James Wilson

I get that vendors are inundated with bug reports due to AI. But 1,400+ bugs in a Patch Tuesday is just asking for trouble, and not giving us the info we need. This is the theme of my latest solo podcast for Risky Business Features. Enjoy! 🎧 risky.biz/RBFEATURES41/

Did anyone outside of banking actually use the term "ledger" before our agents thought it was what every harness needed?

Unprecedented number of bug fixes in a patch = bad release management. It's the favourite metric of vulnpocalypse but it missed the point entirely. This is my latest solo pod for Risky Business Features. 🎧 risky.biz/RBFEATURES41/

Just had a great interview … hope I get the job 🤞

Ransom payments end up in the wallets of drug and other crime gangs too. This changed my mind about ransom payment regulation. Geoff White (CyberHack, Conti Files, Lazarus Heist) and I sat down for a chat about just how ransomware gangs turn traceable bitcoin into cash. 🎧 risky.biz/RBFEATURES40/

How? How did Apple manage to make Siri *even worse* in watchOS / iOS 27.

I wanted to know how supply chain malware research is done. Who better to chat to about this than Paul McCarty from @opensourcemalware.bsky.social! We recorded an 85 minute deep dive into malware research techniques, tradecraft and risk mitigations. Enjoy! risky.biz/RBFEATURES39/

ICYMI: Trump's cyber memo is not a general licence for companies to hack back or a letter of marque. It creates a government-controlled program for vetted firms to surveil and disrupt foreign criminal groups. @bradarkin.bsky.social and I unpack what it could mean for CISOs. risky.biz/RBFEATURES38/

Hey look... I bought an N-able N-central server!

Having the (awful) Music app open when double clicking an audio file is such a pain, but it worked. So instead I tried setting the "Always open in..." to QuickTime Player. But... now apparently that audio file that could open in Music could be malware. Another step closer to ditching macOS.

TeamPCP caused global software supply-chain chaos while leaving a trail of recycled handles, old forum records and passive DNS. Brian Krebs joined me to explain how he followed it to Perth, and what he learned from speaking with the group’s alleged leader. risky.biz/RBFEATURES37/

If an AI finds a vulnerability or attack no human researcher had considered, is it still “just predicting tokens”? My latest Risky Business Features interview with @albinowax.bsky.social gets into AI, HTTP desync, novel security research, and why the expert still matters. risky.biz/RBFEATURES35/

I built Token Envy because “Claude Code feels slow today” was impossible to verify. It turns local session metadata into a private performance baseline and shareable card. Prompts stay on your machine. Try it: npx tokenenvy www.npmjs.com/package/toke... #TokenEnvy

ICYMI: I published a pod on private AI inference. Hosted LLMs that hide your chats from the provider. Trusted execution environments, GPU confidential computing, attestation, KV-cache side channels, and why “we don’t train on your data” is not the same as “we can’t see it.” risky.biz/RBFEATURES34/

This is the Cam Wilson story I spoke about on last Wednesday’s show… published today www.abc.net.au/news/2026-08...

We’re putting more and more sensitive thinking into LLMs: code, credentials, product plans, deeply personal context... So who actually gets to see the prompt? I spoke with Tinfoil co-founder Tanya Verma about how Private LLM Inference works, and the social implications. risky.biz/RBFEATURES34/

New solo pod from me delving into the real cost of having to switch from an open-weight LLM to a close-weight API. It's not an easy switch, especially for cybersecurity work. The trust boundary, privacy, capabilities, availability, and most of all model behaviour matters. 🎧 risky.biz/RBFEATURES33/

Ah, there is it. Settings -> Notifications…

Fittingly on that topic: Regarding Attacker-Defender asymmetry @ensarseker.bsky.social says to @jameswilson.io , that while attackers adopt AI very maturely and ar professionalizing their operations, defender can utilize AI to get even but: Many organisations are still learning to adopt AI. 🧵1/2

FortiBleed is the antidote to vague “AI-powered attacker” talk. AI was wired into reconnaissance, credential processing, prioritisation, tooling, and workflow. They didn't prompt the agent, the agents prompted them. *That* is AI adoption for cyber. 🎧 New Podcast Episode: risky.biz/RBFEATURES32/

Uhh... my Mac just binned Codex and claimed it was malware. Where does one find a bit more info about... *why* this happened?!

Mythos on your desk. Source-local code reviews with frontier-like capabilities. Karsten Nohl and I talked for an hour about this in the latest Risky Business Features episode available now on YouTube and your favourite Podcast app. 🎧 risky.biz/RBFEATURES30/ 📺 www.youtube.com/watch?v=nhS5...

Fable 5 made guardrails the load-bearing safety mechanism. It's the same model as Mythos 5. Public safety depends on external controls doing exactly what they claim to do. And they didn't. I unpack the whole saga here: risky.biz/RBFEATURES27/

I’d like to thank Trump personally for freeing up more capacity for the real OG, Claude 4.8. Thanks bud!

npm v12 won’t stop supply chain attacks. It’s a step forward, but the supply chain attacks and worms will continue. 🎧 risky.biz/RBFEATURES26/ Paul McCarty from @opensourcemalware.bsky.social joined me for this weeks Risky Business Features podcast to talk about npm and supply chain attacks.

