On this week’s show Patrick Gray and James Wilson are joined by guest co-host Robby Winchester from SpecterOps to talk through the week’s news, including:

ID verification company IDScan was breached and 153m driver licenses wound up for sale online. Cue the barrage of lawsuits
The US government plans to pay private contractors to conduct military hacks
The US accuses China of distillation attacks, a.k.a. forbidden training
It’s Wednesday, so OpenAI’s agents escaped sandboxes again and passed notes around on a German Wiki
Much, much more…

This week’s show is brought to you by Sublime Security. Sublime’s head of detection engineering Randy Pargman joins the show to chat about how the company is preparing for prompt injection attacks to move from being largely theoretical to commonplace.

This episode is also available on YouTube

Show notes

Risky Business #852 -- Cyber Command wants to buy shells

Risky Business

Risky Business #852 -- Cyber Command wants to buy shells