Best Thieves’ Cant Productions Podcasts (2025)

1
Apocalyptic Subclasses for D&D + Twilight: 2000, Deadlands 45:55

Play Pause

4h ago45:55

45:55

Chris and Jeremy take a closer look at the latest D&D Unearthed Arcana, featuring Apocalyptic Subclasses. Plus, pre-orders open for Twilight: 2000 and the new D&D Starter Set, we get more clarity on what the D&D franchise model looks like, and the Deadlands Classic 20th Anniversary gets a reprint. @thievescantcast [email protected] 00:00 Op…

1
Thieves' Cant Capers: The Draw Steel Job Part 4; Censor, Conduit, & Elementalist Classes 27:40

2d ago27:40

27:40

Chris and Jeremy kick off the Classes chapter in MCDM's Draw Steel with a look at the Censor, the Conduit, and the Elementalist. Welcome to Thieves' Cant Capers: The Draw Steel Job. Email: [email protected] Social: @thievescantcast Links: https://www.mcdmproductions.com/By Thieves’ Cant Productions

1
Risky Business #805 -- On the Salesloft Drift breach and "OAuth soup" 1:01:55

2d ago1:01:55

1:01:55

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: The Salesloft breach and why OAuth soup is a problem The Salt Typhoon telco hackers turn out to be Chinese private sector, but state-directed Google says it will stand up a “disruption unit” Microsoft writes up a ransomware gang that’s all-in on the …

1
Bringing the Real World Into Your Game + Grim Hollow, Coriolis, Pathfinder 26:36

6d ago26:36

26:36

Sometimes real life hands you great gaming material–Chris and Jeremy talk about bringing the real world into your game. Plus, Grim Hollow’s Player’s Guide hits Beyond, Free League drops the OGL for Coriolis: The Great Dark, Paizo changes Pathfinder’s Adventure Path model, and more. @thievescantcast [email protected] 00:00 Open 02:29 Listene…

1
Thieves' Cant Capers: The Draw Steel Job Part 3, Backgrounds 24:00

9d ago24:00

24:00

It's all about Backgrounds as Chris and Jeremy explore the culture and career options offered in MCDM's Draw Steel. Welcome to Thieves' Cant Capers: The Draw Steel Job. Email: [email protected] Social: @thievescantcast Links: https://www.mcdmproductions.com/By Thieves’ Cant Productions

1
Risky Business #804 -- Phrack's DPRK hacker is probably a Chinese APT guy 53:32

9d ago53:32

53:32

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Australia expels Iranian ambassador Hackers sabotage Iranian shipping satcoms APT hacker got doxxed in Phrack. Kind of. They’re probably Chinese, not DPRK? Trail of Bits uses image-downscaling to sneak prompts into Google Gemini The Com’s King Bob ge…

1
Wide World of Cyber: Microsoft's China Entanglement 45:43

11d ago45:43

45:43

The Wide World of Cyber podcast is back! In this episode host Patrick Gray chats with Alex Stamos and Chris Krebs about Microsoft’s entanglement in China. Redmond has been using Chinese engineers to do everything from remotely support US DoD private cloud systems to maintain the on premise version of the SharePoint code base. It’s all blown up in t…

1
Which Monster Would You Be? + Draw Steel Gods and Religion, Dark Sun, Exodus 27:21

13d ago27:21

27:21

Chris and Jeremy discuss Draw Steel’s approach to gods and religion. Plus, D&D teases Dark Sun, Draw Steel’s Summoner Class hits public playtesting, and more. @thievescantcast [email protected] 00:00 Open 01:22 Unearthed Arcana 03:00 The Summoner for Draw Steel 04:34 Exodus 06:21 Dungeon Dwelling Creatures 07:27 Which Monster Would You Play…

1
Thieves' Cant Capers: The Draw Steel Job Part 2, Ancestries 46:31

17d ago46:31

46:31

The Draw Steel job continues as Chris and Jeremy dig through the Ancestries featured in MCDM's newest release. Welcome to Thieves' Cant Capers: The Draw Steel Job. Email: [email protected] Social: @thievescantcast Links: https://www.mcdmproductions.com/By Thieves’ Cant Productions

1
Risky Business #803 -- Oracle's CSO Mary Ann Davidson quietly departs 58:28

16d ago58:28

58:28

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: Oracle’s long term CSO departs, and we’re not that sad about it Canada’s House of Commons gets popped through a Microsoft bug Russia degrades voice calls via Whatsapp and Telegram to push people towards Max South-East Asian scam compounds are also be…

