Podcasts · News · Technology
Risky Business
Risky Business Media
100 episodes
Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
Episodes page 2 of 2
-
Risky Business #820 -- Asian fraud kingpin will face Chinese justice (pew pew!)
Risky Business returns for 2026! Patrick Gray and Adam Boileau talk through the week’s cybersecurity news, including: • Santa brings hackers MongoDB memory leaks for Christmas • Vercel pays out a million bucks to…
-
How the World Got Owned Episode 1: The 1980s
In this special documentary episode, Patrick Gray and Amberleigh Jack take a historical dive into hacking in the 1980s. Through the words of those that were there, they discuss life on the ARPANET, the 414s hacking…
-
Risky Business #819 -- Venezuela (credibly?!) blames USA for wiper attack
In the final show of 2025, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • React2Shell attacks continue, surprising no one • The unholy combination of OAuth consent phishing, social…
-
Risky Biz Soap Box: Graph the planet!
In this sponsored Soap Box edition of the Risky Business podcast, Patrick Gray chats with Jared Atkinson, CTO of SpecterOps, about BloodHound OpenGraph. OpenGraph enumerates attack paths across platforms and services,…
-
Risky Business #818 -- React2Shell is a fun one
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • There’s a CVSS 10/10 remote code exec in the React javascript server. JS server? U wot mate? • China is out popping…
-
Risky Business #817 -- Less carnage than your usual Thanksgiving
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. It’s a quiet week with Thanksgiving in the US, but there’s always some cyber to talk about: • Airbus rolls out software updates…
-
Risky Business #816 -- Copilot Actions for Windows is extremely dicey
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Salesforce partner Gainsight has customer data stolen • Crowdstrike fires insider who gave hackers screenshots of…
-
Risky Biz Soap Box: Greynoise knows when bad bugs are coming
In this sponsored Soap Box edition of the podcast, Andrew Morris joins Patrick Gray to talk about how Greynoise can often get a 90 day heads up on serious vulnerabilities. Whether it’s malicious actors doing…
-
Risky Business #815 -- Anthropic's AI APT report is a big deal
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Anthropic says a Chinese APT orchestrated attacks using its AI • It’s a day ending in -y, so of course there are…
-
Risky Business #814 -- It's a bad time to be a scam compound operator
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • The KK Park scam compound in Myanmar gets blasted with actual dynamite • China sentences more scammers TO DEATH •…
-
Risky Business #813 -- FFmpeg has a point
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • We love some good vulnerability reporting drama, this time FFmpeg’s got beef with Google • OpenAI announces its…
-
Risky Business #812 -- Alleged Trenchant exploit mole is ex-ASD
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • L3Harris Trenchant boss accused of selling exploits to Russia once worked at the Australian Signals Directorate •…
-
Risky Business #811 -- F5 is the tip of the crap software iceberg
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • China has been rummaging in F5’s networks for a couple of years • Meanwhile China tries to deflect by accusing the…
-
Wide World of Cyber: A deep dive on the F5 hack
In this edition of the Wide World of Cyber podcast Patrick Gray talks to Chris Krebs and Alex Stamos about the F5 incident. They talk about what happened, whether it’s a big deal, and why private equity ownership of…
-
Risky Biz Soap Box: Why Mastercard is scaling its cybersecurity business
In this sponsored Soap Box edition of the Risky Business podcast, host Patrick Gray chats with Mastercard’s Executive Vice President and Head of Security Solutions, Johan Gerber, about how the card brand thinks about…
-
Risky Business #810 -- Data extortion attacks have a silver lining
In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • FBI intervenes in Scattered Spider Salesforce leaksite • Clop loots Oracle E-Biz deployments • Plus so much more…
-
Snake Oilers: Realm Security, Horizon3 and Persona
In this edition of the Snake Oilers podcast, three vendors pop in to pitch you all on their wares: • Realm Security: A security focussed, AI-first data pipeline platform • Horizon3: AI hackers! Pentesting robots!!…
-
Risky Business #809 -- Hackers try to pay a journalist for access to the BBC
On this week’s show Patrick Gray is on holiday so Amberleigh Jack and Adam Boileau hijack the studio to discuss the week’s cybersecurity news, including: • Hackers learn that trying to coerce a journalist just makes…
-
Risky Business #808 -- Insane megabug in Entra left all tenants exposed
On this week’s show Patrick Gray and special guest Rob Joyce discuss the week’s cybersecurity news, including: • Secret Service raids a SIM farm in New York • MI6 launches a dark web portal • Are the 2023 Scattered…
-
Risky Business #807 -- Shai-Hulud npm worm wreaks old-school havoc
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Shai-Hulud worm propagates via npm and steals credentials • Jaguar Land Rover attack may put smaller suppliers out…
-
Risky Biz Soap Box: runZero shakes up vulnerability management
In this sponsored Soap Box edition of the Risky Business podcast, industry legend HD Moore joins the show to talk about runZero’s major push into vulnerability management. With its new Nuclei integration, runZero is…
-
Risky Business #806 -- Apple's Memory Integrity Enforcement is a big deal
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Apple ruins exploit developers’ week with fresh memory corruption mitigations • Feross Aboukhadijeh drops by to…
-
Snake Oilers: Nebulock, Vali Cyber and Cape
In this edition of the Snake Oilers podcasts, three vendors pop in to pitch you all on their wares: • Automated, AI-powered threat hunting with Nebulock Damien Lewke from Nebulock joins the show to talk about how its…
-
Risky Business #805 -- On the Salesloft Drift breach and "OAuth soup"
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • The Salesloft breach and why OAuth soup is a problem • The Salt Typhoon telco hackers turn out to be Chinese…
-
Risky Business #804 -- Phrack's DPRK hacker is probably a Chinese APT guy
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Australia expels Iranian ambassador • Hackers sabotage Iranian shipping satcoms • APT hacker got doxxed in Phrack.…
-
Wide World of Cyber: Microsoft's China Entanglement
The Wide World of Cyber podcast is back! In this episode host Patrick Gray chats with Alex Stamos and Chris Krebs about Microsoft’s entanglement in China. Redmond has been using Chinese engineers to do everything from…
-
Risky Business #803 -- Oracle's CSO Mary Ann Davidson quietly departs
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • Oracle’s long term CSO departs, and we’re not that sad about it • Canada’s House of Commons gets popped through a…
-
Risky Biz Soap Box: How to measure vulnerability reachability
In this Soap Box edition of the Risky Business podcast Patrick Gray chats with Socket founder Feross Aboukhadijeh about how to measure the reachability of vulnerabilities in applications. It’s great to know there’s a…
-
Risky Business #802 -- Accessing internal Microsoft apps with your Hotmail creds
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: • CISA warns about the path from on-prem Exchange to the cloud • Microsoft awards a crisp zero dollar bill for a…
-
Risky Business #801 -- AI models can hack well now and it's weirding us out
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. Google security engineering VP Heather Adkins drops by to talk about their AI bug hunter, and Risky Business producer Amberleigh…
-
Soap Box: Why AI can't fix bad security products
In this Soap Box edition of the show Patrick Gray chats with the CEO of email security company Sublime Security, Josh Kamdjou. They talk about where AI is useful, where it isn’t, and why AI can’t save vendors from…
-
Risky Business #800 — The SharePoint bug may have leaked from Microsoft MAPP
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • Did the SharePoint bug leak out of the Microsoft MAPP program? • Expel retracts its FIDO bypass writeup • The mess surrounding…
-
Risky Business #799 -- Everyone's Sharepoint gets shelled
Risky Biz returns after two weeks off, and there sure is cybersecurity news to catch up on. Patrick Gray and Adam Boileau discuss: • Microsoft tried to make outsourcing the Pentagon’s cloud maintenance to China okay…
-
Risky Biz Soap Box: Prowler, the open cloud security platform
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Toni de la Fuente, founder of open source multi-cloud security product Prowler. Toni explains how Prowler came to be, and how…
-
Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • Australian airline Qantas looks like it got a Scattered Spider-ing • Microsoft works towards blunting the next CrowdStrike…
-
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • We roll our eyes over the “16 billion credentials” leak hitting mainstream news • Some interesting cyber angles emerge from…
-
Risky Business #796 -- With special guest co-host Chris Krebs
On this week’s show Patrick Gray and Adam Boileau are joined by special guest Chris Krebs to discuss the week’s cybersecurity news. They talk through: • Israeli “hacktivists” take out an Iranian state-owned bank •…
-
Soap Box: AI has entered the SOC, and it ain't going anywhere
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Dropzone AI founder Ed Wu about the role of LLMs in the SOC. The debate about whether AI agents are going to wind up in the SOC…
-
Risky Business #795 -- How The Com is hacking Salesforce tenants
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • New York Times gets a little stolen Russian FSB data as a treat • iVerify spots possible evidence of iOS exploitation against…
-
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • Cyber firms agree to deconflict and cross-reference hacker group names • Russian nuclear facility blueprints gathered from…
-
Risky Business #793 -- Scattered Spider is hijacking MX records
In this week’s edition of Risky Business Dmitri Alperovitch and Adam Boileau join Patrick Gray to talk through the week’s news, including: • EXCLUSIVE: A Scattered Spider-style crew is hijacking DNS MX entries and…
-
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • TeleMessage memory dumps show up on DDoSecrets • Coinbase contractor bribed to hand over user data • Telegram does seem to be…
-
Risky Biz Soap Box: Push Security's browser-first twist on identity security
In this wholly sponsored Soap Box edition of the show, Patrick Gray chats with Adam Bateman and Luke Jennings from Push Security. Push has built an identity security platform that collects identity information and…
-
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • Struggling to find that pesky passwords.xlsx in Sharepoint? Copilot has your back! • The ransomware ecosystem is finding life…
-
Wide World of Cyber: How state adversaries attack security vendors
In this edition of the Wide World of Cyber podcast Patrick Gray talks to SentinelOne’s Steve Stone and Alex Stamos about how foreign adversaries are targeting security vendors, including them. From North Korean IT…
-
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • White House’s off-brand Israeli Signal fork logs cleartext messages with hard coded creds while getting hacked (twice). Just ……
-
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs
In this extended interview the Vice Chair of the Senate Select Committee on Intelligence, Senator Mark Warner, joins Risky Business host Patrick Gray to talk about: • The latest developments in the Signalgate scandal…
-
Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: • British retail stalwart Marks & Spencer gets cybered • South Korean telco sets out to replace all its subscriber SIMs after…
-
Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank
In this edition of the Snake Oilers podcast, three sponsors come along to pitch their products: • LimaCharlie: A public cloud for SecOps • Honeywell Cyber Insights: An OT security/discovery solution • Fortra’s…
-
Snake Oilers: Pangea, Cosive and Sysdig
In this edition of Snake Oilers three vendors pitch host Patrick Gray on their tech: • Pangea: Guardrails and security for AI agents and applications (https://pangea.cloud) Worried about your AI apps going rogue,…
More in News
The Daily
The New York Times
Up First from NPR
NPR
Pod Save America
Pod Save America
The Megyn Kelly Show
SiriusXM
NPR News Now
NPR
The Tucker Carlson Show
Tucker Carlson Network
Morning Wire
The Daily Wire
Serial
Serial Productions & The New York Times
The Headlines
The New York Times
The Bulwark Daily
The Bulwark
Bulwark Takes
The Bulwark
Letters from an American
Heather Cox Richardson
Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.