PODCAST

Risky Bulletin

risky.biz

Regular cybersecurity news updates from the Risky Business team...

news tech news

All Episodes

7:38

Risky Bulletin: npm attack uses AI prompts to steal...

Risky Bulletin ·

2025/08/29

An npm supply chain attack uses AI to steal credentials and crypto-wallet keys, Google establishes a cyber disruption unit, a ransomware attack disrupts more than 200 Swedish municipalities, and Salt Typhoon hacks have now hit more than 80 countries.Show notes Risky Bulletin: npm attack uses AI prompts to steal creds, crypto-wallet keys

17:29

Srsly Risky Biz: America wants to hack the planet

Risky Bulletin ·

2025/08/28

Tom Uren and Amberleigh Jack talk about proposed legislation that would allow the President to license private sector hackers to go after cybercrime groups. The bill won’t pass, but letting hackers loose on industrial-scale scam farms actually makes sense.They also talk about Microsoft’s blind spot regarding China. It has trusted China-based engineers with sensitive work, and is now only just realising that China’s security interests are not compatible with

6:36

Risky Bulletin: FCC removes 1,200 voice providers...

Risky Bulletin ·

2025/08/27

The FCC removes 1,200 voice providers from the US phone network, a cyberattack shuts down Nevada’s state government services; hackers breach Salesloft and pivot into Salesforce accounts, and Citrix patches yet another zero-day.Show notes Risky Bulletin: FCC removes 1,200 voice providers from US phone network

29:25

Between Two Nerds: Teenage hackers are like goldfish

Risky Bulletin ·

2025/08/25

In this edition of Between Two Nerds, Tom Uren and The Grugq talk about how the teenage hacking groups Scattered Spider, Lapsus$ and Shiny Hunters are collaborating. They examine whether this is bad news and what will it take to slow these wrecking crews down. Plus, how teenage hackers are like goldfish. This episode is also available on Youtube. Show notes

6:12

Risky Bulletin: Hackers sabotage Iranian ships at...

Risky Bulletin ·

2025/08/25

Hackers sabotage Iranian ships for a second time this year, mass cybercrime arrests across Africa, South Korea extradites a Chinese man behind celebrity hacks, and a French supermarket chain discloses a data breach.Show notes Risky Bulletin: Hackers sabotage Iranian ships at sea, again

14:26

Sponsored: Why threat actors hate Okta FastPass

Risky Bulletin ·

2025/08/25

In this Risky Business News sponsor interview Tom Uren talks to Brett Winterford, Okta’s VP of Threat Intelligence about FastPass. Brett explains what it is, how Okta uses it and why threat actors avoid it. Show notes

8:04

Risky Bulletin: Microsoft restricts Chinese firms’...

Risky Bulletin ·

2025/08/21

Microsoft restricts Chinese firms’ access to its MAPP program, Apple patches a zero-day used in the wild, a Scattered Spider member gets 10 years in prison, and a new exploit broker pops up in the UAE. Show notes Risky Bulletin: A decade later, Russian hackers are still using SYNful Knock, and it's still working

19:17

Srsly Risky Biz: Russian cyber security picked a side

Risky Bulletin ·

2025/08/21

Tom Uren and Amberleigh Jack talk about a new report that looks at how Russian cyber security firms have adapted since the country’s invasion of Ukraine. These firms are doing surprisingly well financially. It turns out that in an era of great power competition, picking sides is not just necessary, it is also a winning strategy.They also discuss Russia effectively killing foreign messenger services to promote its own WeChat-like service and claims that the UK has

7:16

Risky Bulletin: Child sextortion cases linked to scam...

