# risky business (podcasts) — RSS Amplifier Recent posts from the 2 feeds in the RSS Amplifier directory that cover risky business. Page: Feed: --- ## [Srsly Risky Biz: China's AI-Enabled APT Operations Are Getting Interesting](https://risky.biz/SRB181/) _2026-08-27 · Risky Business Media_ Tom Uren and James Wilson talk about evidence that Chinese APT groups are using AI in a really sensible way, to beef up their malware arsenal. This will make it harder for threat intel firms to cluster activity for attribution. They also discuss the US disrupting Iranian hackers by revealing that some of them are hacking the country’s own firms. That’s a new tactic, but making that information… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/SRB181.mp3) ## [Risky Bulletin: Russia starts blocking DoH and DoT](https://risky.biz/RBNEWS605/) _2026-08-26 · Risky Business Media_ Russia begins blocking the DoH and DoT protocols, Russian hacktivists leak Spanish police and military personnel data, China and South Korea detain a vishing gang, and AI malware is not that common. [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWS605.mp3) ## [Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs](https://risky.biz/RB850/) _2026-08-26 · Risky Business_ On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including: Iranian hackers take down a small-scale power generator in the UK Siemens PLCs in critical US sectors are also being targeted… We’re stumped on who could be behind that one, too. Microsoft fixed a CVSS 10 deserialisation bug in Entra… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB850.mp3) ## [Between Two Nerds: Attribution is dead, long live attribution](https://risky.biz/BTN180/) _2026-08-24 · Risky Business Media_ In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether the increasing use of AI will make it harder for forensics teams to determine who is responsible for a hack. This episode is also available on YouTube . [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/BTN180.mp3) ## [Risky Bulletin: Expired credit cards can be used for malicious transactions](https://risky.biz/RBNEWS604/) _2026-08-24 · Risky Business Media_ Expired credit cards can be used for malicious transactions, Iranian hackers shut down a UK power plant, the Lazarus Group hacks South Korea’s Presidential Office, and an Android malware strain is infecting smart cars. [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWS604.mp3) ## [Sponsored: Passkeys won’t stop authorisation phishing](https://risky.biz/RBNEWSSI141/) _2026-08-23 · Risky Business Media_ In this Risky Business sponsored interview, James Wilson chats with Luke Jennings, Push Security’s VP of Research, about how stronger authentication is pushing attackers towards the authorisation layer. Device code phishing is on the rise. Luke explains how these attacks can survive passkeys and phishing-resistant MFA and, importantly, how defenders can check if their controls against these… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWSSI141.mp3) ## [Risky Bulletin: US warns of AI-assisted attacks against Siemens PLCs](https://risky.biz/RBNEWS603/) _2026-08-21 · Risky Business Media_ The US warns of AI-aided attacks against Siemens PLCs, hackers breach Latvia’s road traffic agency, a new hacking tool enrolls an attacker’s passkey to your account, and academics find source code overlaps between Geedge devices and China’s Great Firewall [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWS603.mp3) ## [Srsly Risky Biz: Trump's private hacker memo is the right idea](https://risky.biz/SRB180/) _2026-08-20 · Risky Business Media_ Tom Uren and James Wilson talk about President Donald Trump’s memo enlisting the US private sector to tackle cybercriminals. The initiative gets the big idea right: traditional law enforcement approaches have not worked against cybercriminals so the government has turned to disruption operations, but there simply isn’t enough government capacity. So it is time to bring in the private sector. They… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/SRB180.mp3) ## [Risky Bulletin: Slovakia finds Russian backdoors on its speed cameras](https://risky.biz/RBNEWS602/) _2026-08-19 · Risky Business Media_ Slovakia finds Russian backdoors on its speed cameras, French police used a public exploit to hack EncroChat, Microsoft delays Exchange updates due to a deluge of AI bugs, and