Risky Business

By Risky Business MediaNews Technology Tech News

Ranking
25th
on Tech News
Favorites
201
Followers
Typical duration
61 min
per episode

Based on Podcast App listening data

Risky Business episodes

October 28Risky Business #857 -- AI FUD intensifies
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Alex Stamos to talk through the week’s cybersecurity news, including:
Everyone’s still panicking about “misbehaving” AI models that are pretty much just doing what they’re being told to do

Americans are giving AI agents unfettered access to their bank accounts. What could go wrong?

Last week’s PHP meteor seems to have missed Earth

This week’s Brotli HTTP/2 critical flaw is this week’s meteor

The private key is always 4. This time it’s TLS bugs in GoAhead

Much, much more!
This week’s show is brought to you by Truffle Security. Co-founder and CEO Dylan Ayrey joins James Wilson to chat about scanning GitHub repos and finding more than half a million unique credentials that were never revoked. As Dylan explains, the problem of exposed keys exists everywhere and is only getting worse.
This episode is also available on YouTube
Show notes
OpenAI AI agents demonstrate VM escapes and secret cross-sandbox communication

OpenAi agents disabled safety monitoring, one lied about it

solst/ICE of Astarte (@IceSolst) on X

What I learned from cheating clankers

Unvetted AI agents are accessing US bank accounts

Hiding Capabilities in AI Models

AI is finding bugs faster. Let the market find the fixes

AI Guardrails Aren’t Stopping Criminal Hackers

Andromeda October 2026 Security Incident

Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack

Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber

Hackers got a four-day head start on the PHP2Shell vulnerabilities

Critical HTTP2Shell flaw in Brotli triggers emergency patches

Senators say targeted ads are a security risk. Ad groups say the critics are off base

Alleged Israeli spy company heavily targeted Starlink users, sources say

LiteLLM release pipeline hacked to distribute info-stealer malware

CISA warns attackers are chaining Plex flaws in active Plex2Shell attacks

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Chrome adds Gemini-powered scam detection and ClickFix warnings

Microsoft Teams is getting context-aware phishing detection

China-nexus actor linked to attack on ConnectWise cloud backup

University of New Mexico hospital diverts ambulances after cyberattack

solst/ICE of Astarte (@IceSolst) on X

GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them
1 hr 7 min
October 21Risky Business #856 -- 8-bit encryption, PHP megabugs and more
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host security engineer Mark El-Khoury to talk through the week’s cybersecurity news, including:
The PHP foundation is about to release patches for a couple of critical bugs… We’re watching to see if the internet burns down

8 private keys underpinning some CA certs got compromised. The keys only had 8 bits of entropy!

Is the breach-polcalypse upon us?

OpenAI’s inside spy, Anthropic’s safety bill and election influence campaigns are coming for your chatbots

Ukraine drone strikes hit more Russian data centres, this time VK’s in the firing line

Much, much more!
This week’s show is brought to you by Trail of Bits. Principal Security Engineer Anish Naik joins James Wilson to chat about two agent skills plugins, Patching Bugs and Regression Hunt, that the company is releasing off the back of its joint initiative with Open AI, Patch the Planet.
This episode is also available on YouTube
Show notes
The PHP Foundation (@ThePHPF) on X

The Internet goes on high alert after discovery of 8 compromised TLS certs

OpenCode breach exposes users' external AI-provider API keys

DHS to ban DeepSeek from federal civilian agencies

Rob Joyce (@RGB_Lights) on X

OpenAI engineer accused of spying on executives remains in custody

An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office

Anthropic quietly pitches its own AI safety bill to lawmakers

The next election influence campaign will target your AI chatbot

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

Thousands of refrigerator devices remain exposed following French cyberattack

AI agents navigated unfamiliar OT systems and moved equipment within minutes

Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem

Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests

Federal bankruptcy courts dealing with outages after contractor cyberattack

Russian social media giant VK faces disruptions after data center drone strike

Data Centers Are War Targets Now

How a Massive Chinese Crime Ring Hacked Staples to Steal Millions

Microsoft Patches More Than 1,400 Security Flaws

GitHub expands malware advisories across eight package ecosystems

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

AdFection: How mercenary spyware invades victims’ devices through targeted advertising

CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records

Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day

Drupal patches critical RCE flaws and warns exploits may emerge soon

Palo Alto Networks patches PAN-OS zero-day exploited for root-level code execution

Eight US states sue OpenAI over alleged harms to users

Cyberattack halts work on the Denmark–Germany Fehmarnbelt tunnel

Ransomware groups expand targeting of Palo Alto Networks vulnerability

DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied

Trail of Bits skills plugins
1 hr 5 min
October 14Risky Business #855 -- ShinyHunters done sowing, enters reaping phase
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including:
Sacré bleu! Hackers turn up the heat at French supermarket freezers

ShinyHunters enters “find out” stage

Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild

More models “behave badly” (by… doing exactly what we’re telling them to do)

Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet

Much, much more…
This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work.
This episode is also available on YouTube
Show notes
Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media

Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive

Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer

Hacked FBI data has sensitive information about employees' intelligence roles | reuters.com

Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com

Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs

FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com

Ransomware recovery CEO charged over secret ransom payments | BleepingComputer

Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive

Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer

Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media

Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com

FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media

Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com

Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer

CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer

Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com

An Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunch

OpenAI bots meddled with US government agencies, including SEC and Census | bbc.com

OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.com

Anthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.com

OpenAI agent breached Australian government health website, Albanese says | therecord.media

Doubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.media

OpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.com

OpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.com

AI models may be capable of self-replicating without access to a datacenter |

South Korean officials believe AI agents were used to hack several banks | therecord.media

JadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputer

GLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.com

New bill would create federal investigative body for AI-driven hacks | cyberscoop.com

Court rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars Technica

Apple changes full-disk access permissions to curb abuse from AI agents | arstechnica.com

Google Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputer

Bitget hacked via zero-day in third-party security products | BleepingComputer

Ledger confirms spy chip implant behind wallet crypto thefts | BleepingComputer

Who Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.com

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.com

New Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputer

Data breach at Denmark’s national population register exposes 8.8 million people | therecord.media

Shares in British clothing company ASOS dive after hackers apparently send push notification | therecord.media

Google halts open-source bug bounty program amid AI spam surge | BleepingComputer

International coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.media

Hackers hijack Google domains after breaching ccTLD registries | BleepingComputer

GoBalance Flaw Lets Attackers Hijack.onion Addresses by Recovering Tor-Format Keys | The Hacker News

Ukraine strikes third Yandex data center, disrupting digital services across Russia | therecord.media

Provably Better Data | Corelight
1 hr 7 min
September 29Soap Box: HD Moore talks OT security, frontier fearmongering and more
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about how his company runZero wound up being used heavily to discover OT devices in enterprise networks.
They also talk about the vulnpocalypse and how frontier lab fearmongering is reminiscent of the collective freakout when HD released the Metasploit exploit framework back in 2003.
This episode is also available on YouTube.
Show notes
35 min
September 23Risky Business #854 -- We're Jevpilled
THE RISKY BUSINESS WEEKLY SHOW IS NOW ON HIATUS FOR TWO WEEKS AND WILL RETURN OCTOBER 14
On this week’s show Patrick Gray and James Wilson are joined by Adam Boileau to talk through the week’s news, including:
Google’s Gemini finally did some crimes

OpenAI admits more agents did silly things because “alignment”

US Treasury’s Scott Bessent rules out a liability waiver for the frontier labs, saying, roughly: “Lol. Lmao even.”

Jev is Silicon Valley’s “hot dog/not hotdog” app brought to life, and it will really improve security tooling

The FBI and Coast Guard boarded oil tankers after they were allegedly hacked

Much, much more…
This week’s show is brought to you by Thinkst Canary. Founder Haroon Meer joins Patrick to talk about Thinkst’s new deception tools that trick the AI agents that are targeting you. It’s actually hilarious how well deception tech works against hacking agents.
This episode is also available on YouTube
Show notes
Google says its AI model gained unauthorized access to three outside systems | NBC News Tech

OpenAI details more cases of AI agents taking unauthorized actions | BleepingComputer

Researchers escape OpenAI Codex sandbox to run commands on host | BleepingComputer

