Risky Bulletin Regular cybersecurity news updates from the Risky Business team... https://risky.biz/ Copyright Risky Business Media 2007-2026 en Fri, 10 Apr 2026 15:47:01 +1000 Fri, 10 Apr 2026 15:47:01 +1000 Risky Business Media Risky.biz editorial@risky.biz false Jekyll v4.2.2 Risky Bulletin: FBI extracted Signal chats from iPhone notifications logs Fri, 10 Apr 2026 15:09:41 +1000 https://risky.biz/RBNEWS549/ https://risky.biz/RBNEWS549/ false 409 The FBI extracted Signal chats from iPhone notifications logs, Los Angeles police data was leaked online, a former Meta employee is under investigation for downloading private photos, and an Adobe Reader zero-day is being exploited in the wild.

Show notes

]]> Srsly Risky Biz: American diplomats to fight foreign propaganda... on X Thu, 09 Apr 2026 11:34:40 +1000 https://risky.biz/SRB162/ https://risky.biz/SRB162/ false 1157 Tom Uren and Amberleigh Jack talk about the State Department taking to X to counter foreign propaganda. US Secretary of State Marco Rubio dismantled the State Department’s counter-propaganda office when he took charge, but it turns out that giving adversary states free reign online is a bad idea.

They also discuss how America’s lawful intercept systems are high value targets for Chinese hackers. It’s a big deal that part of the FBI’s lawful intercept system has been breached and it is high time that the security of these systems was reviewed.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Cybercrime losses passed $20 billion last year Wed, 08 Apr 2026 15:19:51 +1000 https://risky.biz/RBNEWS548/ https://risky.biz/RBNEWS548/ false 492 Cybercrime losses surpassed $20 billion last year, authorities disrupt a Russian router botnet that intercepted email logins, Iran hacks PLCs across the US, and exploitation hits ComfyUI and Flowise-AI-servers.

Show notes

]]> Between Two Nerds: Make cyber, not war Tue, 07 Apr 2026 06:10:19 +1000 https://risky.biz/BTN161/ https://risky.biz/BTN161/ false 1581 In this edition of Between Two Nerds Tom Uren and The Grugq discuss how Iran’s cyber forces have been used during the ongoing war so far.

Show notes

]]> Risky Bulletin: New Cambodian law will put scam compound operators in prison for life Mon, 06 Apr 2026 12:58:48 +1000 https://risky.biz/RBNEWS547/ https://risky.biz/RBNEWS547/ false 452 Cambodia prepares harsher prison terms for scam compound operators, an Italian museum moves valuables into a bank vault after a cyberattack, hackers exploit a bug in Vite-based apps and sites, and a supply chain attack hits an e-learning platform.

Show notes

]]> Sponsored: Application allowlisting, but not as you know it Mon, 06 Apr 2026 05:26:21 +1000 https://risky.biz/RBNEWSSI122/ https://risky.biz/RBNEWSSI122/ false 1030 In this Risky Business sponsored interview, James Wilson chats with Airlock Digital co-founders, David Cottingham and Daniel Schell, about how they’re moving up the stack from file-based allowlisting to application-based allowlisting. David and Daniel explain how they’re making a seamless and quite logical move into application allowlisting, but with a new take on the technique.

Show notes

]]> Risky Bulletin: Russia will revoke licenses for unruly ISPs Fri, 03 Apr 2026 11:12:55 +1100 https://risky.biz/RBNEWS546/ https://risky.biz/RBNEWS546/ false 495 Russia wants to revoke small ISP licenses, a cyberattack has disrupted access to US newspaper archives, Node.js pauses bug bounty program after its funding lapses and Apple backports patches for DarkSword.

Show notes

]]> Srsly Risky Biz: America's next top (cyber) model Thu, 02 Apr 2026 14:02:48 +1100 https://risky.biz/SRB161/ https://risky.biz/SRB161/ false 1158 Tom Uren and Amberleigh Jack talk about how incredibly good AI models have gotten at finding and exploiting vulnerabilities. That will upend the cyber security industry and it has implications for state cyber organisations such as NSA and Cyber Command.

They also discuss how broadband wireless communications links are critical in the war in Ukraine. After losing access to Starlink, Russian forces are doubling down on using equipment from American company Ubiquiti.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Iranian password sprays came first, then came the missiles Wed, 01 Apr 2026 15:45:10 +1100 https://risky.biz/RBNEWS545/ https://risky.biz/RBNEWS545/ false 517 Iranian password spraying targets Israel ahead of missile strikes, a major npm package gets hacked, Iran says it will bomb US tech firms in the Middle East, and Flint24 hackers are sentenced to prison in Russia.

Show notes

]]> Between Two Nerds: More secure but less safe Tue, 31 Mar 2026 06:57:38 +1100 https://risky.biz/BTN160/ https://risky.biz/BTN160/ false 1586 In this edition of Between Two Nerds Tom Uren and The Grugq talk about hacking and scams. While hacking is disappearing as a threat for most people, it is a new golden age for scammers. Even Tom has been scammed!

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Apple adds ClickFix warning to macOS terminal Mon, 30 Mar 2026 14:15:01 +1100 https://risky.biz/RBNEWS544/ https://risky.biz/RBNEWS544/ false 417 Apple adds a ClickFix warning to macOS, Handala hacks Kash Patel’s personal email, Balancer crypto platform shuts down after last year’s hack, and the EU proposes a ban on AI nudify apps.

Show notes

]]> Sponsored: AI is making old school prevention cool again Mon, 30 Mar 2026 06:17:38 +1100 https://risky.biz/RBNEWSSI121/ https://risky.biz/RBNEWSSI121/ false 977 In this Risky Business sponsored interview, James Wilson chats with Adam Pointon, CEO of Knocknoc, about how AI is making old school security controls and paradigms like deny-by-default cool again.

Today, patches are being reversed by AI systems into exploits in a matter of hours. The days of being able to rely on timely patching as a primary control are over. James talks to Adam about this new reality and how Knocknoc can help.

