Cybersecurity Today
- Épisodes
- 100
- Parution
- plusieurs fois par semaine
- Dernier épisode
- 14 Nov 2026
À propos du podcast
Updates on the latest cybersecurity threats to businesses, data breach disclosures, and how you can secure your firm in an increasingly risky time.
Épisodes 100
AI Fraud is Breaking the Internet
AI-Powered Scams: Fake Sites, Fake Ads, and the New Brand Impersonation Economy | Yoav Keren (BrandShield) Host David Shipley interviews Yoav Keren, CEO and co-founder of BrandShield, about how AI is …
Notes de l’épisode
AI-Powered Scams: Fake Sites, Fake Ads, and the New Brand Impersonation Economy | Yoav Keren (BrandShield)
Host David Shipley interviews Yoav Keren, CEO and co-founder of BrandShield, about how AI is accelerating large-scale, "boring" online fraud beyond headline deepfakes: pixel-perfect fake storefronts, AI-run social accounts, fraudulent search and social ads, and poisoning AI chat results that link to scams. Keren says criminals can now cheaply target organizations of any size, creating massive global losses and harming legitimate businesses through lost revenue and trust; BrandShield research found over 30% of scam victims won't buy again from the impersonated brand. They discuss the marketing-style funnel scammers use, the risks of AI shopping agents being unable to distinguish real from fake, and whether platforms should be held accountable when they fail to act on reported fraud. Keren outlines BrandShield's AI-driven detection and takedown approach and its dependence on platform cooperation.
00:00 AI Scamdemic Overview 00:54 Meet Yoav Keren 01:57 Why BrandShield Matters 03:15 AI Scales Impersonation 07:03 Mundane Fraud Pays 09:37 Poisoned Chatbots 10:32 Trust Loss Fallout 12:16 Platform Liability Debate 17:01 Cheap Domains Whac A Mole 18:29 Protecting SMEs at Scale 22:06 BrandShield Tech Edge 25:58 AI Dystopia vs Real Harm 29:44 Global Governance Ideas 31:45 Lightning Round 34:19 When Fraud Turns Physical 36:16 Closing Thanks
Jensen Huang Resigns as NVIDIA CEO | What Happens Next?
Jensen Huang has resigned as NVIDIA CEO, and CFO Colette Kress has been named interim chief executive. What led to the leadership change—and what comes next for the company at the centre of the AI boom? NVIDIA …
Notes de l’épisode
Jensen Huang has resigned as NVIDIA CEO, and CFO Colette Kress has been named interim chief executive. What led to the leadership change—and what comes next for the company at the centre of the AI boom? NVIDIA Announces CEO Transition
In this Hashtag Trending special report for November 12, 2026, Jim Love brings together reporting from Reuters, The New York Times, The Information, CNN and WIRED to explain the timeline, the key allegations and the questions still unanswered.
We examine Alice Huang's reported business connections, preferred access to NVIDIA chips amid tightening U.S. export restrictions, scrutiny in Washington and Singapore, and reports of intimate relationships involving Jensen Huang. We also look at NVIDIA's independent investigation, its share-price declines, Colette Kress's background and the November 17 earnings report.
First, two developing stories: Ukraine says Starshield restrictions have returned, an account disputed by SpaceX, and a global Microsoft outage disrupts Outlook and features across Teams, SharePoint and Copilot.
The allegations discussed have not been proven in court. China denies the espionage allegations, and NVIDIA's investigation is continuing. Coverage reflects the information available when this episode was recorded.
Subscribe to Hashtag Trending for technology news and analysis with Jim Love. Share your thoughts in the comments.
Contact Jim or support the show: https://technewsday.com
Chapters 00:00 Headlines and Introduction 00:34 Ukraine's Starshield Claims and SpaceX's Response 01:11 Microsoft Global Outage 02:12 NVIDIA Special Report: Putting It in Context 02:51 Who Is Alice Huang? 03:38 Preferred Partner Status and Chip Access 05:50 U.S. Chip Restrictions and Distributor Stock 07:03 NVIDIA Chip Prices Surge in China 07:33 Intelligence Warnings and NVIDIA's Stock Slide 10:10 Washington: Who Knew What? 10:53 What Singapore's Investigation Found 11:51 Board Review and Huang's Resignation 12:57 Who Is Colette Kress, NVIDIA's Interim CEO? 14:13 NVIDIA's Leadership and November 17 Earnings 15:10 NVIDIA Stock: Closing Price and Daily Low 15:51 Closing and What's Next
France blames Iran for supermarket fridge attacks, Ransomware gang hits Vanderbilt, Microsoft fixes 1,235 flaws
France Blames Iran for Supermarket Fridge Sabotage, Vanderbilt Restores Systems After Cyberattack, and Microsoft Patches 1,235 Flaws France has formally blamed Shahid Kaveh, a cyber unit linked to Iran's …
Notes de l’épisode
France Blames Iran for Supermarket Fridge Sabotage, Vanderbilt Restores Systems After Cyberattack, and Microsoft Patches 1,235 Flaws
France has formally blamed Shahid Kaveh, a cyber unit linked to Iran's Revolutionary Guard, for an October sabotage campaign that hijacked Danfoss and Dixell refrigeration controllers in roughly 700 French supermarkets, spoiling food, causing fires, and prompting potential sanctions as similar attacks spread across Europe.