Hackers breached OpenAI, adding to fever pitch of security and safety concerns | NBC News Tech

Treasury’s Scott Bessent says no liability exemptions for AI labs | Social Signals

Scott Bessent meets with Chinese official on AI safety | NBC News Tech

U.S. proposes exchanging AI safety alerts with China, Bessent says | NBC News Tech

Trump says he’s creating an AI force and appointing a czar amid concerns over the rapidly developing tech | NBC News Tech

AI hallucination of Chinese nuclear components almost led to US military attack | Ars Technica

Cybersecurity experts say AI giants are shutting them out of safety plans | nbcnews.to

What Is Jev? A Guide to TypeSafe AI’s System One Model |

FBI and Coast Guard boarded US-bound oil tankers after signs the ships were hit with cyberattacks | apnews.com

Brevo supply-chain attack injected ClickFix scripts on customer sites | BleepingComputer

Cisco alerts customers to second actively exploited zero-day in as many days | cyberscoop.com

Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia | therecord.media

Nations take action on North Korean IT workers after UN report | therecord.media

North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign | therecord.media

An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang | wired.com

Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals | therecord.media

NightmareStresser DDoS Service Disrupted in International Operation | securityweek.com

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites | securityweek.com

WordPress Click2Shell flaw lets hackers execute PHP on the server | BleepingComputer

ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment | therecord.media

Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data | TechCrunch Security

Early Scattered Spider member pleads guilty to cybercrime spree | cyberscoop.com

CISA promotes a fresh way to deter cyberattackers: Lie to them | Social Signals

Getting agents to tell on themselves
55 min
September 16Risky Business #853 -- We're all gonna die, apparently
On this week’s show Patrick Gray and James Wilson are joined by former US Cyber Command executive director turned PwC’s Cyber, Data & Technology Risk leader Morgan Adamski to talk through the week’s news, including:
More tech guys penned more open letters and AI will destroy us all!

Another Wednesday, another congregation of OpenAI agents on wikis… yawn

OpenAI agents were behind the headscratching RubyGems hacking campaign in May

The FBI will disrupt more adversary operations, NSA is creating more mission centres, lawmakers want sanctions on hackers-for-hire… Release more hounds!

So many platforms, so many bugs, so many patches breaking other stuff

Much, much more…
This week’s show is brought to you by Airlock Digital. Its co-founders Daniel Schell and David Cottingham join Patrick to talk about how Airlock has integrated itself with Crowdstrike via its Falcon Foundry platform.
This episode is also available on YouTube
Show notes
AI researcher says there is 'substantial probability' AI could kill all humans in next decade | NBC News Tech

Dario Amodei — We Must Pace the Frontier | Social Signals

China spy chief points at US AI models in cyber threat warning | therecord.media

Weixin Official Accounts Platform |

Trump calls concerns over A.I. destroying humanity a “hoax” | NBC News Tech

Dr_Gingerballs (@Dr_Gingerballs) on X | X (formerly Twitter)

Sam Altman backs Anthropic CEO's call to slow down the global AI race | NBC News

Anthropic: Detecting and countering misuse of AI, September 2026 | anthropic.com

AI lets small actors run state-level hacking campaigns, Anthropic report finds | cyberscoop.com

Users in Houthi-held Yemen tried to develop advanced weapons with AI, Anthropic says | apnews.com

Anthropic caught Russia-linked spies using Claude in hacking operations | therecord.media

OpenAI's rogue agents used at least 10 more sites for unauthorized comms, researchers say | reuters.com

Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems | cyberscoop.com

Anthropic claims Moonshot, DeepSeek secretly diverted user requests to Claude | South China Morning Post

WeWorm | Social Signals

Hackers exploit Tencent app flaw to deploy GrayRabbit malware | BleepingComputer

New FBI cyber strategy promises increase in adversary disruptions | Cybersecurity Dive

US disrupts Xinbi Guarantee marketplace fueling the cyber scam economy | therecord.media

Thorough reorganization at NSA will create five 'mission centers,' including cyber and AI | therecord.media

