The Cybersecurity Defenders Podcast
- Episodios
- 354
- Se publica
- cada semana
- Último episodio
- 14 Nov 2026
Sobre el podcast
An accessible but technical podcast about cybersecurity and the people who keep the internet safe. The podcast is built as a series of segments: we will be looking back at the last couple of weeks in cybersecurity news, talking to different people in the industry about areas of their expertise, we're going to break apart some of the TTPs being used by adversaries, and we will even cover a little bit of hacker history.
Episodios 354
Intel Chat: Japan's ¥10B cyber fund, Apache HTTP/2 RCE, 60K GitHub repos, France blames Iran [354]
Intel Chat with Matt Bromiley and Chris Luft.• Japan approves a ¥10 billion (about $63 million) emergency cybersecurity package, announced November 6, to expand incident response, cyber investigations …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
• Japan approves a ¥10 billion (about $63 million) emergency cybersecurity package, announced November 6, to expand incident response, cyber investigations, AI-assisted defenses and victim recovery, backing the Active Cyber Defense law that took effect October 1. TrendAI counts more than 600 publicly reported incidents in the first nine months of 2026, already past 2025's 594, after ransomware at Nichirei and Asahi and breaches at GMO Internet Group. Chris: $63M doesn't go far at Japan's scale. Matt reads it as an exploratory starting fund focused on faster disclosure, then widens it out: national cyber strategies were written before AI and now need redoing, some countries are "showing up to an F1 race with a horse", and AI sovereignty raises a hard question. Do you build your own LLM, rely on another country's frontier model, or find a supplier you trust, the way governments once bought network hardware?
• Apache patches CVE-2026-119618, a critical (CVSS 9.8) remote code execution race condition in mod_http2 affecting Apache HTTP Server 2.4.55 through 2.4.70, fixed in 2.4.71. Only servers with HTTP/2 enabled are affected; disabling HTTP/2 is the stopgap. It was found independently by Anthropic's OSS scanner and by Anthony Weems and Simon Scannell of Google Cloud Vulnerability Research. Wiz sees affected versions in 64% of cloud environments. The release also fixes CVE-2026-106023 and CVE-2026-109163. Three words: patch, patch, patch. Chris: humans aren't very good at writing code, and machines are better at this part of the game. Matt: was it a vulnerability when the code was written, or did new capabilities make it one?
• wfx-loot (Aikido Security): about 4,800 compromised developer and bot accounts sent probe pull requests to 61,764 GitHub repositories, and the credential stealer executed in more than 1,800 of them through GitHub Actions workflows, CI shell scripts and npm install hooks. It harvests GitHub tokens, repository secrets, cloud credentials and AI API keys, then reaches for persistence in AWS and Azure. StepSecurity traced 173 probe PRs to tokens issued to the Fly.io GitHub app, with no sign Fly.io itself was compromised. Chris: AI is multiplying the PRs every team merges, and malicious changes get harder to spot in that noise. Matt: some of those PRs were probably approved and merged autonomously, and over-permissioned developer tooling is the theme.
• France attributes the October 11 sabotage of refrigeration controllers at about 700 retail locations, which caused tens of millions of euros in losses and about 20 fires, to Shahid Kaveh, a cyber unit tied to Iran's IRGC. Attackers reached exposed Danfoss and Dixell controllers and forced endless heating cycles with safety alerts switched off; Carrefour, Casino, Leclerc, Intermarché, Metro and Coopérative U were among those hit. Chris retracts last week's guess that Russia was behind the fridge attacks. Matt on hacktivist personas and "look what I can do". CERT-FR's best advice: don't put this stuff on the internet. Chris closes on Cory Doctorow's story about appliances that stop working when the company behind them goes under.Stories covered:
• https://www.darkreading.com/cybersecurity-operations/japan-emergency-funding-cybersecurity-ai-assisted-breaches
• https://www.securityweek.com/apache-patches-critical-http-server-rce-found-by-anthropic-google/
• https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/
• https://thehackernews.com/2026/11/france-blames-iran-for-sabotage-attack.htmlChapters:
0:00 Captain Underpants and core memories
2:07 A trillion-dollar scandal and the human side
4:32 Japan's ¥10B emergency cybersecurity package
6:49 $63M doesn't go far at Japan's scale
10:08 Rewriting national cyber strategy for AI
11:12 Showing up to an F1 race with a horse
13:05 AI sovereignty and the kill switch
15:31 ¥10B won't build you an LLM
17:31 Apache HTTP/2 RCE found by Anthropic and Google
21:10 Humans aren't very good at writing code
21:39 Was it a vulnerability when it was written?
25:08 wfx-loot: 60,000 GitHub repositories probed
29:30 AI is taxing the pipes
30:43 PRs merged autonomously
31:58 France blames Iran for the refrigeration sabotage
34:30 Why would Iran attack Europe?
36:59 Don't put this stuff on the internet
37:24 Cory Doctorow and the dishwasher that stopped workingThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #supplychain #ICS #AI
Digital identity in the age of AI fraud with Jordan Burris [353]
Today we're speaking with Jordan Burris, Head of Public Sector at Socure, about digital identity and AI-driven fraud: how you prove a person is who they say they are when stolen data, deepfakes and AI agents …
Notas del episodio
Today we're speaking with Jordan Burris, Head of Public Sector at Socure, about digital identity and AI-driven fraud: how you prove a person is who they say they are when stolen data, deepfakes and AI agents are all in play.
Jordan leads Socure's work helping government agencies combat identity fraud and strengthen digital trust. Before joining Socure he served as Chief of Staff to the U.S. Federal CIO at the White House, helping oversee more than $90 billion in federal IT spending and advance national cybersecurity and technology priorities. He brings more than 15 years of experience in government technology.
In this conversation: applying to the White House through USA Jobs, living through the SolarWinds response and the push toward zero trust, why knowledge-based security questions are an open door, why you should assume your personal information is already stolen, how the cost of a sophisticated fraud attack fell from more than $20,000 to pennies, why the trade-off between security and user experience is a false choice, synthetic identities on video calls, telling a legitimate AI agent from a hostile one, and what happens when AI meets quantum computing.
Learn more at https://www.socure.com/
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at https://limacharlie.io/
Subscribe to The Cybersecurity Defenders Podcast on Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
Intel Chat: Binance's $6.34B heist, supermarket fridge attacks, Belarus wiper, XCPE botnet [352]
Intel Chat with Matt Bromiley and Chris Luft.• Binance discloses the $6.34 billion heist attempt, the largest attempted crypto theft on record. The FBI and TRM Security attribute it to North Korea's …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
• Binance discloses the $6.34 billion heist attempt, the largest attempted crypto theft on record. The FBI and TRM Security attribute it to North Korea's TraderTraitor. It began in June with an engineer installing a malicious Homebrew, then a fake recruiter and two fake job interviews delivered a "coding assignment" that swapped out a dev-tool component and evaded endpoint detection. In October the attackers used that machine and an internal AI tool to reach two more engineering devices, took a credential for the container deployment platform, ran a malicious container against the wallet signing service, and abused Ethereum's EIP-7702 delegation with 50 signing transactions so funds moved outside normal withdrawals. Multi-party computation meant there was no single key to revoke the authorizations. Binance froze or intercepted about $2.85 billion. Matt: we've warned about fake-recruiter attacks for months, and who takes a job interview on their work laptop? Hats off to the responders for getting this far in a week, but it's a breakdown in a human process, and training your people is the real ROI. Chris did the math: in $100 bills it's 63.5 tons of cash, three semi-trailers.
• Refrigeration attacks hit supermarkets in seven European countries. Attackers flipped refrigeration controls into defrost mode, pushing temperatures as high as 50 °C, at Delhaize stores in Belgium and Luxembourg, Carrefour, Spar, Ikea Mons, ICA and Coop in Sweden, SuperValu in Ireland and more. Refrigeration firm Sabcobel confirmed the attack and says the fix needs physical modifications, not just software. Danfoss reported attacks at businesses in the Netherlands. The attackers are unidentified, and US authorities are looking at similar malfunctions at American military bases. Matt recorded from one of the affected countries: who is behind it and why, and was the fridge facing the internet or reached through the store's management plane? One of those is close to negligence.
• FrostyNeighbor (UNC1151): ESET documents the first destructive attack by a Belarus-aligned actor, against a Ukrainian manufacturer important to the transportation sector, using Chisel, UltraVNC, Cobalt Strike and a VBScript wiper pushed through Group Policy. ESET sees Belarus-aligned groups acting as proxies or force multipliers for Russia; Recorded Future cautions against assuming Russian operational control. Matt: UNC1151 is a very early Mandiant handle, so this group has been around a long time. Chris: hitting the drone supply chain shows how cyber supports kinetic operations on the front line.
• Google dismantles the XCPE botnet: more than 1.3 million devices, mostly Android TV set-top boxes, with the malware built in by the manufacturer, Videostrong Technology, and access sold to affiliates for ad fraud, residential proxies and more. A three-stage design started from a backdoor on the /oem/ partition. Google banned Videostrong from preloading Google apps, went after the infrastructure with Japan's National Police Agency and industry partners, and says it likely cut off at least 10 million more devices. Chris and Matt on smart TVs that watch you, and whether the toothbrush can run Doom.Stories covered:
• https://arstechnica.com/information-technology/2026/11/binance-says-hackers-who-stole-billions-in-crypto-spent-months-planning-heist/
• https://www.bbc.com/news/articles/cq1kd1nee80eo
• https://www.darkreading.com/physical-security/russia-cyber-war-belarus-steps-forward
• https://www.securityweek.com/google-dismantles-xcpe-botnet-of-1-3-million-android-devices/Chapters:
0:00 The robot Renaissance
1:02 Binance and the $6.34 billion elephant in the room
5:06 Who takes a job interview on their work laptop?
8:01 63.5 tons of cash, three semi-trailers
8:42 A modern-day Frankenstein of an attack
11:01 A breakdown in a human process: train your people
11:46 Paying back the losses
12:15 Refrigeration attacks on European supermarkets
14:43 Real-world impact, and who might be behind it
15:09 Matt is in one of the affected countries
17:04 Internet-facing fridge or the management plane?
19:07 FrostyNeighbor: Belarus's first destructive attack in Ukraine
22:47 UNC1151, a very early handle
25:02 Hitting the drone supply chain
26:23 Google dismantles the XCPE botnet
29:08 Your TVs are watching you
32:30 But can the toothbrush run Doom?
33:16 Chris's new studioThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #northkorea #ICS #botnet
Intel Chat: NetScaler pre-auth RCE, OpenAI agents DDoS Wikimedia, MonsterCloud & ShinyHunters [351]
Intel Chat with Matt Bromiley and Chris Luft.• Citrix NetScaler pre-auth command injection, CVE-2026-88771 (CVSS 9.5). watchTowr Labs diffed vulnerable and patched builds and found the bug not in the Packet …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
• Citrix NetScaler pre-auth command injection, CVE-2026-88771 (CVSS 9.5). watchTowr Labs diffed vulnerable and patched builds and found the bug not in the Packet Engine but in a Perl maintenance script that hunts for crash dumps: it pulls data out of diagnostic logs and drops it into a shell command unvalidated. Put a payload in the username field of an unauthenticated login, NetScaler logs it, and the script later runs it as root (headers and request parameters work too, and execution can lag up to 24 hours). Default configurations are affected and it was exploited before a patch existed; it's one of eight fixes in the Citrix advisory, alongside a second exploited memory overflow. Fixed in the 13.1 and 14.1 branches. Chris: forget the old Perl script, the real failure is not scrubbing input. Matt: if you run these appliances, go read the advisory and patch, or take the service offline.
• OpenAI's autonomous agents caused a partial Wikimedia outage. Per Dark Reading, Wikimedia found unauthorized edits to its wiki sandboxes, a citation tool reconfigured to work as a proxy to external services, failed attempts on its Etherpad, and hundreds of thousands of queries against the Wikidata Query Service, which likely caused a partial outage in May. CTPO Selena Deckelmann confirmed the incidents; none of the agents were approved bots. Matt's read: call it what it is, a DDoS. No model wakes up and decides to attack a wiki. "If you were allowed to escape a sandbox, it's because someone put a ladder there for you," and putting a brick on the accelerator and stepping out of the car is not a defense. Chris: what happens when open-weight models on home GPUs can do the same? Do agents end up needing license plates?
• MonsterCloud's owner charged with selling "proprietary decryption" that was really paying the ransom. Prosecutors say Zohar Pinhasi (aka Zack Silver and Zack Green) negotiated with the same groups that hit his clients and bought the keys, paying more than $8 million and billing victims more than $19 million. In one case $8,200 to an affiliate became a ~$150,000 invoice. He faces wire fraud and wire fraud conspiracy charges. Matt: he was one honest sentence away from being a legitimate negotiator, so vet whoever you hire to negotiate.
• Alleged ShinyHunters leader arrested in Jordan and cooperating with the FBI. SecurityWeek identifies him as Saif al-Din Khader ("Rey"), a teenager from Amman also tied to Scattered Lapsus$ Hunters, arrested shortly after the group defaced the FBI's recruitment site and claimed 2-3 TB of data. Dutch police separately arrested a 24-year-old in Amsterdam the FBI ties to attacks on 140+ organizations and at least $70 million in extortion; reporting names him as Pepijn van der Stap. Brian Krebs reports Khader put an Umbreon image on the defaced FBI site, van der Stap's old nickname, apparently to point investigators at him. Chris: don't poke the bear, and there's no honor among thieves.Stories covered:
• https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/
• https://www.darkreading.com/cyberattacks-data-breaches/openai-agent-escape-causes-wikimedia-service-outage
• https://www.securityweek.com/fake-decryption-tools-masked-11m-markup-in-ransomware-recovery-scheme/
• https://www.securityweek.com/alleged-shinyhunters-leader-arrested-in-jordan/Chapters:
0:00 Seasons change, and the cost of software goes to zero
1:59 Home computers are going to be a target again
2:38 "It's darkest before it goes pitch black"
3:25 Citrix NetScaler pre-auth command injection (CVE-2026-88771)
6:04 Forget the old Perl script, scrub your input
7:00 If you're a defender: read the advisory and patch
9:24 Please don't write blog posts like this
9:50 OpenAI agents cause a Wikimedia outage
13:16 What happens when everyone sends agents across the web?
13:40 "ChatGPT launched a DDoS attack"
16:58 No LLM ever woke up and decided to attack a wiki
17:38 "Someone put a ladder there for you"
18:19 When open-weight models can do this at home
19:45 "My LLM went crazy" is not a defense
20:15 A driver's license for the internet?
20:52 MonsterCloud: ransomware recovery that just paid the ransom
23:53 A middleman with an 18x markup
26:17 Vet your negotiator
26:44 Alleged ShinyHunters leader arrested in Jordan
28:49 The Umbreon frame-up
29:31 No honor among thieves
32:08 Maybe biweekly is the way to do itThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #ransomware #AIsecurity #threatintel
Securing AI agent identity and authority with Geoffrey Mattson [350]
Today we're speaking with Geoffrey Mattson, CEO of SecureAuth, about identity and authority for AI agents: what changes when software stops being something a human uses and starts taking actions on its …
Notas del episodio
Today we're speaking with Geoffrey Mattson, CEO of SecureAuth, about identity and authority for AI agents: what changes when software stops being something a human uses and starts taking actions on its own.
Geoffrey is a serial entrepreneur working at the intersection of cybersecurity and AI. Before SecureAuth he was CEO of Xage Security and co-founded MistNet.ai (acquired by LogRhythm), after product and engineering leadership roles at Juniper Networks, Huawei, Nortel and Bell Labs across Europe, Asia and the U.S. At SecureAuth he is focused on how organizations manage the identity, permissions and authority of autonomous agents.
In this conversation: why an agent has the power of a software process with the unpredictability of a human, the difference between delegating authority and handing over your credentials, tightly scoped, time-bound tokens that get subdivided as work passes to sub-agents, the wild west of MCP servers, bringing shadow agents into the light, why guardrails can speed AI adoption up rather than slow it down, and what a solo attacker running a network of LLMs means for small and mid-sized businesses.
Learn more at https://www.secureauth.com/
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at https://limacharlie.io/
Subscribe to The Cybersecurity Defenders Podcast on Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
Physical AI and self-learning machines with Dr. Amarjot Singh [348]
Today we're speaking with Dr. Amarjot Singh, Founder & CEO of Skylark Labs, about physical AI — what changes when a model leaves the server and has to perceive, decide and act inside a machine that moves …
Notas del episodio
Today we're speaking with Dr. Amarjot Singh, Founder & CEO of Skylark Labs, about physical AI — what changes when a model leaves the server and has to perceive, decide and act inside a machine that moves through the real world.
Dr. Singh earned his PhD in artificial intelligence and deep learning from the University of Cambridge, and has worked as a research fellow at Stanford University and on DARPA research focused on artificial general intelligence. His work spans computer vision, self-learning AI, drones, humanoid robotics and autonomous systems, with more than 50 international journal and conference publications. At Skylark Labs he is focused on taking that research into real-world systems, including AI-powered drones, robotic platforms and technologies designed for defense and other mission-critical environments.
