Risky Bulletin
Regular cybersecurity news updates from the Risky Business team...
Insights from recent episode analysis
On the show
- The Grugq10 eps
- James Wilson6 eps
- Tom Uren2 eps
Also: HD Moore, Sydney Marrone, Amberleigh Jack, James Kettle, Daf Stuttard, Jared Atkinson, Haroon Meer, AJ Williams, Fletcher Heisler, Edward Wu
Audience Interest
Podcast Focus
Publishing Consistency
Insights are generated by CastFox AI using publicly available data, episode content, and proprietary models.
Most discussed topics
Brands & references
Total monthly reach
Based on 1 signal.
Built from
By chart position
- 🇺🇸United States · Tech NewsHOME#3696K to 508K
- 🇦🇺Australia · Tech News#729K to 155K
- 🇬🇧United Kingdom · Tech News#366.7K to 36K
- 🇪🇸Spain · Tech News#372.3K to 12K
- 🇨🇦Canada · Tech News#572.1K to 11K
- Per-Episode Audience
Est. listeners per new episode within ~30 days
164K to 868K🎙 Daily cadence·100 episodes·Last published 2d ago - Monthly Reach
Unique listeners across all episodes (30 days)
547K to 2.9M🇺🇸59%🇦🇺18%🇬🇧4%+17 more - Active Followers
Loyal subscribers who consistently listen
301K to 1.6M
Market Insights
Platform Distribution
Reach across major podcast platforms, updated hourly
Total Followers
—
Total Plays
—
Total Reviews
—
* Data sourced directly from platform APIs and aggregated hourly across all major podcast directories.
| Date | Episode | Topics | Guests | Brands | Places | Keywords | Sponsor | Length | |
|---|---|---|---|---|---|---|---|---|---|
| 10/19/26 | Risky Bulletin: Linux patches PwnEscape KVM vulnerability | A serious vulnerability lets attackers escape Kernel-based virtual machines, OpenCode users become collateral damage in a distillation attack, supply chain incidents hit AOMEI and ConnectWise and Intel will discontinue SGX. | 11m 46s | ||||||
| 10/18/26 | Sponsored: Agents don’t care about human ideas of right and wrong | In this Risky Business sponsored interview James Wilson chats with Sondera co-founder and CEO, Josh Devon, about how AI agents are highly capable, but they’re not the best rule followers or decision makers. The pair find themselves in the philosophical weeds about why agents lack the ability to determine, or care about, right from wrong before getting into how Sondera’s Auto Formulization, that gives specific behaviour guardrails to agents, can help. | 27m 12s | ||||||
| 10/16/26 | Risky Bulletin: DataSuckers suspects arrested in Russia | Three DataSuckers hacking group suspects arrested in Russia, Al Jazeera employees targeted with Candiru spyware, the US disrupts 40 North Korean laptop farms, and an OpenAI employee was arrested for planting a spy device. | 10m 00s | ||||||
| 10/15/26 | Srsly Risky Biz: Russia's digital detox boomerang | Tom Uren and Amberleigh Jack talk about Russian targeting of Ukrainian data centres. That’s not good, but it looks like Russia is very poorly prepared for Ukraine’s retaliatory strikes. Karma! They also discuss how open-weight models are getting good at cyber tasks while safeguards are easily bypassed. There is no chance of international regulation that will rein in these models, so it is time to loosen cyber safety restrictions on American frontier models. This episode is also available on YouTube | 20m 29s | ||||||
| 10/14/26 | Risky Bulletin: Spyware chip found in Ledger crypto-wallets | Spyware chips found inside Ledger crypto-wallets, a cyberattack defrosts supermarket freezers across France, Dutch-owned supermarkets go offline in multiple countries following a cyberattack, and the EU wants smart glasses to beep loudly when they’re recording. | 6m 51s | ||||||
