Risky Business

On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:

Anthropic’s Fable 5 and Mythos 5 get nuked by the US government four days after launch “because security”

Why “guardrails” won’t keep the world safe from your AI doomsday machine

The FISA 702 statute expired, but the spying can (probably) continue!

NPM v12 delivers some protection against supply chain attacks, but not enough.

Microsoft has a series of bugs that prevent Windows Update from … updating

Much, much more!

This episode is also available on YouTube



Show notes



Anthropic suspends new AI models after government directive | NBC News Tech


Anthropic rankles users with safety-first Fable release | NBC News Tech


How a 90-minute White House deadline sparked Silicon Valley’s biggest AI fight | washingtonpost.com


Pete Hegseth (@PeteHegseth) on X | X (formerly Twitter)


David Sacks (@DavidSacks) on X | X (formerly Twitter)


DoW CIO Kirsten Davies (@DoWCIODavies) on X | X (formerly Twitter)


David Shulman (@DavidShulmanFL) on X | X (formerly Twitter)


Controversial FISA spying law expires tonight. The spying will continue. | Ars Technica


GitHub announces npm security changes to tackle supply-chain attacks | BleepingComputer


Why NPM v12 won’t stop supply chain attacks - Risky Business Media | Social Signals


Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks | BleepingComputer


Microsoft patches Exchange Server zero-day exploited in attacks | BleepingComputer


Max severity Ivanti Sentry vulnerability now exploited in attacks | BleepingComputer


CISA warns of another cPanel plugin flaw exploited in attacks | BleepingComputer


Critical Fortinet FortiSandbox flaws now exploited in attacks | BleepingComputer


CISA orders feds to patch actively exploited Ivanti flaw by Sunday | BleepingComputer


CISA to require federal agencies to patch some cyber vulnerabilities within 3 days | therecord.media


Path traversal flaw in AI dev platform Langflow exploited in attacks | BleepingComputer


Microsoft: Some Windows PCs fail to install latest monthly updates | BleepingComputer


Microsoft fixes BitLocker recovery bug on Windows Server 2025 | BleepingComputer


Microsoft fixes Windows update failures linked to WUSA installer | BleepingComputer


New attack turned Microsoft 365 Copilot into 1-click data theft tool | BleepingComputer


Over 73,000 French govt employees affected in Tchap messenger breach | BleepingComputer


Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps | wired.com


FBI disrupts massive AI-powered phishing service using a million URLs | BleepingComputer


Cyberattack shuts down major Australian sugar mills, disrupting harvest | The Record


Drug Sites Hijacked Spotify’s Search Ranking Through Fake Podcasts, Report Finds | wired.com


It Is Trivially Easy to Use Reddit to Manipulate AI Search, Research Suggests | 404.feed.press


Who Runs the Ransomware Group ‘The Gentlemen?’ | krebsonsecurity.com


:brdKnife: (@cR0w@infosec.exchange) | Infosec Exchange

On this week’s show special guest co-host Chris Wade, the founder of Corellium turned Cellebrite CTO, joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news.

They cover:

Microsoft has repos owned, GitHub tokens popped, and a new 0day dropped on them

Meanwhile, researchers are choosing full disclosure instead of engaging MSRC

Meta’s AI support agent allowed a staggering 20,000 accounts to be stolen!

Apple pulls Russia’s MAX messenger from the App Store and disables notifications

Anthropic gives the public our first Mythos-class model but it won’t do cybersecurity work

Stripe and Google Tag Manager used in eCommerce website hack campaign

And much, much more!

This week’s show is brought to you by runZero. HD Moore, runZeros’ founder, drops by in this week’s sponsor interview to talk about the AI vibe shift. Everyone is very worried about getting owned all of a sudden, and it’s really changing the cybersecurity business.

This episode is also available on YouTube.



Show notes



Microsoft Hacked to Deliver Malware to Claude and Gemini Users | 404.feed.press


Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure process | therecord.media


Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges | BleepingComputer


Microsoft breaks Patch Tuesday record with 206 vulnerabilities | CyberScoop


chompie1337 | X


WhatsApp says NSO targeted users with spearfishing attacks in violation of court order | therecord.media


Over 20,000 Instagram accounts stolen in Meta AI support hack | BleepingComputer


New Apple feature automatically changes your compromised passwords | BleepingComputer


Apple removes Russia’s state-backed messaging app Max from its store | therecord.media


Exclusive: Anthropic's Mythos can exploit new flaws in hours |


Anthropic’s new model is Mythos on a leash | CyberScoop


Anthropic Offers Mythos Upgrade for Cyber Partners and a ‘Safe’ Version for the Rest of You | wired.com


OpenClaw AI agent found falling for phishing attacks, spills user data | BleepingComputer


OpenAI unveils Lockdown Mode to protect sensitive data from prompt injection attacks | TechCrunch Security


Hands on with Intelligent Terminal, an AI-powered Windows Terminal | BleepingComputer


Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms | Mandiant


Check Point warns of zero-day flaw targeted by ransomware affiliate | Cybersecurity Dive


ServiceNow discloses security incident exposing customer data | BleepingComputer


Credit card theft campaign abuses Stripe to host stolen payment info | BleepingComputer


CrowdStrike, Palo Alto Networks defy estimates as AI fuels cyber demand | Cybersecurity Dive


The U.S. Military Quietly Turned GPS Into a Global ‘Numbers Station,’ Evidence Suggests | 404.feed.press


New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute | BleepingComputer


Google has quietly cut staff across its Cloud business | businessinsider.com

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Edward Wu, founder of Dropzone, about what AI is doing to detection, response and the SOC more generally.