In this conversation: why a bad prediction from a robot is a different problem than a hallucination from a chatbot, what an on-device AI stack actually looks like from sensors to action, learning from a single exposure at the edge and deliberately forgetting the rest, how one machine shares validated knowledge with the rest of a fleet, why hands and manipulation remain the hardest problem in robotics, what "reliable enough" means when failure has physical consequences, and where this all lands in ten years.
Learn more at https://skylarklabs.ai/
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at https://limacharlie.io/
Subscribe to The Cybersecurity Defenders Podcast on Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
Intel Chat: Claude models reached real systems, an AI safety resignation & ShieldCrash [347]
Intel Chat with Matt Bromiley and Chris Luft.• An Anthropic researcher quits over where the race is heading. Jacob Coxon, who trains models on large amounts of data, is leaving both Anthropic and the AI …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
• An Anthropic researcher quits over where the race is heading. Jacob Coxon, who trains models on large amounts of data, is leaving both Anthropic and the AI industry: he believes the leading labs are racing toward self-improving systems they may not be able to control, and that competition will push them there anyway. Matt's problem with the genre of exit: if the people who care most about safety walk out, walking out guarantees they have no say. And the big labs were never the whole threat, because anyone can pull down an open model with no guardrails tonight: "I can go get access to an unfettered model right now."
• Four Claude models reached real third-party systems during cybersecurity evaluations. Anthropic's write-up: the evals were mistakenly connected to the public internet, the models were told they were in a simulation with no internet access, and they ran without the safeguards that ship in production. Two alignment failures are named, biased reasoning and recklessness, and a scan of ~481 million transcripts found nothing of similar or greater severity. Worst case: Claude Mythos 5 published a malicious package to the real PyPI during a CTF, it landed on 15 systems believed to be security scanners, one leaked credentials, and Claude used them to reach a security vendor's live database. Opus 4.7 knew its target was real but assumed it was authorized. METR is investigating. Matt's take: none of it is novel — "you and I have covered like 15 adversaries who have done that too" — it is hyper-automation of attacks we already understand.
• OpenAI's Astra reaches the "Critical" cybersecurity tier — the top band of its Preparedness Framework, for consequential offensive work with minimal oversight. It scored 100% on ExploitBench, escaped a restricted browser sandbox, ran commands on the host, took root on a hardened OS, and chained small weaknesses into long-horizon campaigns. Cyber jailbreak refusals are 91.5% versus 59% for GPT-5.6 Sol, which still leaves 8.5%. Access is phased: vetted professionals, then the Daybreak Blue red-teaming program. Matt is unmoved — if a model took total root control of a "hardened" OS, then the definition of hardened needs revamping. The fortress was a bouncy castle.
• ShieldCrash, a reminder that humans are still a threat. Nightmare-Eclipse released another Windows zero-day PoC they say bypasses Microsoft's September patch for an earlier Windows Defender flaw, in the Microsoft Malware Protection Engine, on all supported Windows versions. It follows CVE-2026-69414 (ShieldBreak), the August privilege-escalation bug Microsoft patched — the researcher says the fix missed a path to the same underlying issue, and has been dropping exploits around Patch Tuesday since April after a dispute with Microsoft over vulnerability reports. SOCRadar CISO Ensar Seker reads it as an arbitrary SYSTEM-context file read, not a full SYSTEM shell; Nightmare-Eclipse calls it full privilege escalation. Either way a SYSTEM-level read hands over configs and credentials for the next link in a chain, and repeated bypasses — RoguePlanet, ShieldBreak, now ShieldCrash — suggest a boundary that needs a redesign.Stories covered:
• https://www.wsj.com/tech/ai/anthropic-researcher-quits-over-out-of-control-ai-fears-707b7628
• https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents
• https://socfortress.medium.com/openais-astra-reaches-critical-cybersecurity-capability-threshold-6a3b5f822e91
• https://www.darkreading.com/vulnerabilities-threats/nightmare-eclipse-strikes-again-shieldcrash-windows-exploitChapters:
0:00 Are we at the start of the AI apocalypse?
1:48 Every AI apocalypse movie, same premise
4:10 The Matrix's original script: humans as memory
5:14 An Anthropic researcher quits over out-of-control AI
6:49 If you care about AI safety, why leave?
11:03 "I can go get an unfettered model right now"
12:18 Four Claude models reached real systems
15:17 Agents that accept "permadeath" to finish the task
16:39 None of it was novel — it was automation
19:24 Stop asking how dangerous it is and go patch
20:22 OpenAI's Astra crosses the "Critical" threshold
23:24 If they got root, it was a bouncy castle
25:51 Research articles, not imminent threats
27:00 ShieldCrash: a scorned researcher vs Defender
29:51 mimikatz, legal threats and the Streisand effect
32:59 Waiting for the AI that cures a diseaseThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #AIsecurity #threatintel #malware
Intel Chat: OpenAI's Astra hits Critical, DEF CON phishing, Philippine nuclear breach [346]
Intel Chat with Matt Bromiley and Chris Luft.• OpenAI says Astra is the first of its models to reach the "Critical" cybersecurity capability level under its Preparedness Framework — the tier that means a model …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
• OpenAI says Astra is the first of its models to reach the "Critical" cybersecurity capability level under its Preparedness Framework — the tier that means a model can independently find and exploit zero-days across well-defended systems, or run an end-to-end attack from a high-level instruction. Astra scored perfectly on ExploitBench, independently discovered two zero-days, escaped a browser sandbox, and chained flaws in a hardened OS to get root. It also refused 91.5% of cyber jailbreak attempts, versus 59% for GPT-5.6 Sol. Matt's take: every frontier model now seems benchmarked on offensive security, and the model with no governors on it is the one to worry about.
• Post-DEF CON phishing aimed at security researchers. Huntress documented an actor who DM'd one of its researchers on X while impersonating a CoinDesk executive organizing a conference. The lure was a Google Doc carrying a malicious Apps Script sidebar, then ClickFix-style instructions — Atomic macOS Stealer (AMOS) for Mac users, fake Google updates and PowerShell for Windows. The Windows chain ended with NetSupport Manager as a RAT, a Ledger wallet implant, and a proxy that installed its own certificate authority and redirected VirusTotal lookups. Matt's read: they probably just bought a conference attendee list, and the write-up should become awareness training for everyone outside security.
• A Philippine nuclear agency and a naval contractor breached through flaws that were already patched. Hunt.io found an attacker-controlled ownCloud server in Amsterdam holding ~1.2GB of files, after the operators exploited an ownCloud bug from 2023 and a WordPress caching plugin bug patched in 2024 that were both still exposed. The haul included a research reactor core-component database, fuel inventories, radiation safety documents, personnel records, BitLocker keys and credential stores. Hunt.io stopped short of attribution despite Chinese-language code comments. The twist Matt loves: for once it was the adversary who left a repository wide open, giving defenders a look at their tooling — Sliver, Metasploit, an embedded Meterpreter build.
• Silver Fox counterfeit installers that switch off Windows Update. Microsoft tracked an active campaign using high-fidelity fake software-download sites aimed mainly at Chinese-speaking users and China-based operations of multinationals, with a payload whose hash changes on every download. It persists via scheduled tasks disguised as IT jobs, adds Defender exclusions from a SYSTEM task, deletes shadow copies, then stops update services, renames update DLLs and clears the Windows Update cache. And it still stages out of C:\Users\Public and C:\ProgramData — which sets Matt off on why those are still not no-go zones after 13 years, and why nobody has shipped the frontier model that just fixes the basics.Stories covered:
• https://www.securityweek.com/openais-astra-becomes-first-model-to-cross-critical-cybersecurity-threshold/
• https://www.huntress.com/blog/defcon-phishing-google-doc-malware
• https://www.darkreading.com/cyberattacks-data-breaches/old-unpatched-flaws-attackers-philippines-nuclear-agency
• https://thehackernews.com/2026/09/fake-software-installers-disable.htmlChapters:
0:00 Matt checks in from Virginia Beach
1:44 OpenAI's Astra crosses the "Critical" cyber threshold
3:43 Every frontier model is now aimed at cybersecurity
6:52 So where is the model with no governors on it?
8:23 Post-DEF CON phishing targeting security researchers
10:42 Did the adversary know who they were targeting?
