Best Soap From The Box Podcasts (2025)

1
Risky Business #808 -- Insane megabug in Entra left all tenants exposed 52:37

Play Pause

6h ago52:37

52:37

On this week’s show Patrick Gray and special guest Rob Joyce discuss the week’s cybersecurity news, including: Secret Service raids a SIM farm in New York MI6 launches a dark web portal Are the 2023 Scattered Spider kids finally getting their comeuppance? Production halt continues for Jaguar Land Rover GitHub tightens its security after Shai-Hulud …

1
A nation of jerks 29:45

3d ago29:45

29:45

Americans seem to be getting ruder. Are our attempts at making ourselves better actually making us worse? This episode was produced by Avishay Artsy, edited by Miranda Kennedy, fact-checked by Melissa Hirsch and Isabelle Lichtenstein, engineered by Matthew Billy and hosted by Jonquilyn Hill. Image: Francesco Carta Fotografo/Getty Images. If you hav…

1
Risky Business #807 -- Shai-Hulud npm worm wreaks old-school havoc 53:19

7d ago53:19

53:19

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Shai-Hulud worm propagates via npm and steals credentials Jaguar Land Rover attack may put smaller suppliers out of business Leaked data emerges from the vendor behind the Great Firewall of China Vastaamo hacker walks free while appeal is underway Wh…

1
Risky Biz Soap Box: runZero shakes up vulnerability management 34:17

9d ago34:17

34:17

In this sponsored Soap Box edition of the Risky Business podcast, industry legend HD Moore joins the show to talk about runZero’s major push into vulnerability management. With its new Nuclei integration, runZero is now able to get a very accurate picture of what’s vulnerable in your environment, without spraying highly privileged credentials at at…

1
Why horror kills at the box office 30:01

12d ago30:01

30:01

Hollywood has always made money from vampires and brain-eating zombies. But this year's a record-breaker thanks to sequels, hilariously unlikely creators, and pure thrills. This episode was produced by Denise Guerra and Hady Mawajdeh, edited by Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Adriene Lilly and hosted by Jonquilyn Hill…

1
Risky Business #806 -- Apple's Memory Integrity Enforcement is a big deal 51:42

14d ago51:42

51:42

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Apple ruins exploit developers’ week with fresh memory corruption mitigations Feross Aboukhadijeh drops by to talk about the big, dumb npm supply chain attack Salesloft says its GitHub was the initial entry point for its compromise Sitecore says peop…

1
Snake Oilers: Nebulock, Vali Cyber and Cape 46:33

16d ago46:33

46:33

In this edition of the Snake Oilers podcasts, three vendors pop in to pitch you all on their wares: Automated, AI-powered threat hunting with Nebulock Damien Lewke from Nebulock joins the show to talk about how its agentic AI platform can surface attacker activity out of all those “low” and “informational” findings your detection team doesn’t have …

1
The United States is Southern now 30:10

17d ago30:10

30:10

From #rushtok to country music, American culture is getting more and more southern. This episode was produced by Denise Guerra, edited by Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Matthew Billy and Adriene Lilly and hosted by Jonquilyn Hill. Photo of a Beyonce fan waiting to see her perform in LA by Rashida Zagon/For The Washin…

1
Risky Business #805 -- On the Salesloft Drift breach and "OAuth soup" 1:01:55

21d ago1:01:55

1:01:55

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: The Salesloft breach and why OAuth soup is a problem The Salt Typhoon telco hackers turn out to be Chinese private sector, but state-directed Google says it will stand up a “disruption unit” Microsoft writes up a ransomware gang that’s all-in on the …

1
Risky Business #804 -- Phrack's DPRK hacker is probably a Chinese APT guy 53:32

28d ago53:32

53:32

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Australia expels Iranian ambassador Hackers sabotage Iranian shipping satcoms APT hacker got doxxed in Phrack. Kind of. They’re probably Chinese, not DPRK? Trail of Bits uses image-downscaling to sneak prompts into Google Gemini The Com’s King Bob ge…

1
Wide World of Cyber: Microsoft's China Entanglement 45:43

1M ago45:43

45:43

The Wide World of Cyber podcast is back! In this episode host Patrick Gray chats with Alex Stamos and Chris Krebs about Microsoft’s entanglement in China. Redmond has been using Chinese engineers to do everything from remotely support US DoD private cloud systems to maintain the on premise version of the SharePoint code base. It’s all blown up in t…

1
The golden age of exercise 30:14

1M ago30:14

30:14

Americans are flocking to gyms and fitness classes. It wasn't always that way. This episode was produced by Hady Mawajdeh, edited by Miranda Kennedy with help from Naureen Khan, fact-checked by Melissa Hirsch, engineered by Andrea Kristinsdottir and hosted by Jonquilyn Hill. Photo of an outdoor group fitness class by ANDREW CABALLERO-REYNOLDS/AFP v…

