Risky Business·Nov 11, 2026·1h 9m

Risky Business #859 -- ARTEX damage approaches crisis levels

Download audio Show notes Apple Podcasts Spotify

Show notes

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including:

Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis
The French government attributes freezer hacks to Iran’s IRGC
Rob Joyce was right and the breachpocalypse has exhausted global IR resources
The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice!
Much, much more!

This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical again. Raj used OpenAI LLMs to bypass that SMB signing and come up with some unnatural ldap tricks as well. Those techniques are now patched, but Raj learned a lot about parallel discovery in the AI age.

This episode is also available on YouTube

Show notes

← Previous

Soap Box: Security must be more browser-centric

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including: Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis The French government attributes freezer hacks to Iran’s IRGC Rob Joyce was right and the breachpocalypse has exhausted global IR resources The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice! Much, much more! This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical again. Raj used OpenAI LLMs to bypass that SMB signing and come up with some unnatural ldap tricks as well. Those techniques are now patched, but Raj learned a lot about parallel discovery in the AI age. This episode is also available on YouTube Show notes WorkOS says attacker used ARTEX AI to breach internal sales app Russia's AI-powered hacks are causing chaos in Ukraine Microsoft November 2026 Patch Tuesday OpenAI says GPT-6 Cyber found 81 Firefox flaws and 948 Linux bugs Attacker abuses Microsoft Entra ID to target downstream MSP clients Pat Opet (@patopet) on X Hackers enlist Artex to scan GitHub repositories for exposed secrets Nearly 1.5 million exposed secrets targeted in new revocation program ARTEX exposed hosts Claude Code settings files expose thousands of secrets on GitHub Chainalysis breach AI-fueled hacking is getting worse — top cyber companies are turning away some victims SI impersonation fraud indictment (Soall, Hazan, Sheetrit) Cyberattack disrupts blood-storage refrigeration systems in France FBI and CISA warn of cyberattacks targeting refrigeration systems France blames Iran for fridge cyberattacks, says some caused fires Lesley Carhart - Let’s Talk About Why all This OT Stuff is Connected OpenSSH flaw lets attackers log into password-disabled Linux accounts GhostMap: The Android flaw that crashes your phone before you open the app Labs Want to Rent an Internet Address at the White House? French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million GOPAX suspends withdrawals and trading following hacking threats FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers What Democratic control of Congress means for cybersecurity Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain Japan announces emergency cybersecurity package following a wave of attacks Iris Ohyama data cloud breach exposes info of 7.7 million customers APT29 watering hole (Plerdy, America250) Pro-Russian hackers target European officials, offer rewards for personal information Nvidia probes whether Chinese intelligence targeted its CEO The Babylon Bee (@TheBabylonBee) on X NTLM relay made new again!