Risky Bulletin

Risky Bulletin: Chinese APT exploits SS7, Diameter to spy on targets

A Chinese APT exploits the SS7 and Diameter protocols, a remote code execution bug hits Apache, Brazil’s largest port suffers a cyberattack, and Europol takes down three

Srsly Risky Biz: Iranian hacks with Russian characteristics

Tom Uren and Amberleigh Jack talk about the French government attributing freezer hacks to cyber units within the Iranian Revolutionary Guard Corp. This surprises Tom, be

Risky Bulletin: France blames Iran for supermarket freezer hacks

France blames Iran for supermarket freezer hacks, the White House nominates Palantir’s CISO as CISA director, another Russian cloud provider gets hacked, and N-able takes

Between Two Nerds: Why PHP2Shell fizzled

In this edition of Between Two Nerds Tom Uren and The Grugq talk about why PHP2Shell failed to live up to its hype. A critical bug in a very widely used web scripting lan

Risky Bulletin: Pro-Kremlin hacktivists dox EU politicians, law enforcement

Pro-Kremlin hacktivists dox EU politicians and law enforcement personnel a Deepfake gang arrested on US charges, SonicWall patches a zero-day, and SSHole is being exploit

Sponsored: The evolution of ASD's Essential Eight

In this Risky Business sponsored interview Tom Uren talks to Airlock Digital’s CTO and CSO Peter Baussmann about how the Essential Eight is evolving into ASD’s Essentials

OpenSSH auth bypass bug hits Alpine Linux, OperWRT

An OpenSSH authentication bypass bug hits Alpine Linux and OpenWRT, hackers attempt to raise fridge temperatures at French blood banks, a French bank gets hacked for $133

Srsly Risky Biz: The ritual bitcoin sacrifices will continue until security improves

Tom Uren and Amberleigh Jack talk about North Korea’s hack of the Binance cryptocurrency exchange. Binance’s founder CZ says it is a wake up call for real banks, but he’s

Risky Bulletin: Hackers brick Chinese EVs in Russia

Hackers brick Chinese EVs in Russia, a second wave of hacks defrost European supermarket freezers, the US boots Acronis from government networks and the major distros pat

Between Two Nerds: Finding bugs does not mean security

In this edition of Between Two Nerds Tom Uren and The Grugq discuss CISO’s expectations and priorities regarding budgets and what they will spend their money on. AI featu

FBI confirms North Korea behind Binance hack

The FBI links the Binance hack to North Korea, game developers are being extorted with game-cloning threats, the Belarusian CyberPartisans hack Russia’s statistics servic

Sponsored: Sublime Security on the rise of ISC calendar phishing

In this Risky Business News sponsor interview, Catalin Cimpanu talks with Luke Wescott, Threat Detection Engineer at Sublime Security. Luke talks through the rise of cale

Billions stolen in Binance hack

Billions stolen from Binance in a crypto hack, Last week’s PHP2Shell bugs are being exploited to hack Palo Alto Networks firewalls, The Brotli bugs also get a run, Belaru

Srsly Risky Biz: Chinese AI can learn to love the West

Tom Uren and Amberleigh Jack talk about new research that shows that Chinese open-weight AI models can be reeducated to remove pro-CCP bias. Good news for American busine

Risky Bulletin: Moldovan public services crippled by cyberattack

Moldova takes down more than 80 public services after a cyberattack, the White House launches a new cybersecurity pilot program, South Korea arrests an AI-assisted cyberc

Between Two Nerds: Why frontier lab security will always suck

In this edition of Between Two Nerds Tom Uren and The Grugq talk about security culture. The PHP foundation seems to have had a change of heart about security, but what a

Risky Bulletin: Brotli RCE is wrecking what's left of the internet

While everyone was distracted by PHP, another RCE has been wrecking the internet, Australia’s ABC wipes some staff devices, a third PHP RCE is incoming and researchers di

Sponsored: Should your threat hunt become a detection?

In this Risky Business sponsored interview James Wilson chats to Nebulock’s Head of Detection Strategy Alex Hurtado about the company’s threat hunting evaluation framewor

Risky Bulletin: Supply chain attack lets ransomware group inside 40 shipping companies

A ransomware group used a supply chain compromise to hack around 40 shipping companies, the Pentagon assembles a technology sabotage unit, PHP2Shell exploitation gets und

Srsly Risky Biz: OpenAI's Kazoo-Grade Spying Incident

Tom Uren and Amberleigh Jack talk about the weird bugging incident at OpenAI. It doesn’t look at all like it was normal state-backed espionage, but there are still  good