Risky Business·Nov 4, 2026·1h 1m

Risky Business #858 -- The $6.3b laptop

Download audio Show notes Apple Podcasts Spotify

Show notes

The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess
Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute!
A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking”
An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more!

This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gray to chat about fear around the looming post-quantum cryptography crisis, and how CISOs can use it as an opportunity to clean up house and finally take all the end-of-life products out to pasture.

This episode is also available on YouTube

Show notes

← Previous

Snake Oilers: Minimal.dev, Request Rocket and TRM Labs

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including: The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute! A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking” An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more! This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gray to chat about fear around the looming post-quantum cryptography crisis, and how CISOs can use it as an opportunity to clean up house and finally take all the end-of-life products out to pasture. This episode is also available on YouTube Show notes Binance hot wallet heist (Oct 2026) | therecord.media Binance on X: "29 October Binance Security Incident: Initial Findings and Response Update" / X | X (formerly Twitter) Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform | therecord.media Polymarket DebugBear script compromise | The Hacker News Chainalysis "offensive agentic techniques" breach | BleepingComputer Trezor warns of suspected crypto-theft implant in hardware wallet | BleepingComputer Second wave of suspected cyberattacks hits supermarket freezers across Europe | The Record Amadeus booking data breach | "Data breach" – Google Alert DHS Icepick personnel data leak | "Data breach" – Google Alert Google says LLMjacking attacks can rack up $1 million in cloud AI charges | BleepingComputer Northflank security breach leads to abuse of customers' AI API keys | BleepingComputer Rikiya Takehi (@rikiyatakehi) on X | X (formerly Twitter) Russia's AI-powered hacks are causing chaos in Ukraine - Risky Business Media | Volt Typhoon "Silent Train" network | zetter-zeroday.com Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware | BleepingComputer PHP2Shell (CVE-2026-109618/109619) | Cybersecurity Dive GitLab CVE-2026-97229 CI/CD regex RCE | BleepingComputer CISA warns of hackers now exploiting critical Node2Shell flaw | BleepingComputer Critical Linux kernel flaw allows remote root attacks on MPTCP servers | BleepingComputer Marcus Hutchins (@MalwareTechBlog) on X | X (formerly Twitter) New Android "SMS of Death" exploit can remotely crash unpatched phones | BleepingComputer Hackers now scanning systems for recently patched Oracle flaw | BleepingComputer Ivanti patches two more Connect Secure zero-days chained in attacks | BleepingComputer Trojanized Claude Code extension (v2.1.313) | Step Security Blog Germany says lawmakers' iPhones may have been hacked with spyware | TechCrunch Security Google disrupts million-device XCPE Android malware botnet, bans TV box maker | BleepingComputer vx-underground (@vxunderground) on X | X (formerly Twitter)