Risky Business

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Alex Stamos to talk through the week’s cybersecurity news, including:

Everyone’s still panicking about “misbehaving” AI models that are pretty much just doing what they’re being told to do

Americans are giving AI agents unfettered access to their bank accounts. What could go wrong?

Last week’s PHP meteor seems to have missed Earth

This week’s Brotli HTTP/2 critical flaw is this week’s meteor

The private key is always 4. This time it’s TLS bugs in GoAhead

Much, much more!

This week’s show is brought to you by Truffle Security. Co-founder and CEO Dylan Ayrey joins James Wilson to chat about scanning GitHub repos and finding more than half a million unique credentials that were never revoked. As Dylan explains, the problem of exposed keys exists everywhere and is only getting worse.

This episode is also available on YouTube



Show notes



OpenAI AI agents demonstrate VM escapes and secret cross-sandbox communication


OpenAi agents disabled safety monitoring, one lied about it


solst/ICE of Astarte (@IceSolst) on X


What I learned from cheating clankers


Unvetted AI agents are accessing US bank accounts


Hiding Capabilities in AI Models


AI is finding bugs faster. Let the market find the fixes


AI Guardrails Aren’t Stopping Criminal Hackers


Andromeda October 2026 Security Incident


Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack


Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber


Hackers got a four-day head start on the PHP2Shell vulnerabilities


Critical HTTP2Shell flaw in Brotli triggers emergency patches


Senators say targeted ads are a security risk. Ad groups say the critics are off base


Alleged Israeli spy company heavily targeted Starlink users, sources say


LiteLLM release pipeline hacked to distribute info-stealer malware


CISA warns attackers are chaining Plex flaws in active Plex2Shell attacks


Abandoned Popcorn Time app exposed millions of devices to RCE attacks


Chrome adds Gemini-powered scam detection and ClickFix warnings


Microsoft Teams is getting context-aware phishing detection


China-nexus actor linked to attack on ConnectWise cloud backup


University of New Mexico hospital diverts ambulances after cyberattack


solst/ICE of Astarte (@IceSolst) on X


GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host security engineer Mark El-Khoury to talk through the week’s cybersecurity news, including:

The PHP foundation is about to release patches for a couple of critical bugs… We’re watching to see if the internet burns down

8 private keys underpinning some CA certs got compromised. The keys only had 8 bits of entropy!

Is the breach-polcalypse upon us?

OpenAI’s inside spy, Anthropic’s safety bill and election influence campaigns are coming for your chatbots

Ukraine drone strikes hit more Russian data centres, this time VK’s in the firing line

Much, much more!

This week’s show is brought to you by Trail of Bits. Principal Security Engineer Anish Naik joins James Wilson to chat about two agent skills plugins, Patching Bugs and Regression Hunt, that the company is releasing off the back of its joint initiative with Open AI, Patch the Planet.

This episode is also available on YouTube



Show notes



The PHP Foundation (@ThePHPF) on X


The Internet goes on high alert after discovery of 8 compromised TLS certs


OpenCode breach exposes users' external AI-provider API keys


DHS to ban DeepSeek from federal civilian agencies


Rob Joyce (@RGB_Lights) on X


OpenAI engineer accused of spying on executives remains in custody


An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office


Anthropic quietly pitches its own AI safety bill to lawmakers


The next election influence campaign will target your AI chatbot


Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site


Thousands of refrigerator devices remain exposed following French cyberattack


AI agents navigated unfamiliar OT systems and moved equipment within minutes


Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem


Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests


Federal bankruptcy courts dealing with outages after contractor cyberattack


Russian social media giant VK faces disruptions after data center drone strike


Data Centers Are War Targets Now


How a Massive Chinese Crime Ring Hacked Staples to Steal Millions


Microsoft Patches More Than 1,400 Security Flaws


GitHub expands malware advisories across eight package ecosystems


Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack


AdFection: How mercenary spyware invades victims’ devices through targeted advertising


CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records


Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day


Drupal patches critical RCE flaws and warns exploits may emerge soon


Palo Alto Networks patches PAN-OS zero-day exploited for root-level code execution


Eight US states sue OpenAI over alleged harms to users


Cyberattack halts work on the Denmark–Germany Fehmarnbelt tunnel


Ransomware groups expand targeting of Palo Alto Networks vulnerability


DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied


Trail of Bits skills plugins

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including:

Sacré bleu! Hackers turn up the heat at French supermarket freezers

ShinyHunters enters “find out” stage

Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild

More models “behave badly” (by… doing exactly what we’re telling them to do)

Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet

Much, much more…

This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work.

