惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

The GitHub Blog
The GitHub Blog
I
InfoQ
U
Unit 42
WordPress大学
WordPress大学
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Apple Machine Learning Research
Apple Machine Learning Research
J
Java Code Geeks
月光博客
月光博客
D
Docker
Stack Overflow Blog
Stack Overflow Blog
D
DataBreaches.Net
阮一峰的网络日志
阮一峰的网络日志
Blog — PlanetScale
Blog — PlanetScale
V
Visual Studio Blog
博客园 - 聂微东
A
About on SuperTechFans
腾讯CDC
Jina AI
Jina AI
Microsoft Azure Blog
Microsoft Azure Blog
GbyAI
GbyAI
博客园 - 【当耐特】
罗磊的独立博客
博客园 - 三生石上(FineUI控件)
M
MIT News - Artificial intelligence

Risky Business Media

Srsly Risky Biz: Trump's private hacker memo is the right idea Risky Bulletin: Slovakia finds Russian backdoors on its speed cameras Risky Business #849 -- Trump will unleash contractors on cybercriminals Between Two Nerds: The eye of Sauron James Kettle on inventing new attack techniques with LLMs Risky Bulletin: The EU publishes its upcoming cybersecurity standards Risky Bulletin: US will let private companies carry out offensive cyber ops Soap Box: Zero Trust(ish) Networks Srsly Risky Biz: Data extortion is booming. Hooray! Risky Business #848 -- OpenAI comes clean Risky Bulletin: Russian hackers jump on the fake job interview train Between Two Nerds: The cyber resistance! Risky Bulletin: Two law firms pay giant ransoms Sponsored: Island's expansion to SASE and enterprise AI How private LLM inference actually works Risky Bulletin: A Meta AI model also escaped a testing sandbox Srsly Risky Biz: Being a North Korean hacker is about to be less fun Risky Business #847 -- Oops! Claude's accidental hacking spree Risky Bulletin: Hacker breaches Hungary's State Treasury Between Two Nerds: Hackers vs the state Risky Bulletin: Anthropic models also did the hacky-hacky Sponsored: The intrusion signals hiding in plain sight Risky Bulletin: Crime Stoppers puts bounty on INC ransomware group Srsly Risky Biz: Chipping away at Chinese AI risks Risky Bulletin: Cyberattack disrupts Minnesota water utilities Risky Business #846 -- OpenAI built a fireplace out of wood Benchmarks, borders and the true cost of AI regulation Between Two Nerds: Cyber is people Risky Bulletin: A JSON RCE bug is about to rock the Java world Sponsored: How AI is putting pressure on EDR
Sponsored: What npm 12 fixes… and what it doesn’t
Casey Ellis · 2026-08-17 · via Risky Business Media

Risky Bulletin Podcast

August 17, 2026

Presented by

Casey Ellis

Casey Ellis

Founder, Bugcrowd

In this Risky Business sponsored interview, Casey Ellis chats with Socket founder Feross Aboukhadijeh about npm 12’s move to disable install scripts by default. Attackers are already shifting payloads into package source code, and Feross explains why teams need to understand what third-party code actually does before allowing it into their environments.

Your browser does not support the audio element.

Sponsored: What npm 12 fixes… and what it doesn’t

0:00 / 17:54

Logo