PodcastActualités Actualités technologiquesAnglais

Risky Business

par Risky Business Media

NouveauRisky Business #859 -- ARTEX damage approaches crisis levels11 novembre 2026 · 1 h 10 min

Épisodes: 100
Parution: hebdomadaire
Dernier épisode: 11 Nov 2026

À propos du podcast

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Épisodes 100

Risky Business #859 -- ARTEX damage approaches crisis levels
11 novembre 20261 h 10 min
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including: Everyone’s using the ARTEX pentesting framework to …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including:
- Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis
- The French government attributes freezer hacks to Iran’s IRGC
- Rob Joyce was right and the breachpocalypse has exhausted global IR resources
- The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice!
- Much, much more!
This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical again. Raj used OpenAI LLMs to bypass that SMB signing and come up with some unnatural ldap tricks as well. Those techniques are now patched, but Raj learned a lot about parallel discovery in the AI age.
This episode is also available on YouTube
Show notes
Soap Box: Security must be more browser-centric
9 novembre 202636 min
In this Soap Box episode Patrick Gray chats to Push Security co-founder and CEO Adam Bateman about the benefits of taking a browser-centric approach to security. By now most Risky Business listeners know that …
Notes de l’épisode
In this Soap Box episode Patrick Gray chats to Push Security co-founder and CEO Adam Bateman about the benefits of taking a browser-centric approach to security.
By now most Risky Business listeners know that Push sells a browser extension-based product that can reliably prevent phishing, ClickFix and ConsentFix. But what’s next? Where to from here once you’re already in the browser?
Well, Push is expanding into the data loss prevention and secure web gateway product space. Why use a SWG based on 15-year-old technology when an extension can give you an even better security result? Especially when you can drop the drawbacks, like tromboning all your traffic into a random data centre…
This episode is also available on YouTube.
Show notes
Risky Business #858 -- The $6.3b laptop
4 novembre 20261 h 1 min
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including:
- The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess
- Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute!
- A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking”
- An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more!
This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gray to chat about fear around the looming post-quantum cryptography crisis, and how CISOs can use it as an opportunity to clean up house and finally take all the end-of-life products out to pasture.
This episode is also available on YouTube
Show notes
Snake Oilers: Minimal.dev, Request Rocket and TRM Labs
30 octobre 202644 min
In this edition of the Snake Oilers podcast, three vendors drop by to pitch their products. Minimal.dev: A sandbox for AI agents! Co-Founder and CEO Jake King explains what the company is and how it works …
Notes de l’épisode
In this edition of the Snake Oilers podcast, three vendors drop by to pitch their products.
Minimal.dev: A sandbox for AI agents! Co-Founder and CEO Jake King explains what the company is and how it works.
Request Rocket: Runtime access control for AI agents and APIs. Founder and CTO Alex Ferguson drops by to talk about the problem the company is trying to solve.
TRM Labs: All-source threat intelligence. Global Strategic Accounts Director Simon Warren talks about the company’s platform Ardence.
This episode is also available on YouTube.
Show notes
Risky Business #857 -- AI FUD intensifies
28 octobre 20261 h 6 min
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Alex Stamos to talk through the week’s cybersecurity news, including: Everyone’s still panicking about “misbehaving” AI …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Alex Stamos to talk through the week’s cybersecurity news, including:
- Everyone’s still panicking about “misbehaving” AI models that are pretty much just doing what they’re being told to do
- Americans are giving AI agents unfettered access to their bank accounts. What could go wrong?
- Last week’s PHP meteor seems to have missed Earth
- This week’s Brotli HTTP/2 critical flaw is this week’s meteor
- The private key is always 4. This time it’s TLS bugs in GoAhead
- Much, much more!
This week’s show is brought to you by Truffle Security. Co-founder and CEO Dylan Ayrey joins James Wilson to chat about scanning GitHub repos and finding more than half a million unique credentials that were never revoked. As Dylan explains, the problem of exposed keys exists everywhere and is only getting worse.
This episode is also available on YouTube
Show notes
Risky Business #856 -- 8-bit encryption, PHP megabugs and more
21 octobre 20261 h 5 min
