Risky Business

Risky Business Media
  • 4.6 (396)
  • Tech News
  • Weekly

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

  1. 3d ago

    Risky Business #859 -- ARTEX damage approaches crisis levels

    On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including: Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis The French government attributes freezer hacks to Iran’s IRGC Rob Joyce was right and the breachpocalypse has exhausted global IR resources The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice! Much, much more! This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical again. Raj used OpenAI LLMs to bypass that SMB signing and come up with some unnatural ldap tricks as well. Those techniques are now patched, but Raj learned a lot about parallel discovery in the AI age. This episode is also available on YouTube Show notes WorkOS says attacker used ARTEX AI to breach internal sales app Russia's AI-powered hacks are causing chaos in Ukraine Microsoft November 2026 Patch Tuesday OpenAI says GPT-6 Cyber found 81 Firefox flaws and 948 Linux bugs Attacker abuses Microsoft Entra ID to target downstream MSP clients Pat Opet (@patopet) on X Hackers enlist Artex to scan GitHub repositories for exposed secrets Nearly 1.5 million exposed secrets targeted in new revocation program ARTEX exposed hosts Claude Code settings files expose thousands of secrets on GitHub Chainalysis breach AI-fueled hacking is getting worse — top cyber companies are turning away some victims SI impersonation fraud indictment (Soall, Hazan, Sheetrit) Cyberattack disrupts blood-storage refrigeration systems in France FBI and CISA warn of cyberattacks targeting refrigeration systems France blames Iran for fridge cyberattacks, says some caused fires Lesley Carhart - Let’s Talk About Why all This OT Stuff is Connected OpenSSH flaw lets attackers log into password-disabled Linux accounts GhostMap: The Android flaw that crashes your phone before you open the app Labs Want to Rent an Internet Address at the White House? French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million GOPAX suspends withdrawals and trading following hacking threats FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers What Democratic control of Congress means for cybersecurity Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain Japan announces emergency cybersecurity package following a wave of attacks Iris Ohyama data cloud breach exposes info of 7.7 million customers APT29 watering hole (Plerdy, America250) Pro-Russian hackers target European officials, offer rewards for personal information Nvidia probes whether Chinese intelligence targeted its CEO The Babylon Bee (@TheBabylonBee) on X NTLM relay made new again!

  2. 5d ago

    Soap Box: Security must be more browser-centric

    In this Soap Box episode Patrick Gray chats to Push Security co-founder and CEO Adam Bateman about the benefits of taking a browser-centric approach to security. By now most Risky Business listeners know that Push sells a browser extension-based product that can reliably prevent phishing, ClickFix and ConsentFix. But what’s next? Where to from here once you’re already in the browser? Well, Push is expanding into the data loss prevention and secure web gateway product space. Why use a SWG based on 15-year-old technology when an extension can give you an even better security result? Especially when you can drop the drawbacks, like tromboning all your traffic into a random data centre… This episode is also available on YouTube. Show notes

  3. Nov 4

    Risky Business #858 -- The $6.3b laptop

    On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including: The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute! A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking” An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more! This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gray to chat about fear around the looming post-quantum cryptography crisis, and how CISOs can use it as an opportunity to clean up house and finally take all the end-of-life products out to pasture. This episode is also available on YouTube Show notes Binance hot wallet heist (Oct 2026) | therecord.media Binance on X: "29 October Binance Security Incident: Initial Findings and Response Update" / X | X (formerly Twitter) Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform | therecord.media Polymarket DebugBear script compromise | The Hacker News Chainalysis "offensive agentic techniques" breach | BleepingComputer Trezor warns of suspected crypto-theft implant in hardware wallet | BleepingComputer Second wave of suspected cyberattacks hits supermarket freezers across Europe | The Record Amadeus booking data breach | "Data breach" – Google Alert DHS Icepick personnel data leak | "Data breach" – Google Alert Google says LLMjacking attacks can rack up $1 million in cloud AI charges | BleepingComputer Northflank security breach leads to abuse of customers' AI API keys | BleepingComputer Rikiya Takehi (@rikiyatakehi) on X | X (formerly Twitter) Russia's AI-powered hacks are causing chaos in Ukraine - Risky Business Media | Volt Typhoon "Silent Train" network | zetter-zeroday.com Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware | BleepingComputer PHP2Shell (CVE-2026-109618/109619) | Cybersecurity Dive GitLab CVE-2026-97229 CI/CD regex RCE | BleepingComputer CISA warns of hackers now exploiting critical Node2Shell flaw | BleepingComputer Critical Linux kernel flaw allows remote root attacks on MPTCP servers | BleepingComputer Marcus Hutchins (@MalwareTechBlog) on X | X (formerly Twitter) New Android "SMS of Death" exploit can remotely crash unpatched phones | BleepingComputer Hackers now scanning systems for recently patched Oracle flaw | BleepingComputer Ivanti patches two more Connect Secure zero-days chained in attacks | BleepingComputer Trojanized Claude Code extension (v2.1.313) | Step Security Blog Germany says lawmakers' iPhones may have been hacked with spyware | TechCrunch Security Google disrupts million-device XCPE Android malware botnet, bans TV box maker | BleepingComputer vx-underground (@vxunderground) on X | X (formerly Twitter)

