『Risky Business』のカバーアート

Risky Business

Risky Business

著者： Risky Business Media
無料で聴く

【Amazonプライム会員限定】今ならプレミアムプランが4か月 月額99円。

10月19日まで。※適用条件あり
Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.Copyright Risky Business Media 2007-2026 政治・政府
エピソード
  • Risky Business #855 -- ShinyHunters done sowing, enters reaping phase

    Risky Business #855 -- ShinyHunters done sowing, enters reaping phase
    2026/10/14
    On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including: Sacré bleu! Hackers turn up the heat at French supermarket freezersShinyHunters enters “find out” stageNetscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wildMore models “behave badly” (by… doing exactly what we’re telling them to do)Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quietMuch, much more… This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work. This episode is also available on YouTube Show notes Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.mediaDangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputerHacked FBI data has sensitive information about employees' intelligence roles | reuters.comHackers stole millions of US military personnel records during months-long data breach | TechCrunch SecurityShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputerDutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.comKey ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rsFBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.comRansomware recovery CEO charged over secret ransom payments | BleepingComputerCitrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity DiveCitrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputerKiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.mediaAttackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.comFBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.mediaCheck Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputerMicrosoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.comHackers exploit critical Atlassian flaw after public PoC release | BleepingComputerCISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputerAnthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.comAn Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunchOpenAI bots meddled with US government agencies, including SEC and Census | bbc.comOpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.comAnthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.comOpenAI agent breached Australian government health website, Albanese says | therecord.mediaDoubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.mediaOpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.comOpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.comAI models may be capable of self-replicating without access to a datacenter | South Korean officials believe AI agents were used to hack several banks | therecord.mediaJadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputerGLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.comNew bill would create federal investigative body for AI-driven hacks | cyberscoop.comCourt rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars TechnicaApple changes full-disk access permissions to curb abuse from AI agents | arstechnica.comGoogle Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputerBitget hacked via zero-day in third-party security products | BleepingComputerLedger confirms spy chip implant behind wallet crypto thefts | BleepingComputerWho Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.comSuspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.comNew Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputerData breach at Denmark’s national population register exposes 8.8 million people | therecord.mediaShares in British clothing company ASOS dive after hackers apparently send push notification | therecord.mediaGoogle halts open-source bug bounty program amid AI spam surge | BleepingComputerInternational coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.mediaHackers hijack Google domains after breaching ccTLD registries | ...
    続きを読む 一部表示
    1 時間 6 分
  • Risky Business #854 -- We're Jevpilled

    Risky Business #854 -- We're Jevpilled
    2026/09/23
    THE RISKY BUSINESS WEEKLY SHOW IS NOW ON HIATUS FOR TWO WEEKS AND WILL RETURN OCTOBER 14 On this week’s show Patrick Gray and James Wilson are joined by Adam Boileau to talk through the week’s news, including: Google’s Gemini finally did some crimesOpenAI admits more agents did silly things because “alignment”US Treasury’s Scott Bessent rules out a liability waiver for the frontier labs, saying, roughly: “Lol. Lmao even.”Jev is Silicon Valley’s “hot dog/not hotdog” app brought to life, and it will really improve security toolingThe FBI and Coast Guard boarded oil tankers after they were allegedly hackedMuch, much more… This week’s show is brought to you by Thinkst Canary. Founder Haroon Meer joins Patrick to talk about Thinkst’s new deception tools that trick the AI agents that are targeting you. It’s actually hilarious how well deception tech works against hacking agents. This episode is also available on YouTube Show notes Google says its AI model gained unauthorized access to three outside systems | NBC News TechOpenAI details more cases of AI agents taking unauthorized actions | BleepingComputerResearchers escape OpenAI Codex sandbox to run commands on host | BleepingComputerHackers breached OpenAI, adding to fever pitch of security and safety concerns | NBC News TechTreasury’s Scott Bessent says no liability exemptions for AI labs | Social SignalsScott Bessent meets with Chinese official on AI safety | NBC News TechU.S. proposes exchanging AI safety alerts with China, Bessent says | NBC News TechTrump says he’s creating an AI force and appointing a czar amid concerns over the rapidly developing tech | NBC News TechAI hallucination of Chinese nuclear components almost led to US military attack | Ars TechnicaCybersecurity experts say AI giants are shutting them out of safety plans | nbcnews.toWhat Is Jev? A Guide to TypeSafe AI’s System One Model |FBI and Coast Guard boarded US-bound oil tankers after signs the ships were hit with cyberattacks | apnews.comBrevo supply-chain attack injected ClickFix scripts on customer sites | BleepingComputerCisco alerts customers to second actively exploited zero-day in as many days | cyberscoop.comHacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia | therecord.mediaNations take action on North Korean IT workers after UN report | therecord.mediaNorth Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign | therecord.mediaAn Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang | wired.comTwo arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals | therecord.mediaNightmareStresser DDoS Service Disrupted in International Operation | securityweek.comBrevo Supply Chain Attack Injects Malware Into 100,000 Websites | securityweek.comWordPress Click2Shell flaw lets hackers execute PHP on the server | BleepingComputerShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment | therecord.mediaHacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data | TechCrunch SecurityEarly Scattered Spider member pleads guilty to cybercrime spree | cyberscoop.comCISA promotes a fresh way to deter cyberattackers: Lie to them | Social SignalsGetting agents to tell on themselves
    続きを読む 一部表示
    55 分
  • Soap Box: HD Moore talks OT security, frontier fearmongering and more

    Soap Box: HD Moore talks OT security, frontier fearmongering and more
    2026/09/29

    In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about how his company runZero wound up being used heavily to discover OT devices in enterprise networks.

    They also talk about the vulnpocalypse and how frontier lab fearmongering is reminiscent of the collective freakout when HD released the Metasploit exploit framework back in 2003.

    This episode is also available on YouTube.

    Show notes
      続きを読む 一部表示
      34 分
    adbl_web_anon_alc_button_suppression_t1
    まだレビューはありません