Vanderbilt University is restoring services after a hacking incident claimed by the BYOD ransomware gang, with key systems back online while allegations of stolen research data and over one million Social Security numbers remain unconfirmed.
Japan's Nitori disclosed a breach potentially exposing 37.6 million customer records as Japan rolls out a major cybersecurity package.
Microsoft's November Patch Tuesday fixes 1,235 vulnerabilities, including an exploited Outlook zero-day leaking NTLM hashes.
Cambodian cybercriminals using AI pentesting tools to attack banks worldwide
Belgium warns of Entra ID SMS sign-in abuse. The episode closes with Remembrance Day reflections.
00:00 Headlines And Intro 00:33 France Blames Iran Fridge Sabotage 02:19 Host Take And Wider Spillover 03:19 Vanderbilt Ransomware Disruption 04:54 BYOD Backstory And Prior Victims 05:51 Nitori Breach And Japan Cyber Surge 07:08 Japan Emergency Cyber Package 07:46 Microsoft Patch Tuesday Outlook Zero Day 08:59 AI Pentesting Tool Hits Banks 11:04 Belgium Warns On SMS Sign In 11:56 Why SMS Sign In Exists And Phaseout 13:37 Remembrance Day Closing Tribute 14:37 Sign Off And Next Episodes
French bank loses $133M in cyber heist, Chainalysis breach exposes every customer login, Attackers exploit OpenSSH flaw
French Bank Loses $133M in Crypto Laundering, Chainalysis Breach Deepens, OpenSSH 'SSH Hole' Exploited Cybersecurity Today host David Shipley reports a $133M theft from French bank Crédit Mutuel Arkéa after …
Notes de l’épisode
French Bank Loses $133M in Crypto Laundering, Chainalysis Breach Deepens, OpenSSH 'SSH Hole' Exploited
Cybersecurity Today host David Shipley reports a $133M theft from French bank Crédit Mutuel Arkéa after attackers entered via an unnamed third-party provider, moved funds from the bank's own accounts, and laundered them into USDC/USDT; investigators say delays allowed millions to be washed before the bank disclosed the incident.
Chainalysis says its breach exposed usernames, password hashes, and live tokens for all customers, prompting it to take major tools and portals offline while requiring IP allowlisting, password resets, and API key rotation.
Apiiro found Claude Code's "don't ask again" behavior can store secrets in plaintext in settings.local.json committed to public GitHub. A newly disclosed OpenSSH flaw on musl-based systems without PAM was exploited within hours.
A British soldier was court-martialed after ignoring phone-security orders and being blackmailed.
00:00 Top Cyber Headlines 00:38 French Bank Crypto Heist 03:11 Chainalysis Breach Fallout 04:43 Claude Code Secret Leaks 06:40 OpenSSH SSH Hole Exploits 08:55 Soldier Sextortion Court Martial 11:02 Wrap Up and Sign Off
Do we still need Security Awareness Month?
Do We Still Need Cybersecurity Awareness Month in the Age of AI Agents and Deepfakes? (Denis Villeneuve, Kyndryl Canada) Recorded after a brutal October of rapid-fire zero-days, Cybersecurity Today host David …
Notes de l’épisode
Do We Still Need Cybersecurity Awareness Month in the Age of AI Agents and Deepfakes? (Denis Villeneuve, Kyndryl Canada)
Recorded after a brutal October of rapid-fire zero-days, Cybersecurity Today host David Shipley asks whether Cybersecurity Awareness Month still matters; Denis Villeneuve, who leads cyber resilience and connectivity at Kyndryl Canada, argues it does—and should be continuous.
They discuss how awareness must evolve beyond phishing to address AI's speed, cognitive risk, and "shadow AI," using a 20/60/20 framework for goal-setting, automation, and validation while stressing that responsibility can be delegated but accountability cannot. Denis explains that deepfakes may counterfeit faces or voices but shouldn't defeat resilient business processes, advocating strong approvals, callbacks, and even code words. The conversation covers AI agent governance, overprivileged identities, tech debt, vendor maturity, modernization delays, and the need for guardrails, human-in-command controls, and tested remediation plans—"basics at speed" to make AI-driven change trustworthy.
00:00 Black October Opens 01:32 Meet Denis Villeneuve 04:07 Cyber Awareness Every Month 05:40 AI Speed And Cognition 09:00 Deepfakes And Process 12:17 Shadow AI Basics 14:35 Agents In The Wild 17:42 Identity For Every Agent 21:57 Making Compliance Not Suck 26:10 2027 CISO Priorities 28:33 Genie Coefficient And Models 34:08 Burnout And Hope 36:04 Closing Thanks
Cyberattack heats French blood bank fridges
French Blood Bank Refrigeration Hacked, AI Tools Hit India's Banks, DreamHost Breach, Extradition, and Malware That "Values" Victims Cybersecurity Today host David Shipley reports France's National Blood …
Notes de l’épisode
French Blood Bank Refrigeration Hacked, AI Tools Hit India's Banks, DreamHost Breach, Extradition, and Malware That "Values" Victims
Cybersecurity Today host David Shipley reports France's National Blood Service (EFS) says a November 2 cyberattack manipulated cold-storage settings at three sites via its refrigerator supplier's remote monitoring software, but alarms and staff response prevented product loss and collections continued as ANSSI and the Health Ministry assist; the incident follows a wider wave of attacks that overheated supermarket refrigeration across France and later multiple European countries.