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host security engineer Mark El-Khoury to talk through the week’s cybersecurity news, including: The PHP foundation is about to …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host security engineer Mark El-Khoury to talk through the week’s cybersecurity news, including:
- The PHP foundation is about to release patches for a couple of critical bugs… We’re watching to see if the internet burns down
- 8 private keys underpinning some CA certs got compromised. The keys only had 8 bits of entropy!
- Is the breach-polcalypse upon us?
- OpenAI’s inside spy, Anthropic’s safety bill and election influence campaigns are coming for your chatbots
- Ukraine drone strikes hit more Russian data centres, this time VK’s in the firing line
- Much, much more!
This week’s show is brought to you by Trail of Bits. Principal Security Engineer Anish Naik joins James Wilson to chat about two agent skills plugins, Patching Bugs and Regression Hunt, that the company is releasing off the back of its joint initiative with Open AI, Patch the Planet.
This episode is also available on YouTube
Show notes
Risky Business #855 -- ShinyHunters done sowing, enters reaping phase
14 octobre 20261 h 6 min
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including: Sacré bleu! Hackers turn up the heat at French …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including:
- Sacré bleu! Hackers turn up the heat at French supermarket freezers
- ShinyHunters enters “find out” stage
- Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild
- More models “behave badly” (by… doing exactly what we’re telling them to do)
- Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet
- Much, much more…
This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work.
This episode is also available on YouTube
Show notes
Soap Box: HD Moore talks OT security, frontier fearmongering and more
30 septembre 202634 min
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about how his company runZero wound up being used heavily to discover OT devices in enterprise …
Notes de l’épisode
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about how his company runZero wound up being used heavily to discover OT devices in enterprise networks.
They also talk about the vulnpocalypse and how frontier lab fearmongering is reminiscent of the collective freakout when HD released the Metasploit exploit framework back in 2003.
This episode is also available on YouTube.
Show notes
Risky Business #854 -- We're Jevpilled
23 septembre 202655 min
THE RISKY BUSINESS WEEKLY SHOW IS NOW ON HIATUS FOR TWO WEEKS AND WILL RETURN OCTOBER 14 On this week’s show Patrick Gray and James Wilson are joined by Adam Boileau to talk through the week’s news, including …
Notes de l’épisode
THE RISKY BUSINESS WEEKLY SHOW IS NOW ON HIATUS FOR TWO WEEKS AND WILL RETURN OCTOBER 14
On this week’s show Patrick Gray and James Wilson are joined by Adam Boileau to talk through the week’s news, including:
- Google’s Gemini finally did some crimes
- OpenAI admits more agents did silly things because “alignment”
- US Treasury’s Scott Bessent rules out a liability waiver for the frontier labs, saying, roughly: “Lol. Lmao even.”
- Jev is Silicon Valley’s “hot dog/not hotdog” app brought to life, and it will really improve security tooling
- The FBI and Coast Guard boarded oil tankers after they were allegedly hacked
- Much, much more…
This week’s show is brought to you by Thinkst Canary. Founder Haroon Meer joins Patrick to talk about Thinkst’s new deception tools that trick the AI agents that are targeting you. It’s actually hilarious how well deception tech works against hacking agents.
This episode is also available on YouTube
Show notes
Risky Business #853 -- We're all gonna die, apparently
16 septembre 202659 min
On this week’s show Patrick Gray and James Wilson are joined by former US Cyber Command executive director turned PwC’s Cyber, Data & Technology Risk leader Morgan Adamski to talk through the week’s news …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by former US Cyber Command executive director turned PwC’s Cyber, Data & Technology Risk leader Morgan Adamski to talk through the week’s news, including:
- More tech guys penned more open letters and AI will destroy us all!
- Another Wednesday, another congregation of OpenAI agents on wikis… yawn
- OpenAI agents were behind the headscratching RubyGems hacking campaign in May
- The FBI will disrupt more adversary operations, NSA is creating more mission centres, lawmakers want sanctions on hackers-for-hire… Release more hounds!
- So many platforms, so many bugs, so many patches breaking other stuff
- Much, much more…
This week’s show is brought to you by Airlock Digital. Its co-founders Daniel Schell and David Cottingham join Patrick to talk about how Airlock has integrated itself with Crowdstrike via its Falcon Foundry platform.
This episode is also available on YouTube
Show notes
Snake Oilers: watchTowr, XBOW and CoreView
11 septembre 202642 min
In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products: watchTowr: We’re all familiar with watchTowr’s research, but what do they actually do? XBOW: The AI …
Notes de l’épisode
In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products:
