惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

博客园 - 叶小钗
D
Docker
GbyAI
GbyAI
Y
Y Combinator Blog
Google DeepMind News
Google DeepMind News
G
Google Developers Blog
P
Proofpoint News Feed
云风的 BLOG
云风的 BLOG
雷峰网
雷峰网
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Stack Overflow Blog
Stack Overflow Blog
WordPress大学
WordPress大学
小众软件
小众软件
Engineering at Meta
Engineering at Meta
酷 壳 – CoolShell
酷 壳 – CoolShell
I
InfoQ
B
Blog
H
Help Net Security
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
博客园 - 聂微东
The GitHub Blog
The GitHub Blog
A
About on SuperTechFans
B
Blog RSS Feed
Microsoft Security Blog
Microsoft Security Blog

Risky Business

Risky Business #840 -- Microsoft walks back researcher threats Risky Business #839 -- TeamPCP stole GitHub's internal repos Risky Business #838 -- GitHub investigates possible breach Soap Box: Where does AI fit into cloud security? Risky Business #837 -- GitHub Actions footgun claims TanStack Risky Business #836 -- You can't patch the bugpocalypse Snake Oilers: Ent AI, Spacewalk and Mondoo Risky Business #835 -- Why the Fast16 malware is badass Risky Business #834 -- Vercel gets owned, Mozilla dumps hundreds of Mythos bugs Risky Business #833 -- The Great Mythos Freakout of 2026 Snake Oilers: Burp AI, Sondera and Truffle Security Risky Business #832 -- Anthropic unveils magical 0day computer God How the World Got Owned Episode 2: The 1990s, Part One Risky Business #831 -- The AI bugpocalypse begins Soap Box: Red teaming AI systems with SpecterOps Risky Business #830 -- LiteLLM and security scanner supply chains compromised Risky Business #829 -- Sneaky lobsters: Why AI is the new insider threat Risky Biz Soap Box: It took a decade, but allowlisting is cool again Risky Business #828 -- The Coruna exploits are truly exquisite Risky Business #827 -- Iranian cyber threat actors are down but not out Risky Business #826 -- A week of AI mishaps and skulduggery Risky Biz Soap Box: The lethal trifecta of AI risks Risky Business #825 -- Palo Alto Networks blames it on the boogie Risky Business #824 -- Microsoft's Secure Future is looking a bit wobbly Risky Business #823 -- Humans impersonate clawdbots impersonating humans Risky Business #822 -- France will ditch American tech over security risks Risky Business #821 -- Wiz researchers could have owned every AWS customer Risky Business #820 -- Asian fraud kingpin will face Chinese justice (pew pew!) How the World Got Owned Episode 1: The 1980s Risky Business #819 -- Venezuela (credibly?!) blames USA for wiper attack
Risky Business #807 -- Shai-Hulud npm worm wreaks old-sch...
Adam Boileau · 2025-09-17 · via Risky Business

Risky Business Podcast

September 17, 2025

Presented by

Adam Boileau

Adam Boileau

Co-host at large

Patrick Gray

Patrick Gray

CEO and Publisher

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

  • Shai-Hulud worm propagates via npm and steals credentials
  • Jaguar Land Rover attack may put smaller suppliers out of business
  • Leaked data emerges from the vendor behind the Great Firewall of China
  • Vastaamo hacker walks free while appeal is underway
  • Why is a senator so mad about Kerberos?

This week’s episode is sponsored by Knocknoc. Chief exec Adam Pointon joins to talk through the surprising number of customers that are using Knocknoc’s identity-to-firewall glue to protect internal services and networks.

This week’s episode is also available on Youtube.

Your browser does not support the audio element.

Risky Business #807 -- Shai-Hulud npm worm wreaks old-school havoc

0:00 / 53:19

Subscribe  

Logo

Knocknoc Logo

Brought to you by Knocknoc

Knocknoc removes the attack surface of your assets.

Show notes

Self-Replicating Worm Hits 180+ Software Packages – Krebs on Security

Jaguar Land Rover: Some suppliers 'face bankruptcy' due to hack crisis

Jaguar Land Rover production shutdown could last until November

U.S. Investors, Trump Close In on TikTok Deal With China - WSJ

U.S. Investors, Trump Close In on TikTok Deal With China - WSJ

How China’s Propaganda and Surveillance Systems Really Operate | WIRED

Mythical Beasts: Diving into the depths of the global spyware market - Atlantic Council

Hacker convicted of extorting 20,000 psychotherapy victims walks free during appeal | The Record from Recorded Future News

US national charged in Finnish psychotherapy center extortion | The Record from Recorded Future News

BreachForums administrator given three-year prison stint after resentencing | The Record from Recorded Future News

Microsoft, Cloudflare disrupt RaccoonO365 credential stealing tool run by Nigerian national | The Record from Recorded Future News

Senator blasts Microsoft for making default Windows vulnerable to “Kerberoasting” - Ars Technica

Exclusive: US warns hidden radios may be embedded in solar-powered highway infrastructure | Reuters

Israel announces seizure of $1.5M from crypto wallets tied to Iran | TechCrunch