エピソード

  • Risky Business #855 -- ShinyHunters done sowing, enters reaping phase

    Risky Business #855 -- ShinyHunters done sowing, enters reaping phase
    2026/10/14
    On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including: Sacré bleu! Hackers turn up the heat at French supermarket freezersShinyHunters enters “find out” stageNetscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wildMore models “behave badly” (by… doing exactly what we’re telling them to do)Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quietMuch, much more… This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work. This episode is also available on YouTube Show notes Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.mediaDangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputerHacked FBI data has sensitive information about employees' intelligence roles | reuters.comHackers stole millions of US military personnel records during months-long data breach | TechCrunch SecurityShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputerDutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.comKey ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rsFBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.comRansomware recovery CEO charged over secret ransom payments | BleepingComputerCitrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity DiveCitrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputerKiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.mediaAttackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.comFBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.mediaCheck Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputerMicrosoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.comHackers exploit critical Atlassian flaw after public PoC release | BleepingComputerCISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputerAnthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.comAn Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunchOpenAI bots meddled with US government agencies, including SEC and Census | bbc.comOpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.comAnthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.comOpenAI agent breached Australian government health website, Albanese says | therecord.mediaDoubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.mediaOpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.comOpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.comAI models may be capable of self-replicating without access to a datacenter | South Korean officials believe AI agents were used to hack several banks | therecord.mediaJadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputerGLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.comNew bill would create federal investigative body for AI-driven hacks | cyberscoop.comCourt rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars TechnicaApple changes full-disk access permissions to curb abuse from AI agents | arstechnica.comGoogle Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputerBitget hacked via zero-day in third-party security products | BleepingComputerLedger confirms spy chip implant behind wallet crypto thefts | BleepingComputerWho Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.comSuspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.comNew Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputerData breach at Denmark’s national population register exposes 8.8 million people | therecord.mediaShares in British clothing company ASOS dive after hackers apparently send push notification | therecord.mediaGoogle halts open-source bug bounty program amid AI spam surge | BleepingComputerInternational coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.mediaHackers hijack Google domains after breaching ccTLD registries | ...
    続きを読む 一部表示
    1 時間 6 分
  • Risky Business #854 -- We're Jevpilled

    Risky Business #854 -- We're Jevpilled
    2026/09/23
    THE RISKY BUSINESS WEEKLY SHOW IS NOW ON HIATUS FOR TWO WEEKS AND WILL RETURN OCTOBER 14 On this week’s show Patrick Gray and James Wilson are joined by Adam Boileau to talk through the week’s news, including: Google’s Gemini finally did some crimesOpenAI admits more agents did silly things because “alignment”US Treasury’s Scott Bessent rules out a liability waiver for the frontier labs, saying, roughly: “Lol. Lmao even.”Jev is Silicon Valley’s “hot dog/not hotdog” app brought to life, and it will really improve security toolingThe FBI and Coast Guard boarded oil tankers after they were allegedly hackedMuch, much more… This week’s show is brought to you by Thinkst Canary. Founder Haroon Meer joins Patrick to talk about Thinkst’s new deception tools that trick the AI agents that are targeting you. It’s actually hilarious how well deception tech works against hacking agents. This episode is also available on YouTube Show notes Google says its AI model gained unauthorized access to three outside systems | NBC News TechOpenAI details more cases of AI agents taking unauthorized actions | BleepingComputerResearchers escape OpenAI Codex sandbox to run commands on host | BleepingComputerHackers breached OpenAI, adding to fever pitch of security and safety concerns | NBC News TechTreasury’s Scott Bessent says no liability exemptions for AI labs | Social SignalsScott Bessent meets with Chinese official on AI safety | NBC News TechU.S. proposes exchanging AI safety alerts with China, Bessent says | NBC News TechTrump says he’s creating an AI force and appointing a czar amid concerns over the rapidly developing tech | NBC News TechAI hallucination of Chinese nuclear components almost led to US military attack | Ars TechnicaCybersecurity experts say AI giants are shutting them out of safety plans | nbcnews.toWhat Is Jev? A Guide to TypeSafe AI’s System One Model |FBI and Coast Guard boarded US-bound oil tankers after signs the ships were hit with cyberattacks | apnews.comBrevo supply-chain attack injected ClickFix scripts on customer sites | BleepingComputerCisco alerts customers to second actively exploited zero-day in as many days | cyberscoop.comHacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia | therecord.mediaNations take action on North Korean IT workers after UN report | therecord.mediaNorth Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign | therecord.mediaAn Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang | wired.comTwo arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals | therecord.mediaNightmareStresser DDoS Service Disrupted in International Operation | securityweek.comBrevo Supply Chain Attack Injects Malware Into 100,000 Websites | securityweek.comWordPress Click2Shell flaw lets hackers execute PHP on the server | BleepingComputerShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment | therecord.mediaHacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data | TechCrunch SecurityEarly Scattered Spider member pleads guilty to cybercrime spree | cyberscoop.comCISA promotes a fresh way to deter cyberattackers: Lie to them | Social SignalsGetting agents to tell on themselves
    続きを読む 一部表示
    55 分
  • Soap Box: HD Moore talks OT security, frontier fearmongering and more

