Risky Business

In this Soap Box episode Patrick Gray chats to Push Security co-founder and CEO Adam Bateman about the benefits of taking a browser-centric approach to security.

By now most Risky Business listeners know that Push sells a browser extension-based product that can reliably prevent phishing, ClickFix and ConsentFix. But what’s next? Where to from here once you’re already in the browser?

Well, Push is expanding into the data loss prevention and secure web gateway product space. Why use a SWG based on 15-year-old technology when an extension can give you an even better security result? Especially when you can drop the drawbacks, like tromboning all your traffic into a random data centre…

This episode is also available on YouTube.



Show notes

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including:

The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess

Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute!

A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking”

An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny
Much, much more!

This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gray to chat about fear around the looming post-quantum cryptography crisis, and how CISOs can use it as an opportunity to clean up house and finally take all the end-of-life products out to pasture.

This episode is also available on YouTube



Show notes



Binance hot wallet heist (Oct 2026) | therecord.media


Binance on X: "29 October Binance Security Incident: Initial Findings and Response Update" / X | X (formerly Twitter)


Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform | therecord.media


Polymarket DebugBear script compromise | The Hacker News


Chainalysis "offensive agentic techniques" breach | BleepingComputer


Trezor warns of suspected crypto-theft implant in hardware wallet | BleepingComputer


Second wave of suspected cyberattacks hits supermarket freezers across Europe | The Record


Amadeus booking data breach | "Data breach" – Google Alert


DHS Icepick personnel data leak | "Data breach" – Google Alert


Google says LLMjacking attacks can rack up $1 million in cloud AI charges | BleepingComputer


Northflank security breach leads to abuse of customers' AI API keys | BleepingComputer


Rikiya Takehi (@rikiyatakehi) on X | X (formerly Twitter)


Russia's AI-powered hacks are causing chaos in Ukraine - Risky Business Media |


Volt Typhoon "Silent Train" network | zetter-zeroday.com


Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware | BleepingComputer


PHP2Shell (CVE-2026-109618/109619) | Cybersecurity Dive


GitLab CVE-2026-97229 CI/CD regex RCE | BleepingComputer


CISA warns of hackers now exploiting critical Node2Shell flaw | BleepingComputer


Critical Linux kernel flaw allows remote root attacks on MPTCP servers | BleepingComputer


Marcus Hutchins (@MalwareTechBlog) on X | X (formerly Twitter)


New Android "SMS of Death" exploit can remotely crash unpatched phones | BleepingComputer


Hackers now scanning systems for recently patched Oracle flaw | BleepingComputer


Ivanti patches two more Connect Secure zero-days chained in attacks | BleepingComputer


Trojanized Claude Code extension (v2.1.313) | Step Security Blog


Germany says lawmakers' iPhones may have been hacked with spyware | TechCrunch Security


Google disrupts million-device XCPE Android malware botnet, bans TV box maker | BleepingComputer


vx-underground (@vxunderground) on X | X (formerly Twitter)

In this edition of the Snake Oilers podcast, three vendors drop by to pitch their products.

Minimal.dev: A sandbox for AI agents! Co-Founder and CEO Jake King explains what the company is and how it works.

Request Rocket: Runtime access control for AI agents and APIs. Founder and CTO Alex Ferguson drops by to talk about the problem the company is trying to solve.

TRM Labs: All-source threat intelligence. Global Strategic Accounts Director Simon Warren talks about the company’s platform Ardence.

This episode is also available on YouTube.



Show notes

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Alex Stamos to talk through the week’s cybersecurity news, including:

Everyone’s still panicking about “misbehaving” AI models that are pretty much just doing what they’re being told to do

Americans are giving AI agents unfettered access to their bank accounts. What could go wrong?

Last week’s PHP meteor seems to have missed Earth

This week’s Brotli HTTP/2 critical flaw is this week’s meteor

The private key is always 4. This time it’s TLS bugs in GoAhead

Much, much more!