Show notes

]]> Risky Bulletin: Russia to use custom crypto-algorithm for its 5G network Fri, 27 Mar 2026 13:51:04 +1100 https://risky.biz/RBNEWS543/ https://risky.biz/RBNEWS543/ false 413 Russia will use a custom crypto-algorithm for its 5G network, the Hungarian opposition accuses the government of using spyware, Kaspersky says it tied Coruna to the “Operation Triangulation” attacks, and malware was deployed on thousands of Luxembourg government phones.

Show notes

]]> Srsly Risky Biz: Why get a warrant when you have Kash? Thu, 26 Mar 2026 13:07:57 +1100 https://risky.biz/SRB160/ https://risky.biz/SRB160/ false 1272 Tom Uren and Amberleigh Jack talk about FBI Director Kash Patel admitting to Congress that the Bureau is buying American’s location data and using it to generate valuable intelligence. That’s concerning, because commercially available information can be used in tremendously invasive ways and the FBI can buy it without needing a warrant.

They also discuss the FCC’s surprising move to ban foreign-made consumer routers. It’s not about security, it is just about reshoring manufacturing.

And finally they discuss the Trump administration’s plan for unleashing the private sector.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: The CEO of Intellexa is big mad at Greece Wed, 25 Mar 2026 14:09:30 +1100 https://risky.biz/RBNEWS542/ https://risky.biz/RBNEWS542/ false 395 Intellexa’s CEO is angry with Greek authorities, the FTC bans new foreign-made routers, Google launches a threat disruption unit, and German police warned companies about software bugs… in the middle of the night.

Show notes

]]> Between Two Nerds: Its raining iOS exploit kits! Mon, 23 Mar 2026 19:08:21 +1100 https://risky.biz/BTN159/ https://risky.biz/BTN159/ false 1420 In this edition of Between Two Nerds Tom Uren and The Grugq discuss how Google just keeps on finding iOS exploit kits. Is iPhone security busted? And why are Russian state hackers after crypto?

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Russia's Signal phishing nets thousands of accounts Mon, 23 Mar 2026 14:45:11 +1100 https://risky.biz/RBNEWS541/ https://risky.biz/RBNEWS541/ false 421 Russian intelligence services compromised thousands of Signal accounts, the Trivy vulnerability scanner is abused in a supply chain attack, Oracle issues an out-of-band patch for its Fusion Middleware, and the FBI takes down the Aisuru and Kimwolf botnets.

Show notes

]]> Sponsored: What is Extended Identity Access Management? Mon, 23 Mar 2026 06:58:22 +1100 https://risky.biz/RBNEWSSI120/ https://risky.biz/RBNEWSSI120/ false 639 In this Risky Business sponsored interview, Casey Ellis chats to Fletcher Heisler, founder and CEO of open source identity provider, Authentik. They chat about Extended Identity Access Management (XIAM), the company’s new acronym that has been seven years in the making.

Show notes

]]> Risky Bulletin: Second iOS hacking framework found in the wild Fri, 20 Mar 2026 13:12:16 +1100 https://risky.biz/RBNEWS540/ https://risky.biz/RBNEWS540/ false 421 A second iOS hacking framework has been found in the wild, Belgium launches its own government communications app, AWS kills S3 bucketsquatting and a cyberattack cripples car breathalyzers.

Show notes

]]> Srsly Risky Biz: Successful war leaves Iran with one option, its cyber forces Thu, 19 Mar 2026 12:14:02 +1100 https://risky.biz/SRB159/ https://risky.biz/SRB159/ false 1151 Tom Uren and Amberleigh Jack talk about how successfully achieving America’s war goals could force Iran to double down on cyber power. It’s resilient to bombing and is the cheapest, quickest way for the regime to get some wins post-war.

They also discuss Meta stepping back from end-to-end encryption on Instagram’s direct messages. There is a time and place for E2EE messages, so good riddance.

Finally, they discuss the one weird trick President Trump uses to make his smartphone conversations useless for foreign intelligence services.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: EU finally imposes more cyber sanctions Wed, 18 Mar 2026 12:39:47 +1100 https://risky.biz/RBNEWS539/ https://risky.biz/RBNEWS539/ false 387 The EU imposes cyber sanctions, an Iranian cyber chief was killed by US-Israeli strikes, the UK fixes a major bug in its company registry, and a US man phishes celebrity athletes while on home detention… for phishing.

Show notes

]]> Between Two Nerds: Unleashing Iran's hackers Tue, 17 Mar 2026 08:27:49 +1100 https://risky.biz/BTN158/ https://risky.biz/BTN158/ false 1661 In this edition of Between Two Nerds Tom Uren and The Grugq discuss how bombing Iran changes incentives for Iranian hacker groups. Destroying other ways that Iran might project power could force it to double down on cyber capabilities.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Meta disrupts Mexican cartels Mon, 16 Mar 2026 13:58:40 +1100 https://risky.biz/RBNEWS538/ https://risky.biz/RBNEWS538/ false 372 Meta suspends Mexican cartel accounts, multiple vulnerabilities have been found in Linux AppArmour, Instagram will disable support for end-to-end encrypted messaging and a supply chain attack hits AppsFlyer.

Show notes

]]> Sponsored: Sublime Security on Zoom attacks Mon, 16 Mar 2026 06:11:05 +1100 https://risky.biz/RBNEWSSI119/ https://risky.biz/RBNEWSSI119/ false 857 In this Risky Business sponsor interview, Catalin Cimpanu talks with Alex Orleans, Head of Threat Intelligence at Sublime Security, about the increase in email attacks leveraging Zoom invites and other video conferencing tools.

Show notes

]]> Risky Bulletin: Another residential proxy provider falls Fri, 13 Mar 2026 12:34:38 +1100 https://risky.biz/RBNEWS537/ https://risky.biz/RBNEWS537/ false 460 Authorities take down a residential proxy service, Iranian hackers wipe the network of a US medical device maker, Apple patches unsupported iOS against Coruna, and CISA asks for Cisco SD-WAN device logs.

