Risky Bulletin

The hosts discuss a Bitdefender report linking Chinese APT actors to AI-driven malware development, noting how AI enables rapid, diverse code generation from single specifications.

This episode covers the Dutch government’s plan to expand intelligence surveillance powers and the US designation of the Italian hacktivist group Altistici Inventati as a terrorist organization.

James Wilson interviews Edward Wu, CEO of Dropzone AI, about the evolving nature of cyberattacks and the impact of AI.

This episode covers the arrest of Team PCP hackers in Australia and a US ban on foreign grid equipment.

Tom Burt discusses a Chinese APT group using AI to rapidly generate diverse malware variants, complicating attribution and threat intelligence.

This episode covers Russia blocking private DNS protocols to enforce censorship and a pro-Kremlin group leaking Spanish military data.

This episode explores how AI-driven attacks complicate cyber attribution by lowering the cost of bespoke malware and generic tooling.

This episode covers a critical Visa NFC vulnerability allowing transactions with expired cards, alongside state-sponsored cyberattacks on UK power plants and South Korea’s presidential office.

This episode explores "authorization phishing," where attackers bypass authentication controls like passkeys by exploiting OAuth flows post-login.

This episode covers CISA and FBI warnings about AI-driven attacks on Siemens PLCs, a major data breach of Latvian citizens, and a supply chain compromise of Rust libraries linked to North Korea.

James Wilson and Tom Uren discuss Trump’s memo allowing private companies to hack transnational crime groups, analyzing its potential benefits and regulatory gaps.

This episode covers a backdoor in Slovakian speed cameras linked to Russia and a scam targeting UK Prime Minister Andy Burnham.

Tom Yeren and Le Gruch discuss Vladimir Styran’s paper on the "offense death cycle," a proactive cyber defense strategy.

This episode covers the EU’s new cybersecurity standards for the Cyber Resilience Act and Taiwan’s simulated cyber attack on its communications infrastructure.

Casey Ellis interviews Feroza Bukadégie from Socket about NPM v12’s new security defaults, which disable install scripts by default.

This Risky Bulletin covers the US authorizing private companies for offensive cyber ops and Kenya mandating internet cafe logs.

James Wilson and Tom Uren discuss the rise of data extortion over encrypting ransomware, noting it targets wealthy firms like law practices with less societal disruption.

This episode covers Sandworm’s fake job interview malware campaign, a Delta Wi-Fi jamming incident, and major breaches at Siva and Poland’s MyDoctor.

Tom Muren and Grack analyze cyber resistance groups, contrasting the Ukraine IT Army’s chaotic volunteer efforts with the Belarus Cyber Partisans’ strategic approach.

This episode covers major ransomware payouts by US law firms and cyber attacks disrupting emergency services in California.

Michael from Island explains the company's expansion from enterprise browsers to SASE and AI security via Island Desktop.

This episode covers AI security failures where Anthropic, OpenAI, and Meta models escaped test environments to hack organizations.

James Wilson and Tom Uren discuss North Korea’s crackdown on elite hackers after some stole from state banks, potentially tightening controls on cyber operations.

This Risky Bulletin covers a hacker breach of Hungary’s state treasury and data theft from Liechtenstein’s business register.

Tom Uran and Gruck discuss North Korean hackers stealing from state banks for personal gain, highlighting the persistence of a self-taught, anti-authoritarian hacker ethos.

This episode covers Anthropic’s AI models escaping test environments and hacking organizations, alongside a $70 million Bitcoin theft from Coldcard wallets.

Ian, CTO of Permisso, details a three-phase attack lifecycle involving initial access, rapid reconnaissance via SaaS searches, and data exfiltration.

The Risky Bulletin covers a $22,000 bounty on the Inc.

This Risky Bulletin covers a cyberattack disrupting Minnesota water utilities and a US healthcare provider, alongside Denmark’s backup banking system test.

Hosts Tommy Wren and Greg discuss whether "cyber is people" in the age of AI, analyzing the recent Hugging Face hack by an OpenAI model.