Risky Business #834 -- Vercel gets owned, Mozilla dumps hundreds of Mythos bugs

About this episode

This episode discusses recent cybersecurity news including Vercel's security breach and Mozilla's bug discovery efforts.

On this week’s show, Patrick Gray and James Wilson are joined by special guest The Grugq. They discuss the week’s cybersecurity news, including: Vercel got owned, and there’s a few infostealer and compromised employee dots to connect Mozilla used Mythos to find 271 bugs, which feels like a sign of the bug-pocalypse Speaking of the bug-pocalypse, is that why NIST is noping out of enriching a bunch of bugs? The NSA is using Mythos even though the government did that whole Anthropic blacklisting thing And DDos attacks hit a couple of smaller-player socials This week’s episode is sponsored by Permiso. Ian Ahl chats to Pat about the subtle signals Permiso uses to detect ShinyHunters-style activity in cloud and on-prem environments. This episode is also available on Youtube.

People in this episode

Hosts: Patrick Gray, James Wilson

Guest: The Grugq

Topics covered

• cybersecurity
• infostealer
• bug discovery
• DDoS attacks
• cloud security

Keywords

• cybersecurity
• Vercel
• Mozilla
• Mythos
• DDoS attacks
• Permiso
• infostealer
• bugs

Sponsors

Permiso

Mentioned in this episode

Organizations: Vercel, Mozilla, NIST, NSA, Anthropic

Products: Mythos

More episodes of Risky Business

• Risky Business #841 -- Microsoft gets owned and 0day'd · June 10, 2026 · 1h 3m
• Soap Box: Detection and response in the AI age · June 5, 2026 · 37 min
• Risky Business #840 -- Microsoft walks back researcher threats · June 3, 2026 · 1h 6m
• Risky Business #839 -- TeamPCP stole GitHub's internal repos · May 27, 2026 · 1h 0m
• Risky Business #838 -- GitHub investigates possible breach · May 20, 2026 · 1h 3m
• Soap Box: Where does AI fit into cloud security? · May 15, 2026 · 34 min