惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
博客园 - 司徒正美
WordPress大学
WordPress大学
爱范儿
爱范儿
小众软件
小众软件
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
罗磊的独立博客
博客园_首页
V
V2EX
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
T
Tailwind CSS Blog
大猫的无限游戏
大猫的无限游戏
The Cloudflare Blog
MyScale Blog
MyScale Blog
IT之家
IT之家
H
Help Net Security
Blog — PlanetScale
Blog — PlanetScale
Microsoft Security Blog
Microsoft Security Blog
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Recent Announcements
Recent Announcements
F
Fortinet All Blogs
The GitHub Blog
The GitHub Blog
Y
Y Combinator Blog
人人都是产品经理
人人都是产品经理

Risky Business Media

Srsly Risky Biz: Trump's private hacker memo is the right idea Risky Bulletin: Slovakia finds Russian backdoors on its speed cameras Risky Business #849 -- Trump will unleash contractors on cybercriminals Between Two Nerds: The eye of Sauron James Kettle on inventing new attack techniques with LLMs Risky Bulletin: The EU publishes its upcoming cybersecurity standards Risky Bulletin: US will let private companies carry out offensive cyber ops Soap Box: Zero Trust(ish) Networks Srsly Risky Biz: Data extortion is booming. Hooray! Risky Business #848 -- OpenAI comes clean Risky Bulletin: Russian hackers jump on the fake job interview train Between Two Nerds: The cyber resistance! Risky Bulletin: Two law firms pay giant ransoms Sponsored: Island's expansion to SASE and enterprise AI How private LLM inference actually works Risky Bulletin: A Meta AI model also escaped a testing sandbox Srsly Risky Biz: Being a North Korean hacker is about to be less fun Risky Business #847 -- Oops! Claude's accidental hacking spree Risky Bulletin: Hacker breaches Hungary's State Treasury Between Two Nerds: Hackers vs the state Risky Bulletin: Anthropic models also did the hacky-hacky Sponsored: The intrusion signals hiding in plain sight Risky Bulletin: Crime Stoppers puts bounty on INC ransomware group Srsly Risky Biz: Chipping away at Chinese AI risks Risky Bulletin: Cyberattack disrupts Minnesota water utilities Risky Business #846 -- OpenAI built a fireplace out of wood Benchmarks, borders and the true cost of AI regulation Between Two Nerds: Cyber is people Risky Bulletin: A JSON RCE bug is about to rock the Java world Sponsored: How AI is putting pressure on EDR
Sponsored: What npm 12 fixes… and what it doesn’t
Casey Ellis · 2026-08-17 · via Risky Business Media

Risky Bulletin Podcast

August 17, 2026

Presented by

Casey Ellis

Casey Ellis

Founder, Bugcrowd

In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments.

Your browser does not support the audio element.

Sponsored: What npm 12 fixes… and what it doesn’t

0:00 / 17:54

Logo