This episode is also available on YouTube



Show notes



Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media


Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive


Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer


Hacked FBI data has sensitive information about employees' intelligence roles | reuters.com


Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security


ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer


Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com


Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs


FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com


Ransomware recovery CEO charged over secret ransom payments | BleepingComputer


Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive


Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer


Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media


Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com


FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media


Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer


Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com


Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer


CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer


Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com


An Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunch


OpenAI bots meddled with US government agencies, including SEC and Census | bbc.com


OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.com


Anthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.com


OpenAI agent breached Australian government health website, Albanese says | therecord.media


Doubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.media


OpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.com


OpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.com


AI models may be capable of self-replicating without access to a datacenter |


South Korean officials believe AI agents were used to hack several banks | therecord.media


JadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputer


GLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.com


New bill would create federal investigative body for AI-driven hacks | cyberscoop.com


Court rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars Technica


Apple changes full-disk access permissions to curb abuse from AI agents | arstechnica.com


Google Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputer


Bitget hacked via zero-day in third-party security products | BleepingComputer


Ledger confirms spy chip implant behind wallet crypto thefts | BleepingComputer


Who Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.com


Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.com


New Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputer


Data breach at Denmark’s national population register exposes 8.8 million people | therecord.media


Shares in British clothing company ASOS dive after hackers apparently send push notification | therecord.media


Google halts open-source bug bounty program amid AI spam surge | BleepingComputer


International coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.media


Hackers hijack Google domains after breaching ccTLD registries | BleepingComputer


GoBalance Flaw Lets Attackers Hijack.onion Addresses by Recovering Tor-Format Keys | The Hacker News


Ukraine strikes third Yandex data center, disrupting digital services across Russia | therecord.media


Provably Better Data | Corelight

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with industry legend HD Moore about how his company runZero wound up being used heavily to discover OT devices in enterprise networks.

They also talk about the vulnpocalypse and how frontier lab fearmongering is reminiscent of the collective freakout when HD released the Metasploit exploit framework back in 2003.

This episode is also available on YouTube.



Show notes

THE RISKY BUSINESS WEEKLY SHOW IS NOW ON HIATUS FOR TWO WEEKS AND WILL RETURN OCTOBER 14

On this week’s show Patrick Gray and James Wilson are joined by Adam Boileau to talk through the week’s news, including:

Google’s Gemini finally did some crimes

OpenAI admits more agents did silly things because “alignment”

US Treasury’s Scott Bessent rules out a liability waiver for the frontier labs, saying, roughly: “Lol. Lmao even.”

Jev is Silicon Valley’s “hot dog/not hotdog” app brought to life, and it will really improve security tooling

The FBI and Coast Guard boarded oil tankers after they were allegedly hacked

Much, much more…

This week’s show is brought to you by Thinkst Canary. Founder Haroon Meer joins Patrick to talk about Thinkst’s new deception tools that trick the AI agents that are targeting you. It’s actually hilarious how well deception tech works against hacking agents.

This episode is also available on YouTube



Show notes



Google says its AI model gained unauthorized access to three outside systems | NBC News Tech


OpenAI details more cases of AI agents taking unauthorized actions | BleepingComputer


Researchers escape OpenAI Codex sandbox to run commands on host | BleepingComputer


Hackers breached OpenAI, adding to fever pitch of security and safety concerns | NBC News Tech


Treasury’s Scott Bessent says no liability exemptions for AI labs | Social Signals


Scott Bessent meets with Chinese official on AI safety | NBC News Tech


U.S. proposes exchanging AI safety alerts with China, Bessent says | NBC News Tech


Trump says he’s creating an AI force and appointing a czar amid concerns over the rapidly developing tech | NBC News Tech


AI hallucination of Chinese nuclear components almost led to US military attack | Ars Technica


Cybersecurity experts say AI giants are shutting them out of safety plans | nbcnews.to


What Is Jev? A Guide to TypeSafe AI’s System One Model |


FBI and Coast Guard boarded US-bound oil tankers after signs the ships were hit with cyberattacks | apnews.com


Brevo supply-chain attack injected ClickFix scripts on customer sites | BleepingComputer


Cisco alerts customers to second actively exploited zero-day in as many days | cyberscoop.com


Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia | therecord.media


Nations take action on North Korean IT workers after UN report | therecord.media


North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign | therecord.media


An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang | wired.com


Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals | therecord.media


NightmareStresser DDoS Service Disrupted in International Operation | securityweek.com


Brevo Supply Chain Attack Injects Malware Into 100,000 Websites | securityweek.com


WordPress Click2Shell flaw lets hackers execute PHP on the server | BleepingComputer


ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment | therecord.media


Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data | TechCrunch Security


Early Scattered Spider member pleads guilty to cybercrime spree | cyberscoop.com


CISA promotes a fresh way to deter cyberattackers: Lie to them | Social Signals


Getting agents to tell on themselves