Risky Bulletin

Sponsored: Should your threat hunt become a detection?

In this Risky Business sponsored interview James Wilson chats to Nebulock’s Head of Detection Strategy Alex Hurtado about the company’s threat hunting evaluation framewor

Risky Bulletin: Supply chain attack lets ransomware group inside 40 shipping companies

A ransomware group used a supply chain compromise to hack around 40 shipping companies, the Pentagon assembles a technology sabotage unit, PHP2Shell exploitation gets und

Srsly Risky Biz: OpenAI's Kazoo-Grade Spying Incident

Tom Uren and Amberleigh Jack talk about the weird bugging incident at OpenAI. It doesn’t look at all like it was normal state-backed espionage, but there are still  good

Risky Bulletin: Hacker hijacks 10% of Tor exit nodes

A hacker hijacks more than 10% of Tor’s exit nodes, a second ransomware negotiator has been linked to ShinyHunters, a Chinese crime ring hacked Staples, and a hacker leak

Between Two Nerds: Why AI will mean infinite bugs

In this edition of Between Two Nerds Tom Uren and The Grugq discuss whether the rise of AI coding will result in more or less bugs and whether it will ultimately make sof

Risky Bulletin: Linux patches PwnEscape KVM vulnerability

A serious vulnerability lets attackers escape Kernel-based virtual machines, OpenCode users become collateral damage in a distillation attack, supply chain incidents hit

Sponsored: Agents don’t care about human ideas of right and wrong

In this Risky Business sponsored interview James Wilson chats with Sondera co-founder and CEO, Josh Devon, about how AI agents are highly capable, but they’re not the bes

Risky Bulletin: DataSuckers suspects arrested in Russia

Three DataSuckers hacking group suspects arrested in Russia, Al Jazeera employees targeted with Candiru spyware, the US disrupts 40 North Korean laptop farms, and an Open

Srsly Risky Biz: Russia's digital detox boomerang

Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for Ukraine’s retal

Risky Bulletin: Spyware chip found in Ledger crypto-wallets

Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in multiple countries fol

Between Two Nerds: The FBI and ShinyHunters are the same

In this edition of Between Two Nerds Tom Uren and The Grugq examine how ShinyHunters and the FBI both deceived themselves into believing they were immune to cyber threats

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

Two ShinyHunters suspects arrested in Jordan and the US, hackers breach TLD registrars to get valid Google certs, Japanese authorities arrest a Qilin ransomware member an

Sponsored: AI is attacking… it needs to defend, too

In this Risky Business sponsored interview James Wilson chats with Prowler’s founder and CEO Toni de la Fuente about how AI now allows pretty much anyone to vibe-code “ki

Authorities dismantle KillSec group

Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and

Srsly Risky Biz: “Rogue AI” isn’t going anywhere

Amberleigh Jack and James Wilson chat about OpenAI agents’ recent escapades into Australian government websites. OpenAI has promised to “rebuild trust with Australians” b

ShinyHunters suspect arrested in the Netherlands

A ShinyHunters suspect has been arrested in the Netherlands, Apple fixes an iOS zero-day found by Meta, recent Citrix zero-days see mass exploitation within hours and NVI

Between Two Nerds: The AI crime machine

In this edition of Between Two Nerds Tom Uren and The Grugq talk about the rise of fully automated LLM-driven hacking campaigns among criminals and even state hacking gro

Risky Bulletin: Intel ends paid bug bounties

Intel removes cash rewards from its bug bounty program, OpenAI agents probed dozens of organizations, Fraudsters scam €95 million from an Italian bank and Bitget is hacke

Sponsored: Robo-Burp is coming for your web apps

In this Risky Business sponsored interview James Wilson chats to Kieron Hughes and Andrzej Matykiewicz from PortSwigger about the company’s latest AI pen-testing product,

Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol

A major vulnerability has been found in the ancient TACACS+ networking protocol, Australia’s Prime Minister claims an OpenAI agent hacked the country’s Medicare website,