a ransomware-affiliate poses as a data recovery firm. [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWS602.mp3) ## [Risky Business #849 -- Trump will unleash contractors on cybercriminals](https://risky.biz/RB849/) _2026-08-19 · Risky Business_ On this week’s show Patrick Gray and James Wilson are joined by guest co-host Dmitri Alperovitch to talk through the week’s news, including: Trump’s memo authorising the private sector to release the cyber hounds is fine, don’t worry! OpenAI finally decides to add a few safety measures after the whole “oopsie we committed some felonies” thing Anthropic’s models start a turf war when given the same… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB849.mp3) ## [Retro Grid Dungeon Crawler (Sponsored)](https://crawlproof.com/a/l5LJjzkTksbi) _2026-08-19 · **Sponsored**_ Retro grid movement with first-person combat, loot and skill-tree progression. ## [Between Two Nerds: The eye of Sauron](https://risky.biz/BTN179/) _2026-08-17 · Risky Business Media_ In this edition of Between Two Nerds Tom Uren and The Grugq discuss The Offense Death Cycle, a paper looking at how to take advantage of a defender’s ability to control a network to discover intruders. This episode is also available on YouTube . [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/BTN179.mp3) ## [James Kettle on inventing new attack techniques with LLMs](https://risky.biz/RBFEATURES35/) _2026-08-17 · Risky Business Media_ In this podcast episode, James Wilson chats with PortSwigger’s Director of Research James Kettle about using an LLM to develop genuinely new attack techniques. Kettle has built what he calls the HTTP Terminator, an autonomous research system that generates and tests tens of thousands of potentially new HTTP desync techniques. The Terminator, which makes use of Kettle’s own research methodology,… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBFEATURES35.mp3) ## [Risky Bulletin: The EU publishes its upcoming cybersecurity standards](https://risky.biz/RBNEWS601/) _2026-08-17 · Risky Business Media_ The EU publishes its upcoming cybersecurity standards, hackers breach France’s tax agency, threat actors exploit a GeoServer zero-day hours after disclosure, and an exploit unlocks old AMD CPUs with one instruction. [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWS601.mp3) ## [Sponsored: What npm 12 fixes… and what it doesn’t](https://risky.biz/RBNEWSSI140/) _2026-08-16 · Risky Business Media_ In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments. [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWSSI140.mp3) ## [Risky Bulletin: US will let private companies carry out offensive cyber ops](https://risky.biz/RBNEWS600/) _2026-08-14 · Risky Business Media_ The White House will let private companies carry out offensive cyber ops, an AI hacking campaign breached Taiwan’s government, a macOS bug was exploited over the internet to drop cryptominers, and Kenya orders internet cafes to store logs. [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWS600.mp3) ## [Soap Box: Zero Trust(ish) Networks](https://risky.biz/SOAPBOX110/) _2026-08-14 · Risky Business_ In this Soap Box edition of the Risky Business podcast host Patrick Gray chats with Adam Pointon, CEO of Knocknoc, about the failure of Zero Trust as a comprehensive architecture. Most networks look like they were designed in 1999, and most Zero Trust products look like they were designed for 2049. Instead, Patrick and Adam pitch something in the middle: Zero Trust(ish) networks, where Zero Trust… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/SOAPBOX110.mp3) ## [Srsly Risky Biz: Data extortion is booming. Hooray!](https://risky.biz/SRB179/) _2026-08-13 · Risky Business Media_ Tom Uren and James Wilson talk about the cybercrime ecosystem shifting towards data theft extortion, stealing sensitive data and extracting ransoms from victims by threatening to leak it. For organisations whose reputation is very important to them, data leaks are a bigger threat than having their files locked up. They also discuss how the rise of AI makes it worth reinvigorating CISA’s Secure by… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/SRB179.mp3) ## [Risky Business #848 -- OpenAI comes clean](https://risky.biz/RB848/) _2026-08-12 · Risky Business_ On this week’s show Patrick Gray and James Wilson are joined by guest co-host Brad Arkin to talk through the