Risky Bulletin ·

2025/08/20

Almost 500 child sextortion cases have been linked to scam compounds, Oracle’s CSO departs after 37 years, Europol offers a reward for the Qilin ransomware group, and the UK drops its demand for an Apple backdoor.Show notes Risky Bulletin: NIST releases face-morphing detection guideline

26:21

Between Two Nerds: Cyber myopia

Risky Bulletin ·

2025/08/18

In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether the cyber industry and intelligence agencies focus too much on technical details and ignore the bigger picture. This episode is also available on Youtube. Show notes Director-General ASIO speech on Counting the Cost of Espionage

7:36

Risky Bulletin: Academics pull off novel 5G attack

Risky Bulletin ·

2025/08/17

Academics develop a 5G downgrade attack, ransomware hits car salvage yards across North America, multiple VPN apps share the same hardcoded password, and Bangladesh spent $190 million on hacking and surveillance tools. Show notes Risky Bulletin: Academics pull off novel 5G attack

8:03

Risky Bulletin: HTTP2 flaw enables massive DDoS attacks

Risky Bulletin ·

2025/08/15

An HTTP-2 vulnerability enables DDoS attacks, Russia blocks Telegram and WhatsApp voice calls, attackers abuse a zero-day in N-able servers, and the US government is adding trackers to chip shipments.Show notes Risky Bulletin: MadeYouReset vulnerability enables unlimited HTTP/2 DDoS attacks

16:41

Srsly Risky Biz: Drug cartels are the new APTs

Risky Bulletin ·

2025/08/14

Tom Uren and Amberleigh Jack talk about a recent hack of the US courts document management system. It’s about as bad as can be, with multiple threat actors including states and possibly even drug cartels rummaging around in there, possibly for years.They also discuss Microsoft’s involvement in an Israeli surveillance system and the head of Australia’s security organisation’s blunt warning about espionage. This episode is also available on Youtube.

8:18

Risky Bulletin: Russia suspected of US Courts hack

Risky Bulletin ·

2025/08/13

Russia suspected of hacking a US Court system, researchers break the DarkBit ransomware’s encryption, a new attack can leak sensitive data from AMD processors, and a brute-force campaign targets Fortinet devices.Show notes Risky Bulletin: Crypto-thieves turn their sights to Open VSX

7:22

Risky Bulletin: Researcher scores $250,000 for Chrome...

Risky Bulletin ·

2025/08/11

A security researcher scores $250,000 for a Chrome bug, WinRAR patches another zero-day, new vulnerabilities found in the Tetra communications protocol, and a researcher gains access to Microsoft’s internal network for fun… and no profit. Show notes Risky Bulletin: Researcher scores $250,000 for Chrome bug

15:54

Sponsored: The phishing-resistant employee

Risky Bulletin ·

2025/08/10

In this Risky Business News sponsor interview Tom Uren talks to Derek Hanson, Yubico’s Field CTO about making account recovery and onboarding for employees phishing-resistant. They also discuss the problems and opportunities of syncable passkeys. Show notes

8:27

Risky Bulletin: CISA tells federal agencies to...

Risky Bulletin ·

2025/08/08

Federal agencies told to patch a new Exchange flaw, millions of sites are vulnerable to HTTP desync attacks, Trend Micro patches a zero-day, and the Salesforce data breaches continue. Show notes Risky Bulletin: CISA tells federal agencies to mitigate on-prem-to-cloud Exchange attack

7:37

Risky Bulletin: Russia's war on foreign software...

Risky Bulletin ·

2025/08/06

Russian companies must migrate to domestic ERP systems, Ohio’s public sector will have to approve ransom payments in public, Chanel and Cisco disclose data breaches, and a Thai hospital gets fined over the the dumbest data breach ever.Show notes Risky Bulletin: Russia to designate ERPs as "critical information infrastructure"

29:28

Between Two Nerds: The Aeroflot hack

Risky Bulletin ·

2025/08/04

In this edition of Between Two Nerds Tom Uren and The Grugq dissect the Belarusian Cyber Partisans hack of Russian airline Aeroflot. Despite the short-term impact, the airline will likely bounce back quite quickly. But it is still a big win for the Cyber Partisans. This episode is also available on Youtube. Show notes The Belarusian Cyber Partisans post on the

6:35

Risky Bulletin: China with the accusations again

Risky Bulletin ·

2025/08/04

China accuses the US of new cyberattacks, a $14.5b crypto hack discovered five years later, the US National Cyber Director is named, and Lovense considers legal action over a security flaw disclosure. Show notes Risky Bulletin: China with the accusations again

665 results

Risky Bulletin

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

PBS News Hour - Full Show

PBS NewsHour

CD Voice

China Daily

Israel Today: Ongoing War Report

Noa Levi

Jeffrey Epstein: The Coverup Chronicles

Bobby Capucci