It's a jungle out there https://risky.biz/ Copyright Risky Business Media 2007-2026 en Fri, 16 Oct 2026 13:11:48 +1100 Fri, 16 Oct 2026 13:11:48 +1100 Patrick Gray Risky.biz editorial@risky.biz false Jekyll v4.2.2 Fri, 16 Oct 2026 12:56:50 +1100 https://risky.biz/RBNEWS621/ https://risky.biz/RBNEWS621/ false 600 Three DataSuckers hacking group suspects arrested in Russia, Al Jazeera employees targeted with Candiru spyware, the US disrupts 40 North Korean laptop farms, and an OpenAI employee was arrested for planting a spy device. <p>Three DataSuckers hacking group suspects arrested in Russia, Al Jazeera employees targeted with Candiru spyware, the US disrupts 40 North Korean laptop farms, and an OpenAI employee was arrested for planting a spy device.</p> Thu, 15 Oct 2026 14:54:22 +1100 https://risky.biz/SRB186/ https://risky.biz/SRB186/ false 1229 Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for Ukraine’s retaliatory strikes. Karma! They also discuss how open-weight models are getting good at cyber tasks while safeguards are easily bypassed. There is no chance of international regulation that will rein in these models, so it is time to loosen cyber safety restrictions on American frontier models. This episode is also available on YouTube <p>Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for Ukraine’s retaliatory strikes. Karma!</p> <p>They also discuss how open-weight models are getting good at cyber tasks while safeguards are easily bypassed. There is no chance of international regulation that will rein in these models, so it is time to loosen cyber safety restrictions on American frontier models.</p> <p>This episode is also available on <a href="https://youtu.be/E7J8LDRABAk">YouTube</a></p> Wed, 14 Oct 2026 15:35:49 +1100 https://risky.biz/RB855/ https://risky.biz/RB855/ false 3987 On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including: Sacré bleu! Hackers turn up the heat at French supermarket freezers ShinyHunters enters “find out” stage Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild More models “behave badly” (by… doing exactly what we’re telling them to do) Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet Much, much more… This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work. This episode is also available on YouTube <p>On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including:</p> <ul> <li>Sacré bleu! Hackers turn up the heat at French supermarket freezers</li> <li>ShinyHunters enters “find out” stage</li> <li>Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild</li> <li>More models “behave badly” (by… doing exactly what we’re telling them to do)</li> <li>Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet</li> <li>Much, much more…</li> </ul> <p>This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work.</p> <p>This episode is also available on <a href="https://youtu.be/S1GjydKzA08">YouTube</a></p> Wed, 14 Oct 2026 13:42:24 +1100 https://risky.biz/RBNEWS620/ https://risky.biz/RBNEWS620/ false 411 Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in multiple countries following a cyberattack, and the EU wants smart glasses to beep loudly when they’re recording. <p>Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in multiple countries following a cyberattack, and the EU wants smart glasses to beep loudly when they’re recording.</p> Tue, 13 Oct 2026 06:06:44 +1100 https://risky.biz/BTN185/ https://risky.biz/BTN185/ false 2122 In this edition of Between Two Nerds Tom Uren and The Grugq examine how ShinyHunters and the FBI both deceived themselves into believing they were immune to cyber threats. This episode is also available on YouTube. <p>In this edition of Between Two Nerds Tom Uren and The Grugq examine how ShinyHunters and the FBI both deceived themselves into believing they were immune to cyber threats.</p> <p>This episode is also available on <a href="https://youtu.be/oKSnzUKPNAE">YouTube</a>.</p> Mon, 12 Oct 2026 13:43:40 +1100 https://risky.biz/RBNEWS619/ https://risky.biz/RBNEWS619/ false 869 Two ShinyHunters suspects arrested in Jordan and the US, hackers breach TLD registrars to get valid Google certs, Japanese authorities arrest a Qilin ransomware member and Google suspends its open-source bug bounty program after a flood of AI bug reports. <p>Two ShinyHunters suspects arrested in Jordan and the US, hackers breach TLD registrars to get valid Google certs, Japanese authorities arrest a Qilin ransomware member and Google suspends its open-source bug bounty program after a flood of AI bug reports.</p> Mon, 12 Oct 2026 06:18:00 +1100 https://risky.biz/RBNEWSSI146/ https://risky.biz/RBNEWSSI146/ false 1111 In this Risky Business sponsored interview James Wilson chats with Prowler’s founder and CEO Toni de la Fuente about how AI now allows pretty much anyone to vibe-code “killer apps”. These custom apps are often internal for organisations and hosted on the cloud. The pair discuss why developers need to focus on security on top of app functionality and how Prowler can work in parallel with apps and agents to help secure, and continuously assess, cloud infrastructure. <p>In this Risky Business sponsored interview James Wilson chats with Prowler’s founder and CEO Toni de la Fuente about how AI now allows pretty much anyone to vibe-code “killer apps”. These custom apps are often internal for organisations and hosted on the cloud.</p> <p>The pair discuss why developers need to focus on security on top of app functionality and how Prowler can work in parallel with apps and agents to help secure, and continuously assess, cloud infrastructure.</p> Fri, 02 Oct 2026 13:42:22 +1000 https://risky.biz/RBFEATURES41/ https://risky.biz/RBFEATURES41/ false 2758 In this solo Risky Business Features episode, James Wilson explains why “number of bugs” fixed in any given update is a misleading metric. We’ve seen up to 1,000 individual bug fixes in a single update recently, but that doesn’t give defenders the full picture they need to manage risks. Not all bugs are equally exploitable, so the industry needs to catch up to the bugpocalypse with more transparency. And maybe an entirely different approach to patching. <p>In this solo Risky Business Features episode, James Wilson explains why “number of bugs” fixed in any given update is a misleading metric. We’ve seen up to 1,000 individual bug fixes in a single update recently, but that doesn’t give defenders the full picture they need to manage risks.</p> <p>Not all bugs are equally exploitable, so the industry needs to catch up to the bugpocalypse with more transparency. And maybe an entirely different approach to patching.</p> Fri, 02 Oct 2026 12:57:07 +1000 https://risky.biz/RBNEWS618/ https://risky.biz/RBNEWS618/ false 573 Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts. <p>Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts.</p> Thu, 01 Oct 2026 12:38:57 +1000 https://risky.biz/SRB185/ https://risky.biz/SRB185/ false 977 Amberleigh Jack and James Wilson chat about OpenAI agents’ recent escapades into Australian government websites. OpenAI has promised to “rebuild trust with Australians” but we’re likely getting a glimpse into the new normal, here. They also discuss how the ShinyHunters hacking group has found itself on law enforcement’s target list after breaching FBI systems. The group played some stupid games and they appear to be in the “stupid prizes” stage. This episode is also available on YouTube <p>Amberleigh Jack and James Wilson chat about OpenAI agents’ recent escapades into Australian government websites. OpenAI has promised to “rebuild trust with Australians” but we’re likely getting a glimpse into the new normal, here.</p> <p>They also discuss how the ShinyHunters hacking group has found itself on law enforcement’s target list after breaching FBI systems. The group played some stupid games and they appear to be in the “stupid prizes” stage.</p> <p>This episode is also available on <a href="https://youtu.be/Tt8cvwh5OOE">YouTube</a></p>