for criminals. This episode is also available on YouTube. Show notes Bitdefender Labs report on SilkParasite OpenAI on...
-
Risky Bulletin: New powers for Dutch intelligence services
Dutch intelligence services will get new powers, a security expert has been arrested in Israel for hacking, the BTS hacker gets a 20 year sentence in South Korea, and an AfD politician in Germany has been linked to a Russian cybercrime hosting service. Show notes Risky Bulletin: Dutch intel...
-
Sponsored: Attackers need to be right more than once
In this Risky Business sponsored interview, James Wilson chats with Dropzone AI’s founder and CEO Edward Wu to debunk the adage, “an attacker only has to be right once”. Modern intruders need to be successful across multiple steps before actually reaching an organisation’s “crown jewels”. The…
more -
Risky Bulletin: Two TeamPCP members arrested in Australia
Two members of TeamPCP arrested in Australia, Qilin hits the US firearms agency, America seizes two more Chinese botnets, CISA says most cyber activity is opportunistic. Show notes Risky Bulletin: Two TeamPCP members arrested in Australia
-
Srsly Risky Biz: China's AI-Enabled APT Operations Are Getting Interesting
Tom Uren and James Wilson talk about evidence that Chinese APT groups are using AI in a really sensible way, to beef up their malware arsenal. This will make it harder for threat intel firms to cluster activity for attribution. They also discuss the US disrupting Iranian hackers by revealing that...
-
Risky Bulletin: Russia starts blocking DoH and DoT
Russia begins blocking the DoH and DoT protocols, Russian hacktivists leak Spanish police and military personnel data, China and South Korea detain a vishing gang, and AI malware is not that common. Show notes Risky Bulletin: Russia starts blocking DoH and DoT
-
Between Two Nerds: Attribution is dead, long live attribution
In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether the increasing use of AI will make it harder for forensics teams to determine who is responsible for a hack. This episode is also available on YouTube. Show notes Florian Roth X post Phrack issue 59, Defeating Forensic...
-
Risky Bulletin: Expired credit cards can be used for malicious transactions
Expired credit cards can be used for malicious transactions, Iranian hackers shut down a UK power plant, the Lazarus Group hacks South Korea’s Presidential Office, and an Android malware strain is infecting smart cars. Show notes Risky Bulletin: Expired cards can be used for new transactions
-
Sponsored: Passkeys won’t stop authorisation phishing
In this Risky Business sponsored interview, James Wilson chats with Luke Jennings, Push Security’s VP of Research, about how stronger authentication is pushing attackers towards the authorisation layer. Device code phishing is on the rise. Luke explains how these attacks can survive passkeys and...
-
Risky Bulletin: US warns of AI-assisted attacks against Siemens PLCs
The US warns of AI-aided attacks against Siemens PLCs, hackers breach Latvia’s road traffic agency, a new hacking tool enrolls an attacker’s passkey to your account, and academics find source code overlaps between Geedge devices and China’s Great Firewall Show notes Risky Bulletin: Academics find...
-
Srsly Risky Biz: Trump's private hacker memo is the right idea
Tom Uren and James Wilson talk about President Donald Trump’s memo enlisting the US private sector to tackle cybercriminals. The initiative gets the big idea right: traditional law enforcement approaches have not worked against cybercriminals so the government has turned to disruption operations,...
-
Risky Bulletin: Slovakia finds Russian backdoors on its speed cameras
Slovakia finds Russian backdoors on its speed cameras, French police used a public exploit to hack EncroChat, Microsoft delays Exchange updates due to a deluge of AI bugs, and a ransomware-affiliate poses as a data recovery firm. Show notes Risky Bulletin: Slovakia finds Russian backdoor in…
more -
Between Two Nerds: The eye of Sauron
In this edition of Between Two Nerds Tom Uren and The Grugq discuss The Offense Death Cycle, a paper looking at how to take advantage of a defender’s ability to control a network to discover intruders. This episode is also available on YouTube. Show notes The Offense Death Cycle: Proactive...
-
Risky Bulletin: The EU publishes its upcoming cybersecurity standards
The EU publishes its upcoming cybersecurity standards, hackers breach France’s tax agency, threat actors exploit a GeoServer zero-day hours after disclosure, and an exploit unlocks old AMD CPUs with one instruction. Show notes Risky Bulletin: The EU publishes its upcoming cybersecurity standards
-
Sponsored: What npm 12 fixes… and what it doesn’t
In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code...
-
Risky Bulletin: US will let private companies carry out offensive cyber ops
The White House will let private companies carry out offensive cyber ops, an AI hacking campaign breached Taiwan’s government, a macOS bug was exploited over the internet to drop cryptominers, and Kenya orders internet cafes to store logs. Show notes Risky Bulletin: White House lets private...
-
Srsly Risky Biz: Data extortion is booming. Hooray!
Tom Uren and James Wilson talk about the cybercrime ecosystem shifting towards data theft extortion, stealing sensitive data and extracting ransoms from victims by threatening to leak it. For organisations whose reputation is very important to them, data leaks are a bigger threat than having…
more -
Risky Bulletin: Russian hackers jump on the fake job interview train
Russian state hackers adopt fake job interview tactics, a Portuguese man will face trial for developing a malicious AI chatbot, an AI assistant hacks an Australian gym, and OpenAI releases cyber models for blue teams. Show notes Risky Bulletin: Russian hackers adopt the fake job interview tactics
-
Between Two Nerds: The cyber resistance!
In this edition of Between Two Nerds Tom Uren and The Grugq talk about examples of cyber resistance and whether they achieve their goals. This epsiode is also available on YouTube. Show notes The Record on the Belarus Cyber Partisans BTN6, How Ukraine could use its IT army
-
Risky Bulletin: Two law firms pay giant ransoms
Two American law firms pay multi-million dollar ransoms, a Metabase zero-day is being used in data theft attacks, Russian hackers disrupted a second power plant in Poland, and there’s a remote code execution bug in WordPress… again! Show notes Risky Bulletin: Pwnie Awards 2026 winners
-
Sponsored: Island's expansion to SASE and enterprise AI
In this Risky Business sponsored interview, Catalin Cimpanu talks with Michael Leland, Field CTO at Island, about the company’s seamless expansion into SASE and enterprise AI. Show notes About Michael Leland
-
Risky Bulletin: A Meta AI model also escaped a testing sandbox
A Meta AI model also escaped a testing sandbox, a cyberattack disrupts ports in North Carolina, the Philippines will establish a cybersecurity agency, and a Ransom Cartel admin gets 16 years in prison. Show notes Risky Bulletin: Meta's AI joins Anthropic and OpenAI in the hacky-hacky
-
Srsly Risky Biz: Being a North Korean hacker is about to be less fun
Tom Uren and James Wilson talk about North Korea losing control over some of its hacker workforce. Expect some tightening of controls and oversight, and perhaps even a reduction in the country’s ransomware operations. They also discuss escalating attacks on American water infrastructure. Although...
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
Regular cybersecurity news updates from the Risky Business team...
HOSTED BY
Risky Business Media
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does Risky Bulletin have?
Risky Bulletin currently has 100 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is Risky Bulletin about?
Regular cybersecurity news updates from the Risky Business team...
How often does Risky Bulletin release new episodes?
Risky Bulletin has 100 episodes. Check the episode list to see recent publication dates and frequency.
Where can I listen to Risky Bulletin?
You can listen to Risky Bulletin on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts Risky Bulletin?
Risky Bulletin is created and hosted by Risky Business Media.
URL copied to clipboard!