Risky Bulletin: Android drops PIN guessing limit from 1,800 attempts to just 20
In other news: EU MP targeted with Pegasus; Alibaba bans employees from using Claude; new Bad Epoll vulnerability in Linux.
Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices
In other news: Password spray attack targets M365 and bypasses MFA; AI agent caught deploying ransomware in live hacks; webinar platform sues security firms over bad IOCs.
Srsly Risky Biz: America Won't Beat the Distillation Ecosystem
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Corelight. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher
Risky Bulletin: Researcher drops giant cache of zero-day exploits
In other news: Breach at a sensitive DHS network; US Supreme Court restricts geofence warrants; Huntress denies malicious insider threat accusations.
Risky Bulletin: Microsoft disrupts StegoAd operation
In other news: US government takes more control of frontier AI model releases; AMD reintroduces CPU security feature after backlash; Iranian APT member arrested in Montenegro.
Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC
In other news: Japan's army used infected USB drives; Anthropic accuses Alibaba of distillation attacks; Australia finds "digital dynamite" on critical networks.
Srsly Risky Biz: Open Weight Model Advances Make the Mythos Debate Moot
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Trail of Bits. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in
Risky Bulletin: The FortiBleed incident is so much worse than a simple credentials leak
In other news: White House EO sets out 2031 PQC deadline; Meta leaks employee keystroke data; a third of Samsung and LG TVs act as proxies.
Risky Bulletin: Klue breach impacts security firms
In other news: Hacker breaches Brazil's national alert system; North Korean hackers are behind the Mastra supply chain attack; new unfixable exploit in Apple's A12/A13 chips.
Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices
In other news: A bunch of Fortinet creds leak online; supply chain attack hits Mastra AI framework; Europol disrupts SocGolish.
Srsly Risky Biz: Anthropic Lacks Emotional Intelligence
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Ent AI. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your
Risky Bulletin: China arrests members of Silver Fox cybercrime group
In other news: EU to help Ukraine in major cyberattacks; MS-ISAC loses 70% of members; SBOM still not widely adopted.