Risky Business #830 -- LiteLLM and security scanner supply chains compromised

About this episode

The episode discusses recent cybersecurity news including supply chain attacks and regulatory issues.

On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They talk through: TeamPCP’s supply chain attack on Github, and they threw in an anti-Iran wiper, because why not?! Anthropic hooks up its models to just… use your whole computer After Stryker’s Very Bad Day, CISA says maybe add some more controls around your Intune? Another iOS exploit kit shows up in the cyber bargain-bin The FTC decides to ban… all new home routers?! U wot m8?! Supermicro founder was personally sanction-busting Nvidia GPUs into China?! This week’s episode is sponsored by enterprise browser maker, Island. Chief Customer Officer Bradon Rogers joins Pat to explain how its customers are using Island to control the use of personal AI services in regulated industries. This episode is also available on Youtube.

People in this episode

Hosts: Patrick Gray, Adam Boileau, James Wilson

Topics covered

• cybersecurity news
• supply chain attacks
• AI services
• exploit kits
• regulatory controls
• sanction-busting

Keywords

• cybersecurity
• supply chain attack
• Github
• CISA
• FTC
• Nvidia GPUs
• AI services
• exploit kit

Sponsors

Island

Mentioned in this episode

Organizations: TeamPCP, Github, CISA, FTC, Supermicro

Products: Nvidia GPUs, iOS exploit kit, Intune

Places: China, Iran

More episodes of Risky Business

• Risky Business #841 -- Microsoft gets owned and 0day'd · June 10, 2026 · 1h 3m
• Soap Box: Detection and response in the AI age · June 5, 2026 · 37 min
• Risky Business #840 -- Microsoft walks back researcher threats · June 3, 2026 · 1h 6m
• Risky Business #839 -- TeamPCP stole GitHub's internal repos · May 27, 2026 · 1h 0m
• Risky Business #838 -- GitHub investigates possible breach · May 20, 2026 · 1h 3m
• Soap Box: Where does AI fit into cloud security? · May 15, 2026 · 34 min