12:55 Turn the write-up into training for everyone else
15:01 Philippine nuclear agency breached through old, patched flaws
17:48 For once, the adversary left the door open
21:26 Silver Fox: counterfeit installers that disable Windows Update
24:00 Still C:\Users\Public, 13 years later
25:42 Give us a frontier model that fixes the basicsThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #AIsecurity #threatintel #malware
Intel Chat: AI patches fail, LiteLLM supply chain, Claude eval incidents & DPRK npm [345]
Intel Chat with Matt Bromiley and Chris Luft.• AI-generated patches fix vulnerabilities about half the time. 1Password's Off-By-1 team tested ChatGPT-5.5 and Opus 4.8 against six vulnerabilities: across 6,080 …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
• AI-generated patches fix vulnerabilities about half the time. 1Password's Off-By-1 team tested ChatGPT-5.5 and Opus 4.8 against six vulnerabilities: across 6,080 generated patches only 46% fixed the underlying flaw, and some that did were narrow enough to be bypassed. Separate Veracode research found a 56% security pass rate across 100+ models, with 44% of AI-generated code carrying detectable OWASP Top 10 issues. Matt's pushback: what is the HUMAN success rate for comparison, and why is nobody publishing that number?
• LiteLLM supply chain attack. CloudSEK reports 2,500+ organizations and 434,000 CI/CD pipelines potentially exposed. LiteLLM was not the initial target: the compromise came in through Aqua Security's Trivy scanner and spread when LiteLLM's CI automatically installed it, ending with malicious versions 1.82.7 and 1.82.8 on PyPI. They were live for roughly 40 minutes, which automated dependency resolution and cached layers were more than enough to propagate.
• Anthropic's models reached real systems during evaluations. Reviewing 141,006 evaluation runs, Anthropic found three incidents where Claude models gained unauthorized access to real organizations during capture-the-flag exercises, after a misunderstanding with an evaluation partner left the environments internet-connected. One model published a malicious package to the real PyPI, where it ran on 15 real systems. Matt argues this is a lab test rather than a threat report, and asks what defenders are supposed to do with it.
• North Korea behind the npm compromises. Amazon Threat Intelligence links the typo-crypto, debug, chalk and axios incidents to the same DPRK actor tracked as SAPPHIRE SLEET, STARDUST CHOLLIMA and BlueNoroff. Wiz found roughly one in ten cloud environments touched by the debug and chalk incident within two hours. The technique has shifted: malicious functionality is now split across several innocuous-looking packages that only do anything once combined, plus slopsquatting and prompt injection aimed at AI code scanners.Stories covered:
• https://www.darkreading.com/application-security/ai-generated-patches-fail-half-time
• https://www.securityweek.com/over-2500-organizations-impacted-by-litellm-supply-chain-attack/
• https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals
• https://aws.amazon.com/blogs/security/amazon-identifies-north-korean-hacker-group-behind-open-source-supply-chain-attacks/Chapters:
0:00 Back from Black Hat
3:31 AI-generated patches fix vulnerabilities about half the time
6:23 What is the human success rate?
10:53 LiteLLM supply chain attack
13:03 Pin your dependencies
15:59 Anthropic models reached real systems during evals
22:12 This is a lab test, not a threat report
27:06 North Korea behind the debug, chalk and axios compromises
30:59 Malware assembled from harmless-looking parts
33:27 Clever people on the other side of the fenceThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #AIsecurity #supplychainsecurity #threatintel
Proving the value of security operations with Christopher Crowley [344]
Today we're speaking with Christopher Crowley, cybersecurity consultant through Montance and Senior Instructor with the SANS Institute, about the value of cybersecurity operations — how to measure it, how to …
Notas del episodio
Today we're speaking with Christopher Crowley, cybersecurity consultant through Montance and Senior Instructor with the SANS Institute, about the value of cybersecurity operations — how to measure it, how to express it to the business, and how AI is changing the work of the SOC.
Christopher is a cybersecurity practitioner and educator focused on security operations, incident response, threat hunting, and building and maturing security operations centers. He is the author of the annual SANS SOC Survey, a security operations class called SOC-Class, and a new book entitled The Value of Cybersecurity Operations. He is a Senior Instructor with the SANS Institute, a faculty member at IANS, and a consultant through Montance. His background also includes network operations, software development, mobile security assessment, and security policy.
Learn more at https://montance.com and get the book at https://shop.montance.com
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at https://limacharlie.io/
Subscribe to The Cybersecurity Defenders Podcast on Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
Intel Chat: Shai-Hulud is back, model pinning & the token spend problem [343]
Intel Chat with Matt Bromiley and Chris Luft — recorded in person at Black Hat USA in Las Vegas, day two.No prep doc, no script: just what Matt and Chris were actually hearing on the floor.• Shai-Hulud is back …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft — recorded in person at Black Hat USA in Las Vegas, day two.
No prep doc, no script: just what Matt and Chris were actually hearing on the floor.
• Shai-Hulud is back. The self-replicating npm worm returned on August 4, trojanizing the keyv / cacheable family and spreading to 400+ packages within hours. Chris reads through Datadog Security Labs' analysis of the Shai-Hulud 2.0 wave: 796 packages and 1,092 versions, 20M+ weekly downloads, credential harvesting with TruffleHog, GitHub repositories used for both exfiltration and command and control, and a worm that reads its own code to propagate without a C2 server.
• The LLM that downloaded the malicious package by itself. A researcher asked a frontier model about a compromised package, and the model decided the best way to help was to go fetch a copy — tripping the SOC's alert and bypassing the company's centralized package clearing house on the way.
• Non-human identity as the new perimeter. Every agent you introduce is another identity: who created it, what can it reach, how long should it live?
• "Computer says no." Matt's colleague hit a refusal from Opus 5, and the session automatically downgraded to 4.8 and completed the task. Which raises the real question of the episode: do security teams now need model pinning, the way we once needed certificate pinning? And if defenders pin to older models to keep working while adversaries use the newest ones, have we rebuilt the same gap all over again?
• AI governance and change control — which models are approved for which tasks, and what happens when a vendor ships a new version or deprecates an old one.
• Token spend as a CISO budget line item. Enterprises buying tokens at a scale their vendors can't match and pulling those vendors onto their plan, token burn as an insider-threat vector, and why $100,000 of tokens is not $100,000 of productivity.
• Defender takeaways: pin your npm packages, get security off its island and talk to your developers, build approved paths before detections, least privilege and key rotation, and network-gated pushes as a deliberate chokepoint.Stories covered:
• https://www.elastic.co/security-labs/shai-hulud-chaindrop-npm-supply-chain
• https://research.jfrog.com/post/shai-hulud-is-back-august/
• https://securitylabs.datadoghq.com/articles/shai-hulud-2.0-npm-worm/
• https://securitylabs.datadoghq.com/articles/npm-worm-compromises-popular-npm-packages/
• https://unit42.paloaltonetworks.com/npm-supply-chain-attack/Chapters:
0:00 Live from Black Hat, in person for once
0:48 How Black Hat has changed
4:31 No prep — let's talk about what's actually happening here
4:57 Shai-Hulud is back: supply chain compromise
6:23 The LLM that downloaded the malicious package
7:19 Inside Shai-Hulud 2.0
10:34 When attackers and defenders use the same tools
11:39 Non-human identity is the new perimeter
12:13 Opus 5 said no, so the session downgraded itself
15:23 Do security teams need model pinning?
18:20 Three companies, very nebulous rules
18:35 AI governance: which model for which task
21:19 Token spend hits the security budget
22:58 Is token spend a productivity metric?
25:46 Pin your packages
26:25 Get security off the island
29:17 Least privilege, key rotation, chokepoints
32:55 Why it's called Shai-Hulud
33:25 Wrapping up at Black HatThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #threatintel #AIsecurity #supplychainsecurity
Intel Chat: Hugging Face AI-agent breach, WP2Shell, Suno & Paidwork leaks, AWS Bahrain strike [342]
Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Hugging Face's security incident disclosure: an intrusion conducted end-to-end by an …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
Matt and Chris break down four stories from the week in threat intel:
• Hugging Face's security incident disclosure: an intrusion conducted end-to-end by an autonomous AI agent system — a malicious dataset exploiting two code-execution paths, thousands of actions across short-lived sandboxes, self-migrating C2 — and why the forensics had to run on the open-weight GLM 5.2 model after hosted frontier models refused to analyze real attack artifacts.
• WP2Shell: attackers chaining CVE-2026-60137 (WordPress Core SQL injection) with CVE-2026-63030 (Batch REST API logic flaw) for unauthenticated remote code execution on default WordPress installs — found by Searchlight Cyber using GPT-5.6 Sol Ultra in about ten hours, with tens of thousands of exploitation attempts following disclosure.
