News & Map

When satellites are hacked: the legal gray zone of non-kinetic space attack

While kinetic attacks, like direct-ascent missiles, on satellites are well understood, less appreciated are non-kinetic ...

ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper

Risky Business #821 -- Wiz researchers could have owned every AWS customer

In this week’s show, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, joined by a special guest. BBC...

Is it time for internet services to adopt identity verification?

Should verified identities become the standard online? Australia’s social media ban for under-16s shows why the question...

Risky Business #820 -- Asian fraud kingpin will face Chinese justice (pew pew!)

Risky Business returns for 2026! Patrick Gray and Adam Boileau talk through the week’s cybersecurity news, including: Sa...

How the World Got Owned Episode 1: The 1980s

In this special documentary episode, Patrick Gray and Amberleigh Jack take a historical dive into hacking in the 1980s. ...

This month in security with Tony Anscombe – December 2025 edition

As 2025 draws to a close, Tony looks back at the cybersecurity stories that stood out both in December and across the wh...

Revisiting CVE-2025-50165: A critical flaw in Windows Imaging Component

A comprehensive analysis and assessment of a critical severity vulnerability with low likelihood of mass exploitation

LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan

ESET researchers discovered a China-aligned APT group, LongNosedGoblin, which uses Group Policy to deploy cyberespionage...

Risky Business #819 -- Venezuela (credibly?!) blames USA for wiper attack

In the final show of 2025, Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: React2Shell a...

ESET Threat Report H2 2025

A view of the H2 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and r...

Black Hat Europe 2025: Was that device designed to be on the internet at all?

Behind the polished exterior of many modern buildings sit outdated systems with vulnerabilities waiting to be found

Black Hat Europe 2025: Reputation matters – even in the ransomware economy

Being seen as reliable is good for ‘business’ and ransomware groups care about 'brand reputation' just as much as their ...

Risky Business #818 -- React2Shell is a fun one

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: There’s a CVSS 10/10...

Risky Business #817 -- Less carnage than your usual Thanksgiving

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. It’s a quiet week with Thanksgi...

MuddyWater: Snakes by the riverbank

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predi...

This month in security with Tony Anscombe – November 2025 edition

Data exposure by top AI companies, the Akira ransomware haul, Operation Endgame against major malware families, and more...

Risky Business #816 -- Copilot Actions for Windows is extremely dicey

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Salesforce partner G...

Influencers in the crosshairs: How cybercriminals are targeting content creators

Social media influencers can provide reach and trust for scams and malware distribution. Robust account protection is ke...

Risky Business #815 -- Anthropic's AI APT report is a big deal

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Anthropic says a Chi...

China’s creepiest export surge

Countries are queuing to buy the tools and techniques of the CCP’s security state

Risky Business #814 -- It's a bad time to be a scam compound operator

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: The KK Park scam com...

Risky Business #813 -- FFmpeg has a point

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: We love some good vu...

Risky Business #812 -- Alleged Trenchant exploit mole is ex-ASD

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: L3Harris Trenchant b...

Risky Business #811 -- F5 is the tip of the crap software iceberg

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: China has been rumma...

Wide World of Cyber: A deep dive on the F5 hack

In this edition of the Wide World of Cyber podcast Patrick Gray talks to Chris Krebs and Alex Stamos about the F5 incide...

Risky Business #810 -- Data extortion attacks have a silver lining

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: FBI intervenes in Sc...

Risky Business #809 -- Hackers try to pay a journalist for access to the BBC

On this week’s show Patrick Gray is on holiday so Amberleigh Jack and Adam Boileau hijack the studio to discuss the week...

Risky Business #808 -- Insane megabug in Entra left all tenants exposed

On this week’s show Patrick Gray and special guest Rob Joyce discuss the week’s cybersecurity news, including: Secret Se...

Risky Business #807 -- Shai-Hulud npm worm wreaks old-school havoc

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Shai-Hulud worm prop...

Risky Business #806 -- Apple's Memory Integrity Enforcement is a big deal

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Apple ruins exploit ...

UK urged to overhaul military procurement to remove China-made parts