惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Hacker News: Ask HN
Hacker News: Ask HN
H
Heimdal Security Blog
S
Secure Thoughts
Help Net Security
Help Net Security
The Hacker News
The Hacker News
T
Threatpost
T
Troy Hunt's Blog
T
Threat Research - Cisco Blogs
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Simon Willison's Weblog
Simon Willison's Weblog
WordPress大学
WordPress大学
TaoSecurity Blog
TaoSecurity Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
阮一峰的网络日志
阮一峰的网络日志
Security Latest
Security Latest
Forbes - Security
Forbes - Security
The Last Watchdog
The Last Watchdog
Recent Commits to openclaw:main
Recent Commits to openclaw:main
月光博客
月光博客
博客园 - 三生石上(FineUI控件)
A
About on SuperTechFans
C
Cybersecurity and Infrastructure Security Agency CISA
小众软件
小众软件
Microsoft Azure Blog
Microsoft Azure Blog
Google Online Security Blog
Google Online Security Blog
N
Netflix TechBlog - Medium
W
WeLiveSecurity
Google DeepMind News
Google DeepMind News
S
Securelist
Jina AI
Jina AI
酷 壳 – CoolShell
酷 壳 – CoolShell
G
GRAHAM CLULEY
G
Google Developers Blog
aimingoo的专栏
aimingoo的专栏
C
Cisco Blogs
量子位
有赞技术团队
有赞技术团队
雷峰网
雷峰网
Google DeepMind News
Google DeepMind News
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
S
SegmentFault 最新的问题
T
The Exploit Database - CXSecurity.com
MyScale Blog
MyScale Blog
A
Arctic Wolf
T
Tenable Blog
P
Privacy & Cybersecurity Law Blog

Risky Business

Risky Business #840 -- Microsoft walks back researcher threats Risky Business #839 -- TeamPCP stole GitHub's internal repos Risky Business #838 -- GitHub investigates possible breach Soap Box: Where does AI fit into cloud security? Risky Business #837 -- GitHub Actions footgun claims TanStack Risky Business #836 -- You can't patch the bugpocalypse Snake Oilers: Ent AI, Spacewalk and Mondoo Risky Business #835 -- Why the Fast16 malware is badass Risky Business #834 -- Vercel gets owned, Mozilla dumps hundreds of Mythos bugs Risky Business #833 -- The Great Mythos Freakout of 2026 Snake Oilers: Burp AI, Sondera and Truffle Security Risky Business #832 -- Anthropic unveils magical 0day computer God How the World Got Owned Episode 2: The 1990s, Part One Risky Business #831 -- The AI bugpocalypse begins Soap Box: Red teaming AI systems with SpecterOps Risky Business #830 -- LiteLLM and security scanner supply chains compromised Risky Biz Soap Box: It took a decade, but allowlisting is cool again Risky Business #828 -- The Coruna exploits are truly exquisite Risky Business #827 -- Iranian cyber threat actors are down but not out Risky Business #826 -- A week of AI mishaps and skulduggery Risky Biz Soap Box: The lethal trifecta of AI risks Risky Business #825 -- Palo Alto Networks blames it on the boogie Risky Business #824 -- Microsoft's Secure Future is looking a bit wobbly Risky Business #823 -- Humans impersonate clawdbots impersonating humans Risky Business #822 -- France will ditch American tech over security risks Risky Business #821 -- Wiz researchers could have owned every AWS customer Risky Business #820 -- Asian fraud kingpin will face Chinese justice (pew pew!) How the World Got Owned Episode 1: The 1980s Risky Business #819 -- Venezuela (credibly?!) blames USA for wiper attack Risky Biz Soap Box: Graph the planet! Risky Business #818 -- React2Shell is a fun one Risky Business #817 -- Less carnage than your usual Thanksgiving Risky Business #816 -- Copilot Actions for Windows is extremely dicey Risky Biz Soap Box: Greynoise knows when bad bugs are coming Risky Business #815 -- Anthropic's AI APT report is a big deal Risky Business #814 -- It's a bad time to be a scam compound operator Risky Business #813 -- FFmpeg has a point Risky Business #812 -- Alleged Trenchant exploit mole is ex-ASD Risky Business #811 -- F5 is the tip of the crap software iceberg Wide World of Cyber: A deep dive on the F5 hack Risky Biz Soap Box: Why Mastercard is scaling its cybersecurity business Risky Business #810 -- Data extortion attacks have a silver lining Snake Oilers: Realm Security, Horizon3 and Persona Risky Business #809 -- Hackers try to pay a journalist for access to the BBC Risky Business #808 -- Insane megabug in Entra left all tenants exposed Risky Business #807 -- Shai-Hulud npm worm wreaks old-school havoc Risky Biz Soap Box: runZero shakes up vulnerability management Risky Business #806 -- Apple's Memory Integrity Enforcement is a big deal Snake Oilers: Nebulock, Vali Cyber and Cape Risky Business #805 -- On the Salesloft Drift breach and "OAuth soup" Risky Business #804 -- Phrack's DPRK hacker is probably a Chinese APT guy Wide World of Cyber: Microsoft's China Entanglement Risky Business #803 -- Oracle's CSO Mary Ann Davidson quietly departs Risky Biz Soap Box: How to measure vulnerability reachability Risky Business #802 -- Accessing internal Microsoft apps with your Hotmail creds Risky Business #801 -- AI models can hack well now and it's weirding us out Soap Box: Why AI can't fix bad security products Risky Business #800 — The SharePoint bug may have leaked from Microsoft MAPP Risky Business #799 -- Everyone's Sharepoint gets shelled Risky Biz Soap Box: Prowler, the open cloud security platform Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators Risky Business #796 -- With special guest co-host Chris Krebs Soap Box: AI has entered the SOC, and it ain't going anywhere Risky Business #795 -- How The Com is hacking Salesforce tenants Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242 Risky Business #793 -- Scattered Spider is hijacking MX records Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now Risky Biz Soap Box: Push Security's browser-first twist on identity security Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys Wide World of Cyber: How state adversaries attack security vendors Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank Snake Oilers: Pangea, Cosive and Sysdig Risky Business #788 -- Trump targets Chris Krebs, SentinelOne Wide World of Cyber: How the Trump admin is changing the cybersecurity landscape Risky Business #787 -- Trump fires NSA director, CISA cuts inbound Risky Business #786 -- Oracle is lying Soap Box: Knocknoc glues your SSO to your firewalls for Just-in-Time network access Risky Business #785 -- Signal-gate is actually as bad as it looks Risky Business #784 -- GitHub supply chain attack steals secrets from 23k projects Risky Business #783 -- Evil webcam ransomwares entire Windows network Risky Business #782 -- Are the USA and Russia cyber friends now? Risky Business #781 -- How Bybit oopsied $1.4bn Wide World of Cyber: DeepSeek lobs an AI hand grenade Risky Business #780 -- ASD torched Zservers data while admins were drunk Risky Biz Soap Box: Run your own open source IDP with Authentik Risky Business #779 -- DOGE staffer linked to The Com Risky Business #778 -- Musk's child soldiers seize control of FedGov IT systems Risky Business #777 -- It's SonicWall's turn Risky Business #776 -- Trump will flex American cyber muscles Risky Biz Soap Box: Cool compliance tricks with the Island enterprise browser Risky Business #775 -- Cl0p is back, SEC hack disclosures disappoint Wide World of Cyber: SentinelOne's Chris Krebs on Chinese cyber operations Risky Business #774 -- Cleo file transfer appliances under widespread attack Risky Biz Soapbox: Enterprise Yubikeys can now be pre-registered Risky Business #773 -- Cybercriminals are dropping like flies in Russia Risky Business #772 -- Salt Typhoon is truly a national security disaster
Risky Business #829 -- Sneaky lobsters: Why AI is the new insider threat
James Wilson · 2026-03-18 · via Risky Business

