Risky Bulletin: Hacker wipes Romania's entire land registry database
In other news: Graykey maker sues former employee for leaking exploit; Hugging Face was hacked using AI; unauth RCE finally found in WordPress.
Latest
Srsly Risky Biz: Ransomware Uses AI To Amp Up Negotiations
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by Sondera. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing via
Risky Bulletin: India bans app used to hack e-rickshaws in viral videos
In other news: NSA TAO is back; Accenture has another data breach; leak exposes another suspected Chinese cyber contractor.
Srsly Risky Biz: Supreme Court Undermines Section 702
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by Sublime Security. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing
Risky Bulletin: All new cars to include a camera aimed at the driver's face
In other news: Canada hacked a ransomware gang; Taiwan charges two execs with helping Chinese hackers; new vulnerabilities can bork Hoymiles solar panels.
Risky Bulletin: Android drops PIN guessing limit from 1,800 attempts to just 20
In other news: EU MP targeted with Pegasus; Alibaba bans employees from using Claude; new Bad Epoll vulnerability in Linux.
Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices
In other news: Password spray attack targets M365 and bypasses MFA; AI agent caught deploying ransomware in live hacks; webinar platform sues security firms over bad IOCs.
Srsly Risky Biz: America Won't Beat the Distillation Ecosystem
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Corelight. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher
Risky Bulletin: Researcher drops giant cache of zero-day exploits
In other news: Breach at a sensitive DHS network; US Supreme Court restricts geofence warrants; Huntress denies malicious insider threat accusations.
Risky Bulletin: Microsoft disrupts StegoAd operation
In other news: US government takes more control of frontier AI model releases; AMD reintroduces CPU security feature after backlash; Iranian APT member arrested in Montenegro.
Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC
In other news: Japan's army used infected USB drives; Anthropic accuses Alibaba of distillation attacks; Australia finds "digital dynamite" on critical networks.
Srsly Risky Biz: Open Weight Model Advances Make the Mythos Debate Moot
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Trail of Bits. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in
Risky Bulletin
Risky Bulletin: The FortiBleed incident is so much worse than a simple credentials leak
In other news: White House EO sets out 2031 PQC deadline; Meta leaks employee keystroke data; a third of Samsung and LG TVs act as proxies.
Risky Bulletin
Risky Bulletin: Klue breach impacts security firms
In other news: Hacker breaches Brazil's national alert system; North Korean hackers are behind the Mastra supply chain attack; new unfixable exploit in Apple's A12/A13 chips.
Risky Bulletin
Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices
In other news: A bunch of Fortinet creds leak online; supply chain attack hits Mastra AI framework; Europol disrupts SocGolish.
Seriously Risky Business
Srsly Risky Biz: Anthropic Lacks Emotional Intelligence
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Ent AI. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your
Risky Bulletin
Risky Bulletin: China arrests members of Silver Fox cybercrime group
In other news: EU to help Ukraine in major cyberattacks; MS-ISAC loses 70% of members; SBOM still not widely adopted.
Risky Bulletin
Risky Bulletin: Arch Linux supply chain attack spreads to 1,900+ AUR packages
In other news: FISA S702 expires for the first time since 2008; FBI takes down Chinese phishing service; major supply chain attack hits WordPress ecosystem.
Risky Bulletin
Risky Bulletin: In the age of AI, CISA changes federal patching rules
In other news: House Republican hacked by Russia; ShinyHunters gets a new zero-day; npm to block auto-run install scripts by default.
Seriously Risky Business
Srsly Risky Biz: Europe Wants To Wean Itself Off US Tech
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by SpectreOps. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing via
Risky Bulletin
Risky Bulletin: Meta says NSO violated court order with new campaign targeting WhatsApp
In other news: Security incident at France's Tchap messenger; Putin cuts some Kremlin security cameras; Russia bans foreign login services.
Risky Bulletin
Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks
In other news: AT&T and IBM accused of hiding foreign hacks; Cisco warns of a new SD-WAN zero-day; Google layoffs hit security teams.
Risky Bulletin
Risky Bulletin: The EU debuts digital sovereignty plan
In other news: American law firm pays a $20m ransom; authorities take down millions of email and social media scam accounts; new HTTP/2 Bomb attack.
Seriously Risky Business
Srsly Risky Biz: NATO's Cyber Approach Needs Change
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by Truffle Security. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing