Risky Business

In this Soap Box edition of the Risky Business podcast host Patrick Gray chats with Adam Pointon, CEO of Knocknoc, about the failure of Zero Trust as a comprehensive architecture.

Most networks look like they were designed in 1999, and most Zero Trust products look like they were designed for 2049.

Instead, Patrick and Adam pitch something in the middle: Zero Trust(ish) networks, where Zero Trust principles are applied selectively where possible.

Instead of trying to re-architect entire networks, maybe it’s time we learned to apply Zero Trust principles selectively against risky assets. It’s a better approach than the status quo, which involves liberal use of the “risk accepted” stamp.

This episode is also available on YouTube



Show notes

On this week’s show Patrick Gray and James Wilson are joined by guest co-host Brad Arkin to talk through the week’s news, including:

The AI-agent-hacks-stuff saga continues. This week we have one booting gymgoers from full classes to nab its owner a spot

Somehow OpenAI’s legal team allowed the company to spill all the Hugging Face tea at BlackHat and it’s hot and delicious

More details emerge about Iran’s hacking campaign against US water utilities, but Brad is unimpressed

It turns out TeamPCP has been around longer than we thought and predates the AI era

Some absolute plonker kept the DEFCON party going on a Delta flight home. No word yet on if they made the plane fly sideways

Much, much more

This week’s show is brought to you by cloud security platform Prowler. Founder and CEO Toni de la Fuente chats about what the company is doing with AI and some of the cool ways customers are using it with Prowler.

This episode is also available on YouTube



Show notes



How a simple request for AI to book a gym class exposed a major threat | Social Signals


OK, Well, There Are Even More AI Agent Hacking Incidents | wired.com


OpenAI BlackHat talk re Hugging Face incident |


OpenAI says Daybreak will expand to offer specialized cyber services | CyberScoop


Cyberattacks targeting water systems expand to 12 states as South Dakota, Georgia announce incidents | therecord.media


Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate | therecord.media


Local governments in four states dealing with cyberattacks that have shut down services | The Record


Follow-Up Report of the December 2025 Energy Sector Incident | CERT Polska


Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says | The Record


State Department says Trump raised cyber scam compound issue with Xi | therecord.media


Open-source software’s archenemy TeamPCP goes back further than anyone thought | CyberScoop


A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide | wired.com


Srsly Risky Biz: Being a North Korean Hacker Is About to Be Less Fun - Risky Business Media |


Chrome adopts what may be the best protection yet against account takeovers | Ars Technica


CSS:the bomb inside your inbox | PortSwigger Research


Security update available for Metabase - Please upgrade now | Social Signals


Canadian man pleads guilty to Snowflake hacks that led to 165 breaches | therecord.media


British ‘Com’ member who abused more than 100 girls worldwide jailed for two years | therecord.media


FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures | TechCrunch Security


AI is getting better at election facts, but voters shouldn’t rely on it | CyberScoop


The FTC wants to regulate AI for ideological bias | cyberscoop.com


US and South Korea warn of Gunra ransomware targeting govt agencies | BleepingComputer


CISA: Microsoft SharePoint flaw now exploited in ransomware attacks | BleepingComputer


CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs | BleepingComputer


N-able N-central exploitation results in RMM tool deployment | Sophos


Delta investigating after someone set up fake Wi-Fi network mid-flight | TechCrunch Security


mcp-dashboard-demo/prompt/prowler_dashboard_prompt.md at main · prowler-cloud/mcp-dashboard-demo | GitHub

On this week’s show Patrick Gray, and James Wilson are joined by bearded man of leisure Adam Boileau to discuss the week’s cybersecurity news, including:

Accidental AI agent hacking sprees have the world’s media freaking out, but we think it’s all pretty funny

The bugpocalypse is so chaotic, Microsoft can’t patch fast enough

A ColdCard wallet flaw led to millions in Bitcoin theft, but the back story behind the bug is bonkers

Iran hacks and disrupts water infrastructure in multiple American states

North Korea’s state-backed hackers turn criminal. Or their criminals turn into state-backed hackers. Or something. It’s all a bit confusing, actually.

Much, much more!