Show notes

]]> Srsly Risky Biz: President Trump's best ever cyber strategy Thu, 12 Mar 2026 13:55:40 +1100 https://risky.biz/SRB158/ https://risky.biz/SRB158/ false 1128 Tom Uren and Amberleigh Jack talk about the newly released Trump Cyber Strategy for America. The ideas in it are fine and occasionally even game-changing, but many of its goals have been undercut by the administration’s actions to date.

They also discuss the Coruna exploit kit, which is now known to have leaked from a US defence contractor. Exploits are so valuable that it is unrealistic to expect they can be kept secret.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Gen. Joshua Rudd confirmed as next CyberCom and NSA head Wed, 11 Mar 2026 09:50:44 +1100 https://risky.biz/RBNEWS536/ https://risky.biz/RBNEWS536/ false 399 The Senate confirms a new CyberCom and NSA chief, the US will establish an inter-agency cyber unit, the UK’s Online Crime Centre will launch in April, and the Coruna iOS hacking kit was the work of L3Harris.

Show notes

]]> Between Two Nerds: An internet blackout won't stop NSA in Iran Tue, 10 Mar 2026 06:36:38 +1100 https://risky.biz/BTN157/ https://risky.biz/BTN157/ false 1558 In this edition of Between Two Nerds Tom Uren and The Grugq talk about why an internet shutdown won’t stop US cyber operations in Iran.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: New White House EO prioritizes fight against scams and cybercrime Mon, 09 Mar 2026 12:13:44 +1100 https://risky.biz/RBNEWS535/ https://risky.biz/RBNEWS535/ false 523 US federal agencies told to crack down on scams and cybercrime, the White House releases its new Cyber Strategy, suspected Chinese hackers breach the FBI’s wiretap network, and Romania’s largest meat exporter is insolvent after a ransomware attack.

Show notes

]]> Sponsored: What it means to be a learning organisation Mon, 09 Mar 2026 07:06:57 +1100 https://risky.biz/RBNEWSSI118/ https://risky.biz/RBNEWSSI118/ false 880 In this Risky Business sponsor interview, Marco Slaviero, CTO of Thinkst, talks to Tom Uren about how the company ensures that it is a learning organisation.

The pair discuss the company’s investment in its Thinkst Labs, how it differs from other security research labs, and how it helps grow products and people.

Show notes

]]> Risky Bulletin: Iranian hackers are scanning for security cameras to aid missile strikes Fri, 06 Mar 2026 13:32:10 +1100 https://risky.biz/RBNEWS534/ https://risky.biz/RBNEWS534/ false 407 Iran attempts to hack security cameras to support its missile strikes, Israel bombs Iran’s cyber headquarters, authorities take down LeakBase and Tycoon 2FA, and TikTok says ‘no’ to encrypted private messaging.

Show notes

]]> Srsly Risky Biz: The four hour cyber war on Iran Thu, 05 Mar 2026 13:58:16 +1100 https://risky.biz/SRB157/ https://risky.biz/SRB157/ false 1256 Tom Uren and Amberleigh Jack talk about how cyber operations were used in the first hours of the US-Israeli attack on Iran. They were instrumental in the attack on Iranian Supreme Leader Ali Khamenei, but they didn’t last long. The Iranian regime implemented an internet blackout within four hours of the first bombs.

They also discuss how threat actors are using AI. It’s not game-changing so far, but it is very much altering the balance between attack and defence.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Cyber Command conducted cyberattacks ahead of Iran strikes Wed, 04 Mar 2026 10:00:00 +1100 https://risky.biz/RBNEWS533/ https://risky.biz/RBNEWS533/ false 432 The US conducted cyberattacks ahead of strikes on Iran, Russia aims for internet independence by 2028, Google finds a new iOS exploit kit in the wild, and Chrome moves to a two-week release cycle.

Show notes

]]> Between Two Nerds: The evolution of cyber ops in Ukraine Tue, 03 Mar 2026 07:37:58 +1100 https://risky.biz/BTN156/ https://risky.biz/BTN156/ false 1668 In this edition of Between Two Nerds Tom Uren and The Grugq how the use of cyber operations in the war in Ukraine has evolved over time.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: LLMs can deanonymize internet users based on their comments Mon, 02 Mar 2026 12:17:26 +1100 https://risky.biz/RBNEWS532/ https://risky.biz/RBNEWS532/ false 539 LLMs can deanonymize internet users based on their comments, CISA gets a new acting director, hackers steal 15 million records from the French Ministry of Health, and Google takes down an ad fraud botnet.

Show notes

]]> Sponsored: AI Agents need distinct identities Mon, 02 Mar 2026 06:47:24 +1100 https://risky.biz/RBNEWSSI117/ https://risky.biz/RBNEWSSI117/ false 914 In this sponsored interview Casey Ellis chats to Harish Peri, SVP and general manager for AI security at Okta, a cloud-based identity and access management company. The pair chat about the fact that AI is forcing enterprises to relearn the basics around identity security, and how Okta for AI Agents can help.

Show notes

]]> Risky Bulletin: Russian man extorts Conti ransomware group Fri, 27 Feb 2026 13:42:24 +1100 https://risky.biz/RBNEWS531/ https://risky.biz/RBNEWS531/ false 519 A Russian man prosecuted for extorting the Conti ransomware group, Google takes down a Chinese cyber-espionage operation, Anthropic tells Department of War to pound sand over AI restrictions, and a Cisco zero-day was exploited in the wild for three years.

Show notes

]]> Srsly Risky Biz: Is Claude too woke for war? Thu, 26 Feb 2026 11:59:10 +1100 https://risky.biz/SRB156/ https://risky.biz/SRB156/ false 985 Tom Uren and Amberleigh Jack talk about the argy-bargy between the Pentagon and AI company Anthropic. US Defense Secretary Pete Hegseth is demanding that all safeguards are lifted from Claude, while Anthropic CEO Dario Amodei is insisting on protections against mass surveillance of Americans and use in lethal autonomous weapons.

