app_store_button

google_play_button

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

Patrick Gray

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Risky Business

In this sponsored Soap Box edition of the podcast, Andrew Morris joins Patrick Gray to talk about how Greynoise can often get a 90 day heads up on serious vulnerabilities. Whether it’s malicious actors doing reconnaissance or the affected vendors trying to understand the scope of the problem, it seems that mass scanning activity lines up pretty nicely with typical 90-day disclosure timelines.

A fascinating chat with Andrew, as always.

This episode is also available on Youtube.

 
 
 Show notes

Risky Biz Soap Box: Greynoise knows when bad bugs are coming

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

 • Anthropic says a Chinese APT orchestrated attacks using its AI

 • It’s a day ending in -y, so of course there are shamefully bad Fortinet exploits in the wild

 • Turns out slashing CISA was a bad idea, now it’s time for a hiring spree

 • Researchers brute force entire phone number space against Whatsapp contact discovery API

 • DOJ figures out how to make SpaceX turn off scam compounds’ Starlink service

This week’s episode is sponsored by Mastercard. Senior Vice President of Mastercard Cybersecurity Urooj Burney joins to talk about how the roles of fraud and cyber teams in the financial sector are starting to converge. Mastercard also recently acquired Recorded Future, and Urooj talks about how they aim to integrate cyber threat intelligence into the financial world.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Full report: Disrupting the first reported AI-orchestrated cyber espionage campaign
 
 Researchers question Anthropic claim that AI-assisted attack was 90% autonomous - Ars Technica
 
 China’s ‘autonomous’ AI-powered hacking campaign still required a ton of human work | CyberScoop
 
 Amazon discovers APT exploiting Cisco and Citrix zero-days | AWS Security Blog
 
 CISA gives federal agencies one week to patch exploited Fortinet bug | The Record from Recorded Future News
 
 PSIRT | FortiGuard Labs
 
 CISA, eyeing China, plans hiring spree to rebuild its depleted ranks | Cybersecurity Dive
 
 This Is the Platform Google Claims Is Behind a 'Staggering’ Scam Text Operation | WIRED
 
 A Simple WhatsApp Security Flaw Exposed 3.5 Billion Phone Numbers | WIRED
 
 DOJ Issued Seizure Warrant to Starlink Over Satellite Internet Systems Used at Scam Compound | WIRED
 
 Multiple US citizens plead guilty to helping North Korean IT workers earn $2 million | The Record from Recorded Future News
 
 Cyberattack leaves Jaguar Land Rover short of £680 million | The Record from Recorded Future News
 
 FBI: Akira gang has received nearly $250 million in ransoms | The Record from Recorded Future News
 
 Operation Endgame: Police reveal takedowns of three key cybercrime tools | The Record from Recorded Future News
 
 Inside a Wild Bitcoin Heist: Five-Star Hotels, Cash-Stuffed Envelopes, and Vanishing Funds | WIRED

Risky Business #815 -- Anthropic's AI APT report is a big deal

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

 • The KK Park scam compound in Myanmar gets blasted with actual dynamite

 • China sentences more scammers TO DEATH

 • While Singapore is opting to lash them with the cane

 • Chinese security firm KnownSec leaks a bunch of documents

 • Necromancy continues on NSO Group, with a Trump associate in charge

 • OWASP freshens up the Top 10, you won’t believe what’s number three!

This week’s episode is sponsored by Thinkst Canary. Big bird Haroon Meer joins and, as usual, makes a good point. If you’re going to trust a vendor to do something risky like put a box on your network, they have an obligation to explain how they make that safe. Thinkst has a /security page that does exactly that. So why do we let Palo Alto and Fortinet get away with “trust me, bro”?