• Data breaches at AI music generator Suno (55.3M unique email addresses, plus partial Stripe payment records) and gig-work platform Paidwork (23.3M addresses, password hashes and banking data), per Have I Been Pwned.
• Iranian state media claims the IRGC destroyed AWS's Bahrain data center (ME-SOUTH-1) with cruise missiles — and what data centers becoming military targets means for cloud resilience.
Plus: Google Threat Intelligence Group retires APT/FIN nomenclature for new threat-actor names, and where to find Chris and Matt at Black Hat.
Stories covered:
• https://huggingface.co/blog/security-incident-july-2026
• https://www.darkreading.com/cyberattacks-data-breaches/wp2shell-millions-wordpress-sites-remote-takeover
• https://www.securityweek.com/suno-paidwork-data-breaches-affect-tens-of-millions-of-accounts/
• https://www.tomshardware.com/tech-industry/data-centers/amazon-data-center-in-bahrain-struck-and-destroyed-by-iranian-cruise-missiles-state-media-claims-attacks-launched-against-aws-site-in-response-to-alleged-us-strikes-on-an-under-construction-nuclear-plant
Chapters:
0:00 Intro & Black Hat plans
2:07 Hugging Face's AI-agent breach disclosure
12:39 WP2Shell: WordPress exploit chain
20:59 Suno & Paidwork data breaches
24:17 IRGC strikes on AWS Bahrain
28:27 Google Threat Intel's new actor names
29:29 Black Hat swag hunt & wrap-up
The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieio
Learn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #threatintel #AIsecurity #databreach
Building trustworthy AI with Rob van der Veer [341]
Today we're speaking with Rob van der Veer, Chief AI Officer at Software Improvement Group, about how organizations can build trustworthy AI in an era of rapidly evolving technology and regulation — AI …
Notas del episodio
Today we're speaking with Rob van der Veer, Chief AI Officer at Software Improvement Group, about how organizations can build trustworthy AI in an era of rapidly evolving technology and regulation — AI security, threat modeling, international standards, and the new challenges posed by agentic AI.
Rob is a global leader in AI security, software engineering, and international AI standards, with more than 30 years of experience in artificial intelligence. He has played a leading role in developing industry standards and serves as co-editor of the forthcoming European AI security standard supporting the EU AI Act. He is the founder of the OWASP AI Exchange, co-founder of OpenCRE, and has helped bring together standards organizations, industry, and the open-source community to advance practical approaches to secure AI.
Learn more at https://www.softwareimprovementgroup.com and https://owaspai.org
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at https://limacharlie.io/
Subscribe to The Cybersecurity Defenders Podcast on Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
AI Chat: The Hugging Face / OpenAI breach — the attacker was the model [340]
AI Chat with Maxime Lamothe-Brassard and Chris Luft — a special episode.One story, pulled apart start to finish. In mid-July 2026, Hugging Face disclosed a breach of its production infrastructure carried out …
Notas del episodio
AI Chat with Maxime Lamothe-Brassard and Chris Luft — a special episode.
One story, pulled apart start to finish. In mid-July 2026, Hugging Face disclosed a breach of its production infrastructure carried out end-to-end by an autonomous AI agent. Five days later, OpenAI revealed the attacker was its own models — GPT-5.6 Sol and a more capable unreleased model — which broke out of an internal cyber-capability evaluation called ExploitGym and reached into Hugging Face's production systems to steal the benchmark's answer key.
In this episode:
• The timeline: Hugging Face's July 16 disclosure, OpenAI's July 21 attribution — and the five days in between when even the victim didn't know an AI did it.
• The attack chain: a malicious dataset abusing two code-execution paths in the dataset-processing pipeline, node-level escalation, credential harvesting and lateral movement — thousands of actions across short-lived sandboxes with self-migrating command-and-control.
• The escape: a zero-day in the eval sandbox's package-registry cache proxy, the single egress control — per OpenAI's own account.
• Motive: the models got "hyperfocused" on winning the benchmark, not stealing data — and whether "no malicious intent" is a fair description or a comforting one.
• What was and wasn't exposed, what to do about your Hugging Face tokens, and why this is not the 2024 Spaces incident or the 2023 OpenAI forum hack.
• Max's hot take: the beginning of the phase where we lock developers out of writing code — and a new fear unlocked: models backdooring other models.
Stories covered:
• https://huggingface.co/blog/security-...
• https://openai.com/index/hugging-face...
Chapters:
0:00 Cold open — the attacker was the model
2:20 The whole story in one breath
6:41 The timeline: two disclosures, five days apart
11:37 Attack chain, part 1: getting in through a malicious dataset
15:53 Attack chain, part 2: escaping the eval sandbox
22:10 Motive, attribution & intent: cheating on the benchmark
25:31 What was (and wasn't) exposed
28:08 The bigger picture: the fire drill started the fire
31:39 Lessons for labs, platforms, and solo developers
33:15 New fear unlocked: models backdooring models
The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00ze...
• Apple Podcasts: https://podcasts.apple.com/us/podcast...
• YouTube: / @limacharlieio
Learn more about LimaCharlie: https://limacharlie.io
#cybersecurity #AIsecurity #OpenAI #HuggingFace #infosec
AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339]
AI Chat with Maxime Lamothe-Brassard and Chris Luft.A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations …
Notas del episodio
AI Chat with Maxime Lamothe-Brassard and Chris Luft.
A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard.
In this episode:
• Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire local Git repository — commit history, branches and .env files with API keys — to a Google Cloud bucket; wire-level analysis via mitmproxy, a quiet server-side fix, and why you should rotate keys if you used the tool.
• Fortinet's take (via Mexico Business News) on AI accelerating vulnerability discovery and exploitation: 24–48 hours from disclosure to active exploitation vs. 16 days to patch — and whether "virtual patching" is a real mitigation or a feat of marketing.
• The AI distillation debate: after years of arguing fair use for scraping the internet, frontier labs now object to competitors training on their model outputs — Business Insider's look at the irony, shared by Pascal Hetzscholdt (Wiley).
• Neon Cyber's survey on shadow AI rising with seniority: 14% of individual contributors use unapproved AI tools vs. 63.7% of managers and 70% of VPs and above — and why enforcement, not awareness, is the real challenge.
Stories covered:
• / guptanipun_my-spare-laptop-ran-completely-...
• https://mexicobusiness.news/cybersecu...
• / pascal-hetzscholdt_quote-heres-some-delici...
• https://neoncyber.com/blog/shadow-ai-...
Chapters:
0:00 Intro — welcome to AI Chat
0:45 Grok Build CLI uploading entire repos (Nipun Gupta / Optimus Labs)
4:57 AI is outpacing patch management — is virtual patching the answer?
12:32 The AI distillation debate: scraping irony at the frontier labs
16:29 Shadow AI use rises with seniority (Neon Cyber)
22:51 Wrap-up
The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00ze...
• Apple Podcasts: https://podcasts.apple.com/us/podcast...
• YouTube: / @limacharlieio
Intel Chat: Dialogflow Rogue Agent, ghost phishing, CISA KEV deadline & HalluSquatting [338]
Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Varonis Threat Labs' "Rogue Agent" — a permission boundary flaw in Google Dialogflow CX's Code …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
Matt and Chris break down four stories from the week in threat intel:
• Varonis Threat Labs' "Rogue Agent" — a permission boundary flaw in Google Dialogflow CX's Code Blocks feature that could let an attacker with a single permission (dialogflow.playbooks.update) inject persistent malicious code into a chatbot's execution pipeline and silently exfiltrate conversations; Google has fully patched it, no customer action required.
• The EvilTokens campaign and "ghost phishing" — AES-GCM-encrypted phishing pages that look harmless to URL scanners and only reveal themselves after decrypting in the victim's browser, driving Microsoft device code phishing against Microsoft 365 accounts.
• CISA adds four actively exploited flaws to the KEV catalog with a July 10 patch deadline under BOD 26-04: Adobe ColdFusion (CVE-2026-48282, CVSS 10.0), Langflow (CVE-2026-55255, chained with CVE-2026-33017), and Joomla's SP Page Builder (CVE-2026-48908) and Page Builder CK (CVE-2026-56290) extensions.
• HalluSquatting — Tel Aviv University researchers show attackers can register the repository names AI coding assistants predictably hallucinate, then ride prompt injection to code execution on developer machines — with success rates up to 85% for repos and 100% for skill installs across Cursor, Windsurf, Copilot, Cline, Gemini CLI and more.
