PODCAST

Risky Bulletin

risky.biz

Regular cybersecurity news updates from the Risky Business team...

news tech news

All Episodes

6:41

Risky Bulletin: DC sues crypto ATM operator for...

Risky Bulletin ·

2025/09/15

The US sues a crypto ATM operator for profiting from scams, SMS blasters make their way into Switzerland, the US and Portugal tussle over the extradition of the RaidForums admin, and Samsung patches a zero-day in its phones. Show notes Risky Bulletin: US largest crypto ATM operator sued for profiting from scams

19:50

Sponsored: The challenge of managing browser extensions

Risky Bulletin ·

2025/09/14

In this sponsored interview, Casey Ellis chats to David Cottingham and Daniel Schell from Airlock Digital. They discuss the challenge of browser extension management for enterprises, why it’s a priority and how Airlock can help. Show notes

7:08

Risky Bulletin: Apple notifies French users of...

Risky Bulletin ·

2025/09/12

Apple notifies French users of spyware attacks, China will increase fines for data breaches Google pays $1.6mil for cloud bugs at a hackathon event, and no more hacked free laundry for Dutch studentsShow notes Risky Bulletin: Most UK school hacks are caused by their own students

17:54

Srsly Risky Biz: Exploiting authorisation sprawl is...

Risky Bulletin ·

2025/09/11

Tom Uren and Amberleigh Jack talk about the Salesloft Drift incident. It is a great example of the sprawling impact that the breach of a single service provider can have. We expect these single-compromise-large-blast-radius attacks will become the new norm.They also talk about Apple’s Memory Integrity Enforcement, which promises to be a big step forward for memory safety on Apple devices. This episode is also available on Youtube.

8:38

Risky Bulletin: White House to keep CyberCom and NSA...

Risky Bulletin ·

2025/09/10

The White House will keep the CyberCom and NSA dual-hat leadership arrangement, the US charges a major ransomware figure, Apple ships a memory safety protection feature and yet another supply chain attack hits the npm world.Show notes Risky Bulletin: US charges major ransomware figure

25:47

Between Two Nerds: The death of the exploit

Risky Bulletin ·

2025/09/08

In this edition of Between Two Nerds Tom Uren and The Grugq talk about the trend toward outrageously complicated exploits and what it means for hacking and cyber espionage. This episode is also available on YouTube Show notes

7:51

Risky Bulletin: New APT group turns out to be a...

Risky Bulletin ·

2025/09/08

A new APT group turns out to be a phishing test, Qantas cuts executives’ bonuses after a recent breach, Anthropic stops selling AI tools to Chinese firms, and Nepal blocks 26 social media sites. Show notes Risky Bulletin: APT report? No, just a phishing test!

16:30

Sponsored: Why prompt injection is an intractable...

Risky Bulletin ·

2025/09/07

In this sponsored interview Casey Ellis chats with Keith Hoodlet from Trail of Bits. Keith is Trail of Bits’ director of engineering for AI, machine learning and application security and he joined Casey to talk about why prompt injection attack techniques that target AI are an unsolvable problem. Show notes

9:00

Risky Bulletin: Cyberattack disrupts Bridgestone tyre...

Risky Bulletin ·

2025/09/05

A cyberattack disrupts Bridgestone tyre factories in North America, a new infostealer takes your photo while you watch porn, bad certificates for Cloudflare infrastructure went undetected for more than a year, and Brazil deals with another payment system hack. Show notes Risky Bulletin: Chrome 140 comes with new hardened cookies

17:38

Srsly Risky Biz: Google sharpens its cyber knife

Risky Bulletin ·

2025/09/04

Tom Uren and Amberleigh Jack talk about Google starting a cyber disruption unit. It’s a sign of the times but could also point the way forward for policymakers looking to involve the private sector in government-endorsed efforts to strike back in cyberspace.They also talk about cyber security authorities from 13 different countries pegging Salt Typhoon to three Chinese companies. That’s a lot of countries, but Tom wonders whether attribution is just viewed as a cost

4:24

Risky Bulletin: YouTubers unmask and help dismantle...

