Risky Business

By Risky Business MediaNews Technology Tech News

Ranking
25th
on Tech News
Favorites
201
Followers
Typical duration
61 min
per episode

Based on Podcast App listening data

Risky Business episodes

April 22Risky Business #834 -- Vercel gets owned, Mozilla dumps hundreds of Mythos bugs
On this week’s show, Patrick Gray and James Wilson are joined by special guest The Grugq. They discuss the week’s cybersecurity news, including:
Vercel got owned, and there’s a few infostealer and compromised employee dots to connect

Mozilla used Mythos to find 271 bugs, which feels like a sign of the bug-pocalypse

Speaking of the bug-pocalypse, is that why NIST is noping out of enriching a bunch of bugs?

The NSA is using Mythos even though the government did that whole Anthropic blacklisting thing

And DDos attacks hit a couple of smaller-player socials
This week’s episode is sponsored by Permiso. Ian Ahl chats to Pat about the subtle signals Permiso uses to detect ShinyHunters-style activity in cloud and on-prem environments.
This episode is also available on Youtube.
Show notes
Vercel April 2026 Security incident

Vercel breach linked to infostealer infection at Context.ai

Vercel confirms breach as hackers claim to be selling stolen data

Matt Johansen: “This is not a good look” | X

NIST limits vulnerability analysis as CVE backlog swells | Cybersecurity Dive

CISA Cyber on X

Ransomware attack continues to disrupt healthcare in London nearly two years later | The Record from Recorded Future News

Lawmakers ponder terrorism designations, homicide charges over hospital ransomware attacks | CyberScoop

In defeat for Trump, House extends electronic spying program for just 10 days | The Record from Recorded Future News

Crypto infrastructure company blames $290 million theft on North Korean hackers | The Record from Recorded Future News

US-sanctioned currency exchange says $15 million heist done by "unfriendly states" - Ars Technica

Hackers are abusing unpatched Windows security flaws to hack into organizations | TechCrunch

Mozilla Used Anthropic’s Mythos to Find and Fix 271 Bugs in Firefox | WIRED

NSA using Anthropic's Mythos despite Defense Department blacklist

Beyond the breach: inside a cargo theft actor’s post-compromise playbook | Proofpoint US

Beware scam messages offering ships safe transit through Hormuz Strait, says security firm | The Straits Times

New Jersey men given lengthy sentences for running North Korean laptop farms | The Record from Recorded Future News

Turns Out We’re Not Alone - Volodymyr Styran

US joins nearly two dozen other countries in striking back against DDoS-for-hire platforms | Cybersecurity Dive

Bluesky blames app outage on ‘sophisticated’ DDoS attack | The Record from Recorded Future News

Mastodon says its flagship server was hit by a DDoS attack | TechCrunch

An IT expert explained under what conditions using a VPN can cause a smartphone to explode
1 hr 1 min
April 15Risky Business #833 -- The Great Mythos Freakout of 2026
On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:
Everyone has an opinion about Claude Mythos… even though almost nobody has used it yet

CISA adds a 2009 Excel bug to the KEV list, u wot?

Adobe also parties like it’s the 2000s, and fixes an Acrobat Reader bug

Disgraced former Trenchant exec Peter Williams’ sob story fails to resonate with … anyone

Remember those crosswalk buttons hacked to play audio mocking Trump and Zuck? They were “secured” by the password: 1234.
This week’s episode is sponsored by mobile network operator, Cape. Ajit Gokhale talks with James about the ways to get being a telco right when you’re starting from scratch and solving the security problems of 2026.
This episode is also available on Youtube.
Show notes
Lab Space

The “AI Vulnerability Storm”: Building a “Mythosready” Security Program

Polymarket on X: "JUST IN: Goldman Sachs is reportedly ramping up its cyber defenses in preparation for Claude Mythos."

