Risky Business publishes cybersecurity newsletters and podcasts for security professionals.

Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC

In other news: Japan's army used infected USB drives; Anthropic accuses Alibaba of distillation attacks; Australia finds "digital dynamite" on critical networks.

Srsly Risky Biz: Open Weight Model Advances Make the Mythos Debate Moot

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Trail of Bits. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in

Risky Bulletin: The FortiBleed incident is so much worse than a simple credentials leak

In other news: White House EO sets out 2031 PQC deadline; Meta leaks employee keystroke data; a third of Samsung and LG TVs act as proxies.

Risky Bulletin: Klue breach impacts security firms

In other news: Hacker breaches Brazil's national alert system; North Korean hackers are behind the Mastra supply chain attack; new unfixable exploit in Apple's A12/A13 chips.

Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices

In other news: A bunch of Fortinet creds leak online; supply chain attack hits Mastra AI framework; Europol disrupts SocGolish.

Srsly Risky Biz: Anthropic Lacks Emotional Intelligence

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Ent AI. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your

Risky Bulletin: China arrests members of Silver Fox cybercrime group

In other news: EU to help Ukraine in major cyberattacks; MS-ISAC loses 70% of members; SBOM still not widely adopted.

Risky Bulletin: Arch Linux supply chain attack spreads to 1,900+ AUR packages

In other news: FISA S702 expires for the first time since 2008; FBI takes down Chinese phishing service; major supply chain attack hits WordPress ecosystem.

Risky Bulletin: In the age of AI, CISA changes federal patching rules

In other news: House Republican hacked by Russia; ShinyHunters gets a new zero-day; npm to block auto-run install scripts by default.

Srsly Risky Biz: Europe Wants To Wean Itself Off US Tech

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by SpectreOps. You can hear a podcast discussion of this newsletter by searching for "Risky Business News" in your podcatcher or subscribing via

Risky Bulletin: Meta says NSO violated court order with new campaign targeting WhatsApp

In other news: Security incident at France's Tchap messenger; Putin cuts some Kremlin security cameras; Russia bans foreign login services.

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

In other news: AT&T and IBM accused of hiding foreign hacks; Cisco warns of a new SD-WAN zero-day; Google layoffs hit security teams.