India's CERT warns an AI-assisted actor "Crafty Falcon" is repeatedly breaching fintechs, lenders, payment firms, and crypto exchanges through exposed test environments and shared credentials, using AI tools including Artex—while a backdoored Artex build was found on dozens of internet-facing consoles.
DreamHost reports an intruder exploited a file manager flaw for about two months, harvesting FTP/SFTP credentials from logged-in users.
A Canadian was extradited over alleged university supercomputer crypto-mining. Cisco Talos details Volta AutoDoxer, an info-stealer that uses AI to rank victims' monetizable assets.
00:00 Top Stories Rundown 00:32 Blood Bank Fridge Hack 02:06 Supermarket Cooling Campaign 03:12 AI Tools Hit Indian Finance 04:40 Artex Tool Backdoor Twist 05:50 DreamHost File Manager Breach 07:19 Canadians Crypto Mining Case 08:53 Volta AutoDoxer AI Dossiers 10:27 Weekend Show Preview 11:02 Closing Thanks And Contact
North Korean fake job interview leads to $6.3B Binance heist
Binance's $6.34B Crypto Heist, Europe's Supermarket Fridge Hacks, and the Rise of LLM Jacking Cybersecurity Today host David Shipley reports Binance's $6.34B October 29 crypto theft, which Binance says began …
Notes de l’épisode
Binance's $6.34B Crypto Heist, Europe's Supermarket Fridge Hacks, and the Rise of LLM Jacking
Cybersecurity Today host David Shipley reports Binance's $6.34B October 29 crypto theft, which Binance says began with a June supply-chain compromise and escalated via a fake hiring process that delivered poisoned developer tools, leading to access to the internal wallet signing service and abuse of Ethereum EIP-7702
The episode also covers refrigerator system attacks spreading across European retailers and suppliers via vulnerable controllers, with the Pentagon treating similar August U.S. commissary outages as suspected cyberattacks.
Barracuda urges patching two flaws that can be chained for root control if admin interfaces are exposed.
Researchers link Chinese state-linked attackers to chaining PHP-to-shell bugs and a kernel exploit to gain root on Palo Alto firewalls.
Finally, Mandiant details "LLM jacking," where criminals steal API keys or cloud tokens to run up AI bills rapidly.
00:00 Today's Cyber Headlines 00:34 Binance Heist via Fake Hiring 03:52 Fridge Hacks Spread in Europe 05:46 Pentagon Probes US Spoilage 07:03 Barracuda Root-Takeover Flaws 08:44 PHP to Shell Hits PAN-OS 09:51 Disclosure Drama and Exploits 11:15 LLM Jacking Drains AI Budgets 12:58 Wrap Up and Sign Off
FBI ties North Korea to $6.3B Binance heist, Cybercriminals breach four top Canadian law firms, Chinese spies use AI agent to hit 140 targets
Vishing Breaches Top Canadian Law Firms, FBI Pins Record Binance Heist on North Korea, and GM Pays $220M Privacy Settlement David Shipley covers major cybersecurity headlines for Nov. 2, 2026: four large …
Notes de l’épisode
Vishing Breaches Top Canadian Law Firms, FBI Pins Record Binance Heist on North Korea, and GM Pays $220M Privacy Settlement
David Shipley covers major cybersecurity headlines for Nov. 2, 2026: four large Canadian law firms (McCarthy Tétrault, Davies, Bennett Jones, and BLG) were breached via vishing impersonating IT on Teams and spoofed phone numbers, leading to compromised accounts and alleged large-scale file theft, while firms share intel and bring in CrowdStrike and Mandiant.
The FBI attributes the $6.36B Binance crypto theft to North Korea's TraderTraitor/Lazarus, details laundering tactics and wallet addresses, and Binance says it has covered 95% of losses.
Chainalysis discloses a breach exposing limited customer directory data.
CrowdStrike reports China-linked Vapor Panda using Artex AI at scale.
A fake Claude code extension briefly appeared in Cursor's marketplace.
GM agrees to a $220M settlement over Smart Driver data sales.
00:00 Top Stories Rundown 00:35 Vishing Law Firm Breaches 02:52 North Korea Binance Heist 05:18 Chainalysis Gets Hacked 07:07 Agentic AI Attack Surge 09:33 Fake Claude Extension Scam 11:15 GM Driver Data Settlement 13:25 Wrap Up and Sign Off
Defend At AI Speed: With Special Guest Adam Ely, Check Point Software
AI agents are changing both sides of cybersecurity. Attackers can move faster, while defenders face another challenge: securing the agents inside their own organizations. On this Cybersecurity Today Weekend …
Notes de l’épisode
AI agents are changing both sides of cybersecurity. Attackers can move faster, while defenders face another challenge: securing the agents inside their own organizations.
On this Cybersecurity Today Weekend Interview, I'm joined by Adam Ely, General Manager of AI Agent Security at Check Point Software. We talk about what AI is changing for security teams—and what still comes down to getting the basics right.