Ananay on X: "Marcus Hutchins probably has the best take on Mythos doing vulnerability research"

solst/ICE of Astarte on X: "Th vast majority of CISOs do not work at Google-sized companies, and will not have to worry about 0days"

Charlie Miller on X: "we’ve gone through this before with early fuzzers, afl, etc"

James Kettle on X: "'Can AI Do Novel Security Research? Meet the HTTP Terminator' will premiere at Blackhat"

jeffrey lee funk on X: "We've been tricked, again. Many of the thousands of bugs and vulnerabilities Mythos found are in older software are impossible to exploit."

Claude is getting worse, according to Claude • The Register

Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain

OpenAI's Mac apps need updates thanks to the Axios hack | CyberScoop

Hack at Anodot leaves over a dozen breached companies facing extortion | TechCrunch

Snowflake customers hit in data theft attacks after SaaS integrator breach

Booking.com confirms hackers accessed customers’ data

CPUID hijacked to serve malware as HWMonitor downloads • The Register

Known Exploited Vulnerabilities Catalog | CISA

Adobe fixes PDF zero-day security bug that hackers have exploited for months | TechCrunch

The Sad Decline of Trenchant Exec Who Had Everything, Before Deciding to Steal and Sell Zero Days to Russian Buyer

FBI Extracts Suspect’s Deleted Signal Messages Saved in iPhone Notification Database

US operation evicts Russia from hacked SOHO routers used to breach critical infrastructure | Cybersecurity Dive

Telegram Is Still Hosting a Sanctioned $21 Billion Crypto Scammer Black Market | WIRED

The Dumbest Hack of the Year Exposed a Very Real Problem | WIRED
1 hr
April 09Snake Oilers: Burp AI, Sondera and Truffle Security
In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products:
Burp AI and DAST: The founder of PortSwigger and creator of legendary security software Burp Suite, Dafydd Stuttard, drops by to pitch listeners on Burp AI and Burp Suite DAST.

Sondera: Josh Devon talks about Sondera, a technology designed to intervene when AI models start doing the wrong thing by statefully tracking their trajectories. This isn’t a permissions suite for AI agents, it’s a way to stick agents in a harness and make sure they adhere to hard policy boundaries.

Truffle Security: Dylan Ayrey, the founder of Truffle Security, joins Risky Business again to talk through the latest bells and whistles in Trufflehog, a security tool that searches for exposed secrets and validates them. The Truffle team has done a lot of work on the remediation part of their product over the last few years, and Dylan tells us all about it!

This episode is also available on YouTube
Show notes
48 min
April 08Risky Business #832 -- Anthropic unveils magical 0day computer God
On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:
Anthropic’s new Mythos model hunts bugs and chains exploits together so well that… you cant have it…

…Unless you’re one of their Project Glasswing partners

The world isn’t short on bugs, though. F5, Fortinet, Progress ShareFile, and TrueConf are all getting rekt by humans

GPU Rowhammering goes in the GPU, past the IOMMU and back into the host-side Nvidia driver

North Korea is spending serious time and money on its crypto hacking

Just when the US needs CISA most, they slash its budget some more!
This week’s episode is sponsored by identity verification firm, Persona. Tying digital actions to actual human identities isn’t just for banking know-your-customer any more. Persona’s Benjamin Chait says know-your-staff checks belong in high-value flows inside your organisation, too.
This episode is also available on Youtube.
Show notes
Claude Mythos Preview \ red.anthropic.com

Anthropic Claims Its New A.I. Model, Mythos, Is a Cybersecurity ‘Reckoning’ - The New York Times

Anthropic Teams Up With Its Rivals to Keep AI From Hacking Everything | WIRED

FFmpeg on X: "Thank you to @AnthropicAI for sending FFmpeg patches" / X

Critical flaw in F5 BIG-IP faces wide exploitation risk | Cybersecurity Dive

React2Shell vulnerability helps hackers steal credentials, AI platform keys and other sensitive data | Cybersecurity Dive

