Risky Bulletin: Some OpenSSH instances take any password longer than 256 characters
In other news: Fridge hacks also went after French blood banks; French bank hacked for $133 million; Thai opposition targeted with spyware.
Latest
Srsly Risky Biz: The Ritual Bitcoin Sacrifices Will Continue Until Security Improves
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Sublime Security. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your
Risky Bulletin: Hackers lock out and extort Li Auto EV owners in Russia
In other news: Second refrigerator hack hits Europe; US boots Acronis from government networks; distros patch Linux kernel RCE.
Risky Bulletin: Game devs are being extorted with AI game-cloning threats
In other news: FBI links Binance hack to North Korea; CyberPartisans hack Russia's statistics service; Apple sends new spyware notifications.
Risky Bulletin: Belarusian state hackers get on the data-wiping train
In other news: Hacker leaks data on 41k DHS employees; Binance hacked for billions; PHP bugs exploited to hack Palo Alto Networks firewalls.
Srsly Risky Biz: Chinese AI Can Learn to Love the West
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Nebulock. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher
Risky Bulletin: Moldova takes down 80+ public services after cyberattack
In other news: White House launches second cybersecurity pilot program; South Korea arrests AI-assisted cybercrime ring; Electrum wallet patches crypto-stealing bug.
Risky Bulletin: While everyone was looking at PHP, another RCE is wrecking what's left of the internet
In other news: ABC wipes staff devices; third PHP RCE incoming; new HTTP/3 DDoS attack vector.
Risky Bulletin: Supply chain attack lets ransomware group inside 40+ shipping companies
In other news: Pentagon builds tech sabotage unit; PHP2Shell exploitation gets underway; GoDaddy revokes 400,000 certs.
Srsly Risky Biz: OpenAI's Kazoo-Grade Spying Incident
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Sondera. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher
Risky Bulletin: Hacker hijacks 10% of Tor exit nodes
In other news: Second ransomware negotiator linked to ShinyHunters; Chinese crime ring hacks Staples; hacker leaks AfD internal data.
Risky Bulletin: PwnEscape vulnerability lets you escape KVM
In other news: Supply chain incidents at AOMEI and ConnectWise; Intel discontinues SGX; US infosec job postings fell by 25%.
Risky Bulletin
Risky Bulletin: Russia arrests DataSuckers hacking group
In other news: Al Jazeera employees targeted with Candiru spyware; US disrupts 40 DPRK laptop farms; OpenAI employee arrested for planting spy device.
Seriously Risky Business
Srsly Risky Biz: Russia's Digital Detox Boomerang
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by Prowler. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing via
Risky Bulletin
Risky Bulletin: Spyware chip found in Ledger crypto-wallets
In other news: Cyberattack defrosts supermarket fridges; Ahold Delhaize supermarkets go offline across the world; EU wants smart glasses to beep loudly when recording.
Risky Bulletin
Risky Bulletin: ShinyHunters suspects arrested in US and Jordan
In other news: Hackers breach TLD registrars to get Google certs; Qilin member arrested in Japan; Google suspends OSS VRP due to AI spam.
Risky Bulletin
Risky Bulletin: Authorities dismantle KillSec group, arrest members across Europe
In other news: Ransomware attack could have crippled South Africa's air traffic operations; US sanctions Venezuelan ATM hackers; Chinese APT targets AI experts.
Srsly Risky Biz: "Rogue" AI Isn't Going Anywhere
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by PortSwigger. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher
Risky Bulletin
Risky Bulletin: Sanctions force CAs to revoke TLS certs in Iran, Russia
In other news: ShinyHunters member arrested in the Netherlands; Apple fixes iOS zero-day found by Meta; Citrix zero-days see mass exploitation within hours.
Risky Bulletin
Risky Bulletin: Intel ends paid bug bounties
In other news: OpenAI agents probed dozens of organizations; fraudsters use AI to scam €95m from an Italian bank; Bitget hacked for $350m.
Risky Bulletin
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol
In other news: OpenAI agent hacked Australian Medicare website; OpenAI gives Ukraine access to Daybreak; UK to establish anti-disinformation center.
Seriously Risky Business
Srsly Risky Biz: Bring On the AI Lawsuits
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by SpecterOps. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing via
Risky Bulletin
Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity
In other news: Ukrainian hackers leak Russia's naval secrets; ShinyHunters hack the FBI; tech firms disrupt EvilTokens PhaaS.
Risky Bulletin
Risky Bulletin: Gemini hacked three companies too
In other news: Hackers claim breach of Russia's election commission; OpenAI was behind the RubyGems May incident; Gyazo and Revolut got hacked.