Risky Bulletin ·

2025/09/03

Two YouTube channels help dismantle a Chinese scam operation, Cloudflare, Zscaler, and Palo Alto disclose Salesloft-related breaches, a ransomware attack disrupts vehicle production at Jaguar Land Rover, and we have a new record DDoS attack.Show notes Risky Bulletin: YouTubers unmask and help dismantle giant Chinese scam ring

32:17

Between Two Nerds: How threat actors are using AI to...

Risky Bulletin ·

2025/09/01

In this edition of Between Two Nerds Tom Uren and The Grugq talk about how cyber threat actors are using AI tools to fill in resource and skills gaps that they have. This episode is also available on Youtube. Show notes Anthropic's August 2025 Threat Report BTN episode 50

5:54

Risky Bulletin: Noem fires FEMA IT team over alleged...

Risky Bulletin ·

2025/09/01

FEMA’s IT staff fired over an alleged breach, WhatsApp patches a zero-day, the Salesloft breach impacted more than just Salesforce, and a scammer steals $1.5 million dollars from the city of Baltimore. Show notes Risky Bulletin: Noem fires FEMA IT team over alleged cybersecurity failures

18:05

Sponsored: Push Security on the evolution of phishing...

Risky Bulletin ·

2025/08/31

In this sponsored interview Casey Ellis chats with Push Security co-founder Jacques Louw. Push’s browser plugin gives a unique level of visibility into how users interact with the web and the attacks they face. Jacques talks through what they’re seeing, and their recently published taxonomy of phishing attacks. It’s on Github for everyone to contribute to! Show notes

7:38

Risky Bulletin: npm attack uses AI prompts to steal...

Risky Bulletin ·

2025/08/29

An npm supply chain attack uses AI to steal credentials and crypto-wallet keys, Google establishes a cyber disruption unit, a ransomware attack disrupts more than 200 Swedish municipalities, and Salt Typhoon hacks have now hit more than 80 countries.Show notes Risky Bulletin: npm attack uses AI prompts to steal creds, crypto-wallet keys

17:29

Srsly Risky Biz: America wants to hack the planet

Risky Bulletin ·

2025/08/28

Tom Uren and Amberleigh Jack talk about proposed legislation that would allow the President to license private sector hackers to go after cybercrime groups. The bill won’t pass, but letting hackers loose on industrial-scale scam farms actually makes sense.They also talk about Microsoft’s blind spot regarding China. It has trusted China-based engineers with sensitive work, and is now only just realising that China’s security interests are not compatible with

6:36

Risky Bulletin: FCC removes 1,200 voice providers...

Risky Bulletin ·

2025/08/27

The FCC removes 1,200 voice providers from the US phone network, a cyberattack shuts down Nevada’s state government services; hackers breach Salesloft and pivot into Salesforce accounts, and Citrix patches yet another zero-day.Show notes Risky Bulletin: FCC removes 1,200 voice providers from US phone network

29:25

Between Two Nerds: Teenage hackers are like goldfish

Risky Bulletin ·

2025/08/25

In this edition of Between Two Nerds, Tom Uren and The Grugq talk about how the teenage hacking groups Scattered Spider, Lapsus$ and Shiny Hunters are collaborating. They examine whether this is bad news and what will it take to slow these wrecking crews down. Plus, how teenage hackers are like goldfish. This episode is also available on Youtube. Show notes

6:12

Risky Bulletin: Hackers sabotage Iranian ships at...

Risky Bulletin ·

2025/08/25

Hackers sabotage Iranian ships for a second time this year, mass cybercrime arrests across Africa, South Korea extradites a Chinese man behind celebrity hacks, and a French supermarket chain discloses a data breach.Show notes Risky Bulletin: Hackers sabotage Iranian ships at sea, again

14:26

Sponsored: Why threat actors hate Okta FastPass

Risky Bulletin ·

2025/08/25

In this Risky Business News sponsor interview Tom Uren talks to Brett Winterford, Okta’s VP of Threat Intelligence about FastPass. Brett explains what it is, how Okta uses it and why threat actors avoid it. Show notes

659 results

Risky Bulletin

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

PBS News Hour - Full Show

PBS NewsHour

CD Voice

China Daily

Israel Today: Ongoing War Report

Noa Levi

Jeffrey Epstein: The Coverup Chronicles

Bobby Capucci