PODCAST

Risky Bulletin

risky.biz

Regular cybersecurity news updates from the Risky Business team...

news tech news

All Episodes

6:58

Risky Bulletin: Belarus deploys spyware on...

Risky Bulletin ·

2025/12/19

Belarus deployed spyware on journalists’ phones, a man is arrested for installing malware on a ferry, France arrests the hacker behind an Interior Ministry email server breach, and new Cisco and SonicWall zero-days.Show notes Risky Bulletin: Belarus deploys spyware on journalists' phones

19:17

Srsly Risky Biz: Like Huawei, but for electricity

Risky Bulletin ·

2025/12/17

Tom Uren and Patrick Gray talk about America’s increasing dependence on Chinese manufacturers for electrical sector equipment. This doesn’t seem like a good idea when China is hacking electric utilities for sabotage and PLA researchers are dreaming up ways to attack the grid.They also discuss the possibility that the US was responsible for a cyber attack on Venezuela’s state oil company and how Russian state-backed hacktivism is so dumb. This episode is also

7:39

Risky Bulletin: Most smart devices run outdated web...

Risky Bulletin ·

2025/12/17

Most smart devices run outdated web browsers, Ukrainian hacktivists breach a major Russian defense contractor, ransomware hits Venezuela’s state-owned oil company, and hackers are trying to extort PornHub with stolen user data.Show notes Risky Bulletin: Most smart devices run outdated web browsers

49:56

Between Three Nerds: The evolution of Iranian cyber...

Risky Bulletin ·

2025/12/15

In this edition of Between Two Nerds Tom Uren and The Grugq talk to Hamid Kashfi, CEO and founder of DarkCell, talk about the Iranian cyber espionage scene. Kashfi talks about how the regime once forced people to hack and crushed the domestic security research scene. He describes how and why the government has changed its approach and is now reaping the rewards of improved Iranian capabilities. This episode is available on Youtube.

7:51

Risky Bulletin: African freelancers behind anti-US...

Risky Bulletin ·

2025/12/15

Russia is hiring African freelancers for disinformation campaigns, the US is preparing to let contractors run offensive cyber operations, Germany blames Russia for the hack of its air traffic control agency, and Apple patches two WebKit zero-days. Show notes Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns

19:36

Sponsored: ConsentFix and Push Security's browser...

Risky Bulletin ·

2025/12/14

In this sponsored interview Casey Ellis is joined by Push Security’s Field CTO, Mark Orlando. They chat about the ways that browser-based attacks are evolving and how Push Security is finding and cataloging them. Show notes ConsentFix: Analysing a browser-native ClickFix-style attack that hijacks OAuth consent grants Introducing

9:22

Risky Bulletin: EU has a problem attracting and...

Risky Bulletin ·

2025/12/12

The EU has a problem attracting and retaining cyber talent, the CEO of Coupang resigns following the company’s security breach, Microsoft expands its bug bounty program to cover third party code, and Chrome and Gogs patch zero-days.Show notes Risky Bulletin: EU has a problem attracting and retaining cyber talent

4:37

Risky Bulletin: Linux adds PCIe encryption to help...

Risky Bulletin ·

2025/12/10

Linux adds PCIe encryption to help secure cloud servers, Europol cracks down on Violence-as-a-Service providers, the International Criminal Court prepares for cyber-enabled genocide, and Cambodia busts a warehouse full of SMS blasters.Show notes Risky Bulletin: Linux adds PCIe encryption to help secure cloud servers

8:18

Risky Bulletin: APTs go after the React2Shell...

Risky Bulletin ·

2025/12/07

APTs go after the React2Shell vulnerability just hours after public disclosure. CISA remains without a director after the nomination stalls again, NSA is down 2,000 staff this year, and Intellexa is still active despite sanctions.Show notes

16:18

Srsly Risky Biz: When cyber campaigns cross a line

Risky Bulletin ·

2025/12/04

Tom Uren and Patrick Gray discuss a new report proposing a framework for deciding when cyber operations raise red flags. It suggests seven red flags and could help clarify thinking about how to respond to different operations.They also discuss Anthropic testifying to Congress and Iran using cyber intelligence to target missile strikes including by sharing it with Houthi rebels who fired at a specific ship. And finally, we are not reassured by China’s white paper

