- wöchentlichErscheinungsrhythmus
- 59 mintypische Länge
- vor 3 Tagenletzte Folge
Folgenzu den neuesten
Risky Business #835 -- Why the Fast16 malware is badass
On this week’s show, Patrick Gray and James Wilson are joined by special guest-host Dmitri Alperovitch. They discuss the week’s cybersecurity news, including: • The US government is mad as hell about Chinese firms stealing American AI techn
Risky Business #834 -- Vercel gets owned, Mozilla dumps hundreds of Mythos bugs
On this week’s show, Patrick Gray and James Wilson are joined by special guest The Grugq. They discuss the week’s cybersecurity news, including: • Vercel got owned, and there’s a few infostealer and compromised employee dots to connect • Mo
Risky Business #833 -- The Great Mythos Freakout of 2026
On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: • Everyone has an opinion about Claude Mythos… even though almost nobody has used it yet • CISA adds a 2009 Excel bug to the
Snake Oilers: Burp AI, Sondera and Truffle Security
In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products: • Burp AI and DAST: The founder of PortSwigger (https://portswigger.net/) and creator of legendary security software Burp Suite, Dafy
Risky Business #832 -- Anthropic unveils magical 0day computer God
On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: • Anthropic’s new Mythos model hunts bugs and chains exploits together so well that… you cant have it… • …Unless you’re one
How the World Got Owned Episode 2: The 1990s, Part One
In this special documentary episode, Patrick Gray and Amberleigh Jack take a look back at hacking throughout the 1990s, from the feel-good vibes of the early hacking communities to the antics of young hackers who wound up on the run from th
Risky Business #831 -- The AI bugpocalypse begins
On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: • Those pesky North Koreans shim a backdoor into a 100M-downloads-a-week npm package • TeamPCP appear to have ransacked Cisc
Soap Box: Red teaming AI systems with SpecterOps
In this sponsored Soap Box edition of the show, Patrick Gray and James Wilson talk about red teaming AI systems with Russel Van Tuyl, Vice President of Services at elite penetration testing firm SpecterOps. SpecterOps is the company behind
Risky Business #830 -- LiteLLM and security scanner supply chains compromised
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They talk through: • TeamPCP’s supply chain attack on Github, and they threw in an anti-Iran wiper, because why not?! • Anthropic hooks
Risky Business #829 -- Sneaky lobsters: Why AI is the new insider threat
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They discuss: • Iran’s Intune-based wiper attack on medical device maker Stryker • Qihoo 360’s AI publishes its own wildcard TLS cert pr
Risky Biz Soap Box: It took a decade, but allowlisting is cool again
In this Soap Box edition of the Risky Business podcast Patrick Gray sits down with Airlock Digital co-founders Daniel Schell and David Cottingham to talk about the role AI models could play in managing enterprise allowlists. They also talk
Risky Business #828 -- The Coruna exploits are truly exquisite
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They cover: • The Coruna exploits were L3 Harris, but it seems Triangulation… was not! • Iran’s cyber HQ hit by Israeli (kinetic) strike
Risky Business #827 -- Iranian cyber threat actors are down but not out
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They cover: • The US-Israeli attack on Iran had a whole lot of cyber. It’s clearly in the playbook now! • The NSA Triangulation / L3 Har
Risky Business #826 -- A week of AI mishaps and skulduggery
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They cover: • Low skill actors compromise 600 Fortinets with AI-generated playbooks • Anthropic calls out Chinese AI firms over model di
Risky Biz Soap Box: The lethal trifecta of AI risks
There’s a lethal trifecta of AI risks: access to private data, exposure to untrusted content, and external communication. In this conversation, Risky Business host Patrick Gray chats with Josh Devon, the co-founder of Sondera, about how to
Risky Business #825 -- Palo Alto Networks blames it on the boogie
On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They cover: • Palo Alto threat researchers want to attribute to China, but management says shush • An increasing proportion of ransomwar
Risky Business #824 -- Microsoft's Secure Future is looking a bit wobbly
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Microsoft reshuffles security leadership. It doesn’t spark joy. • Russia is hacking the Winter Olympics. Again. But y tho? • China-linked
Risky Business #823 -- Humans impersonate clawdbots impersonating humans
Patrick Gray and Adam Boileau are joined by the newest guy on the Risky Business Media team, James WIlson. They discuss the week’s cybersecurity news, including: • Notepad++ update supply chain attack has been attributed to China • The AI a
Risky Business #822 -- France will ditch American tech over security risks
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. They discuss: • La France is tres sérieux about ditching US productivity software • China’s Salt Typhoon was snooping on Downing Street • Trump wields
Risky Business #821 -- Wiz researchers could have owned every AWS customer
In this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, joined by a special guest. BBC World Cyber Correspondent Joe Tidy is a long time listener and he pops in for a ride-along in the news segment plus a c
Risky Business #820 -- Asian fraud kingpin will face Chinese justice (pew pew!)
Risky Business returns for 2026! Patrick Gray and Adam Boileau talk through the week’s cybersecurity news, including: • Santa brings hackers MongoDB memory leaks for Christmas • Vercel pays out a million bucks to improve its React2Shell WAF
How the World Got Owned Episode 1: The 1980s
In this special documentary episode, Patrick Gray and Amberleigh Jack take a historical dive into hacking in the 1980s. Through the words of those that were there, they discuss life on the ARPANET, the 414s hacking group, the Morris Worm, t
Risky Business #819 -- Venezuela (credibly?!) blames USA for wiper attack
In the final show of 2025, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • React2Shell attacks continue, surprising no one • The unholy combination of OAuth consent phishing, social engineering and Azure CL
Risky Biz Soap Box: Graph the planet!
In this sponsored Soap Box edition of the Risky Business podcast, Patrick Gray chats with Jared Atkinson, CTO of SpecterOps, about BloodHound OpenGraph. OpenGraph enumerates attack paths across platforms and services, not just your primary
Risky Business #818 -- React2Shell is a fun one
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • There’s a CVSS 10/10 remote code exec in the React javascript server. JS server? U wot mate? • China is out popping shells with it • Linux
Risky Business #817 -- Less carnage than your usual Thanksgiving
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. It’s a quiet week with Thanksgiving in the US, but there’s always some cyber to talk about: • Airbus rolls out software updates after a cosmic ray bitf
Risky Business #816 -- Copilot Actions for Windows is extremely dicey
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Salesforce partner Gainsight has customer data stolen • Crowdstrike fires insider who gave hackers screenshots of internal systems • Austr
Risky Biz Soap Box: Greynoise knows when bad bugs are coming
In this sponsored Soap Box edition of the podcast, Andrew Morris joins Patrick Gray to talk about how Greynoise can often get a 90 day heads up on serious vulnerabilities. Whether it’s malicious actors doing reconnaissance or the affected v
Risky Business #815 -- Anthropic's AI APT report is a big deal
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Anthropic says a Chinese APT orchestrated attacks using its AI • It’s a day ending in -y, so of course there are shamefully bad Fortinet e
Risky Business #814 -- It's a bad time to be a scam compound operator
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • The KK Park scam compound in Myanmar gets blasted with actual dynamite • China sentences more scammers TO DEATH • While Singapore is optin