1
Draw Steel Lore + Castles and Crusades, Cosmere, Baldur’s Gate 4, and Heart: The City Below 28:36

21d ago28:36

28:36

Chris and Jeremy discuss new offerings for Castle and Crusades and Heart: The City Below, Cosmere gets a release date, and WotC’s president addresses Baldur’s Gate 4. Plus, Chris takes a look at Draw Steel’s cosmology. @thievescantcast [email protected] 00:00 Open 02:08 Castles and Crusades 03:18 Cosmere RPG 06:13 Baldur’s Gate 4 07:39 Ways…

1
Risky Biz Soap Box: How to measure vulnerability reachability 35:48

22d ago35:48

35:48

In this Soap Box edition of the Risky Business podcast Patrick Gray chats with Socket founder Feross Aboukhadijeh about how to measure the reachability of vulnerabilities in applications. It’s great to know there’s a CVE in a library you’re using, but it’s even better if you can say whether or not that vulnerability actually impacts your applicatio…

1
Thieves' Cant Capers: The Draw Steel Job Part 1, The Basics 40:09

24d ago40:09

40:09

MCDM's Draw Steel is here! Join Chris and Jeremy as they explore the game's introduction and basic mechanics in this brand new series. Welcome to Thieves' Cant Capers: The Draw Steel Job. Email: [email protected] Social: @thievescantcast Links: https://www.mcdmproductions.com/By Thieves’ Cant Productions

1
Risky Business #802 -- Accessing internal Microsoft apps with your Hotmail creds 1:00:00

23d ago1:00:00

1:00:00

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including: CISA warns about the path from on-prem Exchange to the cloud Microsoft awards a crisp zero dollar bill for a report about what a mess its internal Entra-authed apps are Everyone and their dog seems to have a shell in US Federal Court information syst…

1
Memorable Character Deaths + ENnie Awards and Draw Steel 31:21

28d ago31:21

31:21

Chris and Jeremy talk memorable PC deaths at the table. Plus, this year’s ENnie Awards winners list is here, D&D gets a new beer, and Draw Steel has new crowdfunding campaigns. Social and YouTube: @thievescantcast Email: [email protected] 00:00 Open 03:53 Question of the Week 04:26 ENnie Awards Winners 07:06 D&D Beer 08:41 Weapons of Legend…

1
Risky Business #801 -- AI models can hack well now and it's weirding us out 1:06:01

1M ago1:06:01

1:06:01

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news. Google security engineering VP Heather Adkins drops by to talk about their AI bug hunter, and Risky Business producer Amberleigh Jack makes her main show debut. This episode explores the rise of AI-powered bug hunting: Google’s Project Zero and Deepmind team up…

1
Soap Box: Why AI can't fix bad security products 37:11

1M ago37:11

37:11

In this Soap Box edition of the show Patrick Gray chats with the CEO of email security company Sublime Security, Josh Kamdjou. They talk about where AI is useful, where it isn’t, and why AI can’t save vendors from their bad product design choices. This episode is also available on Youtube. Show notes…

1
Risky Business #800 — The SharePoint bug may have leaked from Microsoft MAPP 53:37

1M ago53:37

53:37

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Did the SharePoint bug leak out of the Microsoft MAPP program? Expel retracts its FIDO bypass writeup The mess surrounding the women-only dating-safety app Tea gets worse Broadcom customers struggle to get patches for VMWare hypervisor escapes Aeroflot gets hac…

1
Risky Business #799 -- Everyone's Sharepoint gets shelled 1:13:55

1M ago1:13:55

1:13:55

Risky Biz returns after two weeks off, and there sure is cybersecurity news to catch up on. Patrick Gray and Adam Boileau discuss: Microsoft tried to make outsourcing the Pentagon’s cloud maintenance to China okay (it was not) She shells Sharepoint by the sea-shore (by ‘she’ we mean ‘China’) Four (alleged) Scattered Spider members arrested (and bai…

1
D20 Would You Rather + Draw Steel, Forge of the Artificer, and D&D University 39:16

2M ago39:16

39:16

Chris and Jeremy roll the d20 for a game of Would You Rather. Plus, Draw Steel, D&D University, and more. Social and YouTube: @thievescantcast Email: [email protected] 00:00 Open 02:41 Question of the Week 03:55 Draw Steel 04:49 Eberron: Forge of the Artificer 06:12 D&D University 08:28 100 One-Shots 10:30 Sapphire Seas 13:37 Would You Rath…

