Podcast
Risky Bulletin
Hosted by Risky Business Media · EN
Regular cybersecurity news updates from the Risky Business team...
450episodes
Episodes
Newest firstAll episodes
Sponsored: How AI is putting pressure on EDR
2w ago00:17:58Summary readyIn this sponsored interview James Wilson chats with Airlock Digital co-founders David Cottingham and Daniel Schell about how attackers are using LLMs to enumerate EDR detections. LLMs dramatically reduce the time and specialist labour needed to extract rulesets out of EDR products. What once might have taken months of manual reversing can now be accelerated by “burning tokens”. The takeaway is that defenders increasingly need to assume attackers have visibility into how their endpoint security products work. Show notes
SummaryRisky Bulletin: Western cyber agencies warn of Russian hacks of Zimbra servers
2w ago00:08:44Summary readyA Russian hacking campaign targets Zimbra servers, the US accuses Moonshot AI of distillation attacks, Iran targets more PLC vendors, and Google adds selfie video to its login options. Show notes Risky Bulletin: Western cyber agencies warn of Russian hacks of Zimbra servers
SummarySrsly Risky Biz: Knives are out for open-weight AI models
2w ago00:24:36Summary readyTom Uren and James Wilson talk about the future of open-weight models. For different reasons, both the Chinese and American governments have reasons to crack down on them. They also talk about arrests of several members of the Scattered Spider juvenile cybercrime collective. This episode is also available on YouTube Show notes
SummaryRisky Bulletin: Rogue OpenAI models were behind the Hugging Face breach
2w ago00:06:50Summary readyRogue OpenAI models were behind last week’s Hugging Face breach, the Linux kernel discloses 442 vulnerabilities as the AI bugpocalypse settles in, France becomes the first EU country to pass a social media age limit, and Germany takes down the Kratos phishing service. Show notes Risky Bulletin: Linux kernel discloses 442 CVEs as AI bugpocalypse settles in
SummaryBetween Two Nerds: What China gets wrong about Russia's cyber war in Ukraine
3w ago00:27:04Summary readyIn this edition of Between Two Nerds Tom Uren and The Grugq discuss what mainland Chinese analysts think about Russia’s use of cyber operations in the war in Ukraine. This episode is also available on YouTube. Show notes Cyber Lessons from Russia's War in Ukraine
SummaryRisky Bulletin: Hacker wipes Romania's entire land registry database
3w ago00:09:03Summary readyA hacker wipes Romania’s entire land registry database, Magnet Forensics sues a former employee for leaking an iPhone exploit, an autonomous AI agent hacked Hugging Face, and an unauthenticated remote code execution bug was finally found in WordPress. Show notes Risky Bulletin: Hacker wipes Romania's entire land registry database
SummarySponsored: Thinkst on building companies that don’t suck
3w ago00:21:20Summary readyIn this Risky Business sponsor interview Casey Ellis chats with Haroon Meer from Thinkst about building companies customers don’t hate. Haroon explains why Thinkst still offers Canary tokens for free and why it has avoided annual price hikes on its paid products. They talk about Eric Ries’s “Incorruptible”, Rob Lee’s 100-year-company approach at Dragos, and why keeping customers happy is a better business strategy than chasing easy sugar highs. Show notes
SummarySrsly Risky Biz: Ransomware uses AI to amp up negotiations
3w ago00:20:23Summary readyTom Uren and James Wilson talk about different ways ransomware groups are taking advantage of AI. The relatively new FulcrumSec group uses simple techniques to breach companies and then uses AI to get more leverage over victims in its extortion negotiations. They also discuss the ever so many bugs being patched. This is good for organisations that patch, but it will leave a very long tail of unpatched vulnerabilities. This episode is also available on YouTube Show notes
SummaryBetween Two Nerds: Exploits are not cyber power
4w ago00:30:08Summary readyIn this edition of Between Two Nerds Tom Uren and The Grugq discuss just how important exploits are for cyber operations using data published in a new paper authored by two members of Ukraine’s cyber security agency. This episode is also available on YouTube. Show notes Exploits were never the point Rethinking Exploitation in Cyber War: Reassessing the Role of Software Exploits in Wartime Max Smeets' chapter 5 from "No Shortcuts": The Elements of an Offensive Cyber Capability
SummaryRisky Bulletin: NSA Tailored Access Operations is back
4w ago00:07:54Summary readyThe NSA’s Tailored Access Operations team is back, India bans an app used to hack e-rickshaws, Accenture has another data breach, and a leak exposes a suspected Chinese cyber contractor. The Risky Bulletin newsletter and podcast will be on an editorial break until July 20. Show notes Risky Bulletin: India bans app used to hack e-rickshaws in viral videos
Summary