Vulnerabilities? Outages? Broken features? As long as it's in the name of AI innovation, KEEP GOING!! -- Seemingly most CEO's these days. So, what's a CISO to do? Hear from Brad Arkin (former CISO at Cisco, Adobe and Salesforce) on our latest Risky Business Features episode. risky.biz/RBFEATURES25/

New solo podcast on TeamPCP, trying to answer what we can learn about them from what they did and how they did it. This actor leaves so many unanswered questions (like... why?!).. but their arc from clumsy kubernetes crypto mining to supply-chain villains tell us a lot. risky.biz/RBFEATURES24/

Supply chain compromise. You know it's going to happen to you. It's inevitable. So, here's how to survive it with advice from ex-Adobe/Cisco/Salesforce CISO, Brad Arkin: 🎧 risky.biz/RBFEATURES23/

Uhhh... Apple... I'm, I'm already on Tahoe.

When @jameswilson.io reached out, he was upfront with his criticism for how we disclosed copy fail publicly. But we appreciated his willingness to listen and understand how AI has exposed risks in established disclosure protocals that had been dormant under the surface...

Really enjoyed the time with James at Risky Business. Between his James Kettle interview and mine: the models we have today can already do remarkable work; if you take the time to codify your expertise into scaffolding. And what that looks like with IronCurtain, and on what businesses need to do.

I'm sure we could've gone for 3 hours... but Niels and I reigned ourselves in after 90 minutes of talking through exactly how lesser models can find 0day all day... if you know how to orchestrate them in a way that turns your techniques into their state machines.

If you would like to see a preview of @jameskettle.com's Blackhat talk "the HTTP terminator" then check out this interview my colleague @jameswilson.io recorded with him. Some pretty freaky stuff! VIDEO: www.youtube.com/watch?v=GdFG... AUDIO: risky.biz/RBNEWSSI126/

People kept saying LLMs won't find logic bugs, just memory corruption. Nicholas Carlini from Anthropic found a critical vulnerability in WolfSSL. Pure logic flaw. Missing hash function check = certificate forgery. CVSS 10. No memory corruption. Model found and exploited it. risky.biz/RBFEATURES16/

Mythos.. what does it really mean for a startup? Is it the end of secure software, a new SaaSpocalypse, time to give up integrating with enterprises? Yaniv Bernstein and I covered all this and more on today's Risky Business Features. risky.biz/RBFEATURES15/

Mythos and 0day: a hackers perspective. 🎧 risky.biz/RBFEATURES13/ … I wanted to hear what Anthropic’s #Mythos really means for someone who hacks for a living. Jamieson O’Reilly from DVULN and Aether AI join me for this chat. Enjoy!

New episode with Geoff White (BBC Lazarus Heist, Cyber Hack podcast) on what actually happens after North Korea gets hired. Not the headline version. The full machine: deep fake interviews, 72-laptop farms, military units doing your tickets, a $30M bagman on a private jet. risky.biz/RBFEATURES12/

Sad claw.

-Russia will revoke licenses for unruly ISPs -Cyberattack disrupts access to newspaper archives across the US -Node.js pauses bug bounty program after funding lapse -Apple backports DarkSword patches -Hasbro has a data breach Podcast: risky.biz/RBNEWS546/ Newsletter: news.risky.biz/risky-bullet...

Between seeing the epic supply chain attacks this week, and the internal pressure to move fast with AI adoption, I think all of us in senior tech leadership roles are going to have to bend on things that previously were an absolute hard no. risky.biz/RBFEATURES11/

The long awaited next episode in How the World Got Owned! Part 1 of the 1990's. It's awesome. Enjoy!

This was a wild ride. Went into this with no expectations… came out of it understanding Coruna exploit kit even better than after my deep-dive episode… and a firm belief that an LLM could modernise these kits…

Between podcasts, baking some sourdough. Wood fired soy and linseed with a mix of rye and white flour.

-The Intellexa CEO is pissed!!! -Google launches threat disruption unit -German police visit companies in the dead of night about software bugs -FTC bans all foreign-made routers -Firefox now has a built-in VPN Podcast: risky.biz/RBNEWS542/ Newsletter: news.risky.biz/risky-bullet...

Risky Business Features: I ran an incident review of the Stryker cyberattack with Brad Arkin (former CISO at Cisco/Adobe/Salesforce). Brad's framework for how to run your own internal review is practical and actionable. Manage a device fleet, this is essential listening. risky.biz/RBFEATURES8

Model Context Protocol (MCP) is Dead. Killed by the shell. MCP showed us that LLM + Tools = real utility and productivity. Then AI Agents showed us they just want a shell. That has serious security implications. 🎧 risky.biz/RBFEATURES7/

This week's show is up! Features @jameswilson.io, @metlstorm.risky.biz and yours truly talking through the week's news, from the Stryker breach to the latest research into "emergent cyber behaviours" in AI agents. Audio: risky.biz/RB829/ Video: www.youtube.com/watch?v=09js...

The L atest edition of Risky Business Features with James Wilson and former Adobe, Cisco and Salesforce CISO Brad Arkin is up: Being a Wartime CISO Support us by subscribing to our new Features feed! risky.biz/RBFEATURES4/

We quietly launched this last week. It's early days and we only have a dozen or so vendors there so far, but the plan is to have pretty decent coverage of the industry after a while

I've read of today's Seriously Risky Business newsletter and it's absolutely terrific... it'll be out in a few hours. If you're not subscribed, get on it! (You can subscribe here: risky.biz/newsletters/)