Risky Bulletin

Latest Episodes:

Sponsored: Island's expansion to SASE and enterprise AI Aug 10, 2026

Show notes

In this Risky Business sponsored interview, Catalin Cimpanu talks with Michael Leland, Field CTO at Island, about the company’s seamless expansion into SASE and enterprise AI.

Show notes

About Michael Leland

Risky Bulletin: A Meta AI model also escaped a testing sandbox Aug 07, 2026

Show notes

A Meta AI model also escaped a testing sandbox, a cyberattack disrupts ports in North Carolina, the Philippines will establish a cybersecurity agency, and a Ransom Cartel admin gets 16 years in prison.

Show notes

Risky Bulletin: Meta's AI joins Anthropic and OpenAI in the hacky-hacky

Srsly Risky Biz: Being a North Korean hacker is about to be less fun Aug 06, 2026

Show notes

Tom Uren and James Wilson talk about North Korea losing control over some of its hacker workforce. Expect some tightening of controls and oversight, and perhaps even a reduction in the country’s ransomware operations.

They also discuss escalating attacks on American water infrastructure. Although the impact of these attacks is relatively minor so far, the US government has been slow to respond from a political perspective.

This episode is also available on YouTube

Show notes

Risky Bulletin: Hacker breaches Hungary's State Treasury Aug 05, 2026

Show notes

A hacker breached Hungary’s State Treasury, Russia will mandate 40 apps on all smartphones next year, hackers steal Liechtenstein’s business database, and an AI agent got real CVEs for hallucinated vulnerability reports.

Show notes

Risky Bulletin: Hacker breaches Hungary's State Treasury

Between Two Nerds: Hackers vs the state Aug 04, 2026

Show notes

In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether hacker culture is inherently anti-authoritarian and how different states get their country’s hackers to work for the state.

This episode is also available on YouTube.

Show notes

Risky Bulletin: Anthropic models also did the hacky-hacky Aug 03, 2026

Show notes

Anthropic models also did the hacky-hacks, Coldcard was hacked for $70 million in Bitcoin, npm adds publish-time malware scanning, and Russia is behind the recent hotel WiFi hacks.

Show notes

Risky Bulletin: Russia is behind the recent hotel WiFi hacks

Sponsored: The intrusion signals hiding in plain sight Aug 03, 2026

Show notes

In this sponsored interview James Wilson chats with Permiso CTO Ian Ahl about detecting ShinyHunters-style attackers as they move through cloud and SaaS environments.

Ian explains how ordinary-looking events such as a password reset, a new MFA device, unusual searches and a first-time AWS role assumption can combine to reveal an intrusion. Permiso’s platform connects these signals across identity providers, cloud platforms and SaaS applications. They also discuss how AI is helping attackers move from initial access to extortion in just four hours.

Show notes

Risky Bulletin: Crime Stoppers puts bounty on INC ransomware group Jul 31, 2026

Show notes

A non-profit puts a $22,000 bounty on the INC ransomware group, hackers breach the UK Department for Education, Russia charges Telegram founder Pavel Durov, and the FCC bans foreign robots and power inverters.

Show notes

Risky Bulletin: Non-profit offers $22,000 bounty for INC ransomware group

Srsly Risky Biz: Chipping away at Chinese AI risks Jul 30, 2026

Show notes

Tom Uren and James Wilson talk about open-weight AI models and distillation. These topics have been subject to a lot of US government attention in recent weeks, but let’s not forget that America’s overriding goal is to remain ahead of China in the AI race. There are better ways to do that than overindexing on distillation.

They also discuss Iranian attacks on US critical infrastructure. Given that the war in Iran is unpopular, incidents that make headlines without causing serious impact are perfectly calibrated.

This episode is also available on YouTube

Show notes

Risky Bulletin: Cyberattack disrupts Minnesota water utilities Jul 29, 2026

Show notes

A cyberattack has disrupted water utilities in more than 30 communities in Minnesota, Denmark tests a secondary banking system in case of a cyberattack, North Korea arrests bank hackers, and a new Chinese cyber contractor has been identified.