Risky Bulletin

Latest Episodes:

Between Two Nerds: Set cyberspace ablaze Jun 30, 2026

Show notes

In this edition of Between Two Nerds, Tom Uren and The Grugq discuss whether cyber organisations should actually be separated from Signals Intelligence organisations. The Grugq argues that having cyber expertise subordinate to intelligence collection means that many opportunities are never explored.

This episode is also available on YouTube.

Show notes

All the Shah's Men - Wikipedia

Risky Bulletin: White House asks OpenAI to restrict GPT 5.6 Jun 29, 2026

Show notes

The White House asks OpenAI to keep a tight grip on ChatGPT 5.6, the US Secret Service made some appalling OpSec mistakes, AMD has reintroduced a CPU security feature after consumer backlash, and an Iranian APT operator has been arrested in Montenegro.

Show notes

Risky Bulletin: Microsoft disrupts StegoAd operation

Sponsored: Corelight’s blueprint for AI-era defence Jun 29, 2026

Show notes

In this sponsored interview James Wilson chats with Corelight’s VP of Product Vijit Nair about defence strategies for the AI era. When agents can find and exploit vulnerabilities at machine speed, you need to balance between proactive and reactive measures.

On the proactive side, you need modelling of assets and threats. On the reactive side you’ll need telemetry so you can act quickly if a threat becomes a reality.

Corelight makes NDR hardware that runs a heavily optimised version of the Zeek network monitoring tool. Combined with its Agentic Triage product, customers can detect threats in their networks, and monitor the effectiveness of their mitigation strategies.

Show notes

Risky Bulletin: Operation Endgame dismantles Amadey and StealerC Jun 26, 2026

Show notes

Law enforcement dismantles two more malware operations, Japan’s army used infected USB drives, Anthropic accuses Alibaba of distillation attacks, and Australia finds “digital dynamite” on critical networks.

Show notes

Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC

Srsly Risky Biz: Open weight models make the Mythos debate moot Jun 25, 2026

Show notes

Tom Uren and James Wilson talk about the Five Eyes cyber security agencies warning about the arrival of AI-enabled cyber threats. The call-to-action is driven by the recognition that it is no longer possible to limit AI’s offensive cyber security capabilities to benign actors. The genie is out of the bottle, regardless of export controls on frontier models.

They also discuss the progress of Operation Endgame, the multinational joint operation that has been disrupting the cybercriminal ecosystem. It’s been a great success, but criminal enterprises bounce back. Keeping a lid on cybercrime will require continuous disruption programs.

This episode is also available on YouTube.

Show notes

Risky Bulletin: FortiBleed hacks involved a lot of traffic sniffing Jun 24, 2026

Show notes

The FortiBleed hacks are worse than a credentials leak, a new White House executive order sets out a hard 2031 post quantum cryptography deadline, Meta leaks employee keystroke data, and a third of Samsung and LG TVs act as proxies.

Show notes

Risky Bulletin: The FortiBleed incident is so much worse than a simple credentials leak

Sponsored: Trail of Bits and OpenAI patch the planet Jun 23, 2026

Show notes

In this sponsored interview James Wilson chats with Trail of Bits founder and CEO Dan Guido about its newly announced partnership with OpenAI. Together, they’ve started a new initiative called “Patch the Planet” to support open source maintainers.

Being an open source maintainer is more difficult than ever. Just using frontier models to keep up with all the bug reports isn’t enough. Trail of Bits wants to help maintainers by combining its deep cybersecurity expertise with OpenAI’s GPT 5.5 Cyber.

As Dan points out in this interview, this isn’t just about helping maintainers find and fix bugs. They’re spending just as much time on SDLC improvements, architecture changes, and the foundations needed to make open source sustainable in the AI era.

Show notes

Between Two Nerds: The PRC vs AI Jun 23, 2026

Show notes

In this edition of Between Two Nerds Tom Uren and The Grugq discuss the idea that the People’s Republic of China has mobilised its influence operations against the construction of US data centres and its build out of AI capacity.

This episode is also available on YouTube.

Show notes

Risky Bulletin: Klue breach impacts security firms Jun 22, 2026

Show notes

A data breach at business analytics platform Klue spreads to security firms, a hacker breaches Brazil’s national alert system, North Koreans are behind the Mastra supply chain attack, and a new, unfixable vulnerability has been found in Apple’s A12 and A13 chips.

Show notes

Risky Bulletin: Klue breach impacts security firms

Risky Bulletin: Creds for 74,000 Fortinet devices leaked Jun 19, 2026

Show notes

A LOT of Fortinet creds have leaked online, Canada’s spy agency allowed to remove a botnet from Canadian devices, a supply chain attack hits the Mastra AI framework, and Europol disrupts SocGolish.