App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

risky.biz

Regular cybersecurity news updates from the Risky Business team...

Risky Business News

Apple notifies French users of spyware attacks, China will increase fines for data breaches Google pays $1.6mil for cloud bugs at a hackathon event, and no more hacked free laundry for Dutch students

 
 
 Show notes
 
 
 Risky Bulletin: Most UK school hacks are caused by their own students

Risky Bulletin: Apple notifies French users of spyware attacks

Tom Uren and Amberleigh Jack talk about the Salesloft Drift incident. It is a great example of the sprawling impact that the breach of a single service provider can have. We expect these single-compromise-large-blast-radius attacks will become the new norm.

They also talk about Apple’s Memory Integrity Enforcement, which promises to be a big step forward for memory safety on Apple devices.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: Exploiting authorisation sprawl is the new black

The White House will keep the CyberCom and NSA dual-hat leadership arrangement, the US charges a major ransomware figure, Apple ships a memory safety protection feature and yet another supply chain attack hits the npm world.

 
 
 Show notes
 
 
 Risky Bulletin: US charges major ransomware figure

Risky Bulletin: White House to keep CyberCom and NSA dual role

In this edition of Between Two Nerds Tom Uren and The Grugq talk about the trend toward outrageously complicated exploits and what it means for hacking and cyber espionage.

This episode is also available on YouTube

 
 
 Show notes

Between Two Nerds: The death of the exploit

A new APT group turns out to be a phishing test, Qantas cuts executives’ bonuses after a recent breach, Anthropic stops selling AI tools to Chinese firms, and Nepal blocks 26 social media sites.

 
 
 Show notes
 
 
 Risky Bulletin: APT report? No, just a phishing test!

Risky Bulletin: New APT group turns out to be a phishing test

In this sponsored interview Casey Ellis chats with Keith Hoodlet from Trail of Bits. Keith is Trail of Bits’ director of engineering for AI, machine learning and application security and he joined Casey to talk about why prompt injection attack techniques that target AI are an unsolvable problem.

 
 
 Show notes

Risky Bulletin: Cyberattack disrupts Bridgestone tyre factories across North America

Tom Uren and Amberleigh Jack talk about Google starting a cyber disruption unit. It’s a sign of the times but could also point the way forward for policymakers looking to involve the private sector in government-endorsed efforts to strike back in cyberspace.

They also talk about cyber security authorities from 13 different countries pegging Salt Typhoon to three Chinese companies. That’s a lot of countries, but Tom wonders whether attribution is just viewed as a cost of doing business for the Chinese government.

And it turns out that Apple’s dispute with the UK government about encrypted iCloud data has not yet been resolved, despite media reports to the contrary.

This episode is also available on Youtube.

 
 
 Show notes

Srsly Risky Biz: Google sharpens its cyber knife

Two YouTube channels help dismantle a Chinese scam operation, Cloudflare, Zscaler, and Palo Alto disclose Salesloft-related breaches, a ransomware attack disrupts vehicle production at Jaguar Land Rover, and we have a new record DDoS attack.

 
 
 Show notes
 
 
 Risky Bulletin: YouTubers unmask and help dismantle giant Chinese scam ring

Risky Bulletin: YouTubers unmask and help dismantle Chinese scam ring

In this edition of Between Two Nerds Tom Uren and The Grugq talk about how cyber threat actors are using AI tools to fill in resource and skills gaps that they have.

This episode is also available on Youtube.

 
 
 Show notes
 
 
 Anthropic's August 2025 Threat Report
 
 BTN episode 50

Between Two Nerds: How threat actors are using AI to run wild

Hackers bypass FIDO keys with a new phishing technique, a mobile surveillance vendor deploys an SS7 exploit, ransomware hits South Korea’s largest insurance provider, and law enforcement agencies dismantle a pro-Kremlin DDoS group.

 
 
 Show notes

Risky Bulletin: New phishing technique bypasses FIDO keys

Lyt når som helst, hvor som helst

Other podcasts you might like ...