1
Risky Business #803 -- Oracle's CSO Mary Ann Davidson quietly departs 58:28

1M ago58:28

58:28

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Oracle’s long term CSO departs, and we’re not that sad about it Canada’s House of Commons gets popped through a Microsoft bug Russia degrades voice calls via Whatsapp and Telegram to push people towards Max South-East Asian scam compounds are also be…

1
Hacking our health 30:07

1M ago30:07

30:07

We track our steps and our sleep, guzzle supplements and protein shakes, and even inject hormones – all in the name of wellness. This episode was produced by Hady Mawajdeh, edited by Naureen Khan and Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Andrea Kristinsdottir, and hosted by Jonquilyn Hill. Photo by Jeffrey Greenberg/Univers…

1
Risky Biz Soap Box: How to measure vulnerability reachability 35:48

1M ago35:48

35:48

In this Soap Box edition of the Risky Business podcast Patrick Gray chats with Socket founder Feross Aboukhadijeh about how to measure the reachability of vulnerabilities in applications. It’s great to know there’s a CVE in a library you’re using, but it’s even better if you can say whether or not that vulnerability actually impacts your applicatio…

1
Risky Business #802 -- Accessing internal Microsoft apps with your Hotmail creds 1:00:00

1M ago1:00:00

1:00:00

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: CISA warns about the path from on-prem Exchange to the cloud Microsoft awards a crisp zero dollar bill for a report about what a mess its internal Entra-authed apps are Everyone and their dog seems to have a shell in US Federal Court information syst…

1
What wellness costs us 29:38

2M ago29:38

29:38

Americans are investing billions in their health and wellness. What good do all these green powders and costly club memberships actually do? This episode was produced by Hady Mawajdeh, edited by Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Matthew Billy, and hosted by Jonquilyn Hill. Image of a guest floating in a saline sensory d…

1
Risky Business #801 -- AI models can hack well now and it's weirding us out 1:06:01

2M ago1:06:01

1:06:01

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. Google security engineering VP Heather Adkins drops by to talk about their AI bug hunter, and Risky Business producer Amberleigh Jack makes her main show debut. This episode explores the rise of AI-powered bug hunting: Google’s Project Zero and Deepmind team up…

1
America’s high-speed rail fail 29:35

2M ago29:35

29:35

The US is well behind much of the world in building passenger rail, especially high-speed trains. But we do have one major advantage. This episode was produced by Devan Schwartz, edited by Naureen Khan, fact-checked by Melissa Hirsch, engineered by Patrick Boyd with help from Andrea Kristinsdottir and hosted by Jonquilyn Hill. Photo by Robert Alexa…

1
Soap Box: Why AI can't fix bad security products 37:11

2M ago37:11

37:11

In this Soap Box edition of the show Patrick Gray chats with the CEO of email security company Sublime Security, Josh Kamdjou. They talk about where AI is useful, where it isn’t, and why AI can’t save vendors from their bad product design choices. This episode is also available on Youtube. Show notes…

1
Risky Business #800 — The SharePoint bug may have leaked from Microsoft MAPP 53:37

2M ago53:37

53:37

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Did the SharePoint bug leak out of the Microsoft MAPP program? Expel retracts its FIDO bypass writeup The mess surrounding the women-only dating-safety app Tea gets worse Broadcom customers struggle to get patches for VMWare hypervisor escapes Aeroflot gets hac…

1
Is tipping fair? 29:45

2M ago29:45

29:45

From raising the tipped minimum wage to "no tax on tips," we look at the challenges of remaking tipped work. This episode was produced by Peter Balonon-Rosen, edited by Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Patrick Boyd and hosted by Jonquilyn Hill. Photo by Lindsey Nicholson/UCG/Universal Images Group via Getty Images. If …

1
Risky Business #799 -- Everyone's Sharepoint gets shelled 1:13:55

2M ago1:13:55

1:13:55

Risky Biz returns after two weeks off, and there sure is cybersecurity news to catch up on. Patrick Gray and Adam Boileau discuss: Microsoft tried to make outsourcing the Pentagon’s cloud maintenance to China okay (it was not) She shells Sharepoint by the sea-shore (by ‘she’ we mean ‘China’) Four (alleged) Scattered Spider members arrested (and bai…

1
The summer I turned into a bookworm 30:04

2M ago30:04

30:04

Summer. Time for pools, BBQs, and the beach read. But why do we read "summer books"? This episode was produced by Avishay Artsy, edited by Amina Al-Sadi, fact-checked by Melissa Hirsch, engineered by Matthew Billy, and hosted by Jonquilyn Hill. Photo by Jakub Porzycki/NurPhoto via Getty Images. Further Reading: Bad Witches by H.B. Akumiah and Const…