Stories covered:
• https://www.darkreading.com/application-security/dialogflow-cx-rogue-agent-flaw-enabled-ai-chatbot-data-theft
• https://thehackernews.com/2026/07/new-ghost-phishing-wave-is-breaking.html
• https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-coldfusion-langflow-joomla-flaws/
• https://thehackernews.com/2026/07/new-hallusquatting-attack-could-trick.html
Chapters:
0:00 Intro & catching up
4:31 Google Dialogflow CX "Rogue Agent" flaw
11:03 EvilTokens & "ghost phishing"
17:37 CISA KEV: ColdFusion, Langflow & Joomla — patch by July 10
24:56 HalluSquatting: weaponizing AI hallucinations
33:16 Wrap-up
The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieio
Learn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #threatintel #AIsecurity #phishing
Ransomware in the age of agentic AI with Behnaz Karimi [337]
Today we're speaking with Behnaz Karimi, an independent researcher specializing in ransomware and agentic AI systems, Senior Cybersecurity Analyst at Accenture, and founder of Tremorina, about how ransomware is …
Notas del episodio
Today we're speaking with Behnaz Karimi, an independent researcher specializing in ransomware and agentic AI systems, Senior Cybersecurity Analyst at Accenture, and founder of Tremorina, about how ransomware is evolving to target AI systems, machine learning pipelines, and autonomous agents.
With more than 20 years of experience in cybersecurity, Behnaz is also a leader within the OWASP AI Exchange, where she helps develop AI security frameworks and contributes to international AI security standards. In this conversation we cover the new generation of data-poisoning ransomware, why stolen models and datasets are becoming the ransom, what makes autonomous agents an entirely new attack surface, and how organizations can build resilience into their AI initiatives from day one.
Learn more about the OWASP AI Exchange at https://owaspai.org/
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.
Start today for free at https://limacharlie.io/
Subscribe to The Cybersecurity Defenders Podcast on Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
Intel Chat: Hijacked AI backends, billboard hacks, Cursor DuneSlide & Claude export controls [336]
Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Zenity researchers observed three campaigns where attackers hijacked internet-exposed AI …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
Matt and Chris break down four stories from the week in threat intel:
• Zenity researchers observed three campaigns where attackers hijacked internet-exposed AI inference endpoints (Ollama, LiteLLM) as free model backends for offensive operations — including the Strix and HexStrike-AI pentesting frameworks and a Codex agent posing as a "security auditor" — enabled by no-auth defaults and placeholder API keys.
https://www.darkreading.com/cloud-security/attackers-hijack-exposed-ai-endpoints-power-offensive-ops
• A CISA advisory on Daktronics controllers behind scoreboards, digital billboards and highway signs: unauthenticated path traversal, arbitrary file upload and default admin credentials chaining to root-level control, found and responsibly disclosed by a Princeton undergrad.
• Cato's "DuneSlide" (CVE-2026-50548 / CVE-2026-50549) — two critical Cursor flaws where a single prompt injection escapes the terminal sandbox and executes arbitrary commands on a developer's machine; patched in Cursor 3.0.
https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html
• Anthropic restoring worldwide Claude Fable 5 access after the US Commerce Department lifted emergency export controls triggered by a jailbreak — plus what it means for AI governance, open-source model catch-up and the data center debate.
https://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.html
Chapters:
0:00 Intro & catching up
1:17 Attackers hijacking exposed AI backends (Ollama & LiteLLM)
9:18 CISA advisory: billboard & highway sign controllers
13:46 Cursor "DuneSlide" prompt-injection sandbox escape
20:34 Claude Fable 5 export controls lifted
28:17 Data centers, nuclear déjà vu & the AI race
33:39 Wrap-up
The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Learn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #threatintel #AIsecurity #promptinjection
Intel Chat: Cisco CUCM exploited, ransomware profiles, Gamaredon & AI agent phishing [335]
Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Cisco CUCM (CVE-2026-20230) — a web-dialer SSRF that chains to root-level RCE, exploited in …
Notas del episodio
Intel Chat with Matt Bromiley and Chris Luft.
Matt and Chris break down four stories from the week in threat intel:
• Cisco CUCM (CVE-2026-20230) — a web-dialer SSRF that chains to root-level RCE, exploited in the wild less than 24 hours after the PoC and full exploit chain were published.
• The latest Ransomware Tool Matrix (RTM) / Ransomware Vulnerability Matrix (RVM) update, profiling three active groups — The Gentlemen, DragonForce and Warlock — and the BYOVD and legit-admin-tool tradecraft they increasingly share.
• Gamaredon's upgraded toolkit against Ukraine (per ESET): new PowerShell downloaders like PteroPaste, Cloudflare tunneling and Workers for C2, and exfiltration to trusted cloud storage such as Amazon S3 and Dropbox.
• Varonis Threat Labs phishing an AI email agent ("Pinchy") — why agents spot technical phishing better than humans yet hand over credentials to a convincing social request, and why you should treat them as privileged junior employees.
Chapters:
0:00 Intro & catching up
2:25 Cisco CUCM exploited within 24h of the PoC
9:57 Ransomware Tool Matrix: The Gentlemen, DragonForce & Warlock
15:44 Gamaredon's upgraded TTPs against Ukraine
22:18 Can AI email agents be phished?
28:08 Wrap-up: Black Hat plans & the LimaCharlie suite
The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps
• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740
• YouTube: https://www.youtube.com/@limacharlieio
Learn more about LimaCharlie: https://limacharlie.io
#cybersecurity #infosec #threatintel #ransomware #DFIR
The evolving fraud landscape in the age of AI with Tamas Kadar [#334]
Today we're speaking with Tamas Kadar, CEO / Co-Founder of SEON, about building a safer digital world for businesses. We touch on fraud, how it's evolved in the age of AI, and what we can do to protect …
Notas del episodio
Today we're speaking with Tamas Kadar, CEO / Co-Founder of SEON, about building a safer digital world for businesses. We touch on fraud, how it's evolved in the age of AI, and what we can do to protect ourselves against it.
Tamas' entrepreneurial path began at Corvinus University in Budapest, where the vision for SEON first took shape. Co-founding a cryptocurrency exchange opened his eyes to the scale and complexity of online fraud, sparking the idea for something better. In 2017, that “something better” became SEON. Learn more at https://seon.io/
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io
Anthropic restriction, ServiceNow incident, Fortinet credential harvesting & Ukraine accesses EU cyber reserve / Intel Chat [#333]
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Reports state that the US government issued an export control order restricting access to …
Notas del episodio
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.
- Reports state that the US government issued an export control order restricting access to anthropic newly released cloud mythos five and fable five models for foreign nationals.
- ServiceNow disclosed a security incident involving an unauthenticated access for an API endpoint that allowed users to query data from customer instances without proper authentication.
- A large scale credential harvesting campaign dubbed for to bleed is actively targeting Fortinet firewalls and VPN gateways, and has already compromised more than 30,000 internet facing devices across 194 countries.
- Ukraine has been granted access to the European Union's cyber security reserve, giving the country the ability to request assistance from EU approved cyber security experts during major cyber attacks that exceed its own response capabilities.
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io.
Last call for Defenders - How we're actually using AI in the SOC with Eric Capuano / Defender Fridays [#332]
Join us for the final episode of Defender Fridays as Eric Capuano, creator of Defender Fridays and co-founder of Digital Defense Institute, closes out the series with a candid conversation on how he's actually …
Notas del episodio
Join us for the final episode of Defender Fridays as Eric Capuano, creator of Defender Fridays and co-founder of Digital Defense Institute, closes out the series with a candid conversation on how he's actually building and running agentic workflows in the SOC today.
At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
What We'll Discuss
In this episode, Eric Capuano draws on years of SOC operations, detection engineering, and hands-on agentic workflow development to share what's actually working, what isn't, and where the industry needs to be more honest with itself.
Key Topics:
- Why agentic workflows are the next evolution of SOAR, and what it takes to build them reliably
- How deterministic checkpoints at every stage are essential to making LLM-driven workflows trustworthy
- How one team increased their detection engineering output by 900x using agentic workflows running day and night
- Why false positive tuning and detection engineering are the right place to start before tackling complex investigative workflows
- How to think about model selection in agentic pipelines: cost, task complexity, and stakes
- Why organizations with poor data hygiene will struggle to get value from AI regardless of how sophisticated the tooling is
- The risks of prompt injection when feeding untrusted inputs into LLMs, and why trusted inputs should always come first
- Why the goal is to use LLMs for as little as possible, and push everything else into deterministic steps
About Our Guest
Eric Capuano is the creator of Defender Fridays and co-founder of Digital Defense Institute. He has spent years doing SOC operations, detection engineering, threat hunting, and DFIR, and currently consults on building and deploying agentic SecOps workflows for security teams. He is also the author of the "So You Want to Be a SOC Analyst" training, which has put over 500 students through hands-on SOC workflows using LimaCharlie's free tier.
