Risky Business #849 -- Trump will unleash contractors on cybercriminals

On this week’s show Patrick Gray and James Wilson are joined by guest co-host Dmitri Alperovitch to talk through the week’s news, including:

Trump’s memo authorising the private sector to release the cyber hounds is fine, don’t worry! OpenAI finally decides to add a few safety measures after the whole “oopsie we committed some felonies” thing Anthropic’s models start a turf war when given the same task, surprising… nobody We can’t figure out whether a device that can hack a 737 is showboating stunt hacking or … something more real-world cool. Or both. Or something. Much, much more

This week’s show is brought to you by threat hunt and detection platform Nebulock. Founder and CEO Damien Lewke joins Pat to chat about what it looks like when you try to reinvent the SIEM in 2026 on a clean sheet of paper.

This episode is also available on YouTube

Show notes

• Trump signs memo authorizing private sector to launch cyberattacks | washingtonpost.com
• Trump taps cyber firms to go on offensive against criminals | therecord.media
• OpenAI Overhauls Safety Protocols After Its AI Agents Went Rogue | wired.com
• Pacing model development in an era of cyber-critical capabilities |
• Anthropic set AI agents loose on the same task. They started a turf war. | TechCrunch Security
• Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan | cyberscoop.com
• Researchers find AI-powered hacking tools for sale in underground forums | Cybersecurity Dive
• Terabytes of credentials leaked in massive supply-chain attack | arstechnica.com
• Trivy, Not LiteLLM Behind the 2,500 Org Compromise | securityweek.com
• Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikes | The Record
• ‘Unprecedented’ number of Apple users received recent spyware alert, say investigators | TechCrunch Security
• This Coin-Sized Device Can Hack a Boeing 737 | wired.com
• "City-Forum" data-theft attacks target Salesforce, ServiceNow portals | BleepingComputer
• Max severity SAP Commerce Cloud flaw now targeted in attacks | BleepingComputer
• Shell investigates 'potential incident' after Clop data theft claims | BleepingComputer
• Philips and GE investigating Clop ransomware data theft claims | BleepingComputer
• Uber Freight reportedly investigating after hacking group claims data breach | TechCrunch Security
• Details emerge on BlackFile’s recent attacks on financial companies | cyberscoop.com
• After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug | TechCrunch Security
• Kimwolf botnet rebuilt to survive takedowns, researchers say | cyberscoop.com
• Hundreds of fake Chrome VPN extensions route traffic through a proxy | BleepingComputer
• Deepfake hiccup unmasks suspected digital certificate fraudster | theregister.com
• Vulnerability giving attackers full control of Macs is under active exploitation | arstechnica.com
• Critical VMware vCenter RCE flaw exploited for reverse SSH access | BleepingComputer
• Poland probes MyDr healthcare software breach potentially affecting 19 million people | therecord.media
• Crypto hardware wallet owners face fresh security risks after recent spate of personal data thefts | TechCrunch Security
• [un]prompted.au — AI × Cybersecurity Conference · Sydney, 18–19 September 2026 | [un]prompted.au