Soap Box: Detection and response in the AI age
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Edward Wu, founder of Dropzone, about what AI is doing to detection, response and the SOC more generally.
Dropzone makes AI agents that conduct alert investigations in your SOC, but will the SOC as we know it even exist in the future?
Ed has a deep expertise in SOC tech, having previously led AI/ML detection engineering at Extrahop. This interview is a fantastic look at what the future may bring for detection and response professionals.
This episode is also available on YouTube
Show notes
Risky Business #805 -- On the Salesloft Drift breach and "OAuth soup"
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
The Salesloft breach and why OAuth soup is a problem
The Salt Typhoon telco hackers turn out to be Chinese private sector, but state-directed
Google says it will stand up a “disruption unit”
Microsoft writes up a ransomware gang that’s all-in on the cloud future
Aussie firm hot-mics its work-from-home employees’ laptops
Youtube scam baiters help the feds take down a fraud ring
This episode is sponsored by Dropzone.AI. Founder and CEO Edward Wu joins the show to talk about how AI driven SOC tools can help smaller organisations claw their way above the “security poverty line”. A dedicated monitoring team, threat hunting and alert triage, in a company that only has a couple of part time infosec people? Yes please!
This episode is also available on Youtube.
Show notes
The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft – Krebs on Security
Salesloft: The Leading AI Revenue Orchestration Platform
Palo Alto Networks, Zscaler customers impacted by supply chain attacks | Cybersecurity Dive
The impact of the Salesloft Drift breach on Cloudflare and our customers
China used three private companies to hack global telecoms, U.S. says
CSA_COUNTERING_CHINA_STATE_ACTORS_COMPROMISE_OF_NETWORKS.PDF
Google previews cyber ‘disruption unit’ as U.S. government, industry weigh going heavier on offense | CyberScoop
Ransomware gang takedowns causing explosion of new, smaller groups | The Record from Recorded Future News
Hundreds of Swedish municipalities impacted by suspected ransomware attack on IT supplier | The Record from Recorded Future News
Storm-0501’s evolving techniques lead to cloud-based ransomware | Microsoft Security Blog
The Era of AI-Generated Ransomware Has Arrived | WIRED
Between Two Nerds: How threat actors are using AI to run wild - YouTube
Affiliates Flock to ‘Soulless’ Scam Gambling Machine – Krebs on Security
UK sought broad access to Apple customers’ data, court filing suggests
ICE reactivates contract with spyware maker Paragon | TechCrunch
WhatsApp fixes 'zero-click' bug used to hack Apple users with spyware | TechCrunch
Safetrac turned staff laptops into covert recording devices to monitor WFH
Risky Bulletin: YouTubers unmask and help dismantle giant Chinese scam ring - Risky Business Media
Soap Box: AI has entered the SOC, and it ain't going anywhere
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Dropzone AI founder Ed Wu about the role of LLMs in the SOC.
The debate about whether AI agents are going to wind up in the SOC is over, they’ve already arrived. But what are they good for? What are they NOT good for? And where else will we see AI popping up in security?
This episode is also available on Youtube.
Show notes
Risky Business #779 -- DOGE staffer linked to The Com
On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:
Musk’s DOGE kid has a history with The Com
Paragon fires Italy as a spyware customer
Thailand cuts power to scam compounds…
… and arrests Phobos/8Base Russian cybercrims
The CyberCX DFIR report shows non-U2F MFA is well and truly over
And much, much more.
This week’s episode is sponsored by Dropzone.AI. They make an AI SOC analysis platform that relieves your analysts of the necessary but tedious work, so they can focus on the value of human insight. Dropzone’s founder and CEO Edward Wu joins to talk about how they approach the problem.
This episode is also available on Youtube.
Show notes
Teen on Musk’s DOGE Team Graduated from ‘The Com’ – Krebs on Security
ACLU Warns DOGE’s ‘Unchecked’ Access Could Violate Federal Law | WIRED
Lawsuit accuses Trump administration of violating federal information security law | The Record from Recorded Future News
The Recruitment Effort That Helped Build Elon Musk’s DOGE Army | WIRED
States prepare privacy lawsuit against DOGE over access to federal data | The Record from Recorded Future News
Union groups sue Treasury over giving DOGE access to sensitive data | The Record from Recorded Future News
Student group sues Education Department over reported DOGE access to financial aid databases | The Record from Recorded Future News
Hackers exploiting bug in popular Trimble Cityworks tool used by local gov’ts | The Record from Recorded Future News
DeepSeek iOS app sends data unencrypted to ByteDance-controlled servers - Ars Technica
DeepSeek Is a Win for Chinese Hackers - Risky Business
Owner of spyware used in alleged WhatsApp breach ends contract with Italy | WhatsApp | The Guardian
Another person targeted by Paragon spyware comes forward | TechCrunch
Apple fixes security flaw allowing third-party access to locked devices | The Record from Recorded Future News
U.S. sanctions bulletproof hosting provider for supplying LockBit infrastructure | CyberScoop
Thailand cuts power supply to Myanmar scam hubs | The Record from Recorded Future News
8Base ransomware site taken down as Thai authorities arrest 4 connected to operation | The Record from Recorded Future News
Two Russian nationals arrested in takedown of Phobos ransomware infrastructure | The Record from Recorded Future News
The Company Man: Binance exec detained in Nigeria breaks his silence | The Record from Recorded Future News
Deloitte pays $5M in connection with breach of Rhode Island benefits site | Cybersecurity Dive
DFIR - Threat Report 2025 | CyberCX
Request a Demo | Dropzone AI