| 10/12/26 | Between Two Nerds: The FBI and ShinyHunters are the same | In this edition of Between Two Nerds Tom Uren and The Grugq examine how ShinyHunters and the FBI both deceived themselves into believing they were immune to cyber threats. This episode is also available on YouTube. | 35m 22s | ||||||
| 10/12/26 | Risky Bulletin: ShinyHunters suspects arrested in US and Jordan | Two ShinyHunters suspects arrested in Jordan and the US, hackers breach TLD registrars to get valid Google certs, Japanese authorities arrest a Qilin ransomware member and Google suspends its open-source bug bounty program after a flood of AI bug reports. | 14m 29s | ||||||
| 10/11/26 | Sponsored: AI is attacking… it needs to defend, too | In this Risky Business sponsored interview James Wilson chats with Prowler’s founder and CEO Toni de la Fuente about how AI now allows pretty much anyone to vibe-code “killer apps”. These custom apps are often internal for organisations and hosted on the cloud. The pair discuss why developers need to focus on security on top of app functionality and how Prowler can work in parallel with apps and agents to help secure, and continuously assess, cloud infrastructure. | 18m 31s | ||||||
| 10/2/26 | Authorities dismantle KillSec group | Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts. | 9m 33s | ||||||
| 10/1/26 | Srsly Risky Biz: “Rogue AI” isn’t going anywhere | Amberleigh Jack and James Wilson chat about OpenAI agents’ recent escapades into Australian government websites. OpenAI has promised to “rebuild trust with Australians” but we’re likely getting a glimpse into the new normal, here. They also discuss how the ShinyHunters hacking group has found itself on law enforcement’s target list after breaching FBI systems. The group played some stupid games and they appear to be in the “stupid prizes” stage. This episode is also available on YouTube | 16m 17s | ||||||
Want analysis for the episodes below?Free for Pro Submit a request, we'll have your selected episodes analyzed within an hour. Free, at no cost to you, for Pro users. | |||||||||
| 9/30/26 | ShinyHunters suspect arrested in the Netherlands | A ShinyHunters suspect has been arrested in the Netherlands, Apple fixes an iOS zero-day found by Meta, recent Citrix zero-days see mass exploitation within hours and NVIDIA launches an AI sandboxing platform. | 7m 40s | ||||||
| 9/28/26 | Between Two Nerds: The AI crime machine | In this edition of Between Two Nerds Tom Uren and The Grugq talk about the rise of fully automated LLM-driven hacking campaigns among criminals and even state hacking groups. For those with the right risk appetite, a move fast and break things hacking approach using AI can pay off. This episode is also available on YouTube. | 27m 40s | ||||||
| 9/28/26 | Risky Bulletin: Intel ends paid bug bounties | Intel removes cash rewards from its bug bounty program, OpenAI agents probed dozens of organizations, Fraudsters scam €95 million from an Italian bank and Bitget is hacked for $350 million. | 9m 38s | ||||||
| 9/27/26 | Sponsored: Robo-Burp is coming for your web apps | In this Risky Business sponsored interview James Wilson chats to Kieron Hughes and Andrzej Matykiewicz from PortSwigger about the company’s latest AI pen-testing product, Burp AT. The model has different levels of autonomy modes and is natively integrated with Burp Suite so once it finds vulnerabilities it can spin up intruder attacks, configure everything and brute-force the code. The three also chat about the experiences of beta trial users, including one that found a vulnerability that disclosed reports from the company’s anonymous whistle blower platform. | 21m 31s | ||||||