Lawmakers call on Treasury to sanction hackers-for-hire | cyberscoop.com

CISA: WatchGuard RCE flaw now exploited in ransomware attacks | BleepingComputer

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent | BleepingComputer

GitLab’s critical flaw is already drawing internet-wide probes | cyberscoop.com

Cisco warns customers of actively exploited zero-day in email gateways | cyberscoop.com

4 groups caught using the same Chrome and Windows exploit kit | Ars Technica

September Windows Server updates break Remote Desktop Services | BleepingComputer

Microsoft confirms KB5002914 Excel update breaks copy and paste | BleepingComputer

Microsoft: September updates break audio on some Windows PCs | BleepingComputer

ClickFix attacks infecting PCs and Macs are going viral | arstechnica.com

Passkey-themed phishing attacks lead to Microsoft 365 data theft | BleepingComputer
1 hr
September 11Snake Oilers: watchTowr, XBOW and CoreView
In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products:
watchTowr: We’re all familiar with watchTowr’s research, but what do they actually do?

XBOW: The AI pentesting company pitches its approach

CoreView: Your M365 tenant is probably a security disaster. Tame it with CoreView!
This episode is also available on YouTube.
Show notes
42 min
September 09Risky Business #852 -- Cyber Command wants to buy shells
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Robby Winchester from SpecterOps to talk through the week’s news, including:
ID verification company IDScan was breached and 153m driver licenses wound up for sale online. Cue the barrage of lawsuits

The US government plans to pay private contractors to conduct military hacks

The US accuses China of distillation attacks, a.k.a. forbidden training

It’s Wednesday, so OpenAI’s agents escaped sandboxes again and passed notes around on a German Wiki

Much, much more…
This week’s show is brought to you by Sublime Security. Sublime’s head of detection engineering Randy Pargman joins the show to chat about how the company is preparing for prompt injection attacks to move from being largely theoretical to commonplace.
This episode is also available on YouTube
Show notes
FBI Probes Service Selling 153M+ Drivers Licenses | Krebs on Security

IDScan sued over alleged data breach affecting 153 million drivers | BleepingComputer

Senate Considers Allowing Contractors to Conduct Military Hacks | bloomberg.com

Feds accuse China of ‘systematic’ distillation of U.S. AI models | cyberscoop.com

Dropbox accounts breached through Lenovo email verification flaw | BleepingComputer

FBI raises alarm over deceptive phishing campaign targeting prominent people | cyberscoop.com

Microsoft warns of TerminalFix attacks deploying reverse tunnels | BleepingComputer

OpenAI agents discussed ways to escape their sandbox on public wiki | arstechnica.com

OpenAI releases new model that it says triggered internal security measures | NBC News Tech

Trump may be forced to reveal secret rules feds use for AI safety testing | Social Signals

Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited | therecord.media

Security Incident – BGP Hijacking – Virtualizor |

Coder's registry infrastructure compromised to push malicious modules | BleepingComputer

Pegasus, NoviSpy variant spyware found on devices of Serbian activists | cyberscoop.com

European parliament members call for slowdown of Serbia’s EU entry over spyware use | CyberScoop

New pro-Ukraine hacker group targets Russian companies with custom ransomware | therecord.media

US military disabled ad tracking on troops’ devices following reports of targeted attacks | TechCrunch Security

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges | BleepingComputer

A hacker stole $340M in a crypto heist, then returned most of it | TechCrunch Security

‘White hat’ hackers take $47 million bounty after $320 million crypto theft | therecord.media
1 hr 4 min
September 02Risky Business #851 -- Agents are just ones and zeros, and tigers are just atoms
On this week’s show Patrick Gray and James Wilson are joined by guest co-host The Grugq to talk through the week’s news, including:
Two alleged TeamPCP hackers got arrested in Australia

The White House has a plan to boost security for water facilities, but we can’t see it working

OpenAI keeps the ol’ Hugging Face discourse going for another week with an incident debrief

Tech companies write another open letter about AI… we’re getting CISA Shields Up flashbacks, but for robots

Much, much more…
This week’s show is brought to you by Ent AI. Co-founder Brandon Dixon joins Pat to talk through some of the absolutely wild fraud and abuse the company’s endpoint security tool is finding when it’s deployed inside large organisations.
This episode is also available on YouTube
Show notes
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia | krebsonsecurity.com

