Risky Business #836 -- You can't patch the bugpocalypse

About this episode

The episode discusses recent cybersecurity news and the challenges of patching vulnerabilities.

On this week’s show, Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin. They discuss the week’s cybersecurity news, including: The US Government says we just have to patch faster, but… Bugs in cPanel, MoveIt and all Linux distributions this week show that patching alone isn’t enough James gets mad about lame AI Agent adoption advice from the US and Australian Governments James Kettle and Niels Provos both showed us that any model can find 0day like Mythos And the cyber-assisted theft of cargo results in an astonishing loss of $725 million dollars This week’s show is sponsored by SpecterOps. Their CTO, Jared Atkinson, chats to Pat about the big changes in the threat landscape, brought about by AI, that are causing a pivot away from detection and remediation, and toward prevention. This episode is also available on Youtube.

People in this episode

Hosts: Patrick Gray, James Wilson

Guest: Brad Arkin

Topics covered

• cybersecurity
• patching
• AI
• 0day vulnerabilities
• cargo theft
• threat landscape

Keywords

• cybersecurity
• patching
• AI
• 0day
• cargo theft
• threat landscape
• cPanel
• MoveIt
• Linux distributions

Sponsors

SpecterOps

Mentioned in this episode

Organizations: US Government, Australian Governments

More episodes of Risky Business

• Risky Business #841 -- Microsoft gets owned and 0day'd · June 10, 2026 · 1h 3m
• Soap Box: Detection and response in the AI age · June 5, 2026 · 37 min
• Risky Business #840 -- Microsoft walks back researcher threats · June 3, 2026 · 1h 6m
• Risky Business #839 -- TeamPCP stole GitHub's internal repos · May 27, 2026 · 1h 0m
• Risky Business #838 -- GitHub investigates possible breach · May 20, 2026 · 1h 3m
• Soap Box: Where does AI fit into cloud security? · May 15, 2026 · 34 min