| 9/25/26 | Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol | A major vulnerability has been found in the ancient TACACS+ networking protocol, Australia’s Prime Minister claims an OpenAI agent hacked the country’s Medicare website, OpenAI gives Ukraine access to its Daybreak cyber-defense program and the UK will establish an anti-disinformation center. | 11m 02s | ||||||
| 9/24/26 | Srsly Risky Biz: Bring on the AI lawsuits | Tom Uren and Patrick Gray talk about US Treasury Secretary Scott Bessent ruling out liability exemptions for AI companies. Its a good move. Leaving the companies on the hook keeps the pressure on them to do better with their cyber security and testing controls. They also discuss a Russian AI-powered cyberespionage campaign run by a group known as Midnight Blizzard. It used AI workflows to run the entire campaign so they got a lot more hacking done and accepted AI mistakes. This makes sense given that they want more intelligence from Ukrainian targets and don’t care at all about getting caught. This episode is also available on YouTube. | 14m 55s | ||||||
| 9/23/26 | Risky Bulletin: Team Cymru unmasks shady Chinese proxy network | A network of 10,000 AI servers is masking malicious Chinese AI activity, Ukrainian hackers leak Russia’s naval secrets, ShinyHunters hacks the FBI, and the EvilTokens phishing service is disrupted by tech companies. | 8m 58s | ||||||
| 9/21/26 | Between Two Nerds: Real-time cyber defence | In this edition of Between Two Nerds Tom Uren and The Grugq talk about whether there is such a thing as real-time cyber defence. Will agentic AI save us from hacking AI? This episode is also available on YouTube. | 24m 56s | ||||||
| 9/21/26 | Risky Bulletin: Gemini finally did some crimes | Google’s Gemini hacked three companies, hackers claim a breach of Russia’s election commission, OpenAI was behind RubyGems’ May incident, and the Coast Guard and FBI board two ships to investigate cyberattacks. | 9m 21s | ||||||
| 9/20/26 | Sponsored: SpecterOps on the impact of AI agents on BloodHound | In this Risky Business sponsored interview, Catalin Cimpanu talks with Justin Kohler, Chief Product Officer at SpecterOps. Justin explains how Entra Agent ID can introduce new identity relationships and potential attack paths. | 15m 52s | ||||||
| 9/11/26 | Risky Bulletin: Anthropic agents went hacking again | Anthropic agents went hacking again, South Korea increases its data breach fines, Apple notifies three Turkish ministers of mercenary spyware attacks, and CISA is ready to hire 250 staff. | 10m 20s | ||||||
| 9/10/26 | Srsly Risky Biz: America's drivers licence breach is a national security disaster | Tom Uren and James Wilson talk about how Chinese intelligence services will take advantage of a massive breach of 150 million American drivers licences. They also discuss the steps the US military is taking to counter adtech device tracking. It’s too slow and not enough. Finally, they talk about how often cryptocurrency hackers claim to be white hat hackers. Its ludicrous, but suprisingly often it is a successful strategy. This episode is also available on YouTube | 24m 44s | ||||||
| 9/9/26 | scam call centercyberattack+3 | — | UkraineUS+2 | Luxembourg | Ukrainescam call center+4 | — | 7m 58s | ||
| 9/7/26 | AIcyber defense+3 | The Grugq | Risky Business Media | — | AIcyber defense+3 | — | 27m 26s | ||
| 9/7/26 | cybersecurityhacking+3 | — | French notariesOpenAI+2 | GermanyFrance | BEC campaigncyber contractors+3 | — | 8m 27s | ||
