Risky Bulletin

The White House will let private companies carry out offensive cyber ops, an AI hacking campaign breached Taiwan’s government, a macOS bug was exploited over the internet to drop cryptominers, and Kenya orders internet cafes to store logs.



Show notes



Risky Bulletin: White House lets private companies carry out offensive cyber ops

Tom Uren and James Wilson talk about the cybercrime ecosystem shifting towards data theft extortion, stealing sensitive data and extracting ransoms from victims by threatening to leak it. For organisations whose reputation is very important to them, data leaks are a bigger threat than having their files locked up.

They also discuss how the rise of AI makes it worth reinvigorating CISA’s Secure by Design initiative.



Show notes

Russian state hackers adopt fake job interview tactics, a Portuguese man will face trial for developing a malicious AI chatbot, an AI assistant hacks an Australian gym, and OpenAI releases cyber models for blue teams.



Show notes



Risky Bulletin: Russian hackers adopt the fake job interview tactics

In this edition of Between Two Nerds Tom Uren and The Grugq talk about examples of cyber resistance and whether they achieve their goals.

This epsiode is also available on YouTube.



Show notes



The Record on the Belarus Cyber Partisans


BTN6, How Ukraine could use its IT army

Two American law firms pay multi-million dollar ransoms, a Metabase zero-day is being used in data theft attacks, Russian hackers disrupted a second power plant in Poland, and there’s a remote code execution bug in WordPress… again!



Show notes



Risky Bulletin: Pwnie Awards 2026 winners