Risky Business Podcast
May 20, 2026
Risky Business #838 -- GitHub investigates possible breach
Presented by
Technology Editor
Co-host at large
CEO and Publisher
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news.
They cover:
- GitHub announced a possible breach
- CISA leaks important creds, keys in public repo
- Awful vulnerability in Bitlocker renders it useless without a PIN
- So. Many. Patches.
- Polish Government urges officials to ditch Signal for mSzyfr
- Much, much more
This week’s show is brought to you by Thinkst Canary. Thinkst’s founder, Haroon Meer, is this week’s sponsor guest. He joined James Wilson to talk about how doing “the basics” in security isn’t trivially easy.
This episode is also available on YouTube.
Brought to you by Thinkst
Know. When it Matters!
Show notes
CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security
Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran
War and Data Centers Are Driving Up the Cost of Fiber-Optic Cable
NCSC’s Ollie Whitehouse on surviving the "bugpocalypse" - Risky Business Media
Project Glasswing: what Mythos showed us
First public macOS kernel memory corruption exploit on Apple M5
OpenAI launches Daybreak to combat cyber threats | Cybersecurity Dive
Zero-day exploit completely defeats default Windows 11 BitLocker protections - Ars Technica
GitHub - Wack0/bitlocker-attacks: A list of public attacks on BitLocker · GitHub
Catalin Cimpanu: "The Polish government has advi…" - Mastodon
CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)
Patch bypass allows hackers to exploit prior flaw in SonicWall SSL-VPN | Cybersecurity Dive
Streamer Realtime Deepfakes Himself into Mr. Beast, Says He Loves 'Touching Little Boys'