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Myanmar Junta Dynamites Scam Hub in PR Move as Global Pressure Grows
 
 China sentences 5 Myanmar scam kingpins to death | The Record from Recorded Future News
 
 Law passed for scammers, mules to be caned after victims in Singapore lose almost $4b since 2020 | The Straits Times
 
 KnownSec breach: What we know so far. - NetAskari
 
 Risky Bulletin: Another Chinese security firm has its data leaked
 
 Inside Congress Live
 
 The Government Shutdown Is a Ticking Cybersecurity Time Bomb | WIRED
 
 Former Trump official named NSO Group executive chairman | The Record from Recorded Future News
 
 Short-term renewal of cyber information sharing law appears in bill to end shutdown | The Record from Recorded Future News
 
 Jaguar Land Rover hack hurt the U.K.'s GDP, Bank of England says
 
 Monetary Policy Report - November 2025 | Bank of England
 
 SonicWall says state-linked actor behind attacks against cloud backup service | Cybersecurity Dive
 
 Japanese media giant Nikkei reports Slack breach exposing employee and partner records | The Record from Recorded Future News
 
 "Intel sues former employee for allegedly stealing confidential data" Post by @campuscodi.risky.biz — Bluesky
 
 Introduction - OWASP Top 10:2025 RC1

Risky Business #814 -- It's a bad time to be a scam compound operator

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

 • We love some good vulnerability reporting drama, this time FFmpeg’s got beef with Google

 • OpenAI announces its Aardvark bug-gobbling system

 • Two US ransomware responders get arrested for… ransomware

 • Memento (nee HackingTeam) CEO says: Sì, those are totally our tools getting snapped in Russia

 • Hackers help freight theft gangs steal shipments to resell

 • A second Jabber Zeus mastermind gets his comeuppance 15 years on

This week’s episode is sponsored by Nucleus Security, who make a vulnerability information management system. Co-founder Scott Kuffer says that approaches for triaging vulnerabilities have started to fall apart, given there are just. So. Many. And they’re all important!

This episode is also available on Youtube.

 
 
 Show notes
 
 
 vx-underground on X: "Yeah, so pretty much this entire drama thing is FFmpeg are a bunch of nerds…"
 
 FFmpeg on X: "@DavidEGrayson It's someone's hobby project of an obscure 1990s decoder…"
 
 Halvar Flake on X: "Given the extremely big role ffmpeg has played historically..."
 
 thaddeus e. grugq on X: "Current drama: Plucky security researcher Google takes on volunteer open source behemoth FFmpeg."
 
 Robert Graham on X: "Current status: There's a conflict between Google…"
 
 Introducing Aardvark: OpenAI’s agentic security researcher | OpenAI
 
 Bugcrowd acquires Mayhem Security to advance AI-powered security testing | CyberScoop
 
 Prosecutors allege incident response pros used ALPHV/BlackCat to commit string of ransomware attacks | CyberScoop
 
 Former Trenchant Exec Sold Stolen Code to Russian Buyer Even After Learning that Other Code He Sold Was Being "Utilized" by Different Broker in South Korea
 
 How an ex-L3Harris Trenchant boss stole and sold cyber exploits to Russia | TechCrunch
 
 Operation Zero — A Zero-Day Vulnerability Platform
 
 John Scott-Railton on X: "7/ There's a push to scale up America's offensive industry right now…"
 
 CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware | TechCrunch
 
 Exploiting Microsoft Teams: Impersonation and Spoofing Vulnerabilities Exposed Microsoft Teams Vulnerabilities Uncovered
 
 Cargo theft gets a boost from hackers using remote monitoring tools | The Record from Recorded Future News
 
 Remote access, real cargo: cybercriminals targeting trucking and logistics | Proofpoint US
 
 Alleged Conti ransomware gang affiliate appears in Tennessee court after Ireland extradition | The Record from Recorded Future News
 
 Three suspected developers of Meduza Stealer malware arrested in Russia | The Record from Recorded Future News
 
 Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody – Krebs on Security
 
 Windows Server Update Service exploitation ensnares at least 50 victims | Cybersecurity Dive
 
 Post by @paulschnack.bsky.social — Bluesky

Risky Business #813 -- FFmpeg has a point

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

 • L3Harris Trenchant boss accused of selling exploits to Russia once worked at the Australian Signals Directorate

 • Microsoft WSUS bug being exploited in the wild

 • Dan Kaminsky DNS cache poisoning comes back because of a bad PRNG

 • SpaceX finally starts disabling Starlink terminals used by scammers

 • Garbage HP update deletes certificates that authed Windows systems to Entra

This week’s episode is sponsored by automation company Tines. Field CISO Matt Muller joins to discuss how Tines has embraced LLMs and the agentic-AI future into their workflow automation.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 US accuses former L3Harris cyber boss of stealing and selling secrets to Russian buyer | TechCrunch
 