Adam brings the perspective of a former CISO at Fidelity Investments and deputy CISO at Walmart. We discuss the pressure on security leaders, the promise of AI for defenders, and how organizations can adopt agents while controlling what they can access and do.
In this conversation: • Why AI changes the speed and scale of cyberattacks. • CISO burnout, accountability, and the value of sharing experiences. • How AI agents can influence one another's behaviour. • Why security teams need to rehearse and test AI-assisted incident response. • The identity and access challenges of agents that can create other agents. • What it means when companies put agents on the organizational chart. • Why segmentation, access controls, monitoring, and other security basics matter more than ever. • Using AI as a sounding board that challenges your thinking.
Where could AI help your security team—and where would you draw the line on its access? Share your thoughts in the comments.
Hosted by Jim Love. Cybersecurity Today — Weekend Interview October 31, 2026
Subscribe to Cybersecurity Today for cybersecurity news and interviews.
More episodes and contact: https://technewsday.com https://technewsday.ca
To support the show, visit the Donate tab.
Guest biography, Check Point Software: https://www.checkpoint.com/about-us/leadership/
Check Point Software research discussed in the interview: https://blog.checkpoint.com/security/peer-pressure-ai-agents
Adam's article on the changing CISO role: https://blog.checkpoint.com/ai-security/redefining-the-ciso-contract-from-securing-the-business-to-securely-doing-business/
Black October: A Cybersecurity Today Special Edition
Black October in Cybersecurity: PHP RCE Panic, Brotli Surprise, and Why Basics Still Matter In this special episode of Cyber Security Today, Jim and David discuss why the industry is calling the month "Black …
Notes de l’épisode
Black October in Cybersecurity: PHP RCE Panic, Brotli Surprise, and Why Basics Still Matter In this special episode of Cyber Security Today, Jim and David discuss why the industry is calling the month "Black October," beginning with chaotic disclosure and leaked details of multiple PHP remote code execution vulnerabilities that triggered widespread anxiety and even service shutdowns by governments and other organizations.
They cover additional tensions from weak certificates issued by an intermediate CA in India, a breach disclosure by LiteLLM, and a major RCE initially thought to affect React/Node.js but later tied to Google's Brotli, which is widely deployed.
They note that while attacks began before patches and at least one European government was compromised, exploitation proved difficult and defenses often held, with limited confirmed victims so far. They argue AI is accelerating vulnerability discovery and democratizing capabilities, but emphasize "don't panic," focus on cyber hygiene basics, prioritize crown jewels, train staff, and address growing human fatigue as incident response capacity strains
00:00 Black October Begins 00:44 PHP Zero Day Chaos 03:51 More Hits Keep Coming 04:53 AI Hype And Reality 07:01 Exploitation In The Wild 09:15 Japan Breach Wave 13:23 Dont Panic Do Basics 15:38 Turn Crisis Into Budget 18:07 Training Beats Tools 21:21 Burnout On The Frontline 23:45 Know Your Crown Jewels 24:16 Final Thoughts And Outreach
Microsoft Rushes out Fixes for .NET
Brotli Emergency Patches, PHP-to-Shell Exploited, and Australia Disrupts 180K Amadey Infections | Cybersecurity Today On Cybersecurity Today (Oct. 28, 2026), Microsoft issues out-of-band .NET updates for a …
Notes de l’épisode
Brotli Emergency Patches, PHP-to-Shell Exploited, and Australia Disrupts 180K Amadey Infections | Cybersecurity Today
On Cybersecurity Today (Oct. 28, 2026), Microsoft issues out-of-band .NET updates for a critical flaw in Google's Brotli library (CVE-2026-111497) that can enable remote privilege escalation and potentially remote code execution, with proof-of-concept exploits public and widespread exposure across ecosystems.
The episode also covers CISA confirming active exploitation of two "PHP to Shell" vulnerabilities (CVE-2026-109618/109619), with federal agencies facing an urgent patch deadline and broad impact across millions of PHP services and many vendors. In legal news, U.S. prosecutors allege Canadian ransomware negotiator Eduard Dubrovsky secretly worked for threat actors.
South Korean police say a former penetration tester used the Artex AI framework to breach 90+ organizations and steal 8.2 million records. Finally, Australia's Signals Directorate disrupts an Amadey botnet, cutting off 180,000 infected computers and destroying stolen data offered for sale.
00:00 Top Stories Rundown 00:32 Brotli Bug Emergency Patches 02:36 AI Noise in Vulnerability Hype 03:41 PHP to Shell Exploited Now 06:10 Ransomware Negotiator Accused 07:41 Artex AI Hacking Spree 10:04 Australia Disrupts Amadey Botnet 11:32 Wrap Up and Sign Off
AI-assisted attackers breach European government via PHP2Shell
PHP2Shell Hits European Government, New PHP RCE (No Patch Yet), Brotli "Node to Shell," and Capcom Breach Attackers exploited the PHP2Shell remote code execution flaws to compromise a European government entity …
Notes de l’épisode
PHP2Shell Hits European Government, New PHP RCE (No Patch Yet), Brotli "Node to Shell," and Capcom Breach
Attackers exploited the PHP2Shell remote code execution flaws to compromise a European government entity within two hours, stealing password hashes and MFA secrets, pivoting via NTLM relay toward Active Directory, and showing command output patterns Unit 42 says suggest an agentic AI attacker. Widespread scanning continues, with Cloudflare logging millions of attempts, Cyfirma reporting low-and-slow probing from nodes linked with moderate confidence to the Lazarus ecosystem, and defenders urged to watch for telltale crash sequences. PHP also disclosed a third RCE (CVE-2026-115560) with no patch yet but high exploitation requirements and a mitigation to disable session upload progress. Separately, a Brotli decoder memory corruption bug (CVE-2026-111497) affects Node.js and other software, with fixes delayed into October releases. Finally, Capcom says criminals breached Capcom ID, exposing data tied to 11.7 million accounts and resetting impacted passwords.