- watchTowr: We’re all familiar with watchTowr’s research, but what do they actually do?
- XBOW: The AI pentesting company pitches its approach
- CoreView: Your M365 tenant is probably a security disaster. Tame it with CoreView!
This episode is also available on YouTube.
Show notes
Risky Business #852 -- Cyber Command wants to buy shells
9 septembre 20261 h 3 min
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Robby Winchester from SpecterOps to talk through the week’s news, including: ID verification company IDScan was breached and 153m …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Robby Winchester from SpecterOps to talk through the week’s news, including:
- ID verification company IDScan was breached and 153m driver licenses wound up for sale online. Cue the barrage of lawsuits
- The US government plans to pay private contractors to conduct military hacks
- The US accuses China of distillation attacks, a.k.a. forbidden training
- It’s Wednesday, so OpenAI’s agents escaped sandboxes again and passed notes around on a German Wiki
- Much, much more…
This week’s show is brought to you by Sublime Security. Sublime’s head of detection engineering Randy Pargman joins the show to chat about how the company is preparing for prompt injection attacks to move from being largely theoretical to commonplace.
This episode is also available on YouTube
Show notes
Risky Business #851 -- Agents are just ones and zeros, and tigers are just atoms
2 septembre 202659 min
On this week’s show Patrick Gray and James Wilson are joined by guest co-host The Grugq to talk through the week’s news, including: Two alleged TeamPCP hackers got arrested in Australia The White House has a …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by guest co-host The Grugq to talk through the week’s news, including:
- Two alleged TeamPCP hackers got arrested in Australia
- The White House has a plan to boost security for water facilities, but we can’t see it working
- OpenAI keeps the ol’ Hugging Face discourse going for another week with an incident debrief
- Tech companies write another open letter about AI… we’re getting CISA Shields Up flashbacks, but for robots
- Much, much more…
This week’s show is brought to you by Ent AI. Co-founder Brandon Dixon joins Pat to talk through some of the absolutely wild fraud and abuse the company’s endpoint security tool is finding when it’s deployed inside large organisations.
This episode is also available on YouTube
Show notes
Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
26 août 20261 h 3 min
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including: Iranian hackers take down a small-scale …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including:
- Iranian hackers take down a small-scale power generator in the UK
- Siemens PLCs in critical US sectors are also being targeted… We’re stumped on who could be behind that one, too.
- Microsoft fixed a CVSS 10 deserialisation bug in Entra before someone else found it and owned the planet
- Prompt injection isn’t going away
- LLMs are deceiving us meat sacks and it’s a worry
- Much, much more…
This week’s show is brought to you by Okta. VP of Threat Intel Brett Winterford joins the show in this week’s sponsor interview to talk James through how the company is turning its plethora of accumulated data into free alerting for its customers. They also chat about Okta’s new threat intelligence product line.
This episode is also available on YouTube
Show notes
Risky Business #849 -- Trump will unleash contractors on cybercriminals
19 août 202659 min
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Dmitri Alperovitch to talk through the week’s news, including: Trump’s memo authorising the private sector to release the cyber …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Dmitri Alperovitch to talk through the week’s news, including:
Trump’s memo authorising the private sector to release the cyber hounds is fine, don’t worry! OpenAI finally decides to add a few safety measures after the whole “oopsie we committed some felonies” thing Anthropic’s models start a turf war when given the same task, surprising… nobody We can’t figure out whether a device that can hack a 737 is showboating stunt hacking or … something more real-world cool. Or both. Or something. Much, much more
This week’s show is brought to you by threat hunt and detection platform Nebulock. Founder and CEO Damien Lewke joins Pat to chat about what it looks like when you try to reinvent the SIEM in 2026 on a clean sheet of paper.
This episode is also available on YouTube
Show notes
Soap Box: Zero Trust(ish) Networks
14 août 202629 min
In this Soap Box edition of the Risky Business podcast host Patrick Gray chats with Adam Pointon, CEO of Knocknoc, about the failure of Zero Trust as a comprehensive architecture. Most networks look like they …
Notes de l’épisode
In this Soap Box edition of the Risky Business podcast host Patrick Gray chats with Adam Pointon, CEO of Knocknoc, about the failure of Zero Trust as a comprehensive architecture.
Most networks look like they were designed in 1999, and most Zero Trust products look like they were designed for 2049.