 Attackers bypass patch in deprecated Windows Server update tool | CyberScoop
 
 CVE-2025-59287 WSUS Unauthenticated RCE | HawkTrace
 
 CVE-2025-59287 WSUS Remote Code Execution | HawkTrace
 
 Catching Credential Guard Off Guard - SpecterOps
 
 Cache poisoning vulnerabilities found in 2 DNS resolving apps - Ars Technica
 
 Uncovering Qilin attack methods exposed through multiple cases
 
 Safety on X: "By November 10, we’re asking all accounts that use a security key as their two factor authentication (2FA) method to re-enroll their key to continue accessing X. You can re-enroll your existing security key, or enroll a new one. A reminder: if you enroll a new security key, any" / X
 
 SpaceX disables more than 2,000 Starlink devices used in Myanmar scam compounds | The Record from Recorded Future News
 
 SpaceX: Update Your Inactive Starlink Dishes Now or They'll Be Bricked
 
 How we linked ForumTroll APT to Dante spyware by Memento Labs | Securelist
 
 Former Polish official indicted over spyware purchase | The Record from Recorded Future News
 
 HP OneAgent Update Broke Entra Trust on HP AI Devices
 
 Windows' Built-in OpenSSH for Offensive Security
 
 How Hacked Card Shufflers Allegedly Enabled a Mob-Fueled Poker Scam That Rocked the NBA | WIRED

Risky Business #812 -- Alleged Trenchant exploit mole is ex-ASD

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

 • China has been rummaging in F5’s networks for a couple of years

 • Meanwhile China tries to deflect by accusing the NSA of hacking its national timing system

 • Salesforce hackers use their stolen data trove to dox NSA, ICE employees

 • Crypto stealing, proxy-deploying, blockchain-C2-ing VS Code worm charms us with its chutzpah

 • Adam gets humbled by new Linux-capabilities backdoor trick

 • Microsoft ignores its own guidance on avoiding BinaryFormatter, gets WSUS owned.

This episode is sponsored by Push Security. Co-founder and Chief Product Officer Jacques Louw joins to talk through how Push traced a LinkedIn phishing campaign targeting CEOs, and the new logging capabilities that proved critical to understanding it.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Why the F5 Hack Created an ‘Imminent Threat’ for Thousands of Networks | WIRED
 
 Breach at US-based cybersecurity provider F5 blamed on China, sources say | Reuters
 
 Network security devices endanger orgs with ’90s era flaws | CSO Online
 
 China claims it caught US attempting cyberattack on national time center | The Record from Recorded Future News
 
 Hackers Dox Hundreds of DHS, ICE, FBI, and DOJ Officials
 
 Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials
 
 ICE amps up its surveillance powers, targeting immigrants and antifa - The Washington Post
 
 John Bolton Indictment Provides Interesting Details About Hack of His AOL Account and Extortion Attempt
 
 US court orders spyware company NSO to stop targeting WhatsApp, reduces damages | Reuters
 
 Apple alerts exploit developer that his iPhone was targeted with government spyware | TechCrunch
 
 A New Attack Lets Hackers Steal 2-Factor Authentication Codes From Android Phones | WIRED
 
 GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace | Koi Blog
 
 European police bust network selling thousands of phone numbers to scammers | The Record from Recorded Future News
 
 Stephan Berger on X: "We recently took over an APT investigation from another forensic company. While reviewing analysis reports from the other company, we discovered that the attackers had been active in the network for months and had deployed multiple backdoors. One way they could regain root" / X
 
 Linux Capabilities Revisited | dfir.ch
 
 CVE-2025-59287 WSUS Remote Code Execution | HawkTrace
 
 TARmageddon (CVE-2025-62518): RCE Vulnerability Highlights the Challenges of Open Source Abandonware | Edera Blog
 
 Browser threat detection & response | Push Security | Push Security
 
 How Push stopped a high risk LinkedIn spear-phishing attack

Risky Business #811 -- F5 is the tip of the crap software iceberg

In this edition of the Wide World of Cyber podcast Patrick Gray talks to Chris Krebs and Alex Stamos about the F5 incident. They talk about what happened, whether it’s a big deal, and why private equity ownership of mid-tier cybersecurity companies is often a red flag.

