Between Two Nerds: Can AI defend critical infrastructure?

More from Risky Bulletin

1. 

   11 Sep 2026 · 10 min

   Risky Bulletin: Anthropic agents went hacking again

   Anthropic agents went hacking again, South Korea increases its data breach fines, Apple notifies three Turkish ministers of mercenary spyware attacks, and CISA is ready to hire 250 staff.

2. 

   10 Sep 2026 · 25 min

   Srsly Risky Biz: America's drivers licence breach is a national security disaster

   Tom Uren and James Wilson talk about how Chinese intelligence services will take advantage of a massive breach of 150 million American drivers licences. They also discuss the steps the US military is taking to counter adtech device tracking. It’s too slow and not enough. Finally, they talk about how often cryptocurrency hackers claim to be white hat hackers. Its ludicrous, but suprisingly often it is a successful strategy. This episode is also available on YouTube

3. 

   9 Sep 2026 · 8 min

   Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

   Ukraine’s top prosecutor resigns amid a scam call center scandal, the US accuses Chinese AI companies of industrial-scale distillation, a cyberattack hits medical practices in Luxembourg, and the Liquid Network attacker returns some stolen Bitcoin, but keeps a $50 million bounty.

4. 

   7 Sep 2026 · 8 min

   Risky Bulletin: BEC campaign steals €35 million from French notaries

   Hackers steal €35 million euros from French notaries, OpenAI agents hacked a German wiki, a new bill will allow the Pentagon to use cyber contractors, and the Five Eyes members tell hacked companies to drop PR spin.

5. 

   6 Sep 2026 · 20 min

   Sponsored: Authentik is rethinking PAM for AI agents

   In this Risky Business sponsored interview, James Wilson chats with Authentik Security CEO Fletcher Heisler about how AI is driving a need for privileged access management to adapt. Fletcher explains Authentik’s approach: each agent has its own identity, begins with no permissions and is tied to a human. They also discuss transferring ownership when employees leave, mitigating risks of agents creating identities for each other, and whether task-based access could eventually be a better fit than clock-controlled access.

6. 

   4 Sep 2026 · 10 min

   Risky Bulletin: Russia tells data centers to deploy drone defenses

   Russia tells data centers to deploy drone defenses, Dropbox discloses a security breach, a new spyware wave hits Serbia, and CISA scraps six free cybersecurity assessment programs.

7. 

   2 Oct 2026 · 10 min

   Authorities dismantle KillSec group

   Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts.

8. 

   1 Oct 2026 · 16 min

   Srsly Risky Biz: “Rogue AI” isn’t going anywhere

   Amberleigh Jack and James Wilson chat about OpenAI agents’ recent escapades into Australian government websites. OpenAI has promised to “rebuild trust with Australians” but we’re likely getting a glimpse into the new normal, here. They also discuss how the ShinyHunters hacking group has found itself on law enforcement’s target list after breaching FBI systems. The group played some stupid games and they appear to be in the “stupid prizes” stage. This episode is also available on YouTube

9. 

   30 Sep 2026 · 8 min

   ShinyHunters suspect arrested in the Netherlands

   A ShinyHunters suspect has been arrested in the Netherlands, Apple fixes an iOS zero-day found by Meta, recent Citrix zero-days see mass exploitation within hours and NVIDIA launches an AI sandboxing platform.

10. 

    28 Sep 2026 · 28 min

    Between Two Nerds: The AI crime machine

    In this edition of Between Two Nerds Tom Uren and The Grugq talk about the rise of fully automated LLM-driven hacking campaigns among criminals and even state hacking groups. For those with the right risk appetite, a move fast and break things hacking approach using AI can pay off. This episode is also available on YouTube.

Every episode of Risky Bulletin →