Critical flaw in FortiClient EMS under exploitation | Cybersecurity Dive

Researchers warn of critical flaws in Progress ShareFile | Cybersecurity Dive

CISA gives agencies two weeks to patch video conferencing bug exploited by Chinese hackers | The Record from Recorded Future News

New Rowhammer attacks give complete control of machines running Nvidia GPUs - Ars Technica

North Korea's hijack of one of the web's most used open source projects was likely weeks in the making | TechCrunch

Drift crypto platform confirms $280 million stolen in hack as researchers point finger at North Korea | The Record from Recorded Future News

Drift on X: "Drift Protocol — Incident Background Update " / X

Trump’s FY2027 budget again targets CISA | Cybersecurity Dive

CISA’s vulnerability scans, field support on chopping block in Trump budget | Cybersecurity Dive

Iranian hackers break into U.S. industrial systems, agencies warn

FBI labels suspected China hack of law enforcement data 'a major cyber incident'

Russia Hacked Routers to Steal Microsoft Office Tokens – Krebs on Security

Massachusetts hospital turning ambulances away after cyberattack | The Record from Recorded Future News

Exclusive | 'Ghost Murmur,' a never-used secret tool, deployed to find lost airman in Iran in daring mission

A Secure Chat App’s Encryption Is So Bad It Is ‘Meaningless’
54 min
April 03How the World Got Owned Episode 2: The 1990s, Part One
In this special documentary episode, Patrick Gray and Amberleigh Jack take a look back at hacking throughout the 1990s, from the feel-good vibes of the early hacking communities to the antics of young hackers who wound up on the run from the FBI.
Part one features recollections from:
Jeff Moss (The Dark Tangent), DefCon and Black Hat founder

Chris Wysopal (Weld Pond), L0pht member, co-founder, @Stake

Kevin Poulsen (Dark Dante), 1990s hacker turned journalist

Elias Levy (Aleph One), author of Smashing the Stack for Fun and Profit, Phrack, 1996
How the World Got Owned is produced in partnership with SentinelOne.
Show notes
Elias Levy (Aleph1), Former Principle Engineer, Google

Kevin Poulsen, Journalist

Jeff Moss, DefCon founder

Chris Wysopal, @Stake founder, L0pht member

Hackers testifying at the United States Senate, May 19, 1998

Hackers May ‘Net’ Good PR for Studio

DefCon Archives | DefCon 1

A Not So Terribly Brief History of the Electronic Frontier Foundation

Innocent Hackers Want Their Computers Back

Breakdowns in Computer Security

Unsolved Mysteries, Season 3, Episode 4

The Last Hacker: He Called Himself Dark Dante. His Compulsion Led Him to Secret Files and, Eventually, The Bar of Justice

Justia appeal summary, Kevin Poulsen, 1994

Smashing the Stack for Fun and Profit, Phrack Magazine, November 1996

From subversives to CEOs: How radical hackers built today’s cybersecurity industry
47 min
April 01Risky Business #831 -- The AI bugpocalypse begins
On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:
Those pesky North Koreans shim a backdoor into a 100M-downloads-a-week npm package

TeamPCP appear to have ransacked Cisco’s source and cloud environments

AI is getting legitimately good at being told to “just go find some 0day in this”

Kaspersky says Coruna and Triangulation do share code lineage

Iranian hackers dump Kash Patel’s gmail spool

Oh, and of course there’s a Citrix Netscaler memory leak being exploited in the wild
This week’s episode is sponsored by Dropzone AI, who make automated AI SOC analysts. Head honcho Ed Wu explains how they’ve built pre-canned ‘hunt packs’ to lead the AI off into your environment to find weird, interesting and security relevant things.
This episode is also available on Youtube.
Show notes
Google links axios supply chain attack to North Korean group | The Record from Recorded Future News

Cisco source code stolen in Trivy-linked dev environment breach

chiefofautism on X: "someone at ANTHROPIC just showed CLAUDE finding ZERO DAY vulnerabilities in a live conference demo"

h0mbre on X: "Claude is somehow better at kernel exploitation than creating meal plans."

