Risky Bulletin

Latest Episodes:

Between Two Nerds: Why AI will mean infinite bugs Oct 20, 2026

Show notes

In this edition of Between Two Nerds Tom Uren and The Grugq discuss whether the rise of AI coding will result in more or less bugs and whether it will ultimately make software more secure.

This episode is also available on YouTube.

Show notes

Risky Bulletin: Linux patches PwnEscape KVM vulnerability Oct 19, 2026

Show notes

A serious vulnerability lets attackers escape Kernel-based virtual machines, OpenCode users become collateral damage in a distillation attack, supply chain incidents hit AOMEI and ConnectWise and Intel will discontinue SGX.

Show notes

Risky Bulletin: PwnEscape vulnerability lets you escape KVM

Sponsored: Agents don’t care about human ideas of right and wrong Oct 19, 2026

Show notes

In this Risky Business sponsored interview James Wilson chats with Sondera co-founder and CEO, Josh Devon, about how AI agents are highly capable, but they’re not the best rule followers or decision makers.

The pair find themselves in the philosophical weeds about why agents lack the ability to determine, or care about, right from wrong before getting into how Sondera’s autoformalisation, that gives specific behaviour guardrails to agents, can help.

Show notes

Risky Bulletin: DataSuckers suspects arrested in Russia Oct 16, 2026

Show notes

Three DataSuckers hacking group suspects arrested in Russia, Al Jazeera employees targeted with Candiru spyware, the US disrupts 40 North Korean laptop farms, and an OpenAI employee was arrested for planting a spy device.

Show notes

Risky Bulletin: Russia arrests DataSuckers hacking group

Srsly Risky Biz: Russia's digital detox boomerang Oct 15, 2026

Show notes

Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for Ukraine’s retaliatory strikes. Karma!

They also discuss how open-weight models are getting good at cyber tasks while safeguards are easily bypassed. There is no chance of international regulation that will rein in these models, so it is time to loosen cyber safety restrictions on American frontier models.

This episode is also available on YouTube

Show notes

Risky Bulletin: Spyware chip found in Ledger crypto-wallets Oct 14, 2026

Show notes

Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in multiple countries following a cyberattack, and the EU wants smart glasses to beep loudly when they’re recording.

Show notes

Risky Bulletin: Spyware chip found in Ledger crypto-wallets

Between Two Nerds: The FBI and ShinyHunters are the same Oct 13, 2026

Show notes

In this edition of Between Two Nerds Tom Uren and The Grugq examine how ShinyHunters and the FBI both deceived themselves into believing they were immune to cyber threats.

This episode is also available on YouTube.

Show notes

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan Oct 12, 2026

Show notes

Two ShinyHunters suspects arrested in Jordan and the US, hackers breach TLD registrars to get valid Google certs, Japanese authorities arrest a Qilin ransomware member and Google suspends its open-source bug bounty program after a flood of AI bug reports.

Show notes

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

Sponsored: AI is attacking… it needs to defend, too Oct 12, 2026

Show notes

In this Risky Business sponsored interview James Wilson chats with Prowler’s founder and CEO Toni de la Fuente about how AI now allows pretty much anyone to vibe-code “killer apps”. These custom apps are often internal for organisations and hosted on the cloud.

The pair discuss why developers need to focus on security on top of app functionality and how Prowler can work in parallel with apps and agents to help secure, and continuously assess, cloud infrastructure.

Show notes

Authorities dismantle KillSec group Oct 02, 2026

Show notes

Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts.