Podcast Episodes

Between Two Nerds: The death of the exploit

In this edition of Between Two Nerds Tom Uren and The Grugq talk about the trend toward outrageously complicated exploits and what it means for hacking and cyber espionage.

This episode is also avail…

Published on 3 months, 1 week ago

Risky Bulletin: New APT group turns out to be a phishing test

A new APT group turns out to be a phishing test, Qantas cuts executives’ bonuses after a recent breach, Anthropic stops selling AI tools to Chinese firms, and Nepal blocks 26 social media sites.

Published on 3 months, 1 week ago

Sponsored: Why prompt injection is an intractable problem

In this sponsored interview Casey Ellis chats with Keith Hoodlet from Trail of Bits. Keith is Trail of Bits’ director of engineering for AI, machine learning and application security and he joined Ca…

Published on 3 months, 1 week ago

Risky Bulletin: Cyberattack disrupts Bridgestone tyre factories across North America

A cyberattack disrupts Bridgestone tyre factories in North America, a new infostealer takes your photo while you watch porn, bad certificates for Cloudflare infrastructure went undetected for more th…

Published on 3 months, 1 week ago

Srsly Risky Biz: Google sharpens its cyber knife

Tom Uren and Amberleigh Jack talk about Google starting a cyber disruption unit. It’s a sign of the times but could also point the way forward for policymakers looking to involve the private sector i…

Published on 3 months, 1 week ago

Risky Bulletin: YouTubers unmask and help dismantle Chinese scam ring

Two YouTube channels help dismantle a Chinese scam operation, Cloudflare, Zscaler, and Palo Alto disclose Salesloft-related breaches, a ransomware attack disrupts vehicle production at Jaguar Land Ro…

Published on 3 months, 1 week ago

Between Two Nerds: How threat actors are using AI to run wild

In this edition of Between Two Nerds Tom Uren and The Grugq talk about how cyber threat actors are using AI tools to fill in resource and skills gaps that they have.

This episode is also available on…

Published on 3 months, 2 weeks ago

Risky Bulletin: Noem fires FEMA IT team over alleged cybersecurity failures

FEMA’s IT staff fired over an alleged breach, WhatsApp patches a zero-day, the Salesloft breach impacted more than just Salesforce, and a scammer steals $1.5 million dollars from the city of Baltimor…

Published on 3 months, 2 weeks ago

Sponsored: Push Security on the evolution of phishing techniques

In this sponsored interview Casey Ellis chats with Push Security co-founder Jacques Louw. Push’s browser plugin gives a unique level of visibility into how users interact with the web and the attacks…

Published on 3 months, 2 weeks ago

Risky Bulletin: npm attack uses AI prompts to steal creds, crypto-wallet keys

An npm supply chain attack uses AI to steal credentials and crypto-wallet keys, Google establishes a cyber disruption unit, a ransomware attack disrupts more than 200 Swedish municipalities, and Salt…

Published on 3 months, 2 weeks ago