27:51

Between Two Nerds: Beating back state espionage

Risky Bulletin ·

2025/12/01

In this edition of Between Two Nerds Tom Uren and The Grugq wonder whether it is possible to deter states from cyber espionage with doxxing and other disruption measures.This episode is also available on Youtube. Show notes Department 40 exposed Charming Kitten exposed

14:05

Sponsored: Why Mastercard got into threat intel

Risky Bulletin ·

2025/11/30

In this Risky Business News sponsor interview, Mike Lashlee, CSO of Mastercard talks to Tom Uren about why the company got into threat intelligence.Mike talks about bringing together payments insights with threat intel to get strong signals about fraud or crime, the benefits of international collaboration and when it makes sense for your CSO to also be the CISO. Show notes

21:25

Srsly Risky Biz: DeepSeek and Musk's Grok both toe...

Risky Bulletin ·

2025/11/27

Tom Uren and Amberleigh Jack talk about new research that shows the Chinese-made DeepSeek-R1 AI model produces insecure code when prompts include topics that the Chinese Communist Party dislikes. It’s interesting research, but the CCP doesn’t have a monopoly on imposing AI bias.They also discuss the complete doxxing of the Iranian cyber espionage group known as APT35 or Charming Kitten. This episode is also available on Youtube.

35:26

Between Two Nerds: Telcos bad, Cloud good.

Risky Bulletin ·

2025/11/24

In this edition of Between Two Nerds Tom Uren and The Grugq talk about the differences between telcos and cloud companies. Does the nature of the business force cloud companies to be better at security?This episode is also available on Youtube. Show notes FCC looks to torch Biden-era cyber rules sparked by Salt Typhoon mess

21:28

Srsly Risky Biz: AI-Powered espionage will favor China

Risky Bulletin ·

2025/11/20

Tom Uren and Amberleigh Jack talk about Anthropic’s discovery of an “AI-orchestrated” cyber espionage campaign. To Tom, it feels a research project, but it’s pretty clear it will be really useful for threat actors that aren’t focussed on specific high-priority targets. Think ransomware, Chinese intellectual property theft and North Korean hackers. But it won’t be so good for Western intelligence agencies.They also discuss Google’s legal disruption of the China-based

30:52

Between Two Nerds: Russia's cyber war on wheat

Risky Bulletin ·

2025/11/17

In this edition of Between Two Nerds Tom Uren and The Grugq talk about the strategic “logic” of Russian wiper attacks on the Ukrainian grain sector.This episode is also available on Youtube. Show notes ESET report Soesanto and Gajos at Lawfare

7:48

Risky Bulletin: Europol takes down Elysium, VenomRAT,...

Risky Bulletin ·

2025/11/14

Europol takes down servers behind three malware operations, the US sanctions another Burmese military group linked to scam compounds, Google backs down from mandatory Android developer registration, and Checkout-dot-com donates its ransom to cybercrime researchers instead of paying hackers.Show notes Risky Bulletin: Europol takes down Elysium, VenomRAT, and

18:23

Srsly Risky Biz: Meta's fraud profit scandal

Risky Bulletin ·

2025/11/13

Tom Uren and Amberleigh Jack talk about a new Reuters’ report that reveals how Meta is knowingly raking in cash from scam advertisements. It’s around $16 billion worth, and in documents Meta calculates that it outweighs the costs of possible regulatory action. They also discuss recent state-backed supply chain attacks that have, so far, remained targeted and responsible. Finally they look at the UK’s decision to stop sharing intelligence with the US about suspected

5:34

Risky Bulletin: Another Chinese security firm has its...

Risky Bulletin ·

2025/11/11

Internal data leaks from another Chinese security firm, a US Congressional Budget Office breach has not been contained, the Cyber infosharing act likely to be extended until January, and we have a new OWASP Top 10.Show notes Risky Bulletin: Another Chinese security firm has its data leaked

29:54

Between Two Nerds: Why AI in malware is lame

Risky Bulletin ·

2025/11/10

In this edition of Between Two Nerds Tom Uren and The Grugq discuss how cyber criminals and even state actors are being dumb about using AI. This episode is also available on Youtube. Show notes Google's AI Threat Tracker Script framework

687 results

Risky Bulletin

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

PBS News Hour - Full Show

PBS News

CD Voice

China Daily

Israel Today: Ongoing War Report

Noa Levi

Jeffrey Epstein: The Coverup Chronicles

Bobby Capucci