Risky Business #842 -- Anthropic needs an adult in the C suite

On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:

• Anthropic’s Fable 5 and Mythos 5 get nuked by the US government four days after launch “because security”

• Why “guardrails” won’t keep the world safe from your AI doomsday machine

• The FISA 702 statute expired, but the spying can (probably) continue!

• NPM v12 delivers some protection against supply chain attacks, but not enough.

• Microsoft has a series of bugs that prevent Windows Update from … updating

• Much, much more!

This episode is also available on YouTube (youtu.be/fZl-LgYuycQ)

Show notes

• Anthropic suspends new AI models after government directive | NBC News Tech (nbcnews.com/tech/tech-news/anthropic-suspends-…)

• Anthropic rankles users with safety-first Fable release | NBC News Tech (nbcnews.com/tech/tech-news/anthropic-rankles-u…)

• How a 90-minute White House deadline sparked Silicon Valley’s biggest AI fight | washingtonpost.com (washingtonpost.com/technology/2026/06/15/how-9…)

• Pete Hegseth (@PeteHegseth) on X | X (formerly Twitter) (x.com/PeteHegseth/status/2065897156226015690)

• David Sacks (@DavidSacks) on X | X (formerly Twitter) (x.com/DavidSacks/status/2065853007619588171)

• DoW CIO Kirsten Davies (@DoWCIODavies) on X | X (formerly Twitter) (x.com/DoWCIODavies/status/2065613741069111557)

• David Shulman (@DavidShulmanFL) on X | X (formerly Twitter) (x.com/davidshulmanfl/status/206598558948934489…)

• Controversial FISA spying law expires tonight. The spying will continue. | Ars Technica (arstechnica.com/tech-policy/2026/06/controvers…)

• GitHub announces npm security changes to tackle supply-chain attacks | BleepingComputer (bleepingcomputer.com/news/security/github-anno…)

• Why NPM v12 won’t stop supply chain attacks - Risky Business Media | Social Signals (risky.biz/RBFEATURES26)

• Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks | BleepingComputer (bleepingcomputer.com/news/security/oracle-peop…)

• Microsoft patches Exchange Server zero-day exploited in attacks | BleepingComputer (bleepingcomputer.com/news/microsoft/microsoft-…)

• Max severity Ivanti Sentry vulnerability now exploited in attacks | BleepingComputer (bleepingcomputer.com/news/security/max-severit…)

• CISA warns of another cPanel plugin flaw exploited in attacks | BleepingComputer (bleepingcomputer.com/news/security/cisa-warns-…)

• Critical Fortinet FortiSandbox flaws now exploited in attacks | BleepingComputer (bleepingcomputer.com/news/security/critical-fo…)

• CISA orders feds to patch actively exploited Ivanti flaw by Sunday | BleepingComputer (bleepingcomputer.com/news/security/cisa-gives-…)

• CISA to require federal agencies to patch some cyber vulnerabilities within 3 days | therecord.media (therecord.media/cisa-to-require-federal-agenci…)

• Path traversal flaw in AI dev platform Langflow exploited in attacks | BleepingComputer (bleepingcomputer.com/news/security/path-traver…)

• Microsoft: Some Windows PCs fail to install latest monthly updates | BleepingComputer (bleepingcomputer.com/news/microsoft/microsoft-…)

• Microsoft fixes BitLocker recovery bug on Windows Server 2025 | BleepingComputer (bleepingcomputer.com/news/microsoft/microsoft-…)

• Microsoft fixes Windows update failures linked to WUSA installer | BleepingComputer (bleepingcomputer.com/news/microsoft/microsoft-…)

• New attack turned Microsoft 365 Copilot into 1-click data theft tool | BleepingComputer (bleepingcomputer.com/news/security/new-attack-…)

• Over 73,000 French govt employees affected in Tchap messenger breach | BleepingComputer (bleepingcomputer.com/news/security/french-govt…)

• Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps | wired.com (wired.com/story/signal-alums-release-encrypted…)

• FBI disrupts massive AI-powered phishing service using a million URLs | BleepingComputer (bleepingcomputer.com/news/security/fbi-disrupt…)

• Cyberattack shuts down major Australian sugar mills, disrupting harvest | The Record (therecord.media/cyberattack-shuts-down-major-a…)

• Drug Sites Hijacked Spotify’s Search Ranking Through Fake Podcasts, Report Finds | wired.com (wired.com/story/drug-sites-hijacked-spotifys-s…)

• It Is Trivially Easy to Use Reddit to Manipulate AI Search, Research Suggests | 404.feed.press (404media.co/it-is-trivially-easy-to-use-reddit…)

• Who Runs the Ransomware Group ‘The Gentlemen?’ | krebsonsecurity.com (krebsonsecurity.com/2026/06/who-runs-the-ranso…)

• :brdKnife: (@cR0w@infosec.exchange) | Infosec Exchange (infosec.exchange/@cR0w/116732880369032945)