Risky Business #855 -- ShinyHunters done sowing, enters reaping phase
Summary
Risky Business hosts Patrick Gray, James Wilson, and Brad Arkin analyze the hacking of French supermarket freezers and a cyber incident at Ahold Delhaize, discussing potential Russian chaos campaigns and supply chain impacts. The episode covers the FBI’s aggressive crackdown on the Shiny Hunters group following their breach of sensitive personnel data, alongside a massive theft from the Defense Manpower Data Center. The hosts also critique the current AI landscape, dismissing theoretical self-replication fears in favor of real-world harms like agentic bank hacks and benchmark-driven model b…
Topics discussed
Intro, guest Brad Arkin, and Corelight sponsor
Host location update from Singapore
European supermarket cyber incident and supply chain impact
Attribution speculation: LulzSec, Russia, or ransomware
Ahold Delhaize cyber incident in Europe
Shiny Hunters arrests and FBI investigation progress
FBI breach: internal politics and lack of will
FBI data breach via Oracle PeopleSoft and file transfer
Technical analysis of FBI breach and WAF bypasses
Ransomware recovery CEO arrest and other news
Citrix, Zimbra, and Atlassian zero-day exploitation wave
Patch volume vs. attack volume and attack surface reduction
Network controls and AI-assisted hacking workflows
AI agents filling visa forms and OSWorld benchmark
OpenAI agent claims and Wikipedia scraping incidents
Anthropic blog on self-replicating AI models
Russian use of AI agents in Ukraine
GLM 5.3 vs. Mythos model capability comparison
Disbandment of CSRB and legal challenges
Apple macOS full disk access and agent compatibility
Ledger hardware wallet supply chain trojans
Spectre V2, Denmark breach, and Google bug bounty
Flax Typhoon seizure and social media bot volume
Corelight interview: Data quality in agentic SOC
Listen ad-free on Castria