In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

FBI intervenes in Scattered Spider Salesforce leaksite
Clop loots Oracle E-Biz deployments
Plus so much more data extortion.. At least it’s not ransomware … we guess?
The US still can’t decide who’s gonna be in charge of NSA & Cybercom
Cambodian scam compounds get sanctioned and $15b in crypto is seized
NSO gets sold for pocket-lint-grade money
Bugs! Redis CVSS 10, Ivanti, Crowdstrike and… Internet Explorer?! zeroday?! In the wild?!!!?

This week’s episode is sponsored by Stairwell. Founder Mike Wiacek talks about how Stairwell brings VirusTotal-like visibility to private files, and about integrating the insights that brings into your SOC workflow.

This episode is also available on Youtube.

Show notes

FBI takedown banner appears on BreachForums site as Scattered Spider promotes leak | The Record from Recorded Future News
Dozens of Oracle customers impacted by Clop data theft for extortion campaign | CyberScoop
Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882)
Clop is a Big Fish, But Not Worth Hunting - Risky Business Media
ShinyHunters Wage Broad Corporate Extortion Spree – Krebs on Security
The company Discord blamed for its recent breach says it wasn't hacked
Qantas confirms cybercriminals released stolen customer data | The Record from Recorded Future News
Red Hat confirms breach of GitLab instance, which stored company’s consulting data | CyberScoop
Risky Bulletin: Microsoft revamps Edge's "IE Mode" after zero-day attacks - Risky Business Media
Teenagers arrested in England over cyberattack on nursery chain Kido | The Record from Recorded Future News
Acting US Cyber Command, NSA chief won’t be nominated for the job, sources say | The Record from Recorded Future News
Layoffs, reassignments further deplete CISA | Cybersecurity Dive
Trump’s scandalous directive to AG Pam Bondi reached the public by accident
Feds sanction Cambodian conglomerate over cyber scams, seize $15 billion from chairman | The Record from Recorded Future News
US Congress committee investigating Musk-owned Starlink over Myanmar scam centres | Myanmar | The Guardian
Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data | WIRED
Netherlands invokes special powers against Chinese-owned semiconductor company Nexperia | The Record from Recorded Future News
Spyware maker NSO Group confirms acquisition by US investors | TechCrunch
Apple Announces $2 Million Bug Bounty Reward for the Most Dangerous Exploits | WIRED
Wiz Finds Critical Redis RCE Vulnerability: CVE‑2025‑49844 | Wiz Blog
SonicWall admits attacker accessed all customer firewall configurations stored on cloud portal | CyberScoop
SonicWall SSLVPN devices compromised using valid credentials | Cybersecurity Dive
Issues Affecting CrowdStrike Falcon Sensor for Windows
ZDI Drops 13 Unpatched Ivanti Endpoint Manager Vulnerabilities - SecurityWeek
Jaguar Land Rover launches phased restart at factories after cyber-attack | Jaguar Land Rover | The Guardian
Windows 10 support ends today — here's who's affected and what you need to do

Risky Biz Soap Box: Why Mastercard is scaling its cybersecurity business

Risky Business

How Mastercard Uses Threat Intelligence to Stop Fraud

Show notes

The AI-powered Podcast Player