  4. Oct 30

    Snake Oilers: Minimal.dev, Request Rocket and TRM Labs

    In this edition of the Snake Oilers podcast, three vendors drop by to pitch their products. Minimal.dev: A sandbox for AI agents! Co-Founder and CEO Jake King explains what the company is and how it works. Request Rocket: Runtime access control for AI agents and APIs. Founder and CTO Alex Ferguson drops by to talk about the problem the company is trying to solve. TRM Labs: All-source threat intelligence. Global Strategic Accounts Director Simon Warren talks about the company’s platform Ardence. This episode is also available on YouTube. Show notes

  5. Oct 28

    Risky Business #857 -- AI FUD intensifies

    On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Alex Stamos to talk through the week’s cybersecurity news, including: Everyone’s still panicking about “misbehaving” AI models that are pretty much just doing what they’re being told to do Americans are giving AI agents unfettered access to their bank accounts. What could go wrong? Last week’s PHP meteor seems to have missed Earth This week’s Brotli HTTP/2 critical flaw is this week’s meteor The private key is always 4. This time it’s TLS bugs in GoAhead Much, much more! This week’s show is brought to you by Truffle Security. Co-founder and CEO Dylan Ayrey joins James Wilson to chat about scanning GitHub repos and finding more than half a million unique credentials that were never revoked. As Dylan explains, the problem of exposed keys exists everywhere and is only getting worse. This episode is also available on YouTube Show notes OpenAI AI agents demonstrate VM escapes and secret cross-sandbox communication OpenAi agents disabled safety monitoring, one lied about it solst/ICE of Astarte (@IceSolst) on X What I learned from cheating clankers Unvetted AI agents are accessing US bank accounts Hiding Capabilities in AI Models AI is finding bugs faster. Let the market find the fixes AI Guardrails Aren’t Stopping Criminal Hackers Andromeda October 2026 Security Incident Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber Hackers got a four-day head start on the PHP2Shell vulnerabilities Critical HTTP2Shell flaw in Brotli triggers emergency patches Senators say targeted ads are a security risk. Ad groups say the critics are off base Alleged Israeli spy company heavily targeted Starlink users, sources say LiteLLM release pipeline hacked to distribute info-stealer malware CISA warns attackers are chaining Plex flaws in active Plex2Shell attacks Abandoned Popcorn Time app exposed millions of devices to RCE attacks Chrome adds Gemini-powered scam detection and ClickFix warnings Microsoft Teams is getting context-aware phishing detection China-nexus actor linked to attack on ConnectWise cloud backup University of New Mexico hospital diverts ambulances after cyberattack solst/ICE of Astarte (@IceSolst) on X GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them