Risky Business Podcast

March 18, 2026

Presented by

James Wilson

James Wilson

Technology Editor

Adam Boileau

Adam Boileau

Co-host at large

Patrick Gray

Patrick Gray

CEO and Publisher

On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They discuss:

  • Iran’s Intune-based wiper attack on medical device maker Stryker
  • Qihoo 360’s AI publishes its own wildcard TLS cert private key
  • Instagram is canning its end-to-end encrypted messaging
  • What’s going on with mobile internet access in Moscow?
  • The Xbox One’s bootloader gets voltage glitched into submission
  • Oh Qualys! We love you! (At least, whoever is in the basement writing these beautiful .txt files…)

This week’s episode is sponsored by browser-based detection and response company, Push Security. Researcher Dan Green and Field CTO Mark Orlando join Pat to talk through the InstallFix variant of the *Fix attack technique.

This episode is also available on Youtube.

Your browser does not support the audio element.

Risky Business #829 -- Sneaky lobsters: Why AI is the new insider threat

0:00 / 63:45

Subscribe  

Logo

Push Security Logo

Brought to you by Push Security

Browser-based detection and response

Show notes

Iranian Hacktivists Strike Medical Device Maker Stryker in "Severe" Attack that Wiped Systems

Stryker says it's restoring systems after pro-Iran hackers wiped thousands of employee devices | TechCrunch

Stryker attack raises concerns about role of device management tool | Cybersecurity Dive

Stryker tells SEC that timeline for recovery from cyberattack unknown | The Record from Recorded Future News

How ‘Handala’ Became the Face of Iran’s Hacker Counterattacks | WIRED

U.S Strikes Killed Iranian Cyber Chiefs, But The Hacks Continued

Risky Business Features: Being a Wartime CISO

Supply-chain attack using invisible code hits GitHub and other repositories - Ars Technica

China's biggest cybersecurity company, Qihoo 360 just leaked their own wildcard SSL private key

Emergent Cyber Behavior: When AI Agents Become Offensive Threat Actors - Irregular

Risky Business Features: MCP is Dead

Measuring AI Agents’ Progress on Multi-Step Cyber Attack Scenarios

Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios

What is end-to-end encryption on Instagram | Instagram Help Center

US Lawmakers Move to Kill the FBI’s Warrantless Wiretap Access | WIRED

Website "whitelists" launched in Moscow | Forbes.ru

Exclusive: Foreign hacker in 2023 compromised Epstein files held by FBI, source and documents show | Reuters

Feds say another DigitalMint negotiator ran ransomware attacks and helped extort $75 million | CyberScoop

Researchers disclose vulnerabilities in IP KVMs from four manufacturers - Ars Technica

RE//verse 2026: Hacking the Xbox One by Markus 'doom' Gaasedelen - YouTube

CrackArmor: Multiple vulnerabilities in AppArmor