Risky Business Podcast
February 25, 2026
Risky Business #826 -- A week of AI mishaps and skulduggery
Presented by
Enterprise Technology Editor
Technology Editor
CEO and Publisher
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They cover:
- Low skill actors compromise 600 Fortinets with AI-generated playbooks
- Anthropic calls out Chinese AI firms over model distillation
- Meta’s director of AI safety tells her ClawdBot not to delete her mail… so of course it does
- Peter Williams cops 7 years in jail for selling L3 Harris Trenchant’s exploits to Russia
- Ivanti got hacked in 2021 via… bugs in Ivanti
This episode is sponsored by line-rate network capture system Corelight. CEO Brian Dye joins to discuss what AI can do for defenders, and what it can’t.
This episode is also available on Youtube.
Brought to you by Corelight
Corelight: Evidence-Based NDR and Threat Hunting Platform
Show notes
AI-augmented threat actor accesses FortiGate devices at scale
"this reads to me like: they ran existing tools.... but with a cool dashboard :D"
Anthropic accuses Chinese labs of trying to illicitly take Claude’s capabilities | CyberScoop
Detecting and preventing distillation attacks
Hegseth warns Anthropic to let the military use the company’s AI tech as it sees fit, AP sources say
Anthropic Rolls Out Embedded Security Scanning for Claude
AWS's AI Coding Bot Kiro Caused a 13-Hour Outage
Running OpenClaw safely: identity, isolation, and runtime risk
Former Adobe, Cisco and Salesforce CISO talks AI pentesting
History Repeats: Security in the AI Agent Era
Meta Director of AI Safety Allows AI Agent to Accidentally Delete Her Inbox
Microsoft says Office bug exposed customers' confidential emails to Copilot AI | TechCrunch
The (tangential) fix: Microsoft adds Copilot data controls to all storage locations
Treasury Sanctions Exploit Broker Network for Theft and Sale of U.S. Government Cyber Tools
Risky Bulletin: Russia starts criminal probe of Telegram founder Pavel Durov
Ukraine pushes tighter Telegram regulation, citing Russian recruitment of locals
Persona emails customers saying they don’t work with ICE or DHS amid ‘surveillance’ claims
Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513
Ivanti hacked in 2021 via its own product
From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day