Risky Bulletin

In this edition of Between Two Nerds Tom Uren and The Grugq discuss how important people are to cyber power and whether the rise of AI is changing that.

This episode is also available on YouTube.



Show notes



Hugging Face incident


OpenAI release


Security review cost from Vercel

A JSON bug is about to rock the Java world, scam compounds continue in Myanmar despite the junta crackdown, and Google has a new APT naming scheme.



Show notes



Risky Bulletin: A JSON RCE bug is about to rock the Java world

In this sponsored interview James Wilson chats with Airlock Digital co-founders David Cottingham and Daniel Schell about how attackers are using LLMs to enumerate EDR detections.

LLMs dramatically reduce the time and specialist labour needed to extract rulesets out of EDR products. What once might have taken months of manual reversing can now be accelerated by “burning tokens”. The takeaway is that defenders increasingly need to assume attackers have visibility into how their endpoint security products work.



Show notes

A Russian hacking campaign targets Zimbra servers, the US accuses Moonshot AI of distillation attacks, Iran targets more PLC vendors, and Google adds selfie video to its login options.



Show notes



Risky Bulletin: Western cyber agencies warn of Russian hacks of Zimbra servers

Tom Uren and James Wilson talk about the future of open-weight models. For different reasons, both the Chinese and American governments have reasons to crack down on them.

They also talk about arrests of several members of the Scattered Spider juvenile cybercrime collective.

This episode is also available on YouTube



Show notes