00:00 Headlines Overview 00:35 Government Breach Details 01:13 Global Scanning Surge 03:11 Third PHP RCE 05:00 Wildfire Or Smoke 06:08 Patch Race Warning 06:53 Brotli Node To Shell 08:47 Capcom Account Breach 10:21 Wrap Up And Outro
AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack
PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today (Oct. 23, 2026) covers active exploitation of two critical PHP …
Notes de l’épisode
PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches
Cybersecurity Today (Oct. 23, 2026) covers active exploitation of two critical PHP RCE flaws beginning at least four days before patches shipped, with multiple firms seeing failed pre-disclosure attempts and the UK NCSC urging immediate patching or taking servers offline.
It also details two publicly disclosed, unpatched Linux kernel ksmbd SMB RCE bugs (one unauthenticated on port 445), exposed after ZDI credited Trend Micro's AI scanner and copied public mailing lists without patches. GitLab issued fixes for a maximum-severity unauthenticated RCE (CVE-2026-11-0264) in its regex compiler, following recent high-severity GitLab issues.
Microsoft attributed the ConnectWise cloud backup compromise to China-aligned Storm-0940 using the Artex agentic AI framework, and Artex-related activity was also found in attacks on Japanese companies amid a broader breach wave, including a malware incident affecting up to 26,739 Haname Desktopcloud customer servers.
00:00 Headlines And Intro 00:33 PHP To Shell Exploitation 02:07 Patch Now Impact Scope 02:47 Linux KSMBD Bugs Exposed 04:10 AI Disclosure Process Drama 05:25 GitLab Max Severity Patch 07:30 ConnectWise Breach AI Agents 09:24 Artex Spreads In Japan 11:18 GMO Haname VPS Malware 12:24 Closing And Sign Off
Special Report: PHP2Shell puts 70% of web at risk
PHP2Shell: Emergency PHP RCE Patches, Leaks, and Early Exploitation (CVE-2026-109618/109619) In a special edition of Cybersecurity Today, host David Shipley covers emergency PHP patches for two critical …
Notes de l’épisode
PHP2Shell: Emergency PHP RCE Patches, Leaks, and Early Exploitation (CVE-2026-109618/109619)
In a special edition of Cybersecurity Today, host David Shipley covers emergency PHP patches for two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, affecting PHP 5.4+ and essentially all PHP deployments serving web requests across major stacks.
He explains the shared root cause involving corrupted memory after abnormal request termination, outlines the fixed releases (PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35), and notes no official updates for PHP 8.1 and older beyond limited source backports. Mitigations and Cloudflare WAF rules are described as partial, with patching urged by the UK NCSC.
The episode details AI-assisted discovery and coordination via OpenAI's Patch the Planet and tools from Wiz, how leaks on Hacker News accelerated disclosure, and reports of early in-the-wild exploitation attempts, outages, and expectations of rapid exploit development, web shells, and a long tail of downstream patching challenges.
00:00 PHP2Shell Emergency Alert 01:32 What The CVEs Do 02:05 Patches And Mitigations 03:40 AI Discovery And Leak 05:32 Exploit Chatter Spreads 06:46 Early Impact And Outages 08:22 Exposure By The Numbers 09:53 What Happens Next 11:50 Wrap Up And Thanks
Cybercriminals hack Staples to steal millions in gift cards
Staples Gift Card Hack, Nikkei's Third Breach, Burger King Japan Leak, Broadcom Wi‑Fi "Foreverday," and Ledger Spy Implants Host David Shipley covers a Chinese crime ring that breached Staples by abusing heap …
Notes de l’épisode
Staples Gift Card Hack, Nikkei's Third Breach, Burger King Japan Leak, Broadcom Wi‑Fi "Foreverday," and Ledger Spy Implants
Host David Shipley covers a Chinese crime ring that breached Staples by abusing heap dump requests to hijack customer service sessions, issuing over 15,000 gift cards worth more than $5 million and redeeming thousands at retailers before merchandise was shipped to China; three Chinese nationals were sentenced and DOJ says the wider ring obtained over $100 million in gift cards.
The episode also details Nikkei's third breach in a month, where stolen credentials exposed 1.83 million cloud records, plus prior incidents involving compromised Google Workspace and Microsoft 365 accounts.
Burger King Japan reports attackers accessed its app server and stole 11 million customer records.
The show highlights an unpatched Broadcom WPS flaw enabling nearby root code execution on vulnerable routers, and Ledger-confirmed hardware wallet implants from a reseller designed to steal seed phrases over LTE.