They also discuss the return of Volt Typhoon, the Chinese hacker group prepositioning in critical infrastructure for sabotage in the event of a conflict over Taiwan. The group is still around, even though the US government declared victory against it last July.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Russia starts criminal probe of Telegram founder Pavel Durov Wed, 25 Feb 2026 12:29:58 +1100 https://risky.biz/RBNEWS530/ https://risky.biz/RBNEWS530/ false 432 Russia launches a criminal probe into Telegram’s founder, two teenagers arrested for a South Korean bike share hack, Anthropic accuses Chinese AI firms of distillation attacks, and the US Treasury sanctions a Russian exploit broker.

Show notes

]]> Between Two Nerds: How NSA will use AI Tue, 24 Feb 2026 08:13:02 +1100 https://risky.biz/BTN155/ https://risky.biz/BTN155/ false 1646 In this edition of Between Two Nerds Tom Uren and The Grugq talk about how ‘professional’ Five Eyes cyber espionage agencies like NSA will use AI. These agencies place a premium on stealth and won’t yolo AI.

This episode is available on Youtube.

Show notes

]]> Risky Bulletin: AI-driven hacking campaign breaches 600+ Fortinet devices Mon, 23 Feb 2026 11:48:53 +1100 https://risky.biz/RBNEWS529/ https://risky.biz/RBNEWS529/ false 385 An AI-driven hacking campaign breached 600 Fortinet devices, Ivanti was hacked via its own product, Wikipedia bans Archive-dot-Today for DDoS attacks, and Chinese hackers breached Italy’s police force.

Show notes

]]> Sponsored: The smouldering trashfire of AI and open source Mon, 23 Feb 2026 06:42:05 +1100 https://risky.biz/RBNEWSSI116/ https://risky.biz/RBNEWSSI116/ false 1499 In this Risky Business sponsor interview, Casey Ellis and Feross Aboukhadijeh discuss how AI is affecting open source, chat about a few attacks the company has seen in the wild and introduce Socket’s answer to the smouldering trashfire: Socket Firewall.

Show notes

]]> Risky Bulletin: RPKI infrastructure sits on shaky ground Fri, 20 Feb 2026 13:00:06 +1100 https://risky.biz/RBNEWS528/ https://risky.biz/RBNEWS528/ false 516 RPKI relies on vulnerable servers, the French Ministry of Economy discloses a data breach, the UK gives tech platforms 48 hours to remove revenge porn, and ClickFix-attacks are responsible for 50% of malware infections.

Show notes

]]> Srsly Risky Biz: Cyber bullets can't replace political will Thu, 19 Feb 2026 12:55:11 +1100 https://risky.biz/SRB155/ https://risky.biz/SRB155/ false 1174 Tom Uren and Amberleigh Jack talk about a groundswell of calls from European officials to build cyber capabilities to strike back against adversaries. There are good reasons that countries should have their own cyber capabilities, but if you don’t have the political will to strike back, having a magic cyber weapon doesn’t really make a difference.

They also talk about ‘distillation attacks’. They are a way that AI developers can steal the secret sauce of advanced models just by asking questions. It looks like American companies need government assistance if the US wants to keep its AI lead.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Supply chain attack plants backdoor on Android tablets Wed, 18 Feb 2026 14:24:51 +1100 https://risky.biz/RBNEWS527/ https://risky.biz/RBNEWS527/ false 498 A supply chain attack plants backdoors on Android tablets, the EU blocks AI from lawmakers’ devices, Cellebrite was used against a Kenyan politician, and a Chinese APT is exploiting a Dell zero-day.

Show notes

]]> Between Two Nerds: Buying the magic weapon Tue, 17 Feb 2026 07:24:23 +1100 https://risky.biz/BTN154/ https://risky.biz/BTN154/ false 1698 In this edition of Between Two Nerds Tom Uren and The Grugq discuss whether middle powers should be investing in military cyber capabilities.

This episode is also available on Youtube

Show notes

]]> Risky Bulletin: Cambodia promises to dismantle scam compounds by April Mon, 16 Feb 2026 14:14:00 +1100 https://risky.biz/RBNEWS526/ https://risky.biz/RBNEWS526/ false 532 Cambodia promises to dismantle cyber scam compounds by April, CISA urges companies to adopt the OpenEoX standard, Linux gets post-quantum crypto support, and Palo Alto Networks avoids attributing an APT to China.

Show notes

]]> Sponsored: Filtering the KEV was really hard … Until now! Mon, 16 Feb 2026 06:42:21 +1100 https://risky.biz/RBNEWSSI115/ https://risky.biz/RBNEWSSI115/ false 1438 In this sponsored interview Casey Ellis chats to Tod Beardsley, VP of Security at RunZero about Kevology, the company’s analysis of CISA’s KEV list. Kevology lets you easily identify and fix vulnerabilities from the list that are urgent and relevant to you.

Show notes

]]> Risky Bulletin: IcedID malware developer fakes his own death to escape the FBI Fri, 13 Feb 2026 13:07:45 +1100 https://risky.biz/RBNEWS525/ https://risky.biz/RBNEWS525/ false 431 A Malware developer faked his own death to evade the FBI, Apple patches a zero-day used in a targeted attack, the Tianfu Cup quietly returns, and researchers spot the first malicious Outlook add-in.

Show notes

]]> Srsly Risky Biz: Microsoft forgoes its secure future Thu, 12 Feb 2026 11:46:20 +1100 https://risky.biz/SRB154/ https://risky.biz/SRB154/ false 1190 Tom Uren and Amberleigh Jack talk about Microsoft CEO Satya Nadella’s messaging around personnel changes at the top of its security organisation. These signal a focus on selling security products rather than on making secure products.

