Risky Bulletin: Russia tells data centers to deploy drone defenses

More from Risky Bulletin All episodes →

1. 

   10 Sep 2026 · 25 min

   Srsly Risky Biz: America's drivers licence breach is a national security disaster

   Tom Uren and James Wilson talk about how Chinese intelligence services will take advantage of a massive breach of 150 million American drivers licences. They also discuss the steps the US military is taking to counter adtech device tracking. It’s too slow and not enough. Finally, they talk about how often cryptocurrency hackers claim to be white hat hackers. Its ludicrous, but suprisingly often it is a successful strategy. This episode is also available on YouTube

2. 

   9 Sep 2026 · 8 min

   Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

   Ukraine’s top prosecutor resigns amid a scam call center scandal, the US accuses Chinese AI companies of industrial-scale distillation, a cyberattack hits medical practices in Luxembourg, and the Liquid Network attacker returns some stolen Bitcoin, but keeps a $50 million bounty.

3. 

   7 Sep 2026 · 27 min

   Between Two Nerds: Can AI defend critical infrastructure?

   In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether AI will help cyber defence in critical infrastructure and organisations that are below the cyber poverty line. This episode is also available on YouTube.

4. 

   7 Sep 2026 · 8 min

   Risky Bulletin: BEC campaign steals €35 million from French notaries

   Hackers steal €35 million euros from French notaries, OpenAI agents hacked a German wiki, a new bill will allow the Pentagon to use cyber contractors, and the Five Eyes members tell hacked companies to drop PR spin.

5. 

   6 Sep 2026 · 20 min

   Sponsored: Authentik is rethinking PAM for AI agents

   In this Risky Business sponsored interview, James Wilson chats with Authentik Security CEO Fletcher Heisler about how AI is driving a need for privileged access management to adapt. Fletcher explains Authentik’s approach: each agent has its own identity, begins with no permissions and is tied to a human. They also discuss transferring ownership when employees leave, mitigating risks of agents creating identities for each other, and whether task-based access could eventually be a better fit than clock-controlled access.

6. 

   3 Sep 2026 · 22 min

   Srsly Risky Biz: China's botnets are worth disrupting

   Tom Uren and James Wilson talk about China’s long-term shift to getting private companies to build botnets for cyberespionage. A disruption effort from the US this week is good news, but China has been using these networks for a surprisingly long time and will rebuild. They also discuss a hack at the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF). It looks like the Qilin ransomware group might have stolen data from the ATF’s CALEA, or lawful intercept system. That’s a big deal! Finally, they discuss efforts to fix US water sector security. Sprinkling free tools on the problem will…

7. 

   2 Sep 2026 · 9 min

   Risky Bulletin: BGP hijack delivers malicious Virtualizor updates

   A BGP hijack delivered malicious Virtualizor updates, the White House launches Project Watershed 250, Indian authorities take down a Telegram doxing bot, and Composer packages deliver iOS badness.

8. 

   31 Aug 2026 · 29 min

   Between Two Nerds: The perfect hacker

   In this edition of Between Two Nerds Tom Uren and The Grugq talk about how AI is the perfect hacker, but what makes it perfect for states is the opposite of what makes it perfect for criminals. This episode is also available on YouTube.

9. 

   31 Aug 2026 · 7 min

   Risky Bulletin: New powers for Dutch intelligence services

   Dutch intelligence services will get new powers, a security expert has been arrested in Israel for hacking, the BTS hacker gets a 20 year sentence in South Korea, and an AfD politician in Germany has been linked to a Russian cybercrime hosting service.

10. 

    30 Aug 2026 · 21 min

    Sponsored: Attackers need to be right more than once

    In this Risky Business sponsored interview, James Wilson chats with Dropzone AI’s founder and CEO Edward Wu to debunk the adage, “an attacker only has to be right once”. Modern intruders need to be successful across multiple steps before actually reaching an organisation’s “crown jewels”. The pair chat about where AI helps attackers, why autonomous post-compromise agents aren’t quite here yet, and how AI can bolster the capacity of security teams when investigating alerts and reducing response times.