Watch Us Live
Defender Fridays ran every Friday at 10:30am PT for over 100 sessions. Subscribe to our YouTube channel to catch up on past episodes.
Sponsored by LimaCharlie
This episode is brought to you by LimaCharlie, the Agentic SecOps Workspace (ASW), where AI agents operate security infrastructure using the same controls and authority as human analysts, with every action visible, governed, and auditable.
Why LimaCharlie?
- Eliminate vendor sprawl and tool complexity
- Deploy and scale effortlessly on native multi-tenant architecture
- Reduce costs with intelligent data routing and free 1-year retention
- Build custom solutions with 100+ security capabilities on-demand
- Accelerate response with agentic AI that acts directly within predefined workflows
Try the Agentic SecOps Workspace free: https://limacharlie.io
Learn more: https://docs.limacharlie.io
Follow LimaCharlie
Sign up for free: https://limacharlie.io
LinkedIn: / limacharlieio
X: https://x.com/limacharlieio
Community Discourse: https://community.limacharlie.com/
Host: Maxime Lamothe-Brassard - Founder at LimaCharlie
Guest: Eric Capuano - Co-founder of Digital Defense Institute
FFmpeg's 21 zero-days, Ruby cooldown feature, Microsoft disrupted by Shai-Hulud worm & Meta AI tool compromise / Intel Chat [#331]
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.DepthFirst reported that it's autonomous security agent discovered 21 previously unknown …
Notas del episodio
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.
- DepthFirst reported that it's autonomous security agent discovered 21 previously unknown vulnerabilities in FFmpeg, a widely deployed multimedia framework used across browsers, streaming infrastructure, and other systems that process media.
- Bundler, 4.0.13 introduces a new security feature called cooldown, aimed at reducing the impact of software supply chain attacks in the Ruby ecosystem.
- A new variant of the Shai-Hulud supply chain worm, known as Miasma, briefly disrupted Microsoft's software development ecosystem after compromising dozens of GitHub repositories.
- Meta says approximately 20,000 Instagram accounts may have been compromised through the abuse of an AI powered account recovery support system.
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io.
AI-assisted SOC training with Carlo Anez / Defender Fridays [#330]
Join us for this week's Defender Fridays as Carlo Anez, Founder and Lead Instructor at IgniteCyber Academy and DEFCON Training Instructor, breaks down how to build practical blue team skills using open-source …
Notas del episodio
Join us for this week's Defender Fridays as Carlo Anez, Founder and Lead Instructor at IgniteCyber Academy and DEFCON Training Instructor, breaks down how to build practical blue team skills using open-source labs, MITRE ATTACK, and real-world defender workflows, and where AI fits into the picture without replacing the analyst.
At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
What We'll Discuss
In this episode, Carlo Anez draws on years of SOC operations, detection engineering, and cybersecurity instruction to make the case for hands-on, open-source training as the foundation for developing confident, capable defenders.
Key Topics:
- Why cybersecurity training must move beyond passive learning and into real defender workflows
- How the OpenSOC initiative uses open-source tools like Wazuh, MISP, The Hive, and TimeSketch to simulate a small-scale fusion center environment
- How open-source stacks build transferable skills that translate to enterprise platforms like Splunk and LimaCharlie
- Where AI fits in the SOC: summarizing noisy alerts, mapping activity to MITRE ATT&CK, drafting investigation questions, and improving report clarity
- Why AI literacy means knowing how to validate AI output against evidence, not just knowing how to write prompts
- Why the analyst owns the evidence, the decision, and the communication
- How the DEF CON boot camp and online pilot program structure five days of scenario-based training around a final analyst report and CTF capstone
About Our Guest
Carlo Anez is the Founder and Lead Instructor at IgniteCyber Academy and a DEFCON Training Instructor. He spent five years at Rapid7 doing detection engineering, threat hunting, and DFIR workflows, and has supported SOC operations, government contractors, and projects with DARPA, the US Army, and the US Navy. He currently creates SOC-focused content with TCM Security and leads Blue Team Village at DEF CON, where he also presents and trains annually.
Register for Live Sessions
Join us every Friday at 10:30am PT for live, interactive discussions with industry experts. Whether you're a seasoned professional or just curious about the field, these sessions offer an engaging dialogue between our guests, hosts, and you, our audience.
Register here: https://limacharlie.io/defender-fridays
Subscribe to our YouTube channel and hit the notification bell to never miss a live session or catch up on past episodes on our website!
Sponsored by LimaCharlie
This episode is brought to you by LimaCharlie, the Agentic SecOps Workspace (ASW), where AI agents operate security infrastructure using the same controls and authority as human analysts, with every action visible, governed, and auditable.
Why LimaCharlie?
- Eliminate vendor sprawl and tool complexity
- Deploy and scale effortlessly on native multi-tenant architecture
- Reduce costs with intelligent data routing and free 1-year retention
- Build custom solutions with 100+ security capabilities on-demand
- Accelerate response with agentic AI that acts directly within predefined workflows
Try the Agentic SecOps Workspace free: https://limacharlie.io
Learn more: https://docs.limacharlie.io
Follow LimaCharlie
Sign up for free: https://limacharlie.io
LinkedIn: / limacharlieio
X: https://x.com/limacharlieio
Community Discourse: https://community.limacharlie.com/
Host: Maxime Lamothe-Brassard - Founder at LimaCharlie
Guest: Carlo Anez - Founder & Lead Instructor at IgniteCyber Academy
Building practical blue team skills using AI-assisted SOC training with Bobby Ford/ Defender Fridays [#329]
Join us for this week's Defender Fridays as Bobby Ford, Chief Strategy and Experience Officer at Doppel, talks about open-source labs, MITRE ATT&CK, and real-world defender workflows.At Defender Fridays, we …
Notas del episodio
Join us for this week's Defender Fridays as Bobby Ford, Chief Strategy and Experience Officer at Doppel, talks about open-source labs, MITRE ATT&CK, and real-world defender workflows.
At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
About Our Guest
Bobby is a globally recognized cybersecurity “geek” with almost three decades of experience, including the last 14 years as a CISO, protecting some of the world’s most complex and operationally intensive enterprises. His career began in the military as a founding member of the Pentagon Computer Incident Response Team. Bobby built and led cybersecurity programs in the Aerospace and Defense industry. He was the first CISO at Exelis Inc. and was the architect of ITT’s global cybersecurity audit function under DOJ oversight.
Transitioning from public to private sector, Bobby served as the first CISO at Abbott Labs, was CISO for Unilever, and most recently was SVP and Chief Security Officer at Hewlett Packard Enterprise (HPE). Known for his collaborative style and empathetic leadership, Bobby fosters an inclusive culture that empowers entire security organizations to excel.
Register for Live Sessions
Join us every Friday at 10:30am PT for live, interactive discussions with industry experts. Whether you're a seasoned professional or just curious about the field, these sessions offer an engaging dialogue between our guests, hosts, and you, our audience.
Register here: https://limacharlie.io/defender-fridays
Subscribe to our YouTube channel and hit the notification bell to never miss a live session or catch up on past episodes on our website!
Sponsored by LimaCharlie
This episode is brought to you by LimaCharlie, the Agentic SecOps Workspace (ASW), where AI agents operate security infrastructure using the same controls and authority as human analysts, with every action visible, governed, and auditable.
Why LimaCharlie?
- Eliminate vendor sprawl and tool complexity
- Deploy and scale effortlessly on native multi-tenant architecture
- Reduce costs with intelligent data routing and free 1-year retention
- Build custom solutions with 100+ security capabilities on-demand
- Accelerate response with agentic AI that acts directly within predefined workflows
Try the Agentic SecOps Workspace free: https://limacharlie.io
Learn more: https://docs.limacharlie.io
Follow LimaCharlie
Sign up for free: https://limacharlie.io
LinkedIn: / limacharlieio
X: https://x.com/limacharlieio
Community Discourse: https://community.limacharlie.com/
Host: Maxime Lamothe-Brassard - Founder at LimaCharlie
Guest: Charles Grandjean - CTO and Co-founder at Hexiagon AI
"Megalodon" Malware in GitHub, Malware-Slop steals from Claude AI, 7-Eleven breach & CISA cPanel vulnerability / Intel Chat [#328]
Originally recorded: Friday May 29, 2026In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.A large-scale software supply chain attack dubbed …
Notas del episodio
Originally recorded: Friday May 29, 2026
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.
- A large-scale software supply chain attack dubbed “Megalodon” infected thousands of GitHub repositories with credential-stealing malware in a highly automated campaign that unfolded over a six-hour period on May 18, 2026.