1
Risky Biz Soap Box: Prowler, the open cloud security platform 32:08

2M ago32:08

32:08

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Toni de la Fuente, founder of open source multi-cloud security product Prowler. Toni explains how Prowler came to be, and how its journey followed his own learning about the cloud. The pair also discuss Prowler’s successful transition from an open-source projec…

1
Chat BFF 30:07

2M ago30:07

30:07

More and more of us are interacting with chatbots. Can we have real relationships with AI, and can AI teach humans to be better people? This episode was a collaboration with Vox's Future Perfect team. It was produced by Denise Guerra, edited by Miranda Kennedy, fact-checked by Kim Slotterback, engineered by Patrick Boyd and hosted by Jonquilyn Hill…

1
Our complicated relationship with the flag 29:45

3M ago29:45

29:45

Beyoncé and Kendrick Lamar openly celebrate the American flag. But a lot of Black Americans feel differently. What does that tell us about identity today? This episode was produced by Victoria Chamberlin, edited by Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Andrea Kristinsdottir and hosted by Jonquilyn Hill. Image of Kendrick La…

1
Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses 1:02:19

3M ago1:02:19

1:02:19

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Australian airline Qantas looks like it got a Scattered Spider-ing Microsoft works towards blunting the next CrowdStrike disaster Changes are coming for Microsoft’s default enterprise app consenting setup Synology downplays hardcoded passwords for its M365 clou…

1
Can we ever know our dogs? 30:09

3M ago30:09

30:09

So many of us believe we understand what our pets are feeling. Are we fooling ourselves? This episode was produced by Miles Bryan, edited by Miranda Kennedy and Naureen Khan, fact-checked by Melissa Hirsch, engineered byPatrick Boyd and hosted by Noam Hassenfeld. Photo by Kylie Cooper for The Washington Post via Getty Images. If you have a question…

1
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators 1:02:16

3M ago1:02:16

1:02:16

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: We roll our eyes over the “16 billion credentials” leak hitting mainstream news Some interesting cyber angles emerge from the conflict in Iran Opensource maintainer of libxml2 is fed up with this hacker crap Shockingly, there are yet more ways to trick people i…

1
Sleepaway camp's nostalgia economy 30:43

3M ago30:43

30:43

Unpacking the American rite of passage that so many children love — but that isn't right for everyone. This episode was produced by Devan Schwartz, edited by Miranda Kennedy, fact-checked by Sarah Schweppe, engineered by Matthew Billy and hosted by Jonquilyn Hill. Photo by Maskot/Getty Images. If you have a question, give us a call on 1-800-618-854…

1
Risky Business #796 -- With special guest co-host Chris Krebs 1:01:04

3M ago1:01:04

1:01:04

On this week’s show Patrick Gray and Adam Boileau are joined by special guest Chris Krebs to discuss the week’s cybersecurity news. They talk through: Israeli “hacktivists” take out an Iranian state-owned bank Scattered-spider and friends pivot into attacking insurers Securing identities in a cloud-first world keeps us awake at night Microsoft take…

1
Soap Box: AI has entered the SOC, and it ain't going anywhere 30:58

3M ago30:58

30:58

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Dropzone AI founder Ed Wu about the role of LLMs in the SOC. The debate about whether AI agents are going to wind up in the SOC is over, they’ve already arrived. But what are they good for? What are they NOT good for? And where else will we see AI popping up in…

1
Let's fight over bike lanes 30:25

3M ago30:25

30:25

A caller asks why it's so hard to make biking safe in LA. We bike around different US cities to get the answer. This episode was produced by Miles Bryan, edited by Miranda Kennedy, fact-checked by Colleen Barrett, engineered by Matthew Billy, and hosted by Jonquilyn Hill. Photo of a cyclist in a bike lane intersection in Washington, DC by Kevin Car…

1
Risky Business #795 -- How The Com is hacking Salesforce tenants 1:07:34

4M ago1:07:34

1:07:34

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: New York Times gets a little stolen Russian FSB data as a treat iVerify spots possible evidence of iOS exploitation against the Harris-Walz campaign Researcher figures out a trick to get Google account holders’ full names and phone numbers Major US food distrib…

1
The recession indicator game 30:23

4M ago30:23

30:23

Press-on nails, new music from Katy Perry, and an uptick in Klarna purchases: signs of an economic downturn or no? This episode was produced by Hady Mawajdeh, edited by Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Matthew Billy, and hosted by Jonquilyn Hill. Photo of Katy Perry performing in Sydney, Australia by Nina Franova/Getty…

1
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242 58:22

4M ago58:22

58:22

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Cyber firms agree to deconflict and cross-reference hacker group names Russian nuclear facility blueprints gathered from public procurement websites Someone audio deepfaked the White House Chief of Staff, but for the dumbest reasons Germany identifies the Trick…