Dropzone makes AI agents that conduct alert investigations in your SOC, but will the SOC as we know it even exist in the future?

Ed has a deep expertise in SOC tech, having previously led AI/ML detection engineering at Extrahop. This interview is a fantastic look at what the future may bring for detection and response professionals.

This episode is also available on YouTube



Show notes

On this week’s show special guest co-host Andy Boyd joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. Andy is the CEO of REDLattice, which makes the Paragon “intelligence collection and reconnaissance” solution.

They cover:

Adversaries are tracking US troop locations with commercially available location data

A new Signal phishing campaign is going after message backups

404 Media is suing ICE to get its spyware contract with REDLattice (lol)

Microsoft’s tone-deaf response to ‘never justifiable’ zero-day disclosures

Mini Shai-Hulud pops up again just as Glassworm gets shattered

Much, much more

This week’s episode is sponsored by Authentik, an open source identity platform that you can host yourself. In this week’s sponsor interview Authentik’s CEO Fletcher Heisler joins Patrick Gray to talk about how they’re keeping up with the bugpocalypse, and also the work they’re doing to support identities for AI agents.

This episode is also available on YouTube.



Show notes



The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are | wired.com


U.S. says troops were targeted with location data, as senator warns ad industry is a ‘national security threat’ | TechCrunch Security


DOD location data attachment (Wyden) |


Risky Business #830 -- LiteLLM and security scanner supply chains compromised | Risky Business Media


US has seized nearly $1 billion in crypto from Iran, Bessent says |


Russia claims foreign spy agencies hacked officials' phones | therecord.media


Hackers are trying to steal Signal users’ backups in new wave of phishing attacks | TechCrunch Security


We Sued ICE to Get Its Spyware Contract. The Agency Is Redacting Essentially Everything | Social Signals


Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more | therecord.media


A shared responsibility: Protecting customers through Coordinated Vulnerability Disclosure | Social Signals


Microsoft says it will not pursue security researchers after zero-day backlash | therecord.media


IBM’s new $5B initiative will help enterprises rapidly patch open-source vulnerabilities | Social Signals


Federal audit reveals NIST’s NVD is plagued by poor planning and duplication | cyberscoop.com


Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts | krebsonsecurity.com


Critical Windows Netlogon RCE flaw now exploited in attacks | BleepingComputer


CISA adds exploited Palo Alto Networks GlobalProtect flaw to KEV | Cybersecurity Dive


Password manager Dashlane says hackers stole some customers’ password vaults | TechCrunch Security


CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain | cyberscoop.com


Botnet of more than 17 million devices dismantled | arstechnica.com


Chinese-speaking fraud gang could be stealing millions from 2026 World Cup fans | therecord.media


ACCC investigating Olympics ticket scam | ABC


Dozens of Red Hat packages backdoored through its offical NPM channel | arstechnica.com


Solo podcast: A deep dive on TeamPCP - Risky Business Media |


Trump administration releases scaled-back AI executive order | cyberscoop.com


Google security engineer accused of turning confidential search trends into $1.2M win on Polymarket | cyberscoop.com

On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:

TeamPCP breached GitHub’s internal repos. Now what?

Some absolute plonker glued Coruna to a hijacked npm package

CISA is worried about about open source and wants third party submissions for KEV

AI infrastructure is “systemically” insecure

Much, much more

This week’s episode is sponsored by allowlisting vendor Airlock Digital. Airlock’s founders David Cottingham and Daniel Schell join Patrick Gray to talk about Microsoft briefly flagging DigitCert’s root certificate as malware. Fun!

This episode is also available on YouTube



Show notes



GitHub confirms being hacked by TeamPCP, says customer data unaffected | therecord.media


Grafana Labs links GitHub environment breach to TanStack npm supply chain attack | Cybersecurity Dive


Coruna Respawned: Compromised art-template npm Package Leads... | Socket


CISA chief frets about open-source vulnerabilities, delayed security improvements | cyberscoop.com


Anthropic: Mythos finds more than 10,000 software flaws in first month | cyberscoop.com


Pardon MIE? | ironPeak Blog


CISA asks cybersecurity community to alert it to vulnerability exploitation | Cybersecurity Dive


Lawmakers Demand Answers as CISA Tries to Contain Data Leak | krebsonsecurity.com


Google publishes exploit code threatening millions of Chromium users | arstechnica.com


Millions of AI agents imperiled by critical vulnerability in open source package | arstechnica.com


Discord migrates all users to end-to-end encryption by default | The Record


Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption | arstechnica.com


Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada | krebsonsecurity.com


Iran-linked hackers target key US, allied sectors with sophisticated spear-phishing messages | Cybersecurity Dive


FBI warns about fast-growing phishing kit targeting Microsoft 365 users | cyberscoop.com


Analyzing the rise in device code phishing attacks in 2026 | Push Security


Trump Mobile confirms it exposed customers’ personal data, including phone numbers and home addresses | TechCrunch Security


Kash Patel’s clothing brand website shut down after reports it was hacked | TechCrunch Security


Tulsi Gabbard resigns as US director of national intelligence | Social Signals


When Certificate Trust Fails: The DigiCert Code-Signing Incident and Microsoft Defender False Positive |