They also discuss Expedition Cloud, a Chinese cyber range that replicated the critical infrastructure of neighbouring countries, apparently to develop and fine-tune cyber disruption operations.

Finally, they talk about what we’ve learnt about the role of cyber operations in the US bombing of Iranian nuclear facilities. It was far bigger than we previously thought.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Chinese cyber-spies breached all of Singapore's telcos Wed, 11 Feb 2026 14:02:28 +1100 https://risky.biz/RBNEWS524/ https://risky.biz/RBNEWS524/ false 408 China has breached all of Singapore’s major telcos, Microsoft announces two new security features, a hacktivist leaks data from a stalkerware provider, and researchers map out “GRU information warfare units” based on their insignia.

Show notes

]]> Between Two Nerds: Why we are doomed to insecurity Tue, 10 Feb 2026 07:59:19 +1100 https://risky.biz/BTN153/ https://risky.biz/BTN153/ false 1635 In this edition of Between Two Nerds Tom Uren and The Grugq talk about why the world is destined to be perpetually insecure.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: SmarterTools hacked via its own product Mon, 09 Feb 2026 13:45:08 +1100 https://risky.biz/RBNEWS523/ https://risky.biz/RBNEWS523/ false 368 A software company gets hacked through vulnerabilities in its own product, European agencies are hacked via recent Ivanti zero-days, Senegal is being extorted by hackers, and a state actor is behind a Signal phishing campaign in Germany.

Show notes

]]> Sponsored: Trail of Bits going all-in on AI Mon, 09 Feb 2026 05:59:39 +1100 https://risky.biz/RBNEWSSI114/ https://risky.biz/RBNEWSSI114/ false 1124 In this Risky Business sponsored interview, Tom Uren talks to Trail of Bits CEO Dan Guido about how Trail of Bits is reworking its business processes to take advantage of AI. Dan talks about what it takes to make AI agents reliable and trustworthy and how that will give the company an edge by making its work both better and faster.

Show notes

]]> Risky Bulletin: Denmark recruits hackers for offensive cyber operations Fri, 06 Feb 2026 11:13:49 +1100 https://risky.biz/RBNEWS522/ https://risky.biz/RBNEWS522/ false 379 Denmark recruits hackers for offensive cyber operations, CISA tells agencies to remove old edge devices, Coinbase has another insider breach, and Microsoft appoints a new security chief.

Show notes

]]> Srsly Risky Biz: Google's cyber disruption unit kicks its first goal Thu, 05 Feb 2026 13:41:10 +1100 https://risky.biz/SRB153/ https://risky.biz/SRB153/ false 1067 Tom Uren and Amberleigh Jack talk about Google’s cyber disruption unit taking aim at the IPIDEA residential proxy network. The network was a cybercrime enabler that was used by hundreds of threat actors for crime and espionage. More of this kind of disruption please.

They also discuss SpaceX’s rapid action to stop the Russian military using Starlink terminals to guide drones deep into Ukrainian territory.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Plone CMS stops supply-chain attack Wed, 04 Feb 2026 12:32:12 +1100 https://risky.biz/RBNEWS521/ https://risky.biz/RBNEWS521/ false 494 The Plone CMS stops a supply-chain attack, French cops raid the X Paris office; the number of malicious OpenClaw skills grows, and a Chinese APT hacked Notepad++ servers.

Show notes

]]> Between Two Nerds: The internal logic of Russian power grid attacks Tue, 03 Feb 2026 07:31:56 +1100 https://risky.biz/BTN152/ https://risky.biz/BTN152/ false 1962 In this edition of Between Two Nerds Tom Uren and The Grugq discuss the recent Russian attack on Polish electricity infrastructure.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: StopICE blames hack on "a CBP agent here in SoCal" Mon, 02 Feb 2026 13:26:42 +1100 https://risky.biz/RBNEWS520/ https://risky.biz/RBNEWS520/ false 469 ICE tracking app blames a recent hack on a government agent, Microsoft will disable NTLM in the next release of Windows, Poland bans Chinese cars from military bases, and Ivanti patches two new zero-days.

Show notes

]]> Sponsored: AI is critical to the future of cyber defence Mon, 02 Feb 2026 07:03:08 +1100 https://risky.biz/RBNEWSSI113/ https://risky.biz/RBNEWSSI113/ false 1094 In this sponsored interview, Casey Ellis chats to Edward Wu, founder of Dropzone AI about a recent Vanderbilt University report that reveals that foreign adversaries’ resources are growing. Edward says AI capabilities are critical to the future of cyber defence, because the west can’t hire itself out of the shortfall.

Show notes

]]> Risky Bulletin: eScan antivirus distributes backdoor in latest supply chain attack Fri, 30 Jan 2026 09:58:47 +1100 https://risky.biz/RBNEWS519/ https://risky.biz/RBNEWS519/ false 421 Hackers breach eScan antivirus and distribute a backdoor, Google takes down the IPIDEA proxy botnet, most GDPR fines remain uncollected, and the Poland wiper attack hit 30 locations.

Show notes

]]> Srsly Risky Biz: Punish the wicked and reward the righteous Thu, 29 Jan 2026 12:53:57 +1100 https://risky.biz/SRB152/ https://risky.biz/SRB152/ false 1037 Tom Uren and Amberleigh Jack talk about the Pall Mall Process, an international effort to reign in abusive spyware. Tom thinks the US has already stumbled into a viable carrots and sticks style strategy that will shape the industry more than coming up with standards will.

The pair also discuss news that Chinese Salt Typhoon hackers compromised the calls of senior UK officials in Downing Street. The UK has extensive telecommunications security regulations and the incident makes us wonder what that legislation is actually good for.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Cyberattack cripples cars across Russia Wed, 28 Jan 2026 08:06:05 +1100 https://risky.biz/RBNEWS518/ https://risky.biz/RBNEWS518/ false 463 A cyberattack has crippled cars in Russia, Microsoft patches an Office zero-day, WhatsApp rolls out an account lockdown feature, and a handful of Chrome extensions steal ChatGPT auth tokens.