Vulnerability Research Is Cooked — Quarrelsome

MAD Bugs: vim vs emacs vs Claude - Calif

MAD Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)

A Risky Biz Experiment: Hunting for iOS 0day with AI - Risky Business Media

Security leaders say the next two years are going to be 'insane' | CyberScoop

Coruna framework: an exploit kit and ties to Operation Triangulation | Securelist

Apple says no one using Lockdown Mode has been hacked with spyware | TechCrunch

Reverse engineering Apple’s silent security fixes - Calif

Jury finds Meta's platforms are harmful to children in 1st wave of social media addiction lawsuits | PBS News

Meta and YouTube found liable in social media addiction trial

Iranian hackers publish emails allegedly stolen from Kash Patel

Iran Us War: 'Legitimate targets': Iran issues warning to US tech firms including Google, Amazon, Microsoft, Nvidia - The Times of India

Drop Site on X: "IRGC: From now on, for every assassination, an American company will be destroyed"

OSINTtechnical on X: "Starlink shutdowns are forcing Russian troops even deeper into Ubiquiti’s ecosystem. "

Citrix NetScaler products confirmed to be under exploitation | Cybersecurity Dive

CISA tells federal agencies to patch Citrix NetScaler bug by Thursday | The Record from Recorded Future News

Using a VPN May Subject You to NSA Spying | WIRED

Post reporters called the White House. Their phones showed ‘Epstein Island.’ - The Washington Post
1 hr
March 27Soap Box: Red teaming AI systems with SpecterOps
In this sponsored Soap Box edition of the show, Patrick Gray and James Wilson talk about red teaming AI systems with Russel Van Tuyl, Vice President of Services at elite penetration testing firm SpecterOps.
SpecterOps is the company behind attack path enumeration tool Bloodhound and Bloodhound Enterprise, but they’re also a pentest and red teaming shop with world class expertise in popping shells on all sorts of interesting systems in all sorts of interesting places.
This episode is also available on Youtube.
Show notes
31 min
March 25Risky Business #830 -- LiteLLM and security scanner supply chains compromised
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They talk through:
TeamPCP’s supply chain attack on Github, and they threw in an anti-Iran wiper, because why not?!

Anthropic hooks up its models to just… use your whole computer

After Stryker’s Very Bad Day, CISA says maybe add some more controls around your Intune?

Another iOS exploit kit shows up in the cyber bargain-bin

The FTC decides to ban… all new home routers?! U wot m8?!

Supermicro founder was personally sanction-busting Nvidia GPUs into China?!
This week’s episode is sponsored by enterprise browser maker, Island. Chief Customer Officer Bradon Rogers joins Pat to explain how its customers are using Island to control the use of personal AI services in regulated industries.
This episode is also available on Youtube.
Show notes
‘CanisterWorm’ Springs Wiper Attack Targeting Iran

TeamPCP deploys CanisterWorm on NPM following Trivy compromise

Andrej Karpathy on X: "Software horror: litellm PyPI supply chain" attack

Checkmarx KICS GitHub Action Compromised: Malware Injected in All Git Tags

Felix Rieseberg on X: "Today, we’re releasing a feature that allows Claude to control your computer"

A Top Google Search Result for Claude Plugins Was Planted by Hackers

Lockheed Martin targeted in alleged breach by pro-Iran hacktivist

CISA urges companies to secure Microsoft Intune systems after hackers mass-wipe Stryker devices

FBI seems to seize website tied to Iranian cyberattack on Stryker

Stryker confirms cyberattack is contained and restoration underway

Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild

Someone has publicly leaked an exploit kit that can hack millions of iPhones

Russia-linked hackers use advanced iPhone exploit to target Ukrainians

Apple rolls out first 'background security' update for iPhones, iPads, and Macs to fix Safari bug

