Risky Bulletin

Risky Bulletin: Anthropic agents went hacking again

Anthropic agents went hacking again, South Korea increases its data breach fines, Apple notifies three Turkish ministers of mercenary spyware attacks, and CISA is ready t

Srsly Risky Biz: America's drivers licence breach is a national security disaster

Tom Uren and James Wilson talk about how Chinese intelligence services will take advantage of a massive breach of 150 million American drivers licences. They also discus

Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

Ukraine’s top prosecutor resigns amid a scam call center scandal, the US accuses Chinese AI companies of industrial-scale distillation, a cyberattack hits medical practic

Between Two Nerds: Can AI defend critical infrastructure?

In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether AI will help cyber defence in critical infrastructure and organisations that are below the

Risky Bulletin: BEC campaign steals €35 million from French notaries

Hackers steal €35 million euros from French notaries, OpenAI agents hacked a German wiki, a new bill will allow the Pentagon to use cyber contractors, and the Five Eyes m

Sponsored: Authentik is rethinking PAM for AI agents

In this Risky Business sponsored interview, James Wilson chats with Authentik Security CEO Fletcher Heisler about how AI is driving a need for privileged access managemen

Risky Bulletin: Russia tells data centers to deploy drone defenses

Russia tells data centers to deploy drone defenses, Dropbox discloses a security breach, a new spyware wave hits Serbia, and CISA scraps six free cybersecurity assessment

Srsly Risky Biz: China's botnets are worth disrupting

Tom Uren and James Wilson talk about China’s long-term shift to getting private companies to build botnets for cyberespionage. A disruption effort from the US this week i

Risky Bulletin: BGP hijack delivers malicious Virtualizor updates

A BGP hijack delivered malicious Virtualizor updates, the White House launches Project Watershed 250, Indian authorities take down a Telegram doxing bot, and Composer pac

Between Two Nerds: The perfect hacker

In this edition of Between Two Nerds Tom Uren and The Grugq talk about how AI is the perfect hacker, but what makes it perfect for states is the opposite of what makes it

Risky Bulletin: New powers for Dutch intelligence services

Dutch intelligence services will get new powers, a security expert has been arrested in Israel for hacking, the BTS hacker gets a 20 year sentence in South Korea, and an

Sponsored: Attackers need to be right more than once

In this Risky Business sponsored interview, James Wilson chats with Dropzone AI’s founder and CEO Edward Wu to debunk the adage, “an attacker only has to be right once”.

Risky Bulletin: Two TeamPCP members arrested in Australia

Two members of TeamPCP arrested in Australia, Qilin hits the US firearms agency, America seizes two more Chinese botnets, CISA says most cyber activity is opportunistic.

Srsly Risky Biz: China's AI-Enabled APT Operations Are Getting Interesting

Tom Uren and James Wilson talk about evidence that Chinese APT groups are using AI in a really sensible way, to beef up their malware arsenal. This will make it harder fo

Risky Bulletin: Russia starts blocking DoH and DoT

Russia begins blocking the DoH and DoT protocols, Russian hacktivists leak Spanish police and military personnel data, China and South Korea detain a vishing gang, and AI

Between Two Nerds: Attribution is dead, long live attribution

In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether the increasing use of AI will make it harder for forensics teams to determine who is respon

Risky Bulletin: Expired credit cards can be used for malicious transactions

Expired credit cards can be used for malicious transactions, Iranian hackers shut down a UK power plant, the Lazarus Group hacks South Korea’s Presidential Office, and an

Sponsored: Passkeys won’t stop authorisation phishing

In this Risky Business sponsored interview, James Wilson chats with Luke Jennings, Push Security’s VP of Research, about how stronger authentication is pushing attackers

Risky Bulletin: US warns of AI-assisted attacks against Siemens PLCs

The US warns of AI-aided attacks against Siemens PLCs, hackers breach Latvia’s road traffic agency, a new hacking tool enrolls an attacker’s passkey to your account, and

Srsly Risky Biz: Trump's private hacker memo is the right idea

Tom Uren and James Wilson talk about President Donald Trump’s memo enlisting the US private sector to tackle cybercriminals. The initiative gets the big idea right: tradi