| 9/6/26 | privileged access managementAI agents+3 | Fletcher Heisler | Authentik Security | — | privileged access managementAI+3 | Authentik | 20m 05s | ||
| 9/4/26 | cybersecuritydata centers+4 | — | DropboxCISA | RussiaSerbia | Russiadata centers+6 | — | 10m 04s | ||
| 9/3/26 | cybersecuritybotnets+3 | James Wilson | Bureau of Alcohol, Tobacco, Firearms and ExplosivesQilin ransomware group+1 | China | Chinabotnets+5 | — | 22m 15s | ||
| 9/2/26 | BGP hijackmalicious updates+3 | — | VirtualizorComposer+3 | — | BGP hijackVirtualizor+6 | — | 9m 14s | ||
| 8/31/26 | AIhacking+3 | The Grugq | Risky Business Media | — | AIhacker+5 | — | 29m 26s | ||
| 8/31/26 | intelligence servicescybersecurity+4 | — | Dutch intelligence servicesAfD+1 | IsraelSouth Korea+1 | Dutch intelligencehacking+6 | — | 7m 07s | ||
| 8/30/26 | cybersecurityAI in security+3 | Edward Wu | Dropzone AI | — | cyber attacksAI+3 | Risky Business Media | 21m 12s | ||
| 7/20/26 | cyber operationsRussia+4 | The Grugq | — | ChinaRussia+1 | cyber warRussia+4 | — | 27m 04s | ||
| 7/20/26 | cybersecurityhacking+4 | — | Magnet ForensicsWordPress | RomaniaHugging Face | hackerland registry+6 | — | 9m 03s | ||
| 7/20/26 | company culturecustomer satisfaction+3 | Haroon Meer | ThinkstEric Ries+2 | — | ThinkstCanary tokens+5 | — | 21m 20s | ||
| 7/16/26 | ransomwareAI+4 | James Wilson | FulcrumSec | — | ransomwareAI+5 | — | 20m 23s | ||
| 7/13/26 | cyber operationsexploits+3 | The Grugq | Ukraine’s cyber security agency | — | cyber powerexploits+5 | — | 30m 08s | ||
| 7/10/26 | cybersecuritydata breach+3 | — | e-rickshawsNSA+2 | India | NSATailored Access Operations+5 | — | 7m 54s | ||
| 7/10/26 | AI in securityemail security+3 | AJ Williams | ASA (Autonomous Security Analyst)ADÉ (Autonomous Detection Engineer)+1 | — | SublimeAI+5 | Sublime | 14m 30s | ||
| 7/9/26 | US Supreme Courtdata sharing+3 | James Wilson | US Supreme CourtEU-US+2 | — | US Supreme CourtSection 702+3 | — | 27m 55s | ||
| 7/8/26 | DHS investigationCISA reassignments+4 | — | DHSCISA+3 | Taiwan | DHSCISA+5 | — | 9m 48s | ||
| 7/6/26 | AIhacking+3 | The Grugq | Risky Business Media | — | AIhacks+5 | — | 32m 14s | ||
| 6/12/26 | patching rulescybersecurity+3 | — | CISARussia+3 | — | CISApatching rules+6 | — | 9m 49s | ||
| 6/12/26 | CI/CDsupply chain security+4 | Jared Atkinson | SpecterOpsGitHub | — | CI/CDGitHub+5 | — | 15m 48s | ||
| 6/11/26 | digital sovereigntyUS tech giants+4 | James Wilson | European UnionNSO Group | US | digital sovereigntyUS tech+4 | — | 19m 48s | ||
| 6/10/26 | cybersecurityhacking+3 | — | WhatsAppGmail+3 | Russia | zero daycybersecurity+6 | — | 11m 27s | ||
| 6/8/26 | cyber operationsmilitary operations+3 | Tom UrenThe Grugq | NATOBetween Two Nerds | Tallinn, Estonia | cyber conflictNATO CyCon+3 | — | 30m 33s | ||
| 6/8/26 | supply chain attacksdependency management+4 | — | RubyGemsAT&T+3 | — | RubyGemsdependency cooldowns+6 | — | 6m 38s | ||
| 6/5/26 | digital sovereigntycybersecurity+3 | — | EUAmerican law firm | — | EUdigital sovereignty+3 | — | 11m 48s | ||
| 6/4/26 | cybersecurityNATO+4 | Tom UrenJames Wilson | NATOUS military | IranChina | NATOcyber conflict+5 | — | 24m 44s | ||
| 6/3/26 | spywarecybersecurity+3 | — | FSBMeta+1 | Russia | FSBspyware+5 | — | 10m 39s | ||
| 6/2/26 | intelligence agenciescults+3 | The Grugq | intelligence agencies | — | intelligencecults+3 | — | 27m 55s | ||
| 5/8/26 | cybersecurityzero-day exploits+3 | — | Palo Alto NetworksGoogle+1 | Russia | Palo Alto Networkszero-day+6 | — | 7m 55s | ||