1
How Gen Z found religion 29:53

4M ago29:53

29:53

For the first time in decades, American Christianity is not in decline. What are young people looking for–and finding–at church? Further reading: The surprising chasm splitting Americans along religious lines by Christian Paz. Pew report: Decline of Christianity in the U.S. Has Slowed, May Have Leveled Off. This episode was produced by Gabrielle Be…

1
Risky Business #793 -- Scattered Spider is hijacking MX records 1:04:52

4M ago1:04:52

1:04:52

In this week’s edition of Risky Business Dmitri Alperovitch and Adam Boileau join Patrick Gray to talk through the week’s news, including: EXCLUSIVE: A Scattered Spider-style crew is hijacking DNS MX entries and compromising enterprises within minutes The SVG format brings the all horrors of HTML+JS to image files, and attackers have noticed Brian …

1
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now 53:01

4M ago53:01

53:01

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: TeleMessage memory dumps show up on DDoSecrets Coinbase contractor bribed to hand over user data Telegram does seem to be actually cooperating with law enforcement Britain’s legal aid service gets 15 years worth of applicant data stolen Shocking no one, Ivanti …

1
Why are my allergies getting worse? 28:45

4M ago28:45

28:45

It feels like sneezing season lasts longer and takes more victims every year. An allergist and a public health specialist explain how to fight back. This episode was produced by Devan Schwartz, edited by Miranda Kennedy, fact-checked by Melissa Hirsch, engineered by Matthew Billy, and hosted by Jonquilyn Hill. Photo by Bernd Weißbrod/picture allian…

1
Risky Biz Soap Box: Push Security's browser-first twist on identity security 34:24

4M ago34:24

34:24

In this wholly sponsored Soap Box edition of the show, Patrick Gray chats with Adam Bateman and Luke Jennings from Push Security. Push has built an identity security platform that collects identity information and events from your users’ browsers. It can detect phish kits and shut down phishing attempts, protect SSO credentials, and find shadow/per…

1
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys 57:52

5M ago57:52

57:52

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Struggling to find that pesky passwords.xlsx in Sharepoint? Copilot has your back! The ransomware ecosystem is finding life a bit tough lately SAP Netweaver bug being used by Chinese APT crew Academics keep just keep finding CPU side-channel attacks And of cour…

1
The drama and trauma of 23andMe 30:45

5M ago30:45

30:45

With the at-home DNA testing company 23andMe filing for bankruptcy, what happens to all the data millions of Americans handed over? And how should you approach the family you've found through sites like these? If you have a question, give us a call on 1-800-618-8545. Or send us a note here. Listen to Explain It to Me ad-free by becoming a Vox Membe…

1
Wide World of Cyber: How state adversaries attack security vendors 52:42

5M ago52:42

52:42

In this edition of the Wide World of Cyber podcast Patrick Gray talks to SentinelOne’s Steve Stone and Alex Stamos about how foreign adversaries are targeting security vendors, including them. From North Korean IT workers to Chinese supply chain attacks, SentinelOne and its competitors are constantly fending off sophisticated hacking campaigns. Thi…

1
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate 56:12

5M ago56:12

56:12

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: White House’s off-brand Israeli Signal fork logs cleartext messages with hard coded creds while getting hacked (twice). Just … Wow. Ransomware attacks on UK retailers are linked, and Marks & Spencer has it extra bad After six years dormant, a Magento eCommerce …

1
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs 49:44

5M ago49:44

49:44

In this extended interview the Vice Chair of the Senate Select Committee on Intelligence, Senator Mark Warner, joins Risky Business host Patrick Gray to talk about: The latest developments in the Signalgate scandal Why America needs to be more aggressive in responding to Volt Typhoon How tariffs are affecting American alliances Why the Five Eyes al…

1
Why is personal style so hard? 30:28

5M ago30:28

30:28

Fashion has made a big swing from a strict set of rules to the idea that we should all just wear what we want. But personal style is still dictated by outside forces. And a lot of people don't even know where to start. This episode was produced by Victoria Chamberlin, edited by Jolie Myers, fact checked by Melissa Hirsch, engineered by Matthew Bill…

1
Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful 1:02:31

5M ago1:02:31

1:02:31

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: British retail stalwart Marks & Spencer gets cybered South Korean telco sets out to replace all its subscriber SIMs after (we assume) it lost the keymat It’s a good exploit week! Bugs in Apple Airplay, SAP webservers, Erlang SSH and CommVault backups Juice jack…

1
Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank 38:50

5M ago38:50

38:50

In this edition of the Snake Oilers podcast, three sponsors come along to pitch their products: LimaCharlie: A public cloud for SecOps Honeywell Cyber Insights: An OT security/discovery solution Fortra’s CobaltStrike and Outflank: Security tooling for red teamers This episode is also available on Youtube. Show notes…