    Soap Box: HD Moore talks OT security, frontier fearmongering and more
    2026/09/29

    In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about how his company runZero wound up being used heavily to discover OT devices in enterprise networks.

    They also talk about the vulnpocalypse and how frontier lab fearmongering is reminiscent of the collective freakout when HD released the Metasploit exploit framework back in 2003.

    This episode is also available on YouTube.

    Show notes
      続きを読む 一部表示
      34 分
    • Risky Business #853 -- We're all gonna die, apparently

      Risky Business #853 -- We're all gonna die, apparently
      2026/09/16
      On this week’s show Patrick Gray and James Wilson are joined by former US Cyber Command executive director turned PwC’s Cyber, Data & Technology Risk leader Morgan Adamski to talk through the week’s news, including: More tech guys penned more open letters and AI will destroy us all!Another Wednesday, another congregation of OpenAI agents on wikis… yawnOpenAI agents were behind the headscratching RubyGems hacking campaign in MayThe FBI will disrupt more adversary operations, NSA is creating more mission centres, lawmakers want sanctions on hackers-for-hire… Release more hounds!So many platforms, so many bugs, so many patches breaking other stuffMuch, much more… This week’s show is brought to you by Airlock Digital. Its co-founders Daniel Schell and David Cottingham join Patrick to talk about how Airlock has integrated itself with Crowdstrike via its Falcon Foundry platform. This episode is also available on YouTube Show notes AI researcher says there is 'substantial probability' AI could kill all humans in next decade | NBC News TechDario Amodei — We Must Pace the Frontier | Social SignalsChina spy chief points at US AI models in cyber threat warning | therecord.mediaWeixin Official Accounts Platform | Trump calls concerns over A.I. destroying humanity a “hoax” | NBC News TechDr_Gingerballs (@Dr_Gingerballs) on X | X (formerly Twitter)Sam Altman backs Anthropic CEO's call to slow down the global AI race | NBC NewsAnthropic: Detecting and countering misuse of AI, September 2026 | anthropic.comAI lets small actors run state-level hacking campaigns, Anthropic report finds | cyberscoop.comUsers in Houthi-held Yemen tried to develop advanced weapons with AI, Anthropic says | apnews.comAnthropic caught Russia-linked spies using Claude in hacking operations | therecord.mediaOpenAI's rogue agents used at least 10 more sites for unauthorized comms, researchers say | reuters.comResearchers say OpenAI agents were behind May hacking campaign targeting RubyGems | cyberscoop.comAnthropic claims Moonshot, DeepSeek secretly diverted user requests to Claude | South China Morning PostWeWorm | Social SignalsHackers exploit Tencent app flaw to deploy GrayRabbit malware | BleepingComputerNew FBI cyber strategy promises increase in adversary disruptions | Cybersecurity DiveUS disrupts Xinbi Guarantee marketplace fueling the cyber scam economy | therecord.mediaThorough reorganization at NSA will create five 'mission centers,' including cyber and AI | therecord.mediaLawmakers call on Treasury to sanction hackers-for-hire | cyberscoop.comCISA: WatchGuard RCE flaw now exploited in ransomware attacks | BleepingComputerDutch NCSC: Critical Check Point VPN flaws exploitation is imminent | BleepingComputerGitLab’s critical flaw is already drawing internet-wide probes | cyberscoop.comCisco warns customers of actively exploited zero-day in email gateways | cyberscoop.com4 groups caught using the same Chrome and Windows exploit kit | Ars TechnicaSeptember Windows Server updates break Remote Desktop Services | BleepingComputerMicrosoft confirms KB5002914 Excel update breaks copy and paste | BleepingComputerMicrosoft: September updates break audio on some Windows PCs | BleepingComputerClickFix attacks infecting PCs and Macs are going viral | arstechnica.comPasskey-themed phishing attacks lead to Microsoft 365 data theft | BleepingComputer
      続きを読む 一部表示
      59 分
    • Snake Oilers: watchTowr, XBOW and CoreView