1
Risky Biz Soap Box: Prowler, the open cloud security platform 32:08

2M ago32:08

32:08

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Toni de la Fuente, founder of open source multi-cloud security product Prowler. Toni explains how Prowler came to be, and how its journey followed his own learning about the cloud. The pair also discuss Prowler’s successful transition from an open-source projec…

1
Mastering Lore In Your RPG + D&D’s Franchise Model, Dragonbane Minis, and New Free League Starter Sets 39:05

2M ago39:05

39:05

Chris and Jeremy dive into mastering lore in your tabletop RPG, exploring GM prep, player co-creation, and effective lore delivery. Plus, D&D’s franchise model, Dragonbane minis, and new Free League starter sets. Social and YouTube: @thievescantcast Email: [email protected] 00:00 Open 02:30 Question of the Week 05:00 D&D’s Franchise Model 0…

1
New Arcane Subclasses + ENnie Nominees, Dragon Delves, and Order of Criminals 48:03

2M ago48:03

48:03

Chris and Jeremy take a closer look at the recent Unearthed Arcana arcane subclasses. Plus, the ENnie Award nominees, Dragon Delves solo rules, Order of Criminals and more. Social: @thievescantcast YouTube: @thievescantpodcast Email: [email protected] 00:00 Open 01:44 Question of the Week 04:10 ENnie Awards 07:17 Dragon Delves 10:47 Order o…

1
Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses 1:02:19

2M ago1:02:19

1:02:19

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Australian airline Qantas looks like it got a Scattered Spider-ing Microsoft works towards blunting the next CrowdStrike disaster Changes are coming for Microsoft’s default enterprise app consenting setup Synology downplays hardcoded passwords for its M365 clou…

1
Getting a New Game to the Table + Origins Awards, Unearthed Arcana, and Book of Wyrms 35:46

2M ago35:46

35:46

Chris and Jeremy discuss the challenges of bringing a new RPG to the table. Plus, the Origins Award winners, a new Unearthed Arcana, the Book of Wyrms and more. Social: @thievescantcast YouTube: @thievescantpodcast Email: [email protected] 00:00 Open 01:37 Question of the Week 03:29 Origins Awards 08:55 Unearthed Arcana 11:19 Book of Wyrms …

1
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators 1:02:16

2M ago1:02:16

1:02:16

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: We roll our eyes over the “16 billion credentials” leak hitting mainstream news Some interesting cyber angles emerge from the conflict in Iran Opensource maintainer of libxml2 is fed up with this hacker crap Shockingly, there are yet more ways to trick people i…

1
(Practically) Free RPG Day + Chris Perkins and Jeremy Crawford Join Darrington Press, D&D Comes to Dark Horse Comics, and the Tabletop Inn on Kickstarter 27:03

3M ago27:03

27:03

Chris and Jeremy spotlight ten items you probably already have lying around your house that you can use in your tabletop roleplaying game. Plus Chris Perkins and Jeremy Crawford join Darrington Press, Dark Horse Comics releases more details for their upcoming D&D series, and the Tabletop Inn seeks funding on Kickstarter. Social: @thievescantcast Yo…

1
Risky Business #796 -- With special guest co-host Chris Krebs 1:01:04

3M ago1:01:04

1:01:04

On this week’s show Patrick Gray and Adam Boileau are joined by special guest Chris Krebs to discuss the week’s cybersecurity news. They talk through: Israeli “hacktivists” take out an Iranian state-owned bank Scattered-spider and friends pivot into attacking insurers Securing identities in a cloud-first world keeps us awake at night Microsoft take…

1
Soap Box: AI has entered the SOC, and it ain't going anywhere 30:58

3M ago30:58

30:58

In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Dropzone AI founder Ed Wu about the role of LLMs in the SOC. The debate about whether AI agents are going to wind up in the SOC is over, they’ve already arrived. But what are they good for? What are they NOT good for? And where else will we see AI popping up in…

1
Building an Adventure Part 5 + Cyberpunk Legends, Deck of Many Things, Free RPG Day, and Return of the Living Dead 30:28