Show notes

]]> Between Two Nerds: Getting pinged and the fog of war Tue, 27 Jan 2026 07:26:51 +1100 https://risky.biz/BTN151/ https://risky.biz/BTN151/ false 1802 In this edition of Between Two Nerds Tom Uren and The Grugq discuss how getting pinged hurts state hackers by introducing uncertainty. Publishing technical reports on the hack can actually improve the situation by removing uncertainty about how attackers were detected.

This episode is also available on Youtube.

Show notes

]]> Sponsored: Push Security on ConsentFix attacks Tue, 27 Jan 2026 06:20:19 +1100 https://risky.biz/RBNEWSSI112/ https://risky.biz/RBNEWSSI112/ false 786 In this Risky Business News sponsor interview, Catalin Cimpanu talks with Luke Jennings, VP of Research & Development at Push Security, about ConsentFix. It’s a new form of email-based social engineering attack used in the wild, an evolution of the ClickFix attack that goes after your identity.

Show notes

]]> Risky Bulletin: Russia deployed wipers on Poland's energy grid Mon, 26 Jan 2026 10:04:28 +1100 https://risky.biz/RBNEWS517/ https://risky.biz/RBNEWS517/ false 394 Russia deployed wipers against Poland’s energy grid, Microsoft shared BitLocker keys with the FBI, Romania dismantles a murder-for-hire portal, and the EU creates a new anti-spyware group.

Show notes

]]> Risky Bulletin: Improperly patched bug exploited again in Fortinet firewalls Fri, 23 Jan 2026 09:26:03 +1100 https://risky.biz/RBNEWS516/ https://risky.biz/RBNEWS516/ false 399 A poorly patched bug is being exploited in Fortinet firewalls, hackers go after security testing environments, Jordanian police used Cellebrite against activists, and new Cisco and SmarterMail zero-days.

Show notes

]]> Srsly Risky Biz: You can't block space internet Thu, 22 Jan 2026 12:25:07 +1100 https://risky.biz/SRB151/ https://risky.biz/SRB151/ false 1187 Tom Uren and Amberleigh Jack talk about the rise of technologies that can undermine internet blackouts such as Starlink and its relatively new direct-to-cell service. Authoritarian internet shutdowns and disasters happen often enough that governments should think about how to take advantage of these new technologies rather than just reacting when crises arise.

They also discuss the nomination of General Joshua Rudd as head of NSA and US Cyber Command.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Domain resurrection attacks come to Canonical's Snap Store Wed, 21 Jan 2026 12:41:55 +1100 https://risky.biz/RBNEWS515/ https://risky.biz/RBNEWS515/ false 374 Canonical’s Snap Store hit by domain resurrection attacks, Russia will use AI to detect VPN users, Iranian hackers switch to Starlink during internet outage, and Greece arrests SMS blasters… by dumb luck.

Show notes

]]> Between Two Nerds: Why the West sucks at Information Warfare Tue, 20 Jan 2026 06:52:53 +1100 https://risky.biz/BTN150/ https://risky.biz/BTN150/ false 1956 In this edition of Between Two Nerds Tom Uren and The Grugq talk about what information warfare even is, revisit a 30-year-old paper and examine why Western governments struggle with the concept.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Germany seeks more hacking and surveillance powers for its intel service Mon, 19 Jan 2026 09:41:53 +1100 https://risky.biz/RBNEWS514/ https://risky.biz/RBNEWS514/ false 438 Germany seeks more hacking and surveillance powers for its intelligence service, Finland intends to criminalize the spreading of false information, patriotic “French” social media goes quiet during Iran’s internet outage, and hackers are extorting GrubHub.

Show notes

]]> Sponsored: Seeing into the seams Mon, 19 Jan 2026 06:10:26 +1100 https://risky.biz/RBNEWSSI111/ https://risky.biz/RBNEWSSI111/ false 865 In this Risky Business sponsored interview, Tom Uren talks to Justin Kohler, Chief Product Officer at SpecterOps, about how attack paths exist in the seams between different identity or permissions management domains.

In isolation, for example, both your Github and your AWS deployment could follow best practices. But bring them together and you’ve got problems. Bloodhound’s OpenGraph lets you find and fix these otherwise invisible attack paths.

Show notes

]]> Risky Bulletin: China bans Israeli and US cybersecurity products Fri, 16 Jan 2026 10:00:57 +1100 https://risky.biz/RBNEWS513/ https://risky.biz/RBNEWS513/ false 432 China bans Israeli and US cybersecurity products, Sean Plankey is re-nominated for CISA Director, RAM price hikes are likely to impact the cost of firewalls, and Lumen sinkholes the Kimwolf DDoS botnet.

Show notes

]]> Srsly Risky Biz: China Fights Scam Compounds … For China Thu, 15 Jan 2026 12:02:36 +1100 https://risky.biz/SRB150/ https://risky.biz/SRB150/ false 1159 Tom Uren and Amberleigh Jack talk about the Chinese government’s reactive approach to tackling scam compounds. It’s driven by bad news on domestic media and therefore focusses on the compounds that are targeting Chinese citizens. Rather than eliminating the industry, that may instead be shaping the industry to focus on other countries and particularly Americans.

They also discuss the role of disruptive cyber operations in the US’s raid to capture Venezuelan President Nicolás Maduro.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Russia fines 33 telcos for surveillance non-compliance Wed, 14 Jan 2026 14:22:51 +1100 https://risky.biz/RBNEWS512/ https://risky.biz/RBNEWS512/ false 377 Russia fines 33 telcos for surveillance non-compliance, AVCheck admin is arrested in Amsterdam, Poland repels an attack on its power grid, and voice cloning defenses can be bypassed.

