Risky Business

View Top 200 Chart

Back to Rankings Page

News
**Risky Business**

Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.

Latest Episodes:

Snake Oilers: Ent AI, Spacewalk and Mondoo May 01, 2026

Show notes

In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products:

Ent AI: Co-founder Brandon Dixon pitched Ent, an intent-aware, AI-powered endpoint security control.
Spacewalk AI: Founders Chris Fuller and Tim Wenzlau pitch Spacewalk, an AI-powered incident response platform.
Mondoo: Co-founder Dominik Richter pitches Mondoo, an AI-powered “service as software” in the vulnerability management space.

This episode is also available on YouTube.

Show notes

Risky Business #835 -- Why the Fast16 malware is badass Apr 29, 2026

Show notes

On this week’s show, Patrick Gray and James Wilson are joined by special guest-host Dmitri Alperovitch. They discuss the week’s cybersecurity news, including:

The US government is mad as hell about Chinese firms stealing American AI technology
Dmitri has an opinion or two about the US selling Nvidia chips to China
Speaking of Chinese AI, Kimi’s new 2.6 is very interesting
The US sanctions a Cambodian senator for earning mega bucks through scam compounds
And a ransomware family is promoting itself as being … quantum-safe?

This week’s show is sponsored by Trail of Bits. CEO and co-founder Dan Guido chats to Pat about how private inference works and Trail of Bits’ audit of WhatsApp’s private AI setup.

This episode is also available on Youtube.

Show notes

Risky Business #834 -- Vercel gets owned, Mozilla dumps hundreds of Mythos bugs Apr 22, 2026

Show notes

On this week’s show, Patrick Gray and James Wilson are joined by special guest The Grugq. They discuss the week’s cybersecurity news, including:

Vercel got owned, and there’s a few infostealer and compromised employee dots to connect
Mozilla used Mythos to find 271 bugs, which feels like a sign of the bug-pocalypse
Speaking of the bug-pocalypse, is that why NIST is noping out of enriching a bunch of bugs?
The NSA is using Mythos even though the government did that whole Anthropic blacklisting thing
And DDos attacks hit a couple of smaller-player socials

This week’s episode is sponsored by Permiso. Ian Ahl chats to Pat about the subtle signals Permiso uses to detect ShinyHunters-style activity in cloud and on-prem environments.

This episode is also available on Youtube.

Show notes

Risky Business #833 -- The Great Mythos Freakout of 2026 Apr 15, 2026

Show notes

On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:

Everyone has an opinion about Claude Mythos… even though almost nobody has used it yet
CISA adds a 2009 Excel bug to the KEV list, u wot?
Adobe also parties like it’s the 2000s, and fixes an Acrobat Reader bug
Disgraced former Trenchant exec Peter Williams’ sob story fails to resonate with … anyone
Remember those crosswalk buttons hacked to play audio mocking Trump and Zuck? They were “secured” by the password: 1234.

This week’s episode is sponsored by mobile network operator, Cape. Ajit Gokhale talks with James about the ways to get being a telco right when you’re starting from scratch and solving the security problems of 2026.

This episode is also available on Youtube.

Show notes

Snake Oilers: Burp AI, Sondera and Truffle Security Apr 10, 2026

Show notes

In this edition of the Snake Oilers podcast three vendors stop by to pitch the audience on their products:

Burp AI and DAST: The founder of PortSwigger and creator of legendary security software Burp Suite, Dafydd Stuttard, drops by to pitch listeners on Burp AI and Burp Suite DAST.
Sondera: Josh Devon talks about Sondera, a technology designed to intervene when AI models start doing the wrong thing by statefully tracking their trajectories. This isn’t a permissions suite for AI agents, it’s a way to stick agents in a harness and make sure they adhere to hard policy boundaries.
Truffle Security: Dylan Ayrey, the founder of Truffle Security, joins Risky Business again to talk through the latest bells and whistles in Trufflehog, a security tool that searches for exposed secrets and validates them. The Truffle team has done a lot of work on the remediation part of their product over the last few years, and Dylan tells us all about it!