This week’s show is brought to you by Sondera. Co-founder Josh Devon joins Patrick and James to talk through some absolutely hilarious LLM horror stories.

This episode is also available on YouTube



Show notes



OpenAI says rogue agent behind Hugging Face hack broke into additional services | therecord.media


Anthropic Says Claude Hacked Real Systems During Cybersecurity Tests | wired.com


Claude uploaded malware to PyPI in Anthropic's botched test | BleepingComputer


Nobody Knows if OpenAI’s and Anthropic’s AI Hacking Sprees Are Illegal | wired.com


Scanning 7.6 Petabytes of HuggingFace Training Data for Secrets Truffle Security Co. |


Anthropic’s New AI Model Can Identify More Software Bugs Than Ever. Microsoft Is Struggling to Fix Them Fast Enough. | Social Signals


Chrome Needs Twice-a-Week Patching Thanks to AI Bug Hunting | wired.com


Google says it fixed more Chrome bugs in June than over the past two years, thanks to AI | TechCrunch Security


Mythos uncovers crypto weaknesses that went unknown for years | arstechnica.com


COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft | BleepingComputer


Chris Masterjohn (@ChrisMasterjohn) on X | X (formerly Twitter)


wale.moca 🐳 (@waleswoosh) on X | X (formerly Twitter)


U.S. spy agencies suspect Iran launched cyberattack on Minnesota water facilities | washingtonpost.com


FBI investigates as Michigan joins Minnesota in reporting cyberattacks on its water systems | washingtonpost.com


Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world | cyberscoop.com


A Leaked Memo Ties Cyberattacks on Minnesota Water Utilities to Iran | wired.com


Russia accuses Telegram founder of aiding terrorism, seeks international arrest | The Record


Laundry Bear’s webmail hackers had more in store after February, report says | therecord.media


CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft | Microsoft Security Blog


Phishing service spoofs RingCentral to steal Microsoft 365 accounts | BleepingComputer


North Korean hackers behind major open-source supply chain attacks, Amazon says | therecord.media


North Korea’s Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn | The Record


North Korea arrests hackers accused of laundering stolen bank funds through crypto |


US government bans new foreign-made humanoids, robot dogs, and solar inverters, citing risks to national security | TechCrunch Security


Judge says Trump admin still lacks evidence for Anthropic 'supply chain risk' label | TechCrunch


Cyber Command plans Silicon Valley office to drive innovation | therecord.media


Apple is getting this wrong | OpenAI


Tech industry alliance proposes AI agent safety reporting program | Cybersecurity Dive


Massive ChainDrop npm supply-chain attack infects hundreds of packages | BleepingComputer


Massive supply-chain attack compromises 440 packages under four hours | cyberscoop.com

On this week’s show special guest co-host Pete Ranks, the former director of the CIA’s Centre for Cyber Intelligence, joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover:

Everyone signs the open weights open letter, except Anthropic… of course.

OpenAI had no idea it had hacked Hugging Face

Kimi K3 open weights released and they’re massive!

Why a more aggressive response is needed to cyber attacks on OT

And much, much more!

This week’s show is brought to you by SpecterOps. In this week’s sponsor interview Justin Kohler and Jared Atkinson talk about how SpecterOps’ Bloodhound now supports AWS attack paths. Run it against your AWS infra, but only if you have a strong stomach. The results will terrify you.

This episode is also available on YouTube.



Show notes



Open Weights and American AI Leadership | Social Signals


Our position on open-weights models | Social Signals


Halvar Flake (@halvarflake) on X | X (formerly Twitter)


White House accuses Chinese company of distilling Anthropic’s Fable | cyberscoop.com


Jensen Huang (@JensenHuang) on X | X (formerly Twitter)


Its AI Agent Spent Days Hacking a Company, but Sources Say OpenAI Did Not Notice for a Week | reuters.com


How OpenAI’s human mistake led to the AI-powered hack on Hugging Face | TechCrunch Security


Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hack | TechCrunch Security


Sens. Banks and Schiff Introduce Bill to Help American AI Companies Combat Chinese Espionage |


AI Kill Switch Act would let Trump admin order shutdown of rogue AI systems | Ars Technica


Marco Rubio tells diplomats to play down talk of American tech "kill switch" | reuters.com