Instead, Patrick and Adam pitch something in the middle: Zero Trust(ish) networks, where Zero Trust principles are applied selectively where possible.
Instead of trying to re-architect entire networks, maybe it’s time we learned to apply Zero Trust principles selectively against risky assets. It’s a better approach than the status quo, which involves liberal use of the “risk accepted” stamp.
This episode is also available on YouTube
Show notes
Risky Business #848 -- OpenAI comes clean
12 août 202660 min
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Brad Arkin to talk through the week’s news, including: The AI-agent-hacks-stuff saga continues. This week we have one booting …
Notes de l’épisode
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Brad Arkin to talk through the week’s news, including:
- The AI-agent-hacks-stuff saga continues. This week we have one booting gymgoers from full classes to nab its owner a spot
- Somehow OpenAI’s legal team allowed the company to spill all the Hugging Face tea at BlackHat and it’s hot and delicious
- More details emerge about Iran’s hacking campaign against US water utilities, but Brad is unimpressed
- It turns out TeamPCP has been around longer than we thought and predates the AI era
- Some absolute plonker kept the DEFCON party going on a Delta flight home. No word yet on if they made the plane fly sideways
- Much, much more
This week’s show is brought to you by cloud security platform Prowler. Founder and CEO Toni de la Fuente chats about what the company is doing with AI and some of the cool ways customers are using it with Prowler.
This episode is also available on YouTube
Show notes
Risky Business #847 -- Oops! Claude's accidental hacking spree
5 août 20261 h 8 min
On this week’s show Patrick Gray, and James Wilson are joined by bearded man of leisure Adam Boileau to discuss the week’s cybersecurity news, including: Accidental AI agent hacking sprees have the world’s …
Notes de l’épisode
On this week’s show Patrick Gray, and James Wilson are joined by bearded man of leisure Adam Boileau to discuss the week’s cybersecurity news, including:
- Accidental AI agent hacking sprees have the world’s media freaking out, but we think it’s all pretty funny
- The bugpocalypse is so chaotic, Microsoft can’t patch fast enough
- A ColdCard wallet flaw led to millions in Bitcoin theft, but the back story behind the bug is bonkers
- Iran hacks and disrupts water infrastructure in multiple American states
- North Korea’s state-backed hackers turn criminal. Or their criminals turn into state-backed hackers. Or something. It’s all a bit confusing, actually.
- Much, much more!
This week’s show is brought to you by Sondera. Co-founder Josh Devon joins Patrick and James to talk through some absolutely hilarious LLM horror stories.
This episode is also available on YouTube
Show notes
Risky Business #846 -- OpenAI built a fireplace out of wood
29 juillet 20261 h 2 min
On this week’s show special guest co-host Pete Ranks, the former director of the CIA’s Centre for Cyber Intelligence, joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover …
Notes de l’épisode
On this week’s show special guest co-host Pete Ranks, the former director of the CIA’s Centre for Cyber Intelligence, joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover:
- Everyone signs the open weights open letter, except Anthropic… of course.
- OpenAI had no idea it had hacked Hugging Face
- Kimi K3 open weights released and they’re massive!
- Why a more aggressive response is needed to cyber attacks on OT
- And much, much more!
This week’s show is brought to you by SpecterOps. In this week’s sponsor interview Justin Kohler and Jared Atkinson talk about how SpecterOps’ Bloodhound now supports AWS attack paths. Run it against your AWS infra, but only if you have a strong stomach. The results will terrify you.
This episode is also available on YouTube.
Show notes
Risky Business #845 -- OpenAI's Skynet moment
22 juillet 20261 h 10 min
On this week’s show special guest co-host Chris Krebs joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover: Oopsie daisy! OpenAI agents went rogue and hacked Hugging Face US …
Notes de l’épisode
On this week’s show special guest co-host Chris Krebs joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover:
- Oopsie daisy! OpenAI agents went rogue and hacked Hugging Face
- US and China trade AI model ban threats
- Iran has been using SS7 queries to locate and target US troops
- Scattered Spider is having a hard time, not just because of Microsoft’s GDID
- And much, much more!
This week’s show is brought to you by Push Security. Luke Jennings joins Patrick this week to talk about the rise in authorisation phishing, like device code phishing, and what companies like Push are doing about it.
This episode is also available on YouTube.
Show notes
Soap Box: Using threat hunting to drive detection
8 juillet 202635 min
In this wholly sponsored Soap Box edition of the podcast Patrick Gray chats with Damien Lewke, the CEO and founder of Nebulock, about the future of threat hunting and detection. Damien spent a decade in the EDR …