      Snake Oilers: watchTowr, XBOW and CoreView
      2026/09/11

      In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products:

      • watchTowr: We’re all familiar with watchTowr’s research, but what do they actually do?
      • XBOW: The AI pentesting company pitches its approach
      • CoreView: Your M365 tenant is probably a security disaster. Tame it with CoreView!

      This episode is also available on YouTube.

      Show notes
        続きを読む 一部表示
        42 分
      • Risky Business #852 -- Cyber Command wants to buy shells

        Risky Business #852 -- Cyber Command wants to buy shells
        2026/09/09
        On this week’s show Patrick Gray and James Wilson are joined by guest co-host Robby Winchester from SpecterOps to talk through the week’s news, including: ID verification company IDScan was breached and 153m driver licenses wound up for sale online. Cue the barrage of lawsuitsThe US government plans to pay private contractors to conduct military hacksThe US accuses China of distillation attacks, a.k.a. forbidden trainingIt’s Wednesday, so OpenAI’s agents escaped sandboxes again and passed notes around on a German WikiMuch, much more… This week’s show is brought to you by Sublime Security. Sublime’s head of detection engineering Randy Pargman joins the show to chat about how the company is preparing for prompt injection attacks to move from being largely theoretical to commonplace. This episode is also available on YouTube Show notes FBI Probes Service Selling 153M+ Drivers Licenses | Krebs on SecurityIDScan sued over alleged data breach affecting 153 million drivers | BleepingComputerSenate Considers Allowing Contractors to Conduct Military Hacks | bloomberg.comFeds accuse China of ‘systematic’ distillation of U.S. AI models | cyberscoop.comDropbox accounts breached through Lenovo email verification flaw | BleepingComputerFBI raises alarm over deceptive phishing campaign targeting prominent people | cyberscoop.comMicrosoft warns of TerminalFix attacks deploying reverse tunnels | BleepingComputerOpenAI agents discussed ways to escape their sandbox on public wiki | arstechnica.comOpenAI releases new model that it says triggered internal security measures | NBC News TechTrump may be forced to reveal secret rules feds use for AI safety testing | Social SignalsMicrosoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited | therecord.mediaSecurity Incident – BGP Hijacking – Virtualizor | Coder's registry infrastructure compromised to push malicious modules | BleepingComputerPegasus, NoviSpy variant spyware found on devices of Serbian activists | cyberscoop.comEuropean parliament members call for slowdown of Serbia’s EU entry over spyware use | CyberScoopNew pro-Ukraine hacker group targets Russian companies with custom ransomware | therecord.mediaUS military disabled ad tracking on troops’ devices following reports of targeted attacks | TechCrunch SecurityNew CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges | BleepingComputerA hacker stole $340M in a crypto heist, then returned most of it | TechCrunch Security‘White hat’ hackers take $47 million bounty after $320 million crypto theft | therecord.media
        続きを読む 一部表示
        1 時間 3 分
      • Risky Business #851 -- Agents are just ones and zeros, and tigers are just atoms