 
 
 Show notes

Wide World of Cyber: A deep dive on the F5 hack

In this sponsored Soap Box edition of the Risky Business podcast, host Patrick Gray chats with Mastercard’s Executive Vice President and Head of Security Solutions, Johan Gerber, about how the card brand thinks about cybersecurity and why it’s aggressively investing in the space.

After listening to this interview you’ll understand why the credit card company spent $2.65b on threat intelligence vendor Recorded Future!

This episode is also available on Youtube.

 
 
 Show notes

Risky Biz Soap Box: Why Mastercard is scaling its cybersecurity business

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

 • FBI intervenes in Scattered Spider Salesforce leaksite

 • Clop loots Oracle E-Biz deployments

 • Plus so much more data extortion.. At least it’s not ransomware … we guess?

 • The US still can’t decide who’s gonna be in charge of NSA & Cybercom

 • Cambodian scam compounds get sanctioned and $15b in crypto is seized

 • NSO gets sold for pocket-lint-grade money

 • Bugs! Redis CVSS 10, Ivanti, Crowdstrike and… Internet Explorer?! zeroday?! In the wild?!!!?

This week’s episode is sponsored by Stairwell. Founder Mike Wiacek talks about how Stairwell brings VirusTotal-like visibility to private files, and about integrating the insights that brings into your SOC workflow.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 FBI takedown banner appears on BreachForums site as Scattered Spider promotes leak | The Record from Recorded Future News
 
 Dozens of Oracle customers impacted by Clop data theft for extortion campaign | CyberScoop
 
 Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882)
 
 Clop is a Big Fish, But Not Worth Hunting - Risky Business Media
 
 ShinyHunters Wage Broad Corporate Extortion Spree – Krebs on Security
 
 The company Discord blamed for its recent breach says it wasn't hacked
 
 Qantas confirms cybercriminals released stolen customer data | The Record from Recorded Future News
 
 Red Hat confirms breach of GitLab instance, which stored company’s consulting data | CyberScoop
 
 Risky Bulletin: Microsoft revamps Edge's "IE Mode" after zero-day attacks - Risky Business Media
 
 Teenagers arrested in England over cyberattack on nursery chain Kido | The Record from Recorded Future News
 
 Acting US Cyber Command, NSA chief won’t be nominated for the job, sources say | The Record from Recorded Future News
 
 Layoffs, reassignments further deplete CISA | Cybersecurity Dive
 
 Trump’s scandalous directive to AG Pam Bondi reached the public by accident
 
 Feds sanction Cambodian conglomerate over cyber scams, seize $15 billion from chairman | The Record from Recorded Future News
 
 US Congress committee investigating Musk-owned Starlink over Myanmar scam centres | Myanmar | The Guardian
 
 Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data | WIRED
 
 Netherlands invokes special powers against Chinese-owned semiconductor company Nexperia | The Record from Recorded Future News
 
 Spyware maker NSO Group confirms acquisition by US investors | TechCrunch
 
 Apple Announces $2 Million Bug Bounty Reward for the Most Dangerous Exploits | WIRED
 
 Wiz Finds Critical Redis RCE Vulnerability: CVE‑2025‑49844 | Wiz Blog
 
 SonicWall admits attacker accessed all customer firewall configurations stored on cloud portal | CyberScoop
 
 SonicWall SSLVPN devices compromised using valid credentials | Cybersecurity Dive
 
 Issues Affecting CrowdStrike Falcon Sensor for Windows
 
 ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities - SecurityWeek
 
 Jaguar Land Rover launches phased restart at factories after cyber-attack | Jaguar Land Rover | The Guardian
 
 Windows 10 support ends today — here's who's affected and what you need to do

Risky Business #810 -- Data extortion attacks have a silver lining

In this edition of the Snake Oilers podcast, three vendors pop in to pitch you all on their wares:

 Realm Security • : A security focussed, AI-first data pipeline platform

 Horizon3 • : AI hackers! Pentesting robots!! They’re coming fer yur jerbs!

 Persona • : Verify customer and staff identities with live capture

This episode is also available on Youtube.

 
 
 Show notes

Risky Biz Soap Box: Greynoise knows when bad bugs are coming

Lyt når som helst, hvor som helst

Other podcasts you might like ...