How Brian Krebs doxxed TeamPCP - Risky Business Media | Social Signals

FIRST ON FOX: Texas becomes testing ground for new defense against attacks on America’s water systems | Social Signals

OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers | wired.com

The Rise and Fall of Agent Civilizations |

clem 🤗 (@ClementDelangue) on X | X (formerly Twitter)

Matthew Zeitlin (@MattZeitlin) on X | X (formerly Twitter)

100-plus companies call for ‘global surge’ in AI-powered cyber defense | CyberScoop

China's AI-Enabled APT Operations Are Getting Interesting - Risky Business Media |

SilkParasite: Tracking a China-Nexus APT Across Central Asia |

DoD confirms ‘refrigeration disruption’ at military commissaries | Military Times

Claude, Codex, and Hermes installed unowned code inside corporate networks | arstechnica.com

Ukraine to give Britain access to battlefield data to train AI | therecord.media

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage | BleepingComputer

White House bans foreign-made equipment for power generation over cyber backdoor concerns | therecord.media

Large DDoS attack knocks Norwegian public services offline | The Record

Researchers warn about chained SharePoint sequence | Cybersecurity Dive

PaperCut warns of hackers using printer management software flaw in attacks | therecord.media

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes | BleepingComputer

Slovenian casinos reopen after cyberattack knocked gaming systems offline | therecord.media

DOJ firearms agency says hackers breached system containing investigation targets | therecord.media
59 min
August 26Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including:
Iranian hackers take down a small-scale power generator in the UK

Siemens PLCs in critical US sectors are also being targeted… We’re stumped on who could be behind that one, too.

Microsoft fixed a CVSS 10 deserialisation bug in Entra before someone else found it and owned the planet

Prompt injection isn’t going away

LLMs are deceiving us meat sacks and it’s a worry

Much, much more…
This week’s show is brought to you by Okta. VP of Threat Intel Brett Winterford joins the show in this week’s sponsor interview to talk James through how the company is turning its plethora of accumulated data into free alerting for its customers. They also chat about Okta’s new threat intelligence product line.
This episode is also available on YouTube
Show notes
Iran-linked hackers blamed for cyber-attack that shut down UK power plant | theguardian.com

Hackers using AI to target Siemens PLCs in critical US sectors | securityweek.com

Defending Against an Active Threat to Siemens S7 Series PLCs | IC3.gov Industry Alerts

US charges Iranians for sprawling hacking campaign on government agencies, universities | therecord.media

T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network | techcrunch.com

The long tail of Clop’s PTC hack is just beginning to emerge | cyberscoop.com

CISA: Medusa ransomware hit over 500 critical infrastructure orgs | BleepingComputer

Ransomware disproportionately targets medium-sized firms, straining customer relationships | Cybersecurity Dive

Microsoft warns of max severity Entra ID flaw exploited in attacks | BleepingComputer

Critical RCE flaw in Windows IKE Extension now actively exploited | BleepingComputer

Rust supply chain attack linked to North Korean hackers | securityweek.com

Grok exfiltrates user data when malicious instructions are encrypted | arstechnica.com

New phishing toolkit uses passkeys to maintain access after password resets | securityweek.com

Password spraying attacks surge 155x as hackers exploit MFA gaps | BleepingComputer

Hackers compromise 14,500 Dahua web cameras in 35-day campaign | BleepingComputer

Hackers infect Android car head units with proxy botnet malware | BleepingComputer

ToxicPanda Android malware uses VPN permissions to block Google Play | BleepingComputer

New Manic Android malware can exfiltrate data through nearby devices | BleepingComputer

Citrix urges admins to patch new NetScaler flaws as soon as possible | BleepingComputer

AliExpress caught fingerprinting visitors after sending inaudible sounds to browsers | arstechnica.com

EXCLUSIVE: How a Texas student blew the whistle on a rogue AI hacking attempt | reuters.com

Detections and customer notifications | Okta Threat Intelligence
1 hr 3 min

About Risky Business

From the publisher's feed

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for…