Risky Business #831 -- The AI bugpocalypse begins

About this episode

The episode discusses recent cybersecurity news, including hacking incidents and AI advancements in security.

On this week’s show, Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Those pesky North Koreans shim a backdoor into a 100M-downloads-a-week npm package TeamPCP appear to have ransacked Cisco’s source and cloud environments AI is getting legitimately good at being told to “just go find some 0day in this” Kaspersky says Coruna and Triangulation do share code lineage Iranian hackers dump Kash Patel’s gmail spool Oh, and of course there’s a Citrix Netscaler memory leak being exploited in the wild This week’s episode is sponsored by Dropzone AI, who make automated AI SOC analysts. Head honcho Ed Wu explains how they’ve built pre-canned ‘hunt packs’ to lead the AI off into your environment to find weird, interesting and security relevant things. This episode is also available on Youtube.

People in this episode

Hosts: Patrick Gray, Adam Boileau, James Wilson

Guest: Ed Wu

Topics covered

• cybersecurity news
• AI in security
• hacking incidents
• vulnerabilities
• sponsored content

Keywords

• cybersecurity
• AI
• hacking
• vulnerabilities
• North Korea
• Cisco
• Kaspersky
• Dropzone AI

Sponsors

Dropzone AI

Mentioned in this episode

Organizations: North Koreans, TeamPCP, Cisco, Kaspersky, Citrix

More episodes of Risky Business

• Risky Business #841 -- Microsoft gets owned and 0day'd · June 10, 2026 · 1h 3m
• Soap Box: Detection and response in the AI age · June 5, 2026 · 37 min
• Risky Business #840 -- Microsoft walks back researcher threats · June 3, 2026 · 1h 6m
• Risky Business #839 -- TeamPCP stole GitHub's internal repos · May 27, 2026 · 1h 0m
• Risky Business #838 -- GitHub investigates possible breach · May 20, 2026 · 1h 3m
• Soap Box: Where does AI fit into cloud security? · May 15, 2026 · 34 min