  6. Oct 21

    Risky Business #856 -- 8-bit encryption, PHP megabugs and more

    On this week’s show Patrick Gray and James Wilson are joined by special guest co-host security engineer Mark El-Khoury to talk through the week’s cybersecurity news, including: The PHP foundation is about to release patches for a couple of critical bugs… We’re watching to see if the internet burns down 8 private keys underpinning some CA certs got compromised. The keys only had 8 bits of entropy! Is the breach-polcalypse upon us? OpenAI’s inside spy, Anthropic’s safety bill and election influence campaigns are coming for your chatbots Ukraine drone strikes hit more Russian data centres, this time VK’s in the firing line Much, much more! This week’s show is brought to you by Trail of Bits. Principal Security Engineer Anish Naik joins James Wilson to chat about two agent skills plugins, Patching Bugs and Regression Hunt, that the company is releasing off the back of its joint initiative with Open AI, Patch the Planet. This episode is also available on YouTube Show notes The PHP Foundation (@ThePHPF) on X The Internet goes on high alert after discovery of 8 compromised TLS certs OpenCode breach exposes users' external AI-provider API keys DHS to ban DeepSeek from federal civilian agencies Rob Joyce (@RGB_Lights) on X OpenAI engineer accused of spying on executives remains in custody An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office Anthropic quietly pitches its own AI safety bill to lawmakers The next election influence campaign will target your AI chatbot Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site Thousands of refrigerator devices remain exposed following French cyberattack AI agents navigated unfamiliar OT systems and moved equipment within minutes Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests Federal bankruptcy courts dealing with outages after contractor cyberattack Russian social media giant VK faces disruptions after data center drone strike Data Centers Are War Targets Now How a Massive Chinese Crime Ring Hacked Staples to Steal Millions Microsoft Patches More Than 1,400 Security Flaws GitHub expands malware advisories across eight package ecosystems Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack AdFection: How mercenary spyware invades victims’ devices through targeted advertising CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day Drupal patches critical RCE flaws and warns exploits may emerge soon Palo Alto Networks patches PAN-OS zero-day exploited for root-level code execution Eight US states sue OpenAI over alleged harms to users Cyberattack halts work on the Denmark–Germany Fehmarnbelt tunnel Ransomware groups expand targeting of Palo Alto Networks vulnerability DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied Trail of Bits skills plugins

  7. Oct 14

    Risky Business #855 -- ShinyHunters done sowing, enters reaping phase

    On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including: Sacré bleu! Hackers turn up the heat at French supermarket freezers ShinyHunters enters “find out” stage Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild More models “behave badly” (by… doing exactly what we’re telling them to do) Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet Much, much more… This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work. This episode is also available on YouTube Show notes Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer Hacked FBI data has sensitive information about employees' intelligence roles | reuters.com Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com Ransomware recovery CEO charged over secret ransom payments | BleepingComputer Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com An Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunch OpenAI bots meddled with US government agencies, including SEC and Census | bbc.com OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.com Anthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.com OpenAI agent breached Australian government health website, Albanese says | therecord.media Doubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.media OpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.com OpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.com AI models may be capable of self-replicating without access to a datacenter | South Korean officials believe AI agents were used to hack several banks | therecord.media JadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputer GLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.com New bill would create federal investigative body for AI-driven hacks | cyberscoop.com Court rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars Technica Apple changes full-disk access permissions to curb abuse from AI agents | arstechnica.com Google Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputer Bitget hacked via zero-day in third-party security products | BleepingComputer Ledger confirms spy chip implant behind wallet crypto thefts | BleepingComputer Who Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.com Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.com New Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputer Data breach at Denmark’s national population register exposes 8.8 million people | therecord.media Shares in British clothing company ASOS dive after hackers apparently send push notification | therecord.media Google halts open-source bug bounty program amid AI spam surge | BleepingComputer International coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.media Hackers hijack Google domains after breaching ccTLD registries | BleepingComputer GoBalance Flaw Lets Attackers Hijack.onion Addresses by Recovering Tor-Format Keys | The Hacker News Ukraine strikes third Yandex data center, disrupting digital services across Russia | therecord.media Provably Better Data | Corelight

  8. Sep 29

    Soap Box: HD Moore talks OT security, frontier fearmongering and more

    In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about how his company runZero wound up being used heavily to discover OT devices in enterprise networks. They also talk about the vulnpocalypse and how frontier lab fearmongering is reminiscent of the collective freakout when HD released the Metasploit exploit framework back in 2003. This episode is also available on YouTube. Show notes

See All (100)

Hosts & Guests

4.6
out of 5
396 Ratings

About

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Information

  • Creator
    Risky Business Media
  • Years Active
    2007 - 2026
  • Episodes
    102
  • Rating
    Clean
  • Copyright
    © Copyright Risky Business Media 2007-2026
  • Show Website
    Risky Business

You Might Also Like