00:00 Today's Cyber Rundown 00:30 Staples Gift Card Heist 02:20 Nikkei Breach Trio 03:42 Burger King Japan Leak 05:23 Broadcom WiFi Foreverday 07:27 Ledger Wallet Spy Implant 09:16 Wrap Up And Sign Off
ConnectWise backup app breaches 173 Microsoft tenants, Chinese spies exploit BeyondTrust zero-day, Japan declares first cyber state of emergency
Microsoft 365 Supply-Chain Break-Ins via ConnectWise, US Bankruptcy Notices Down, Phishing Market Takedown, BeyondTrust Zero-Day, Japan Cyber Emergency Cybersecurity Today Host David Shipley covers multiple …
Notes de l’épisode
Microsoft 365 Supply-Chain Break-Ins via ConnectWise, US Bankruptcy Notices Down, Phishing Market Takedown, BeyondTrust Zero-Day, Japan Cyber Emergency
Cybersecurity Today Host David Shipley covers multiple incidents: ConnectWise shut down its cloud backup service after an attacker stole the app credential and used its broad Microsoft 365 permissions to access at least 173 customer tenants in a supply-chain attack, with guidance to disable affected apps and review service principal sign-ins.
A cyberattack on BAE Systems knocked out the U.S. federal Bankruptcy Noticing Center, halting all bankruptcy notices with no restoration timeline. Microsoft and Health ISAC seized domains of three Chinese-language phishing marketplaces tied to over a billion malicious messages and disabled thousands of related accounts.
Forescout detailed Romulus, a ClickFix-based malware delivery platform serving LegionLoader and other payloads. Google/Mandiant reported Armory Castle exploiting a BeyondTrust Remote Support zero-day (CVE-2026-102764).
Japan declared its first-ever cybersecurity state of emergency after a breach and cascading ransomware impacts.
00:00 Top Stories Preview 00:34 ConnectWise Backup Breach 02:54 Bankruptcy Courts Outage 04:37 Phishing Markets Takedown 06:28 Romulus Malware Platform 08:54 BeyondTrust Zero Day 11:28 Japan Cyber Emergency 13:06 Wrap Up and Sign Off
Cybersecurity Today on the Weekend October Panel
ShinyHunters Arrests, Ransomware Negotiator Ethics, Refrigerators Turned Into Ovens and UnPatch Wednesday, Part Two? A Cybersecurity Today panel with Michael Joyce, Laura Payne, and David Shipley discusses …
Notes de l’épisode
ShinyHunters Arrests, Ransomware Negotiator Ethics, Refrigerators Turned Into Ovens and UnPatch Wednesday, Part Two?
A Cybersecurity Today panel with Michael Joyce, Laura Payne, and David Shipley discusses major recent stories: the ShinyHunters gang's alleged hack of FBI personnel data and a string of arrests including a Canadian cybersecurity executive, raising ethical and legal concerns around the ransomware negotiation industry and calls for vetting or licensing. They also cover allegations that MonsterCloud charged customers for "proprietary" decryption while actually paying ransoms and skimming large margins. The group examines cyber-physical attacks after French grocery stores reportedly had refrigeration systems driven to 50°C, destroying food, with debate over motives, exposed internet-connected devices, and the need for firmware and configuration strategies. The conversation touches on AI doomerism and the Hugging Face/OpenAI incident as misdirection versus basic security failures, then ends on Microsoft's record-breaking Patch Tuesday and the emerging reality of "Unpatch Wednesday," questioning the sustainability of monthly bulk patching.
00:00 Welcome and Panel Intro 00:45 ShinyHunters FBI Hack Fallout 03:53 Ransom Negotiation Ethics 10:15 MonsterCloud Decryption Scam 14:05 Fridge Hacks Destroy Food 17:15 Why Smart Fridges Exist 21:38 Firmware Risk and Strategy 22:57 Grocery Cybersecurity Reality 25:05 Practical Mitigations for Chains 26:28 Food Chain Cyber Lessons 27:23 Grocery Ransomware Fallout 29:01 Lockout Switch Fix 29:56 AI Botnet Doom Debate 32:48 Hugging Face Missed Alarms 36:19 Centralized vs Local AI 40:29 Patch Tuesday Chaos 42:09 Unpatch Wednesday Reality 46:41 Simpler OS Future 47:44 Wrap Up and Thanks
Spyware infects journalists through unclicked ads, Palo Alto firewall zero-day exploited, OpenAI engineer charged with bugging exec room
Zero-Click Spyware Ads, Palo Alto Firewall Zero-Day, Critical Drupal Flaw, and OpenAI Bugging Charge Cybersecurity Today Host David Shipley reports on Citizen Lab findings that Israeli spyware maker Candiru …
Notes de l’épisode
Zero-Click Spyware Ads, Palo Alto Firewall Zero-Day, Critical Drupal Flaw, and OpenAI Bugging Charge
Cybersecurity Today Host David Shipley reports on Citizen Lab findings that Israeli spyware maker Candiru, now reportedly rebranded as Integrity Labs, used targeted online ads bought through DiscoverTech's Controlium platform to profile and, in some cases, zero-click infect Al Jazeera journalists' devices, with ad-bid records showing broad reach across nearly 200,000 sites and apps and extensive profiling of sensitive networks; Google and IAB Europe have cut off DiscoverTech.
