Risky Business Podcast
November 04, 2026
Risky Business #858 -- The $6.3b laptop
Presented by
Technology Editor
CEO and Publisher
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including:
- The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess
- Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute!
- A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking”
- An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more!
This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gray to chat about fear around the looming post-quantum cryptography crisis, and how CISOs can use it as an opportunity to clean up house and finally take all the end-of-life products out to pasture.
This episode is also available on YouTube
Brought to you by runZero
Total Attack Surface & Exposure Management
Show notes
Binance hot wallet heist (Oct 2026) | therecord.media
Polymarket DebugBear script compromise | The Hacker News
Chainalysis "offensive agentic techniques" breach | BleepingComputer
Trezor warns of suspected crypto-theft implant in hardware wallet | BleepingComputer
Second wave of suspected cyberattacks hits supermarket freezers across Europe | The Record
Amadeus booking data breach | "Data breach" – Google Alert
DHS Icepick personnel data leak | "Data breach" – Google Alert
Google says LLMjacking attacks can rack up $1 million in cloud AI charges | BleepingComputer
Northflank security breach leads to abuse of customers' AI API keys | BleepingComputer
Rikiya Takehi (@rikiyatakehi) on X | X (formerly Twitter)
Russia's AI-powered hacks are causing chaos in Ukraine - Risky Business Media |
Volt Typhoon "Silent Train" network | zetter-zeroday.com
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware | BleepingComputer
PHP2Shell (CVE-2026-109618/109619) | Cybersecurity Dive
GitLab CVE-2026-97229 CI/CD regex RCE | BleepingComputer
CISA warns of hackers now exploiting critical Node2Shell flaw | BleepingComputer
Critical Linux kernel flaw allows remote root attacks on MPTCP servers | BleepingComputer
Marcus Hutchins (@MalwareTechBlog) on X | X (formerly Twitter)
New Android "SMS of Death" exploit can remotely crash unpatched phones | BleepingComputer
Hackers now scanning systems for recently patched Oracle flaw | BleepingComputer
Ivanti patches two more Connect Secure zero-days chained in attacks | BleepingComputer
Trojanized Claude Code extension (v2.1.313) | Step Security Blog
Germany says lawmakers' iPhones may have been hacked with spyware | TechCrunch Security
Google disrupts million-device XCPE Android malware botnet, bans TV box maker | BleepingComputer