Risky Business Podcast
April 22, 2026
Risky Business #834 -- Vercel gets owned, Mozilla dumps hundreds of Mythos bugs
Presented by
Enterprise Technology Editor
CEO and Publisher
Independent Security Researcher
On this week’s show, Patrick Gray and James Wilson are joined by special guest The Grugq. They discuss the week’s cybersecurity news, including:
- Vercel got owned, and there’s a few infostealer and compromised employee dots to connect
- Mozilla used Mythos to find 271 bugs, which feels like a sign of the bug-pocalypse
- Speaking of the bug-pocalypse, is that why NIST is noping out of enriching a bunch of bugs?
- The NSA is using Mythos even though the government did that whole Anthropic blacklisting thing
- And DDos attacks hit a couple of smaller-player socials
This week’s episode is sponsored by Permiso. Ian Ahl chats to Pat about the subtle signals Permiso uses to detect ShinyHunters-style activity in cloud and on-prem environments.
This episode is also available on Youtube.
Brought to you by Permiso
Monitor All Identities In All Environments
Show notes
Vercel April 2026 Security incident
Vercel breach linked to infostealer infection at Context.ai
Vercel confirms breach as hackers claim to be selling stolen data
Matt Johansen: “This is not a good look” | X
NIST limits vulnerability analysis as CVE backlog swells | Cybersecurity Dive
US-sanctioned currency exchange says $15 million heist done by "unfriendly states" - Ars Technica
Hackers are abusing unpatched Windows security flaws to hack into organizations | TechCrunch
Mozilla Used Anthropic’s Mythos to Find and Fix 271 Bugs in Firefox | WIRED
NSA using Anthropic's Mythos despite Defense Department blacklist
Beyond the breach: inside a cargo theft actor’s post-compromise playbook | Proofpoint US
Turns Out We’re Not Alone - Volodymyr Styran
Bluesky blames app outage on ‘sophisticated’ DDoS attack | The Record from Recorded Future News
Mastodon says its flagship server was hit by a DDoS attack | TechCrunch
An IT expert explained under what conditions using a VPN can cause a smartphone to explode