week’s news, including: The AI-agent-hacks-stuff saga continues. This week we have one booting gymgoers from full classes to nab its owner a spot Somehow OpenAI’s legal team allowed the company to spill all the Hugging Face tea at BlackHat and it’s hot and delicious More details emerge… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB848.mp3) ## [Risky Business #847 -- Oops! Claude's accidental hacking spree](https://risky.biz/RB847/) _2026-08-05 · Risky Business_ On this week’s show Patrick Gray, and James Wilson are joined by bearded man of leisure Adam Boileau to discuss the week’s cybersecurity news, including: Accidental AI agent hacking sprees have the world’s media freaking out, but we think it’s all pretty funny The bugpocalypse is so chaotic, Microsoft can’t patch fast enough A ColdCard wallet flaw led to millions in Bitcoin theft, but the back… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB847.mp3) ## [Risky Business #846 -- OpenAI built a fireplace out of wood](https://risky.biz/RB846/) _2026-07-29 · Risky Business_ On this week’s show special guest co-host Pete Ranks, the former director of the CIA’s Centre for Cyber Intelligence, joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover: Everyone signs the open weights open letter, except Anthropic… of course. OpenAI had no idea it had hacked Hugging Face Kimi K3 open weights released and they’re massive! Why a more aggressive… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB846.mp3) ## [Make any domain metal (Sponsored)](https://crawlproof.com/a/7ZG3YETcB3bj) _2026-07-29 · **Sponsored**_ Turn any domain into a blacked-out metal landing page with an email waitlist ## [Risky Business #845 -- OpenAI's Skynet moment](https://risky.biz/RB845/) _2026-07-22 · Risky Business_ On this week’s show special guest co-host Chris Krebs joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover: Oopsie daisy! OpenAI agents went rogue and hacked Hugging Face US and China trade AI model ban threats Iran has been using SS7 queries to locate and target US troops Scattered Spider is having a hard time, not just because of Microsoft’s GDID And much,… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB845.mp3) ## [Soap Box: Using threat hunting to drive detection](https://risky.biz/SOAPBOX109/) _2026-07-08 · Risky Business_ In this wholly sponsored Soap Box edition of the podcast Patrick Gray chats with Damien Lewke, the CEO and founder of Nebulock, about the future of threat hunting and detection. Damien spent a decade in the EDR and MDR space before founding Nebulock in 2024. It started off as an AI-powered threat hunt platform but has evolved into a broader security data platform that can answer questions, drive… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/SOAPBOX109.mp3) ## [Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban](https://risky.biz/RB844/) _2026-07-01 · Risky Business_ On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Anthropic’s Fable 5 returning while OpenAI’s GPT-5.6 gets thrown in model jail Distillation, cheap tokens, and AI chat harvesting is an industry in China Edge becomes a lolbin via a new malicious extension An Iranian APT boss’s vacation in a beautiful place goes wrong Much, much more!… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB844.mp3) ## [Risky Business #843 -- Fortibleed is kinda awesome, actually](https://risky.biz/RB843/) _2026-06-24 · Risky Business_ On this week’s show special guest co-host Rob Joyce joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. Rob served as an advisor to Donald Trump during his first term as president and also served at NSA for 34 years. While at the agency, Joyce led Tailored Access Operations (TAO), and later became NSA’s Director of Cybersecurity. They cover: The surprisingly well done… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB843.mp3) ## [Risky Business #842 -- Anthropic needs an adult in the C suite](https://risky.biz/RB842/) _2026-06-17 · Risky Business_ On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Anthropic’s Fable 5 and Mythos 5 get nuked by the US government four days after launch “because security” Why “guardrails” won’t keep the world safe from your AI doomsday machine The FISA 702 statute expired, but the spying can (probably) continue! NPM v12 delivers some protection… [Listen](https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RB842.mp3)