        Risky Business #851 -- Agents are just ones and zeros, and tigers are just atoms
        2026/09/02
        On this week’s show Patrick Gray and James Wilson are joined by guest co-host The Grugq to talk through the week’s news, including: Two alleged TeamPCP hackers got arrested in AustraliaThe White House has a plan to boost security for water facilities, but we can’t see it workingOpenAI keeps the ol’ Hugging Face discourse going for another week with an incident debriefTech companies write another open letter about AI… we’re getting CISA Shields Up flashbacks, but for robotsMuch, much more… This week’s show is brought to you by Ent AI. Co-founder Brandon Dixon joins Pat to talk through some of the absolutely wild fraud and abuse the company’s endpoint security tool is finding when it’s deployed inside large organisations. This episode is also available on YouTube Show notes Two Alleged ‘TeamPCP’ Hackers Arrested in Australia | krebsonsecurity.comHow Brian Krebs doxxed TeamPCP - Risky Business Media | Social SignalsFIRST ON FOX: Texas becomes testing ground for new defense against attacks on America’s water systems | Social SignalsOpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers | wired.comThe Rise and Fall of Agent Civilizations | clem 🤗 (@ClementDelangue) on X | X (formerly Twitter)Matthew Zeitlin (@MattZeitlin) on X | X (formerly Twitter)100-plus companies call for ‘global surge’ in AI-powered cyber defense | CyberScoopChina's AI-Enabled APT Operations Are Getting Interesting - Risky Business Media | SilkParasite: Tracking a China-Nexus APT Across Central Asia | DoD confirms ‘refrigeration disruption’ at military commissaries | Military TimesClaude, Codex, and Hermes installed unowned code inside corporate networks | arstechnica.comUkraine to give Britain access to battlefield data to train AI | therecord.mediaAnthropic warns infostealer malware is hijacking Claude sessions to drain usage | BleepingComputerWhite House bans foreign-made equipment for power generation over cyber backdoor concerns | therecord.mediaLarge DDoS attack knocks Norwegian public services offline | The RecordResearchers warn about chained SharePoint sequence | Cybersecurity DivePaperCut warns of hackers using printer management software flaw in attacks | therecord.mediaAnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes | BleepingComputerSlovenian casinos reopen after cyberattack knocked gaming systems offline | therecord.mediaDOJ firearms agency says hackers breached system containing investigation targets | therecord.media
        続きを読む 一部表示
        59 分
      • Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs

        Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
        2026/08/26
        On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including: Iranian hackers take down a small-scale power generator in the UKSiemens PLCs in critical US sectors are also being targeted… We’re stumped on who could be behind that one, too.Microsoft fixed a CVSS 10 deserialisation bug in Entra before someone else found it and owned the planetPrompt injection isn’t going awayLLMs are deceiving us meat sacks and it’s a worryMuch, much more… This week’s show is brought to you by Okta. VP of Threat Intel Brett Winterford joins the show in this week’s sponsor interview to talk James through how the company is turning its plethora of accumulated data into free alerting for its customers. They also chat about Okta’s new threat intelligence product line. This episode is also available on YouTube Show notes Iran-linked hackers blamed for cyber-attack that shut down UK power plant | theguardian.comHackers using AI to target Siemens PLCs in critical US sectors | securityweek.comDefending Against an Active Threat to Siemens S7 Series PLCs | IC3.gov Industry AlertsUS charges Iranians for sprawling hacking campaign on government agencies, universities | therecord.mediaT-Mobile ‘chopped a cable’ to expel Chinese hackers from its network | techcrunch.comThe long tail of Clop’s PTC hack is just beginning to emerge | cyberscoop.comCISA: Medusa ransomware hit over 500 critical infrastructure orgs | BleepingComputerRansomware disproportionately targets medium-sized firms, straining customer relationships | Cybersecurity DiveMicrosoft warns of max severity Entra ID flaw exploited in attacks | BleepingComputerCritical RCE flaw in Windows IKE Extension now actively exploited | BleepingComputerRust supply chain attack linked to North Korean hackers | securityweek.comGrok exfiltrates user data when malicious instructions are encrypted | arstechnica.comNew phishing toolkit uses passkeys to maintain access after password resets | securityweek.comPassword spraying attacks surge 155x as hackers exploit MFA gaps | BleepingComputerHackers compromise 14,500 Dahua web cameras in 35-day campaign | BleepingComputerHackers infect Android car head units with proxy botnet malware | BleepingComputerToxicPanda Android malware uses VPN permissions to block Google Play | BleepingComputerNew Manic Android malware can exfiltrate data through nearby devices | BleepingComputerCitrix urges admins to patch new NetScaler flaws as soon as possible | BleepingComputerAliExpress caught fingerprinting visitors after sending inaudible sounds to browsers | arstechnica.comEXCLUSIVE: How a Texas student blew the whistle on a rogue AI hacking attempt | reuters.comDetections and customer notifications | Okta Threat Intelligence
        続きを読む 一部表示
        1 時間 3 分