Skip to content
Risky Business #840 -

Risky Business #840 -

Risky.Biz • June 3, 2026

The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are | wired.com

U.S. says troops were targeted with location data, as senator warns ad industry is a ‘national security threat’ | TechCrunch Security

DOD location data attachment (Wyden) |

Risky Business #830 -- LiteLLM and security scanner supply chains compromised | Risky Business Media

US has seized nearly $1 billion in crypto from Iran, Bessent says |

Russia claims foreign spy agencies hacked officials' phones | therecord.media

Hackers are trying to steal Signal users’ backups in new wave of phishing attacks | TechCrunch Security

We Sued ICE to Get Its Spyware Contract. The Agency Is Redacting Essentially Everything | Social Signals

Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more | therecord.media

A shared responsibility: Protecting customers through Coordinated Vulnerability Disclosure | Social Signals

Microsoft says it will not pursue security researchers after zero-day backlash | therecord.media

IBM’s new $5B initiative will help enterprises rapidly patch open-source vulnerabilities | Social Signals

Federal audit reveals NIST’s NVD is plagued by poor planning and duplication | cyberscoop.com

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts | krebsonsecurity.com

Critical Windows Netlogon RCE flaw now exploited in attacks | BleepingComputer

CISA adds exploited Palo Alto Networks GlobalProtect flaw to KEV | Cybersecurity Dive

Password manager Dashlane says hackers stole some customers’ password vaults | TechCrunch Security

CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain | cyberscoop.com

Botnet of more than 17 million devices dismantled | arstechnica.com

Chinese-speaking fraud gang could be stealing millions from 2026 World Cup fans | therecord.media

ACCC investigating Olympics ticket scam | ABC

Dozens of Red Hat packages backdoored through its offical NPM channel | arstechnica.com

Solo podcast: A deep dive on TeamPCP - Risky Business Media |

Trump administration releases scaled-back AI executive order | cyberscoop.com

Google security engineer accused of turning confidential trends into $1.2M win on Polymarket | cyberscoop.com

Extracted Entities

Domains (1)