Risky Business Features

Risky Business Media

Join reformed CTO James Wilson as he dives deep on cybersecurity topics through an enterprise lens. From solo content and interviews with CISOs and researchers to vendor and startup deep dives, James does a bit of everything.

  1. 16 H FA

    How to survive supply chain attacks

    In this podcast James Wilson chats with Brad Arkin about why software supply chain attacks have gone from rare, once-in-a-while disasters to an operational problem affecting mainstream enterprises almost daily. AI has made attackers faster, and “vibe coding” means the number of environments pulling packages from the internet has gone to the moon. It also means legacy tooling that seeks out the bad packages and cleans them up isn’t enough. Package cooldown windows won’t fix this either. But all hope is not lost! Tune in to this podcast to find out how you can get a grip on the disaster de jour! Show notes

    37 min

  2. 4 GG FA

    How the CopyFail disclosure went sideways

    In this episode, Theori’s Brian Pak and Andrew Wesie join James Wilson to discuss why the CopyFail exploit was publicly disclosed before Linux distributions had their patches ready. As you’ll hear in this episode, mistakes were made and lessons learned. It’s worth a podcast, too, because in our opinion this incident foreshadows the inevitable problems that open source software will face in the unfolding vulnpocalypse. Show notes

    19 min

  3. 18 MAG

    NCSC’s Ollie Whitehouse on surviving the "bugpocalypse"

    In this edition of Risky Business Features Ollie Whitehouse, the CTO of the UK’s National Cyber Security Centre, joins Patrick Gray and James Wilson to talk about why “patch faster” will only get organisations so far in the face of the AI “bugpocalypse”. As Ollie explains, organisations will need to reduce internet-facing attack surface and make better architecture decisions as 0day discovery speeds up. This episode is also available on YouTube. Show notes

    29 min

  4. 12 MAG

    What a great agentic AI deployment plan looks like

    In this podcast James Wilson and Brad Arkin workshop the advice they think the industry needs to hear when it comes to deploying agentic AI in the enterprise. Relegating agentic AI to non-sensitive and low-risk tasks doesn’t deliver value, and avoiding all risk stalls progress. James and Brad discuss the phases of AI adoption and contrast what a great plan looks like, versus an overly cautious one. Show notes

    40 min

  5. 8 MAG

    Mythos smythos! How to find 0day with lesser models

    In this podcast James Wilson chats with Niels Provos about his research into using older AI models to successfully hunt for 0day vulnerabilities. Niels has had a long and prolific career in cybersecurity, having worked as a Distinguished Engineer at Google and then heading up security at Stripe. His interest in AI bug hunting was piqued recently when one of the Mythos 0day vulnerabilities that received lots of attention happened to be in code he wrote for the OpenBSD project 27 years ago. It got him thinking: Are these frontier models really that magical? Or could we replicate their findings with some clever orchestration instead of relying on the model’s smarts to find bugs with a single prompt? As it turns out, this was worth looking into. Niels’ orchestration framework, Iron Curtain, works extremely well. This episode is also available on YouTube Show notes Finding Zero-Days with Any Model Security Blueprints

    1h 28m

  6. 4 MAG

    Solving the AI agent identity problem

    In this podcast James Wilson and Brad Arkin chat about emerging trends in AI agent identity and credential management. Brad was formerly the CISO of Adobe, Cisco and Salesforce, and is now working with all sorts of companies that are deploying AI. With everyone now in at least a large-scale pilot of agentic AI, the issue of how to manage agent identities and credentials is still an unsolved problem. But, some interesting patterns are emerging. Show notes

    40 min

  7. 29 APR

    A deep dive on AI model distillation attacks

    In this solo episode of Risky Business Features James Wilson explores how distillation techniques are both a legitimate way to train smaller models, as well as a way to steal model capabilities. It’s not just a problem for frontier labs! Any LLM-based product could have its competitive advantage stolen through these attacks. James covers: High-level concept of distillation Why it matters including close/open-weight/open-source explanation Types of distillation and the prompts used The distillation pipeline end to end Distillation at scale and mitigation techniques Hardware resource constraints for distillation Show notes Self-Instruct: Aligning Language Models with Self-Generated Instructions Alpaca: A Strong, Replicable Instruction-Following Model Vicuna: An Open-Source Chatbot Impressing GPT-4 with 90%* ChatGPT Quality Orca: Progressive Learning from Complex Explanation Traces of GPT-4 Zephyr: Direct Distillation of LM Alignment Stealing Part of a Production Language Model Microsoft probes if DeepSeek-linked group improperly obtained OpenAI data, Bloomberg News reports Detecting and preventing distillation attacks

    1h 12m

  8. 24 APR

    Feature Interview: Nicholas Carlini, Anthropic

    In this episode, Anthropic’s Nicholas Carlini joins Patrick Gray and James Wilson to talk about advancements in AI-driven vulnerability research and exploit development. Nicholas’ talk at the recent [un]prompted conference demonstrated how Anthropic’s Opus 4.6 could find and exploit vulnerabilities in popular open source projects. In the short few weeks since then, Anthropic announced a new model that’s already identifying hundreds of bug fixes across critical software. Nicholas talks us through the work he does at Anthropic, what’s possible and the limitations with current frontier models, and where this goes from here. This episode is also available on YouTube Show notes

    43 min
Elenco completo (23)

Descrizione

Join reformed CTO James Wilson as he dives deep on cybersecurity topics through an enterprise lens. From solo content and interviews with CISOs and researchers to vendor and startup deep dives, James does a bit of everything.

Informazioni

  • Creatore
    Risky Business Media
  • Anni di attività
    2K
  • Puntate
    23
  • Classificazione
    Contenuti adatti a tutti
  • Copyright
    © Copyright Risky Business Media 2007-2026
  • Sito web del podcast
    Risky Business Features

Potrebbero piacerti anche…