Notes de l’épisode
In this wholly sponsored Soap Box edition of the podcast Patrick Gray chats with Damien Lewke, the CEO and founder of Nebulock, about the future of threat hunting and detection.
Damien spent a decade in the EDR and MDR space before founding Nebulock in 2024. It started off as an AI-powered threat hunt platform but has evolved into a broader security data platform that can answer questions, drive hunts and drive detections.
This product is engineered around the idea that a lot of security is a data problem. So, if we accept this premise, how do we solve security? And how much of that solution is about agents, vs building a good graph? And if you’re going to build a good graph, do you want to build it for a person to use, or an agent to use?
This is truly a conversation for the security nerd’s nerd. Enjoy!
This episode is also available on YouTube
Show notes
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban
1 juillet 20261 h
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Anthropic’s Fable 5 returning while OpenAI’s GPT-5.6 gets thrown in model jail Distillation …
Notes de l’épisode
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:
- Anthropic’s Fable 5 returning while OpenAI’s GPT-5.6 gets thrown in model jail
- Distillation, cheap tokens, and AI chat harvesting is an industry in China
- Edge becomes a lolbin via a new malicious extension
- An Iranian APT boss’s vacation in a beautiful place goes wrong
- Much, much more!
In this week’s sponsor interview Daf Stuttard and Katie Warren from Portswigger pop along to talk about how they built an AI security testing product that people would actually feel comfortable using.
This episode is also available on YouTube.
Show notes
Risky Business #843 -- Fortibleed is kinda awesome, actually
24 juin 20261 h 4 min
On this week’s show special guest co-host Rob Joyce joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. Rob served as an advisor to Donald Trump during his first term as president and …
Notes de l’épisode
On this week’s show special guest co-host Rob Joyce joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. Rob served as an advisor to Donald Trump during his first term as president and also served at NSA for 34 years. While at the agency, Joyce led Tailored Access Operations (TAO), and later became NSA’s Director of Cybersecurity.
They cover:
- The surprisingly well done Fortibleed campaign
- Stolen Klue OAuth tokens lead to Salesforce data theft
- OpenAI wants to patch the planet
- runZero gets acquired by Accenture, congrats HD Moore!
- Much, much more!
This episode is also available on YouTube.
Show notes
Risky Business #842 -- Anthropic needs an adult in the C suite
17 juin 202660 min
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Anthropic’s Fable 5 and Mythos 5 get nuked by the US government four days after launch “because …
Notes de l’épisode
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:
- Anthropic’s Fable 5 and Mythos 5 get nuked by the US government four days after launch “because security”
- Why “guardrails” won’t keep the world safe from your AI doomsday machine
- The FISA 702 statute expired, but the spying can (probably) continue!
- NPM v12 delivers some protection against supply chain attacks, but not enough.
- Microsoft has a series of bugs that prevent Windows Update from … updating
- Much, much more!
This episode is also available on YouTube
Show notes
Risky Business #841 -- Microsoft gets owned and 0day'd
10 juin 20261 h 3 min
On this week’s show special guest co-host Chris Wade, the founder of Corellium turned Cellebrite CTO, joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover: Microsoft has …
Notes de l’épisode
On this week’s show special guest co-host Chris Wade, the founder of Corellium turned Cellebrite CTO, joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news.
They cover:
- Microsoft has repos owned, GitHub tokens popped, and a new 0day dropped on them
- Meanwhile, researchers are choosing full disclosure instead of engaging MSRC
- Meta’s AI support agent allowed a staggering 20,000 accounts to be stolen!
- Apple pulls Russia’s MAX messenger from the App Store and disables notifications
- Anthropic gives the public our first Mythos-class model but it won’t do cybersecurity work
- Stripe and Google Tag Manager used in eCommerce website hack campaign
- And much, much more!
This week’s show is brought to you by runZero. HD Moore, runZeros’ founder, drops by in this week’s sponsor interview to talk about the AI vibe shift. Everyone is very worried about getting owned all of a sudden, and it’s really changing the cybersecurity business.
This episode is also available on YouTube.
Show notes
Soap Box: Detection and response in the AI age
5 juin 202637 min
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Edward Wu, founder of Dropzone, about what AI is doing to detection, response and the SOC more generally. Dropzone makes …
Notes de l’épisode
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Edward Wu, founder of Dropzone, about what AI is doing to detection, response and the SOC more generally.