| 5/7/26 | AI regulationcyber security+3 | James Wilson | US governmentAustralia’s Cyber Incident Review Board+1 | — | AI regulationcyber security+3 | — | 22m 32s | ||
| 5/6/26 | supply chain attackcybersecurity+3 | — | DAEMON ToolsOracle | Australia | supply chain attackDAEMON Tools+3 | — | 8m 48s | ||
| 5/4/26 | cyber normscyber operations+3 | The Grugq | Risky Business Media | — | cybersecuritycyber operations+3 | — | 31m 57s | ||
| 5/4/26 | cybersecurityhacking+3 | — | DigiCertTrellix | — | DigiCerthacking+5 | — | 9m 45s | ||
| 5/3/26 | AI hackingsecurity testing+4 | James KettleDaf Stuttard | Burp SuitePortSwigger | — | AIhacking+6 | — | 24m 56s | ||
| 5/1/26 | cPanel auth bypassCopy Fail vulnerability+5 | — | cPanel | MoldovanDubai | cPanelauth bypass+8 | — | 13m 05s | ||
| 4/30/26 | distillation attacksAI security+3 | Amberleigh Jack | US governmentChinese AI labs+1 | — | distillation attacksAI models+4 | — | 18m 22s | ||
| 4/29/26 | cybersecurityhacking+3 | — | VimeoScattered Spider | UkraineRussia+2 | UkrainiansRussian satellites+7 | — | 8m 31s | ||
| 4/27/26 | hackingcybersecurity+3 | The Grugq | North KoreanDrift | — | hackingNorth Korea+3 | — | 32m 10s | ||
| 4/27/26 | fingerprinting techniqueTor users+4 | — | TorIntellexa | United StatesChina | fingerprintingTor+6 | — | 8m 39s | ||
| 4/26/26 | OT scanningnetwork visualization+3 | HD Moore | — | — | runZeroOT scanning+3 | runZero | 15m 39s | ||
| 4/24/26 | CISA nominationcybersecurity+3 | — | CISABundestag+3 | Cambodia | Sean PlankeyCISA+5 | — | 11m 38s | ||
| 4/23/26 | Elon MuskFrench investigation+4 | — | FBIEuropean countries | — | Elon MuskFrench authorities+5 | — | 22m 24s | ||
| 4/22/26 | ransomwarecybersecurity+4 | — | ChinaEU+1 | Venezuela | ransomwareterrorism designations+4 | — | 9m 31s | ||
| 4/20/26 | AIhacking+3 | The Grugq | OpenAIAnthropic+1 | Mexico | AIhacker+5 | — | 33m 09s | ||
| 4/20/26 | cybersecurityhacking+3 | — | ShinyHuntersVercel+2 | Israel | ShinyHuntersVercel+6 | — | 10m 19s | ||
| 4/19/26 | shadow AIthreat hunting+3 | Sydney Marrone | — | — | shadow AIthreat hunting+3 | Nebulock | 9m 45s | ||
| 4/17/26 | cybersecurityvulnerability management+3 | — | NISTOpenAI+1 | Sweden | NISTCVEs+5 | — | 9m 55s | ||
Showing 71 of 100
Pitch Fit is a Pro feature
See how bookable this show is for guests, which brands already advertise, the per-episode ad value, and the best-fit guest and sponsor profile. The numbers are blurred on the free plan.
How readily this show books outside guests like you.
How proven this show is for host-read sponsorships.
For Guests
ProFor Advertisers
ProUpgrade to Pro to unlock guest cadence, sponsor categories, fit scores, and per-episode ad value for this show.
Similar Audience Demographics
Podcasts that attract a similar listener profile
Chart history for Risky Bulletin
Peaked at #7 in Australia, top 10 in 1 of 45 tracked markets, currently #7 in Australia.
| Market | Genre | Peak | Current | Trend |
|---|---|---|---|---|
| Australia | — | #7 | #7 | — |
| RO | — | #15 | #15 | — |
| Finland | — | #17 | #17 | — |
| New Zealand | — | #18 | #18 | — |
| South Africa | — | #21 | #21 | — |
| Norway | — | #22 | #22 | — |
| Ireland | — | #24 | #24 | — |
| PH | — | #24 | #24 | — |
| PL | — | #28 | #28 | — |
| CO | — | #28 | #28 | — |
| IS | — | #29 | #29 | — |
| ID | — | #29 | #29 | — |
| Netherlands | — | #30 | #30 | — |
| AR | — | #34 | #34 | — |
| United States | — | #36 | #36 | — |
| United Kingdom | — | #36 | #36 | — |
| Spain | — | #37 | #37 | — |
| CZ | — | #39 | #39 | — |
| SG | — | #40 | #40 | — |
| Sweden | — | #41 | #41 | — |
Chart Positions
45 placements across 45 markets.
Chart Positions
45 placements across 45 markets.