Federal agencies broaden alert on Iran-linked OT attacks | therecord.media


Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities | CyberScoop


NSA and Partners Alert Zimbra Collaboration Suite Users of a Russian State-Supported Phishing Campaign | nsa.gov


Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts | BleepingComputer


Microsoft responds to LG monitors installing McAfee ads on Windows | Ars Technica


LG to Ban Residential Proxies from Smart TV Apps | krebsonsecurity.com


Despite multiple takedowns, botnets continue to grow | cyberscoop.com


Extension of CISA 2015 info-sharing protections passes as part of House’s defense bill | therecord.media


Upbound says hack caused $13 million in fraudulent Acima leases | BleepingComputer


Fake Claude app promoted by Bing ads pushes SectopRAT malware | BleepingComputer


Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin | BleepingComputer


Clop ransomware targets Windchill, FlexPLM in data theft attacks | BleepingComputer


'Wrench' attacks against crypto holders appear to be on the rise | therecord.media


OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face | wired.com

On this week’s show special guest co-host Chris Krebs joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover:

Oopsie daisy! OpenAI agents went rogue and hacked Hugging Face

US and China trade AI model ban threats

Iran has been using SS7 queries to locate and target US troops

Scattered Spider is having a hard time, not just because of Microsoft’s GDID

And much, much more!

This week’s show is brought to you by Push Security. Luke Jennings joins Patrick this week to talk about the rise in authorisation phishing, like device code phishing, and what companies like Push are doing about it.

This episode is also available on YouTube.



Show notes



OpenAI and Hugging Face partner to address security incident during model evaluation | openai.com


Security incident disclosure — July 2026 | Social Signals


Hugging Face confirms breach affected internal datasets and credentials, urges users to take action | TechCrunch Security


Cheating behaviour in frontier model evaluations | AISI Work | Social Signals


JADEPUFFER: Agentic ransomware for automated database extortion | Sysdig | Social Signals


Secret Claude tracker shocks users after Anthropic's anti-surveillance stance | Ars Technica


EXCLUSIVE: Beijing is looking at curbing overseas access to China's top AI models, sources say | reuters.com


https://www.axios.com/2026/07/20/ai-us-china-open-source-kimi |


Alibaba to ban employees from using Anthropic's coding tool, source says | reuters.com


Iran abused mobile networks’ vulnerabilities to locate U.S. military in the Middle East, report says | TechCrunch Security


Apps Marketed to US Troops Are Shipping Chinese and Russian Code | wired.com


Trump calls for new election security measures | NBC News Tech


Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack | therecord.media


Alleged longstanding member of Scattered Spider extradited to US | CyberScoop


https://www.justice.gov/usao-ndil/media/1450651/dl?inline |


Tracking Peter Stokes and The Com: Allison Nixon and Her Work Unmasking Cybercriminals | zetter-zeroday.com


764 splinter group leader sentenced to 40 years in jail | cyberscoop.com


Interpol cybercrime crackdown nets 5,800 arrests across 97 countries | cyberscoop.com


White House details ‘Gold Eagle’ clearinghouse for AI cyber threats | cyberscoop.com


Attackers vote themselves $20 million in BONK cryptocurrency | The Record


CISA: Microsoft SharePoint RCE flaw now actively exploited | BleepingComputer


Critical SharePoint RCE flaw exploited to steal machine keys | BleepingComputer


Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk | TechCrunch Security


Critical ServiceNow code execution flaw now exploited in attacks | BleepingComputer


Critical Palo Alto VPN bug now exploited by Qilin ransomware gang | BleepingComputer


Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak | BleepingComputer


IPhone Hacking Firm Sues Ex-Worker Over Alleged Theft of Secrets | bloomberg.com


Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI | TechCrunch Security


Pegasus Spyware European Parliament Pega Committee Member | The Record


Amazon fixing bug that billed some AWS customers billions of dollars | TechCrunch Security


Risky Bulletin: Hacker wipes Romania's entire land registry database - Risky Business Media | Social Signals


Microsoft Entra ID gets passkeys default authentication starting September | BleepingComputer


On-demand Webinar: Device code phishing in 2026 | Push Security | Push Security