This episode is also available on YouTube

Show notes

Risky Business #832 -- Anthropic unveils magical 0day computer God Apr 08, 2026

Show notes

On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:

Anthropic’s new Mythos model hunts bugs and chains exploits together so well that… you cant have it…
…Unless you’re one of their Project Glasswing partners
The world isn’t short on bugs, though. F5, Fortinet, Progress ShareFile, and TrueConf are all getting rekt by humans
GPU Rowhammering goes in the GPU, past the IOMMU and back into the host-side Nvidia driver
North Korea is spending serious time and money on its crypto hacking
Just when the US needs CISA most, they slash its budget some more!

This week’s episode is sponsored by identity verification firm, Persona. Tying digital actions to actual human identities isn’t just for banking know-your-customer any more. Persona’s Benjamin Chait says know-your-staff checks belong in high-value flows inside your organisation, too.

This episode is also available on Youtube.

Show notes

How the World Got Owned Episode 2: The 1990s, Part One Apr 03, 2026

Show notes

In this special documentary episode, Patrick Gray and Amberleigh Jack take a look back at hacking throughout the 1990s, from the feel-good vibes of the early hacking communities to the antics of young hackers who wound up on the run from the FBI.

Part one features recollections from:

Jeff Moss (The Dark Tangent), DefCon and Black Hat founder
Chris Wysopal (Weld Pond), L0pht member, co-founder, @Stake
Kevin Poulsen (Dark Dante), 1990s hacker turned journalist
Elias Levy (Aleph One), author of Smashing the Stack for Fun and Profit, Phrack, 1996

How the World Got Owned is produced in partnership with SentinelOne.

Show notes

Risky Business #831 -- The AI bugpocalypse begins Apr 01, 2026

Show notes

On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover:

Those pesky North Koreans shim a backdoor into a 100M-downloads-a-week npm package
TeamPCP appear to have ransacked Cisco’s source and cloud environments
AI is getting legitimately good at being told to “just go find some 0day in this”
Kaspersky says Coruna and Triangulation do share code lineage
Iranian hackers dump Kash Patel’s gmail spool
Oh, and of course there’s a Citrix Netscaler memory leak being exploited in the wild

This week’s episode is sponsored by Dropzone AI, who make automated AI SOC analysts. Head honcho Ed Wu explains how they’ve built pre-canned ‘hunt packs’ to lead the AI off into your environment to find weird, interesting and security relevant things.

This episode is also available on Youtube.

Show notes

Soap Box: Red teaming AI systems with SpecterOps Mar 27, 2026

Show notes

In this sponsored Soap Box edition of the show, Patrick Gray and James Wilson talk about red teaming AI systems with Russel Van Tuyl, Vice President of Services at elite penetration testing firm SpecterOps.

SpecterOps is the company behind attack path enumeration tool Bloodhound and Bloodhound Enterprise, but they’re also a pentest and red teaming shop with world class expertise in popping shells on all sorts of interesting systems in all sorts of interesting places.

This episode is also available on Youtube.

Show notes

Risky Business #830 -- LiteLLM and security scanner supply chains compromised Mar 25, 2026

Show notes

On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They talk through:

TeamPCP’s supply chain attack on Github, and they threw in an anti-Iran wiper, because why not?!
Anthropic hooks up its models to just… use your whole computer
After Stryker’s Very Bad Day, CISA says maybe add some more controls around your Intune?
Another iOS exploit kit shows up in the cyber bargain-bin
The FTC decides to ban… all new home routers?! U wot m8?!
Supermicro founder was personally sanction-busting Nvidia GPUs into China?!

This week’s episode is sponsored by enterprise browser maker, Island. Chief Customer Officer Bradon Rogers joins Pat to explain how its customers are using Island to control the use of personal AI services in regulated industries.

This episode is also available on Youtube.