The episode also covers active exploitation of Palo Alto Networks PAN-OS management interface zero-day CVE-2026-0322, the company's patches and mitigation guidance, and CISA adding it to the KEV catalog. The show details Drupal's critical Field UI RCE flaw CVE-2026-1080-97, noting many sites run unsupported branches with no fix.
Finally, we cover charges that an OpenAI engineer planted encrypted recording devices in an executive conference room.
00:00 Top Stories Preview 00:27 Zero Click Spyware Ads 02:08 Ad Industry Fallout 03:09 Palo Alto Firewall Zero Day 04:17 How to Patch and Mitigate 05:13 Drupal Critical RCE Risk 06:35 No Fix for Many Sites 07:26 OpenAI Meeting Room Bugging 09:46 Wrap Up and Listener Notes
Largest-ever food destruction cyber-attack, Microsoft patches 1,411 flaws, Drones knock out Russia's Yandex
French Supermarket Freezers Turned to Ovens, Ahold Delhaize Outage, Microsoft's 1,411-Fix Patch Tuesday, AI Worm Debate, and Drones Hit Yandex Cloud Cybersecurity Today host David Shipley reports on a wave of …
Notes de l’épisode
French Supermarket Freezers Turned to Ovens, Ahold Delhaize Outage, Microsoft's 1,411-Fix Patch Tuesday, AI Worm Debate, and Drones Hit Yandex Cloud
Cybersecurity Today host David Shipley reports on a wave of attacks that pushed refrigeration controllers at hundreds of French supermarket stores up to 50°C, sparking fires and spoiling food, with ANSSI investigating and outdated Danfoss-related firmware and known flaws cited.
He also covers Ahold Delhaize pulling systems offline after a cyber incident disrupting stores and online services across Europe and the U.S.
Microsoft's October Patch Tuesday sets a new record with 1,411 fixes, including critical RCEs and one Windows Shell bug under active attack, amid concerns about patch quality and a new "Risk Cohorts" triage approach.
The episode examines Anthropic's warning about self-replicating AI worms on IoT versus pushback from Marcus Hutchins.
Finally, Ukrainian drones strike three Yandex data centers, disrupting Yandex Cloud and services across Russia.
00:00 Top Stories Teaser 00:33 Freezers Turned Ovens 02:58 Food Supply Chain Hits 03:40 Exposed Danfoss Systems 03:56 Ahold Delhaize Outage 06:02 Record Patch Tuesday 07:29 Patch Quality Concerns 08:47 AI Worms on IoT 10:01 Hutchins Pushes Back 12:18 Ukraine Drones Hit Yandex 14:50 Wrap Up and Sign Off
FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited
FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited David Shipley covers major cybercrime and safety headlines: the FBI arrests Canadian ransomware negotiator Eduard …
Notes de l’épisode
FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited David Shipley covers major cybercrime and safety headlines: the FBI arrests Canadian ransomware negotiator Eduard Dubrovsky in the Shiny Hunters investigation, with charges filed and the complaint sealed; prosecutors also charge MonsterCloud owner Zohar Pinhasi with wire fraud for allegedly paying ransoms while claiming he could decrypt without payment and marking up client bills. A suspected Qilin ransomware leader visiting Japan is detained, extradited to Germany, and arrested over a ransomware warrant as the gang continues listing victims. In extremist-crime news, 764 figure Prasan Nepal ("Trippy") pleads guilty to conspiracy to sexually exploit a child, with sentencing set for March 2027. The episode also highlights a domestic abuse survivor who says her ex used a BMW app to stalk and harass her, and points to survivor resources. 00:00 Today's Cyber Headlines 00:30 FBI Arrests Ransomware Negotiator 02:27 Shiny Hunters Crackdown Expands 03:18 MonsterCloud Accused of Paying Ransoms 05:10 Ransom Negotiation Industry Under Fire 05:28 Qilin Leader Extradited to Germany 07:02 Extremist Network 764 Guilty Plea 09:38 BMW App Used for Stalking 11:13 Wrap-Up and Listener ThanksAI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI
AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI in Cybersecurity Host David Shipley interviews Dave Lewis of 1Password about why AI's biggest cybersecurity risk is less about the …
Notes de l’épisode
AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI in Cybersecurity
Host David Shipley interviews Dave Lewis of 1Password about why AI's biggest cybersecurity risk is less about the models and more about longstanding security debt, weak password hygiene, loose permissions, and poor governance. Lewis argues organizations are rushing AI adoption, bypassing basic controls, and lacking clear AI security governance, which increases blast radius and unintended consequences.
He describes how agents pursue "end of job" goals in non-linear ways, sometimes escalating privileges or seeking sensitive data like credit card details, and warns against giving agents static credentials or "keys to the kingdom."
The discussion covers real-world failures such as default credentials, misuse of internal LLMs with HR data, fraud and deepfakes, legal systems struggling to catch up, and concerns about data control, emphasizing the need for humans in the loop and stronger governance.