Show notes

]]> Between Two Nerds: Lights out! Tue, 13 Jan 2026 07:32:35 +1100 https://risky.biz/BTN149/ https://risky.biz/BTN149/ false 1678 In this edition of Between Two Nerds Tom Uren and The Grugq about the role of cyber operations in the US capture of Venezuela’s president Nicolas Maduro.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Apex Legends streamers hacked again Mon, 12 Jan 2026 09:32:41 +1100 https://risky.biz/RBNEWS511/ https://risky.biz/RBNEWS511/ false 365 The Apex Legends game is hacked again, data about 17 million Instagram users put up for sale, Indonesia blocks X over pornographic content, and a ransomware attack hits major Chilean energy provider

Show notes

]]> Sponsored: What AI workloads mean for Cloud security Mon, 12 Jan 2026 06:13:21 +1100 https://risky.biz/RBNEWSSI110/ https://risky.biz/RBNEWSSI110/ false 917 In this Risky Business News sponsored interview the CEO and founder of Prowler, Toni de la Fuente, explains how implementing AI systems brings new security challenges that differ for traditional cloud workloads. Toni also talks about ‘attack paths’ in the context of cloud infrastructure and using them to minimise risk.

Show notes

]]> Risky Bulletin: Belarus deploys spyware on journalists' phones Fri, 19 Dec 2025 13:02:37 +1100 https://risky.biz/RBNEWS510/ https://risky.biz/RBNEWS510/ false 418 Belarus deployed spyware on journalists’ phones, a man is arrested for installing malware on a ferry, France arrests the hacker behind an Interior Ministry email server breach, and new Cisco and SonicWall zero-days.

Show notes

]]> Srsly Risky Biz: Like Huawei, but for electricity Thu, 18 Dec 2025 10:56:12 +1100 https://risky.biz/SRB149/ https://risky.biz/SRB149/ false 1157 Tom Uren and Patrick Gray talk about America’s increasing dependence on Chinese manufacturers for electrical sector equipment. This doesn’t seem like a good idea when China is hacking electric utilities for sabotage and PLA researchers are dreaming up ways to attack the grid.

They also discuss the possibility that the US was responsible for a cyber attack on Venezuela’s state oil company and how Russian state-backed hacktivism is so dumb.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Most smart devices run outdated web browsers Wed, 17 Dec 2025 11:39:05 +1100 https://risky.biz/RBNEWS509/ https://risky.biz/RBNEWS509/ false 459 Most smart devices run outdated web browsers, Ukrainian hacktivists breach a major Russian defense contractor, ransomware hits Venezuela’s state-owned oil company, and hackers are trying to extort PornHub with stolen user data.

Show notes

]]> Between Three Nerds: The evolution of Iranian cyber espionage Tue, 16 Dec 2025 07:37:39 +1100 https://risky.biz/BTN148/ https://risky.biz/BTN148/ false 2996 In this edition of Between Two Nerds Tom Uren and The Grugq talk to Hamid Kashfi, CEO and founder of DarkCell, talk about the Iranian cyber espionage scene.

Kashfi talks about how the regime once forced people to hack and crushed the domestic security research scene. He describes how and why the government has changed its approach and is now reaping the rewards of improved Iranian capabilities.

This episode is available on Youtube.

Show notes

]]> Risky Bulletin: African freelancers behind anti-US and anti-French disinfo campaigns Mon, 15 Dec 2025 12:56:14 +1100 https://risky.biz/RBNEWS508/ https://risky.biz/RBNEWS508/ false 471 Russia is hiring African freelancers for disinformation campaigns, the US is preparing to let contractors run offensive cyber operations, Germany blames Russia for the hack of its air traffic control agency, and Apple patches two WebKit zero-days.

Show notes

]]> Sponsored: ConsentFix and Push Security's browser attack taxonomy Mon, 15 Dec 2025 07:17:51 +1100 https://risky.biz/RBNEWSSI109/ https://risky.biz/RBNEWSSI109/ false 1176 In this sponsored interview Casey Ellis is joined by Push Security’s Field CTO, Mark Orlando. They chat about the ways that browser-based attacks are evolving and how Push Security is finding and cataloging them.

Show notes

]]> Risky Bulletin: EU has a problem attracting and retaining cyber talent Fri, 12 Dec 2025 13:59:37 +1100 https://risky.biz/RBNEWS507/ https://risky.biz/RBNEWS507/ false 562 The EU has a problem attracting and retaining cyber talent, the CEO of Coupang resigns following the company’s security breach, Microsoft expands its bug bounty program to cover third party code, and Chrome and Gogs patch zero-days.

Show notes

]]> Risky Bulletin: Linux adds PCIe encryption to help secure cloud servers Wed, 10 Dec 2025 11:12:01 +1100 https://risky.biz/RBNEWS506/ https://risky.biz/RBNEWS506/ false 277 Linux adds PCIe encryption to help secure cloud servers, Europol cracks down on Violence-as-a-Service providers, the International Criminal Court prepares for cyber-enabled genocide, and Cambodia busts a warehouse full of SMS blasters.

Show notes

]]> Risky Bulletin: APTs go after the React2Shell vulnerability within hours Mon, 08 Dec 2025 10:32:22 +1100 https://risky.biz/RBNEWS505/ https://risky.biz/RBNEWS505/ false 498 APTs go after the React2Shell vulnerability just hours after public disclosure. CISA remains without a director after the nomination stalls again, NSA is down 2,000 staff this year, and Intellexa is still active despite sanctions.

Show notes

]]> Srsly Risky Biz: When cyber campaigns cross a line Thu, 04 Dec 2025 11:02:51 +1100 https://risky.biz/SRB148/ https://risky.biz/SRB148/ false 978 Tom Uren and Patrick Gray discuss a new report proposing a framework for deciding when cyber operations raise red flags. It suggests seven red flags and could help clarify thinking about how to respond to different operations.

They also discuss Anthropic testifying to Congress and Iran using cyber intelligence to target missile strikes including by sharing it with Houthi rebels who fired at a specific ship.

And finally, we are not reassured by China’s white paper about being a good cyber citizen.

