Risky Business publishes cybersecurity newsletters and podcasts for security professionals.

Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices

In other news: Password spray attack targets M365 and bypasses MFA; AI agent caught deploying ransomware in live hacks; webinar platform sues security firms over bad IOCs.

Srsly Risky Biz: America Won't Beat the Distillation Ecosystem

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Corelight. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher

Risky Bulletin: Researcher drops giant cache of zero-day exploits

In other news: Breach at a sensitive DHS network; US Supreme Court restricts geofence warrants; Huntress denies malicious insider threat accusations.

Risky Bulletin: Microsoft disrupts StegoAd operation

In other news: US government takes more control of frontier AI model releases; AMD reintroduces CPU security feature after backlash; Iranian APT member arrested in Montenegro.

Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC

In other news: Japan's army used infected USB drives; Anthropic accuses Alibaba of distillation attacks; Australia finds "digital dynamite" on critical networks.

Srsly Risky Biz: Open Weight Model Advances Make the Mythos Debate Moot

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Trail of Bits. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in

Risky Bulletin: The FortiBleed incident is so much worse than a simple credentials leak

In other news: White House EO sets out 2031 PQC deadline; Meta leaks employee keystroke data; a third of Samsung and LG TVs act as proxies.

Risky Bulletin: Klue breach impacts security firms

In other news: Hacker breaches Brazil's national alert system; North Korean hackers are behind the Mastra supply chain attack; new unfixable exploit in Apple's A12/A13 chips.

Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices

In other news: A bunch of Fortinet creds leak online; supply chain attack hits Mastra AI framework; Europol disrupts SocGolish.

Srsly Risky Biz: Anthropic Lacks Emotional Intelligence

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Ent AI. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your

Risky Bulletin: China arrests members of Silver Fox cybercrime group

In other news: EU to help Ukraine in major cyberattacks; MS-ISAC loses 70% of members; SBOM still not widely adopted.

Risky Bulletin: Arch Linux supply chain attack spreads to 1,900+ AUR packages

In other news: FISA S702 expires for the first time since 2008; FBI takes down Chinese phishing service; major supply chain attack hits WordPress ecosystem.