3M ago30:28

30:28

Chris and Jeremy close out the first phase of their adventure build using Mythmere Games' Tome of Adventure Design. Plus, a new Cyberpunk co-op card game, a new Deck of Many Things, a Free RPG Day preview, and a look at the Return of the Living Dead Kickstarter campaign. Social: @thievescantcast YouTube: @thievescantpodcast Email: thievescantcast@g…

1
Risky Business #795 -- How The Com is hacking Salesforce tenants 1:07:34

3M ago1:07:34

1:07:34

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: New York Times gets a little stolen Russian FSB data as a treat iVerify spots possible evidence of iOS exploitation against the Harris-Walz campaign Researcher figures out a trick to get Google account holders’ full names and phone numbers Major US food distrib…

1
Building an Adventure Part 4 + Chaosium, Mike Mearls to Asmodee, and Hundred Acre Hell 33:20

3M ago33:20

33:20

Chris and Jeremy dig into the giant anthill to see what lurks within, and later they find answers about the wheel of bones as they continue their adventure build using Mythmere Games' Tome of Adventure Design. Plus, leadership changes at Chaosium and Wizards, and hell comes to the Hundred Acre Wood. Social: @thievescantcast YouTube: @thievescantpod…

1
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242 58:22

3M ago58:22

58:22

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Cyber firms agree to deconflict and cross-reference hacker group names Russian nuclear facility blueprints gathered from public procurement websites Someone audio deepfaked the White House Chief of Staff, but for the dumbest reasons Germany identifies the Trick…

1
Building an Adventure Part 3 + the Psion for D&D, Daggerheart, and Cosmic Dark 30:04

3M ago30:04

30:04

Chris and Jeremy learn more about the forest's massive fallen tree as they continue their adventure build using Mythmere Games' Tome of Adventure Design. Plus, the latest Unearthed Arcana from D&D Beyond features the Psion class, Daggerheart hits shelves, Cosmic Dark carves a niche in space-horror gaming. Social: @thievescantcast YouTube: @thievesc…

1
Risky Business #793 -- Scattered Spider is hijacking MX records 1:04:52

3M ago1:04:52

1:04:52

In this week’s edition of Risky Business Dmitri Alperovitch and Adam Boileau join Patrick Gray to talk through the week’s news, including: EXCLUSIVE: A Scattered Spider-style crew is hijacking DNS MX entries and compromising enterprises within minutes The SVG format brings the all horrors of HTML+JS to image files, and attackers have noticed Brian …

1
Building an Adventure Part 2 + WizKids, The Book of Dragons, Dragonbane, and Slay to Win 29:52

4M ago29:52

29:52

Chris and Jeremy continue their adventure build using Mythmere Games' Tome of Adventure Design. Plus, WizKids issues refunds, The Book of Dragons offers up a hoard of dragon lore, and Free League announces new Dragonbane material is on its way to Kickstarter. Social: @thievescantcast YouTube: @thievescantpodcast Email: [email protected] 00:…

1
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now 53:01

4M ago53:01

53:01

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: TeleMessage memory dumps show up on DDoSecrets Coinbase contractor bribed to hand over user data Telegram does seem to be actually cooperating with law enforcement Britain’s legal aid service gets 15 years worth of applicant data stolen Shocking no one, Ivanti …

1
Risky Biz Soap Box: Push Security's browser-first twist on identity security 34:24

4M ago34:24

34:24

In this wholly sponsored Soap Box edition of the show, Patrick Gray chats with Adam Bateman and Luke Jennings from Push Security. Push has built an identity security platform that collects identity information and events from your users’ browsers. It can detect phish kits and shut down phishing attempts, protect SSO credentials, and find shadow/per…

1
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys 57:52

4M ago57:52

57:52

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: Struggling to find that pesky passwords.xlsx in Sharepoint? Copilot has your back! The ransomware ecosystem is finding life a bit tough lately SAP Netweaver bug being used by Chinese APT crew Academics keep just keep finding CPU side-channel attacks And of cour…

1
Building an Adventure + Eberron, New Unearthed Arcana, and Lazlo's Cubed Crypt 30:11

4M ago30:11

30:11

Chris and Jeremy return to the Forge of Creation to build an adventure using Mythmere Games' Tome of Adventure Design. Plus, the latest on Eberron: Forge of the Artificer, a new horror-themed Unearthed Arcana, and a crowdfunding spotlight on Lazlo's Cubed Crypt. Social: @thievescantcast YouTube: @thievescantpodcast Email: [email protected] …

