Project
Weekly podcast and media outlet covering cybersecurity news, policy, and vulnerability research, with sister publication Seriously Risky Business.
Five Eyes cyber agencies issued a call-to-action saying AI is accelerating the speed, scale and sophistication of cyber threats. Risky Business reads it as the agencies' view that limiting AI's offensive capabilities to benign actors is no longer possible.
Reality
French notaries lost the money to intruders who lived on their networks and edited payment details before the instructions went out, which is why bank-side verification kept waving the transfers through.
Reality
A presidential memo directs DHS to authorise vetted private firms to conduct cyber surveillance and cyber effects operations against foreign criminal groups. The boundaries matter more than the announcement.
Perspective Coverage
4 publishersReality
Team Cymru counted more than 10,000 self-hosted LLM gateways fronting traffic out of China. They pool accounts behind keys of their own, so the model provider logs the relay's address and never the user's.
Reality
Treasury secretary Scott Bessent ruled out liability exemptions for the frontier labs in the same week, so the labs stay inside existing law while their agents accumulate logged incidents.
Reality
The public account is a single Risky Business Features episode from September 11, 2026, in which OpenSourceMalware founder Paul McCarty describes how researchers pull malicious packages apart and what one family does after removal.
Reality
France's ANSSI spent two years quietly evicting a crew that had been altering payment instructions inside notary networks. The procedural fix that landed takes bank details off email rather than checking whether they changed.
Reality
Operators of more than 180 Russian facilities, most of them inside Ukrainian strike range, have been told to fund counter-drone protection themselves, with temporary state administration as the penalty for those who do not.
Perspective Coverage
3 publishersReality
X41 D-Sec's proof of concept for CVE-2026-48710 is one unauthenticated GET whose Host header carries /public?bar=. Starlette sits underneath LiteLLM, vLLM and MCP servers, so the work starts with a dependency query.
Reality
Two suspects in Western Australia are in custody over the supply-chain worm that hit Trivy, KICS, LiteLLM and Telnyx. The 500,000 credentials it harvested stay valid until someone rotates them. Only 78,000 have surfaced publicly.
Reality
Refusing a data demand becomes a criminal matter for Dutch companies and citizens, while the panel that reviews taps in advance shrinks, which changes the disclosure math for anyone hosting or peering in the Netherlands.
Reality
Cloudflare and Google DoH/DoT endpoints are failing on Russian networks, but the largest public measurement found no protocol-wide block. That makes the breakage messier, not milder.
Perspective Coverage
3 publishersReality