Dropzone makes AI agents that conduct alert investigations in your SOC, but will the SOC as we know it even exist in the future?
Ed has a deep expertise in SOC tech, having previously led AI/ML detection engineering at Extrahop. This interview is a fantastic look at what the future may bring for detection and response professionals.
This episode is also available on YouTube
Show notes
Risky Business #840 -- Microsoft walks back researcher threats
3 juin 20261 h 6 min
On this week’s show special guest co-host Andy Boyd joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. Andy is the CEO of REDLattice, which makes the Paragon “intelligence collection …
Notes de l’épisode
On this week’s show special guest co-host Andy Boyd joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. Andy is the CEO of REDLattice, which makes the Paragon “intelligence collection and reconnaissance” solution.
They cover:
- Adversaries are tracking US troop locations with commercially available location data
- A new Signal phishing campaign is going after message backups
- 404 Media is suing ICE to get its spyware contract with REDLattice (lol)
- Microsoft’s tone-deaf response to ‘never justifiable’ zero-day disclosures
- Mini Shai-Hulud pops up again just as Glassworm gets shattered
- Much, much more
This week’s episode is sponsored by Authentik, an open source identity platform that you can host yourself. In this week’s sponsor interview Authentik’s CEO Fletcher Heisler joins Patrick Gray to talk about how they’re keeping up with the bugpocalypse, and also the work they’re doing to support identities for AI agents.
This episode is also available on YouTube.
Show notes
Risky Business #839 -- TeamPCP stole GitHub's internal repos
27 mai 20261 h
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: TeamPCP breached GitHub’s internal repos. Now what? Some absolute plonker glued Coruna to a …
Notes de l’épisode
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:
- TeamPCP breached GitHub’s internal repos. Now what?
- Some absolute plonker glued Coruna to a hijacked npm package
- CISA is worried about about open source and wants third party submissions for KEV
- AI infrastructure is “systemically” insecure
- Much, much more
This week’s episode is sponsored by allowlisting vendor Airlock Digital. Airlock’s founders David Cottingham and Daniel Schell join Patrick Gray to talk about Microsoft briefly flagging DigitCert’s root certificate as malware. Fun!
This episode is also available on YouTube
Show notes
Risky Business #838 -- GitHub investigates possible breach
20 mai 20261 h 3 min
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: GitHub announced a possible breach CISA leaks important creds, keys in public repo Awful …
Notes de l’épisode
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news.
They cover:
- GitHub announced a possible breach
- CISA leaks important creds, keys in public repo
- Awful vulnerability in Bitlocker renders it useless without a PIN
- So. Many. Patches.
- Polish Government urges officials to ditch Signal for mSzyfr
- Much, much more
This week’s show is brought to you by Thinkst Canary. Thinkst’s founder, Haroon Meer, is this week’s sponsor guest. He joined James Wilson to talk about how doing “the basics” in security isn’t trivially easy.
This episode is also available on YouTube.
Show notes
Soap Box: Where does AI fit into cloud security?
15 mai 202634 min
In this sponsored soap box edition of the Risky Business podcast Patrick Gray chats with Toni de la Fuente, the founder of Prowler. Prowler started off as a bunch of scripts in a trenchcoat, then became an open …
Notes de l’épisode
In this sponsored soap box edition of the Risky Business podcast Patrick Gray chats with Toni de la Fuente, the founder of Prowler.
Prowler started off as a bunch of scripts in a trenchcoat, then became an open source cloud security tool, and it’s now a venture-funded cloud security business. In this interview Toni talks us through how AI is changing the game for him as an open source project owner, and as a vendor. In short, reports of the death of IT and security tooling at the hands of frontier models have been greatly exaggerated.
This episode is also available on Youtube.
Show notes

Voici les 40 derniers épisodes sur 100. Les épisodes plus anciens se trouvent dans le flux du podcast.

Podcasts similaires

Plus de podcasts : Actualités

9to5Mac Daily

Actualités

9to5Mac · 100 épisodes

AI Chat: AI News on Claude, ChatGPT, Gemini, Grok, Perplexity

Actualités

Jaeden Schafer · 1 208 épisodes

AI Inside

Actualités

Jason Howell and Jeff Jarvis · 158 épisodes

AI News Flash

Technologies

3 744 épisodes

AI News in 5 Minutes | Daily Artificial Intelligence News Podcast

Actualités

AI Decoded · 164 épisodes

AI Safety Daily

Actualités

AI Safety Daily — Lantern Podcasts · 42 épisodes

Alex Finn

Éducation

149 épisodes

Bankless

Actualités

592 épisodes

C’est votre podcast ?

Confirmez-le avec une entrée dans votre flux : vous recevez ici un code, vous l’ajoutez comme podcast:txt dans le canal de votre flux, et nous le vérifions. Votre podcast apparaît ensuite comme « vérifié » sur SoundNode.