This week’s show is brought to you by Truffle Security. Co-founder and CEO Dylan Ayrey joins James Wilson to chat about scanning GitHub repos and finding more than half a million unique credentials that were never revoked. As Dylan explains, the problem of exposed keys exists everywhere and is only getting worse.

This episode is also available on YouTube



Show notes



OpenAI AI agents demonstrate VM escapes and secret cross-sandbox communication


OpenAi agents disabled safety monitoring, one lied about it


solst/ICE of Astarte (@IceSolst) on X


What I learned from cheating clankers


Unvetted AI agents are accessing US bank accounts


Hiding Capabilities in AI Models


AI is finding bugs faster. Let the market find the fixes


AI Guardrails Aren’t Stopping Criminal Hackers


Andromeda October 2026 Security Incident


Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack


Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber


Hackers got a four-day head start on the PHP2Shell vulnerabilities


Critical HTTP2Shell flaw in Brotli triggers emergency patches


Senators say targeted ads are a security risk. Ad groups say the critics are off base


Alleged Israeli spy company heavily targeted Starlink users, sources say


LiteLLM release pipeline hacked to distribute info-stealer malware


CISA warns attackers are chaining Plex flaws in active Plex2Shell attacks


Abandoned Popcorn Time app exposed millions of devices to RCE attacks


Chrome adds Gemini-powered scam detection and ClickFix warnings


Microsoft Teams is getting context-aware phishing detection


China-nexus actor linked to attack on ConnectWise cloud backup


University of New Mexico hospital diverts ambulances after cyberattack


solst/ICE of Astarte (@IceSolst) on X


GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host security engineer Mark El-Khoury to talk through the week’s cybersecurity news, including:

The PHP foundation is about to release patches for a couple of critical bugs… We’re watching to see if the internet burns down

8 private keys underpinning some CA certs got compromised. The keys only had 8 bits of entropy!

Is the breach-polcalypse upon us?

OpenAI’s inside spy, Anthropic’s safety bill and election influence campaigns are coming for your chatbots

Ukraine drone strikes hit more Russian data centres, this time VK’s in the firing line

Much, much more!

This week’s show is brought to you by Trail of Bits. Principal Security Engineer Anish Naik joins James Wilson to chat about two agent skills plugins, Patching Bugs and Regression Hunt, that the company is releasing off the back of its joint initiative with Open AI, Patch the Planet.

This episode is also available on YouTube



Show notes



The PHP Foundation (@ThePHPF) on X


The Internet goes on high alert after discovery of 8 compromised TLS certs


OpenCode breach exposes users' external AI-provider API keys


DHS to ban DeepSeek from federal civilian agencies


Rob Joyce (@RGB_Lights) on X


OpenAI engineer accused of spying on executives remains in custody


An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office


Anthropic quietly pitches its own AI safety bill to lawmakers


The next election influence campaign will target your AI chatbot


Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site


Thousands of refrigerator devices remain exposed following French cyberattack


AI agents navigated unfamiliar OT systems and moved equipment within minutes


Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem


Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests


Federal bankruptcy courts dealing with outages after contractor cyberattack


Russian social media giant VK faces disruptions after data center drone strike


Data Centers Are War Targets Now


How a Massive Chinese Crime Ring Hacked Staples to Steal Millions


Microsoft Patches More Than 1,400 Security Flaws


GitHub expands malware advisories across eight package ecosystems


Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack


AdFection: How mercenary spyware invades victims’ devices through targeted advertising


CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records


Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day


Drupal patches critical RCE flaws and warns exploits may emerge soon


Palo Alto Networks patches PAN-OS zero-day exploited for root-level code execution


Eight US states sue OpenAI over alleged harms to users


Cyberattack halts work on the Denmark–Germany Fehmarnbelt tunnel


Ransomware groups expand targeting of Palo Alto Networks vulnerability


DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied


Trail of Bits skills plugins