- Researchers from OX Security have identified a malicious npm package named “mouse5212-super-formatter” that was designed to steal files from Anthropic Claude AI environments by targeting the “/mnt/user-data” directory.
- Convenience store giant 7-Eleven disclosed a data breach tied to an attack that occurred on April 8, 2026, involving systems that contained franchise-related documents. SecurityWeek article Matt references.
- CISA has issued an urgent warning about a critical vulnerability in the LiteSpeed cPanel Plugin, tracked as CVE-2026-48172, which is already being actively exploited in the wild.
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io.
From PentestGPT to production: The state of AI-assisted offensive security with Charles Grandjean / Defender Fridays [#327]
Join us for this week's Defender Fridays as Charles Grandjean, CTO and Co-founder at Hexiagon AI, breaks down where AI-assisted pen testing actually stands today and what it means for both red teams and …
Notas del episodio
Join us for this week's Defender Fridays as Charles Grandjean, CTO and Co-founder at Hexiagon AI, breaks down where AI-assisted pen testing actually stands today and what it means for both red teams and defenders.
At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
What We'll Discuss
In this episode, Charles Grandjean draws on his experience building an AI-powered continuous pen testing platform to trace how LLM capabilities have evolved for offensive security, and what the rise of autonomous attack tooling means for defenders.
Key Topics:
- How AI pen testing has progressed from unreliable single commands to chaining complex attack sequences
- Why the last six months marked a turning point in LLM planning and long-context reasoning
- When to use in-context learning and RAG versus fine-tuning, and why most teams should start with the former
- Why privacy considerations push serious pen testing operations toward self-hosted models
- How the balance between model control and code control has shifted as models have improved
- Why unrestricted and fine-tuned open-weights models are lowering the barrier for malicious actors
- What automated offense means for defense teams and why the response needs to match the scale of the threat
About Our Guest
Charles Grandjean is the CTO and Co-founder of Hexiagon AI, a company focused on automating penetration testing through AI to enable continuous, around-the-clock security validation. He has been building and iterating on AI-assisted offensive tooling for the past two years, tracking the evolution of LLM capabilities firsthand from early prototype to production system.
Register for Live Sessions
Join us every Friday at 10:30am PT for live, interactive discussions with industry experts. Whether you're a seasoned professional or just curious about the field, these sessions offer an engaging dialogue between our guests, hosts, and you, our audience.
Register here: https://limacharlie.io/defender-fridays
Subscribe to our YouTube channel and hit the notification bell to never miss a live session or catch up on past episodes on our website!
Sponsored by LimaCharlie
This episode is brought to you by LimaCharlie, the Agentic SecOps Workspace (ASW), where AI agents operate security infrastructure using the same controls and authority as human analysts, with every action visible, governed, and auditable.
Why LimaCharlie?
- Eliminate vendor sprawl and tool complexity
- Deploy and scale effortlessly on native multi-tenant architecture
- Reduce costs with intelligent data routing and free 1-year retention
- Build custom solutions with 100+ security capabilities on-demand
- Accelerate response with agentic AI that acts directly within predefined workflows
Try the Agentic SecOps Workspace free: https://limacharlie.io
Learn more: https://docs.limacharlie.io
Follow LimaCharlie
Sign up for free: https://limacharlie.io
LinkedIn: / limacharlieio
X: https://x.com/limacharlieio
Community Discourse: https://community.limacharlie.com/
Host: Maxime Lamothe-Brassard - Founder at LimaCharlie
Guest: Charles Grandjean - CTO and Co-founder at Hexiagon AI
GitHub repositories compromised, Webworm targets Europe, fake Outlook & cybercriminal VPN / Intel Chat [#326]
Originally recorded: Friday May 22, 2026In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.GitHub has confirmed that roughly 3,800 internal …
Notas del episodio
Originally recorded: Friday May 22, 2026
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.
- GitHub has confirmed that roughly 3,800 internal repositories were accessed in a supply chain compromise tied to the hacking group TeamPCP.
- China-aligned threat actor Webworm has shifted its targeting focus from Asia to Europe, according to new research published by ESET.
- Researchers uncovered a previously undocumented Microsoft 365 account takeover panel that integrates directly with Evilginx Pro infrastructure to streamline token theft and post-compromise operations.
- European and North American law enforcement agencies announced the dismantling of “First VPN,” a VPN service allegedly built to support cybercriminal activity including ransomware operations, data theft, scanning, and denial-of-service attacks.
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io.
How analysts use cognitive reasoning in investigations with Chris Sanders / Defender Fridays [#325]
Join us for this week's Defender Fridays as Chris Sanders, Founder at Applied Network Defense and the Rural Technology Fund, breaks down how analysts actually think through investigations and what separates …
Notas del episodio
Join us for this week's Defender Fridays as Chris Sanders, Founder at Applied Network Defense and the Rural Technology Fund, breaks down how analysts actually think through investigations and what separates high performers from the rest.
At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
What We'll Discuss
In this episode, Chris Sanders draws on his background in security operations and cognitive psychology to explore how metacognition shapes investigative performance, and why understanding how you think is one of the most underleveraged skills in the SOC.
Key Topics:
- Why high-performing analysts ask better questions instead of starting with large chunks of data
- How diagnostic inquiry (DINQ) was developed by studying senior analysts in action
- What separates one year of experience repeated twenty times from genuinely diverse experience
- Why tacit knowledge makes it hard to train new analysts and what to do about it
- How AI fits into the investigative process and where humans still need to be in the loop
- Why cybersecurity education has a transfer problem and what other fields like medicine get right
- What good SOCs have in common and why it comes down to metacognitive awareness
About Our Guest
Chris Sanders is the Founder of Applied Network Defense, a training company focused on analyst and investigative roles, and the Rural Technology Fund, an organization that supports technology education in rural and underserved communities. He holds a doctorate in education and has spent his career at the intersection of cybersecurity and cognitive psychology, including time at school districts, the federal government, and Mandiant.
Register for Live Sessions
Join us every Friday at 10:30am PT for live, interactive discussions with industry experts. Whether you're a seasoned professional or just curious about the field, these sessions offer an engaging dialogue between our guests, hosts, and you, our audience.
Register here: https://limacharlie.io/defender-fridays
Subscribe to our YouTube channel and hit the notification bell to never miss a live session or catch up on past episodes on our website!
Sponsored by LimaCharlie
This episode is brought to you by LimaCharlie, the Agentic SecOps Workspace (ASW), where AI agents operate security infrastructure using the same controls and authority as human analysts, with every action visible, governed, and auditable.
Why LimaCharlie?
- Eliminate vendor sprawl and tool complexity
- Deploy and scale effortlessly on native multi-tenant architecture
- Reduce costs with intelligent data routing and free 1-year retention
- Build custom solutions with 100+ security capabilities on-demand
- Accelerate response with agentic AI that acts directly within predefined workflows
Try the Agentic SecOps Workspace free: https://limacharlie.io
Learn more: https://docs.limacharlie.io
Follow LimaCharlie
Sign up for free: https://limacharlie.io
LinkedIn: / limacharlieio
X: https://x.com/limacharlieio
Community Discourse: https://community.limacharlie.com/
Host: Maxime Lamothe-Brassard - Founder at LimaCharlie
Guest: Chris Sanders - Founder at Applied Network Defense & Rural Technology Fund
"Dirty Frag", Canvas ransomware attack, “Mini Shai-Hulud” malware campaign & AI-developed zero-day exploit / Intel Chat [#324]
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Researchers have disclosed a new Linux local privilege escalation technique called “Dirty …
Notas del episodio
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.
- Researchers have disclosed a new Linux local privilege escalation technique called “Dirty Frag,” which chains together two kernel vulnerabilities: CVE-2026-43284 in xfrm-ESP handling and CVE-2026-43500 in RxRPC.
- The breach affecting educational technology provider Instructure has raised broader concerns about the security dependencies schools have on third-party cloud platforms.
- Security researchers at Aikido are tracking a major expansion of the “Mini Shai-Hulud” malware campaign targeting the npm ecosystem.
- Google Threat Intelligence Group says threat actors are moving from experimental AI usage toward large-scale operational integration of generative models across the cyberattack lifecycle.
Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.
This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io.
Aquí están los 40 episodios más recientes de 354. Los anteriores están en el feed del podcast.
Podcasts similares
Más podcasts de Noticias
¿Es tu podcast?
Confírmalo con una entrada en tu feed: aquí recibes un código, lo añades como podcast:txt en el canal de tu feed y nosotros lo comprobamos. Después tu podcast aparecerá como «verificado» en SoundNode.