Between Two Nerds: The perfect hacker

More from Risky Bulletin

1. 

   4 Sep 2026 · 10 min

   Risky Bulletin: Russia tells data centers to deploy drone defenses

   Russia tells data centers to deploy drone defenses, Dropbox discloses a security breach, a new spyware wave hits Serbia, and CISA scraps six free cybersecurity assessment programs.

2. 

   3 Sep 2026 · 22 min

   Srsly Risky Biz: China's botnets are worth disrupting

   Tom Uren and James Wilson talk about China’s long-term shift to getting private companies to build botnets for cyberespionage. A disruption effort from the US this week is good news, but China has been using these networks for a surprisingly long time and will rebuild. They also discuss a hack at the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF). It looks like the Qilin ransomware group might have stolen data from the ATF’s CALEA, or lawful intercept system. That’s a big deal! Finally, they discuss efforts to fix US water sector security. Sprinkling free tools on the problem will…

3. 

   2 Sep 2026 · 9 min

   Risky Bulletin: BGP hijack delivers malicious Virtualizor updates

   A BGP hijack delivered malicious Virtualizor updates, the White House launches Project Watershed 250, Indian authorities take down a Telegram doxing bot, and Composer packages deliver iOS badness.

4. 

   31 Aug 2026 · 7 min

   Risky Bulletin: New powers for Dutch intelligence services

   Dutch intelligence services will get new powers, a security expert has been arrested in Israel for hacking, the BTS hacker gets a 20 year sentence in South Korea, and an AfD politician in Germany has been linked to a Russian cybercrime hosting service.

5. 

   30 Aug 2026 · 21 min

   Sponsored: Attackers need to be right more than once

   In this Risky Business sponsored interview, James Wilson chats with Dropzone AI’s founder and CEO Edward Wu to debunk the adage, “an attacker only has to be right once”. Modern intruders need to be successful across multiple steps before actually reaching an organisation’s “crown jewels”. The pair chat about where AI helps attackers, why autonomous post-compromise agents aren’t quite here yet, and how AI can bolster the capacity of security teams when investigating alerts and reducing response times.

6. 

   28 Aug 2026 · 11 min

   Risky Bulletin: Two TeamPCP members arrested in Australia

   Two members of TeamPCP arrested in Australia, Qilin hits the US firearms agency, America seizes two more Chinese botnets, CISA says most cyber activity is opportunistic.

7. 

   2 Oct 2026 · 10 min

   Authorities dismantle KillSec group

   Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts.

8. 

   1 Oct 2026 · 16 min

   Srsly Risky Biz: “Rogue AI” isn’t going anywhere

   Amberleigh Jack and James Wilson chat about OpenAI agents’ recent escapades into Australian government websites. OpenAI has promised to “rebuild trust with Australians” but we’re likely getting a glimpse into the new normal, here. They also discuss how the ShinyHunters hacking group has found itself on law enforcement’s target list after breaching FBI systems. The group played some stupid games and they appear to be in the “stupid prizes” stage. This episode is also available on YouTube

9. 

   30 Sep 2026 · 8 min

   ShinyHunters suspect arrested in the Netherlands

   A ShinyHunters suspect has been arrested in the Netherlands, Apple fixes an iOS zero-day found by Meta, recent Citrix zero-days see mass exploitation within hours and NVIDIA launches an AI sandboxing platform.

10. 

    28 Sep 2026 · 28 min

    Between Two Nerds: The AI crime machine

    In this edition of Between Two Nerds Tom Uren and The Grugq talk about the rise of fully automated LLM-driven hacking campaigns among criminals and even state hacking groups. For those with the right risk appetite, a move fast and break things hacking approach using AI can pay off. This episode is also available on YouTube.

Every episode of Risky Bulletin →