This episode is also available of Youtube.

Show notes

]]> Between Two Nerds: Beating back state espionage Tue, 02 Dec 2025 06:56:47 +1100 https://risky.biz/BTN147/ https://risky.biz/BTN147/ false 1671 In this edition of Between Two Nerds Tom Uren and The Grugq wonder whether it is possible to deter states from cyber espionage with doxxing and other disruption measures.

This episode is also available on Youtube.

Show notes

]]> Sponsored: Why Mastercard got into threat intel Mon, 01 Dec 2025 09:21:12 +1100 https://risky.biz/RBNEWSSI108/ https://risky.biz/RBNEWSSI108/ false 845 In this Risky Business News sponsor interview, Mike Lashlee, CSO of Mastercard talks to Tom Uren about why the company got into threat intelligence.

Mike talks about bringing together payments insights with threat intel to get strong signals about fraud or crime, the benefits of international collaboration and when it makes sense for your CSO to also be the CISO.

Show notes

]]> Srsly Risky Biz: DeepSeek and Musk's Grok both toe the party line Thu, 27 Nov 2025 13:07:43 +1100 https://risky.biz/SRB147/ https://risky.biz/SRB147/ false 1285 Tom Uren and Amberleigh Jack talk about new research that shows the Chinese-made DeepSeek-R1 AI model produces insecure code when prompts include topics that the Chinese Communist Party dislikes. It’s interesting research, but the CCP doesn’t have a monopoly on imposing AI bias.

They also discuss the complete doxxing of the Iranian cyber espionage group known as APT35 or Charming Kitten.

This episode is also available on Youtube.

Show notes

]]> Between Two Nerds: Telcos bad, Cloud good. Tue, 25 Nov 2025 07:36:52 +1100 https://risky.biz/BTN146/ https://risky.biz/BTN146/ false 2126 In this edition of Between Two Nerds Tom Uren and The Grugq talk about the differences between telcos and cloud companies. Does the nature of the business force cloud companies to be better at security?

This episode is also available on Youtube.

Show notes

]]> Srsly Risky Biz: AI-Powered espionage will favor China Thu, 20 Nov 2025 12:46:35 +1100 https://risky.biz/SRB146/ https://risky.biz/SRB146/ false 1288 Tom Uren and Amberleigh Jack talk about Anthropic’s discovery of an “AI-orchestrated” cyber espionage campaign. To Tom, it feels a research project, but it’s pretty clear it will be really useful for threat actors that aren’t focussed on specific high-priority targets. Think ransomware, Chinese intellectual property theft and North Korean hackers. But it won’t be so good for Western intelligence agencies.

They also discuss Google’s legal disruption of the China-based Lighthouse phishing as a service operation. Surprisingly, it seems to be working!

Finally, they talk about why the memory safe Rust language has been a triple win for Android.

This episode is also available on Youtube.

Show notes

]]> Between Two Nerds: Russia's cyber war on wheat Tue, 18 Nov 2025 07:18:45 +1100 https://risky.biz/BTN145/ https://risky.biz/BTN145/ false 1852 In this edition of Between Two Nerds Tom Uren and The Grugq talk about the strategic “logic” of Russian wiper attacks on the Ukrainian grain sector.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Europol takes down Elysium, VenomRAT, and Rhadamanthys Fri, 14 Nov 2025 13:45:06 +1100 https://risky.biz/RBNEWS504/ https://risky.biz/RBNEWS504/ false 468 Europol takes down servers behind three malware operations, the US sanctions another Burmese military group linked to scam compounds, Google backs down from mandatory Android developer registration, and Checkout-dot-com donates its ransom to cybercrime researchers instead of paying hackers.

Show notes

]]> Srsly Risky Biz: Meta's fraud profit scandal Thu, 13 Nov 2025 12:35:03 +1100 https://risky.biz/SRB145/ https://risky.biz/SRB145/ false 1103 Tom Uren and Amberleigh Jack talk about a new Reuters’ report that reveals how Meta is knowingly raking in cash from scam advertisements. It’s around $16 billion worth, and in documents Meta calculates that it outweighs the costs of possible regulatory action.

They also discuss recent state-backed supply chain attacks that have, so far, remained targeted and responsible. Finally they look at the UK’s decision to stop sharing intelligence with the US about suspected drug boats in the Caribbean.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Another Chinese security firm has its data leaked Wed, 12 Nov 2025 10:13:15 +1100 https://risky.biz/RBNEWS503/ https://risky.biz/RBNEWS503/ false 334 Internal data leaks from another Chinese security firm, a US Congressional Budget Office breach has not been contained, the Cyber infosharing act likely to be extended until January, and we have a new OWASP Top 10.

Show notes

]]> Between Two Nerds: Why AI in malware is lame Tue, 11 Nov 2025 07:44:05 +1100 https://risky.biz/BTN144/ https://risky.biz/BTN144/ false 1794 In this edition of Between Two Nerds Tom Uren and The Grugq discuss how cyber criminals and even state actors are being dumb about using AI.

This episode is also available on Youtube.

Show notes

]]> Risky Bulletin: Myanmar scam compound goes boom! Mon, 10 Nov 2025 13:43:05 +1100 https://risky.biz/RBNEWS502/ https://risky.biz/RBNEWS502/ false 474 Myanmar starts demolishing the KK Park scam compound, the US Congressional Budget Office gets hacked by a foreign APT, Chrome will remove risky X-S-L-T support, and scammers in Singapore will get the cane.

Show notes

]]> Sponsored: Prowler uses AI how AI works best Mon, 10 Nov 2025 07:12:00 +1100 https://risky.biz/RBNEWSSI107/ https://risky.biz/RBNEWSSI107/ false 1157 In this sponsored interview Casey Ellis chats to Toni de la Fuente, founder and CEO of Prowler, an open source platform for cloud security. They chat about how and why Prowler selectively applies AI to ensure it adds value rather than just because they can.

Show notes

]]>