1
Wide World of Cyber: How state adversaries attack security vendors 52:42

4M ago52:42

52:42

In this edition of the Wide World of Cyber podcast Patrick Gray talks to SentinelOne’s Steve Stone and Alex Stamos about how foreign adversaries are targeting security vendors, including them. From North Korean IT workers to Chinese supply chain attacks, SentinelOne and its competitors are constantly fending off sophisticated hacking campaigns. Thi…

1
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate 56:12

4M ago56:12

56:12

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: White House’s off-brand Israeli Signal fork logs cleartext messages with hard coded creds while getting hacked (twice). Just … Wow. Ransomware attacks on UK retailers are linked, and Marks & Spencer has it extra bad After six years dormant, a Magento eCommerce …

1
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs 49:44

4M ago49:44

49:44

In this extended interview the Vice Chair of the Senate Select Committee on Intelligence, Senator Mark Warner, joins Risky Business host Patrick Gray to talk about: The latest developments in the Signalgate scandal Why America needs to be more aggressive in responding to Volt Typhoon How tariffs are affecting American alliances Why the Five Eyes al…

1
Actual Play Magic: The Gathering + Starfinder Society 2.0, Pathfinder on Humble Bundle, and I Don't Belong Here 52:57

4M ago52:57

52:57

Chris learns to play Magic: The Gathering in the first (and quite possibly the last) Thieves' Cant actual play. Plus, Paizo launches Starfinder Society 2.0, Humble Bundle features a massive Pathfinder sale, and I Don't Belong Here funds on Backerkit. Social: @thievescantcast Email: [email protected] 00:00 Open 02:23 News 14:08 Magic: The Ga…

1
Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful 1:02:31

4M ago1:02:31

1:02:31

On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news: British retail stalwart Marks & Spencer gets cybered South Korean telco sets out to replace all its subscriber SIMs after (we assume) it lost the keymat It’s a good exploit week! Bugs in Apple Airplay, SAP webservers, Erlang SSH and CommVault backups Juice jack…

1
Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank 38:50

4M ago38:50

38:50

In this edition of the Snake Oilers podcast, three sponsors come along to pitch their products: LimaCharlie: A public cloud for SecOps Honeywell Cyber Insights: An OT security/discovery solution Fortra’s CobaltStrike and Outflank: Security tooling for red teamers This episode is also available on Youtube. Show notes…

1
3 Wishes for D&D 6E + Greater Than Games, the 5.2 SRD, and Required Reading for RPG Design 29:26

4M ago29:26

29:26

Chris and Jeremy make three wishes for the future of D&D. Plus, Greater Than Games halts production, the 5.2 SRD is officially in the Creative Commons, and Justin Alexander at The Alexandrian provides the reading list for a hypothetical college course on RPG design. Social: @thievescantcast Email: [email protected] 00:00 Open 01:24 News 10:…

1
What's In Your Basket: RPGs as Easter Candy + the D&D 5.2 SRD, Castles & Crusades, and Bitter Chalice 27:38

5M ago27:38

27:38

Chris and Jeremy decide which Easter basket treats represent some of our favorite tabletop roleplaying games. Plus, WotC is set to release the new 5.2 SRD, 2024 D&D gets a round of errata, Castles & Crusades drops a new trio of sourcebooks, and more. Social: @thievescantcast Email: [email protected] 00:00 Open 02:34 News 10:11 Crowdfunding …

1
Snake Oilers: Pangea, Cosive and Sysdig 47:45

5M ago47:45

47:45

In this edition of Snake Oilers three vendors pitch host Patrick Gray on their tech: Pangea: Guardrails and security for AI agents and applications (https://pangea.cloud) Worried about your AI apps going rogue, being mean to your customers or even disclosing sensitive information? Pangea exists to address these risks. Fascinating stuff. Cosive: A t…

1
Risky Business #788 -- Trump targets Chris Krebs, SentinelOne 53:35

5M ago53:35

53:35

On this week’s show Patrick Gray talks to former NSA Cybersecurity Director Rob Joyce about Donald Trump’s unprecedented, unwarranted and completely bonkers political persecution of Chris Krebs and his employer SentinelOne. They also talk through the week’s cybersecurity news, covering: Mitre’s stewardship of the CVE database gets its funding DOGE’…