Post by @wartranslated.bsky.social — Bluesky

Signal’s Creator Is Helping Encrypt Meta AI

Hacker says they compromised millions of confidential police tips held by US company

Millions of 'anonymous' crime tips exposed in massive Crime Stoppers hack

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

FCC bans import of consumer-grade routers amid national security concerns

White House pours cold water on cyber ‘letters of marque’ speculation

Google launches threat disruption unit, stops short of calling it ‘offensive'

Supermicro’s cofounder was just arrested for allegedly smuggling $2.5 billion in GPUs to China

Cyberattack on vehicle breathalyzer company leaves drivers stranded across the US

Man pleads guilty to $8 million AI-generated music scheme

Two Israelis AI generated "intelligence" and sold it to Iran
1 hr 4 min
March 18Risky Business #829 -- Sneaky lobsters: Why AI is the new insider threat
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They discuss:
Iran’s Intune-based wiper attack on medical device maker Stryker

Qihoo 360’s AI publishes its own wildcard TLS cert private key

Instagram is canning its end-to-end encrypted messaging

What’s going on with mobile internet access in Moscow?

The Xbox One’s bootloader gets voltage glitched into submission

Oh Qualys! We love you! (At least, whoever is in the basement writing these beautiful .txt files…)
This week’s episode is sponsored by browser-based detection and response company, Push Security. Researcher Dan Green and Field CTO Mark Orlando join Pat to talk through the InstallFix variant of the *Fix attack technique.
This episode is also available on Youtube.
Show notes
Iranian Hacktivists Strike Medical Device Maker Stryker in "Severe" Attack that Wiped Systems

Stryker says it's restoring systems after pro-Iran hackers wiped thousands of employee devices | TechCrunch

Stryker attack raises concerns about role of device management tool | Cybersecurity Dive

Stryker tells SEC that timeline for recovery from cyberattack unknown | The Record from Recorded Future News

How ‘Handala’ Became the Face of Iran’s Hacker Counterattacks | WIRED

U.S Strikes Killed Iranian Cyber Chiefs, But The Hacks Continued

Risky Business Features: Being a Wartime CISO

Supply-chain attack using invisible code hits GitHub and other repositories - Ars Technica

China's biggest cybersecurity company, Qihoo 360 just leaked their own wildcard SSL private key

Emergent Cyber Behavior: When AI Agents Become Offensive Threat Actors - Irregular

Risky Business Features: MCP is Dead

Measuring AI Agents’ Progress on Multi-Step Cyber Attack Scenarios

Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios

What is end-to-end encryption on Instagram | Instagram Help Center

US Lawmakers Move to Kill the FBI’s Warrantless Wiretap Access | WIRED

Website "whitelists" launched in Moscow | Forbes.ru

Exclusive: Foreign hacker in 2023 compromised Epstein files held by FBI, source and documents show | Reuters

Feds say another DigitalMint negotiator ran ransomware attacks and helped extort $75 million | CyberScoop

Researchers disclose vulnerabilities in IP KVMs from four manufacturers - Ars Technica

RE//verse 2026: Hacking the Xbox One by Markus 'doom' Gaasedelen - YouTube

CrackArmor: Multiple vulnerabilities in AppArmor
1 hr 4 min
March 12Risky Biz Soap Box: It took a decade, but allowlisting is cool again
In this Soap Box edition of the Risky Business podcast Patrick Gray sits down with Airlock Digital co-founders Daniel Schell and David Cottingham to talk about the role AI models could play in managing enterprise allowlists.
They also talk about the durability of allowlisting as a control. After 12 years in business, the Airlock product hasn’t really changed all that much. That’s a good thing! It also means the Airlock team have been able to spend some time doing deep engineering instead of chasing the latest attacker TTPs and writing detection rules for them.
This episode is also available on Youtube.
Show notes
28 min

About Risky Business

From the publisher's feed

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for…