Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
Risky Business #859 -- ARTEX damage approaches crisis levels
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including:
- Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis
- The French government attributes freezer hacks to Iran’s IRGC
- Rob Joyce was right and the breachpocalypse has exhausted global IR resources
- The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice!
- Much, much more!
This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical again. Raj used OpenAI LLMs to bypass that SMB signing and come up with some unnatural ldap tricks as well. Those techniques are now patched, but Raj learned a lot about parallel discovery in the AI age.
This episode is also available on YouTube
Show notes
- WorkOS says attacker used ARTEX AI to breach internal sales app
- Russia's AI-powered hacks are causing chaos in Ukraine
- Microsoft November 2026 Patch Tuesday
- OpenAI says GPT-6 Cyber found 81 Firefox flaws and 948 Linux bugs
- Attacker abuses Microsoft Entra ID to target downstream MSP clients
- Pat Opet (@patopet) on X
- Hackers enlist Artex to scan GitHub repositories for exposed secrets
- Nearly 1.5 million exposed secrets targeted in new revocation program
- ARTEX exposed hosts
- Claude Code settings files expose thousands of secrets on GitHub
- Chainalysis breach
- AI-fueled hacking is getting worse — top cyber companies are turning away some victims
- SI impersonation fraud indictment (Soall, Hazan, Sheetrit)
- Cyberattack disrupts blood-storage refrigeration systems in France
- FBI and CISA warn of cyberattacks targeting refrigeration systems
- France blames Iran for fridge cyberattacks, says some caused fires
- Lesley Carhart - Let’s Talk About Why all This OT Stuff is Connected
- OpenSSH flaw lets attackers log into password-disabled Linux accounts
- GhostMap: The Android flaw that crashes your phone before you open the app Labs
- Want to Rent an Internet Address at the White House?
- French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million
- GOPAX suspends withdrawals and trading following hacking threats
- FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers
- What Democratic control of Congress means for cybersecurity
- Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
- Japan announces emergency cybersecurity package following a wave of attacks
- Iris Ohyama data cloud breach exposes info of 7.7 million customers
- APT29 watering hole (Plerdy, America250)
- Pro-Russian hackers target European officials, offer rewards for personal information
- Nvidia probes whether Chinese intelligence targeted its CEO
- The Babylon Bee (@TheBabylonBee) on X
- NTLM relay made new again!