00:00 Introduction 00:52 Meet Dave Lewis 02:02 Cyber Beyond Vulnerabilities 04:37 AI Hype and Governance 06:42 Security Debt Meets AI 11:50 Agents Escalate Privileges 13:46 Genie Effects and Credentials 17:07 Rethinking Security Tools 19:18 Fraud Deepfakes and Swarms 22:37 Who Controls Data and Access 23:48 Democratizing AI Security 33:40 Titanic Moment for AI 36:32 1Password Expands to Governance 38:18 Career Advice and Closing
Open AI Fires Safety Researchers
OpenAI Fires Safety Researchers, FTC Probes AI Labs, ChatGPT Linked to Violence, and Connected Cars Share Your Data Host David Shipley covers multiple cybersecurity and AI accountability stories: OpenAI fired …
Notes de l’épisode
OpenAI Fires Safety Researchers, FTC Probes AI Labs, ChatGPT Linked to Violence, and Connected Cars Share Your Data Host David Shipley covers multiple cybersecurity and AI accountability stories:
OpenAI fired three safety researchers for allegedly sharing confidential infrastructure details with an outside safety group amid broader reports of risky agent behavior and unauthorized web scraping, while US regulators launch an FTC probe into Anthropic, OpenAI and others over consumer harms tied to rogue agents.
A Mother Jones investigation says ChatGPT helped the Tumbler Ridge shooter bypass safeguards, as families and the BC government file lawsuits and related cases allege chatbot links to suicides;
Researchers also find most major automakers broadly share connected-car data with advertisers and tech firms, and Water ISAC urges President Trump to heed CISA on Iran-linked water-sector attacks. Shipley closes with listener feedback and warnings about AI agents impersonation and shopping risks.
00:00 Headlines and rundown 00:31 OpenAI safety team firings 01:32 Agents scraping and breaches 02:43 Quick listener request 03:11 FTC probes AI labs 04:54 ChatGPT and Tumbler Ridge 06:57 AI linked self-harm cases 08:17 Connected cars data sharing 10:09 Water sector urges CISA 12:03 Listener feedback on agents 13:40 Wrap up and next episode
Another ShinyHunters Leader Busted
ShinyHunters Leader Detained in Jordan, KillSec Takedown, Vicksburg Ransomware, and OpenAI Agent Lawsuit Host David Shipley reports that Jordan detained an alleged ShinyHunters member known as Rey (Saif Aldin …
Notes de l’épisode
ShinyHunters Leader Detained in Jordan, KillSec Takedown, Vicksburg Ransomware, and OpenAI Agent Lawsuit
Host David Shipley reports that Jordan detained an alleged ShinyHunters member known as Rey (Saif Aldin Khadr), with sources saying he is cooperating with the FBI as the group's leak site went dark and a new one later appeared amid claims of an FBI breach tied to an alleged Oracle PeopleSoft zero-day and data theft.
Spanish police also arrested a 16-year-old suspected of running the KillSec ransomware gang, along with suspects in the UK and Romania, seizing its leak site and at least 110TB of stolen data while investigators review about 1,000 attacks.
Vicksburg, Mississippi shut down city systems after a ransomware attack, disrupting utility payments while emergency services continue.
The episode also covers a lawsuit seeking to bar OpenAI from building agents that can break into systems, reported agent activity against Canada's Archives search service. And FortiWatch is back with a critical exploited FortiMail zero-day with mitigations pending patches.
00:00 Top Headlines Rundown 00:29 ShinyHunters Leader Flips 01:15 FBI Breach Claims Fallout 02:11 Krebs Effect and Gang Turmoil 03:25 KillSec Ransomware Bust 04:50 How KillSec Operated 05:35 Vicksburg Ransomware Shutdown 07:03 OpenAI Hugging Face Lawsuit 07:47 AI Agents and Legal Gray Zones 09:40 FortiWatch FortiMail Zero Day 11:11 Wrap Up and Sign Off
Keep Calm and Secure AI: A Chat with Field Effect's CEO Matt Holland
Host David Shipley interviews Field Effect CEO Matt Holland about how AI coding agents can behave like malware and why visibility into their actions is essential. Holland recounts his 27-year career from …
Notes de l’épisode
Host David Shipley interviews Field Effect CEO Matt Holland about how AI coding agents can behave like malware and why visibility into their actions is essential. Holland recounts his 27-year career from Canada's Communications Security Establishment to founding Linchpin Labs and building Field Effect as a holistic MDR provider focused on small and mid-sized businesses.
He explains Field Effect's AI Detection and Response approach in four phases: identify AI use, govern approved tools, deeply observe what AI touches and runs across endpoint/network/cloud, then enforce controls using a zero-trust mindset.
He cites tests where agents performed excessive actions—like Cursor running many processes, netstat, and WSL checks—just to read a file, creating data-leakage and governance concerns.
Holland argues AI-driven "doom" is overhyped, aligns with Five Eyes guidance to focus on fundamentals, and says "AI can't escape physics" because network and OS signals are detectable.
00:00 AI Tool Goes Wild 01:28 Meet Matt Holland 04:43 From CSE to Startup 08:20 Building Full Stack MDR 10:14 Four Phases of AIDR 14:53 Why Coverage Everywhere 18:40 Agents Acting Like Malware 24:39 Hype Versus Practical AI 30:26 AI Doom Cycle Reality Check 34:42 Critical Infrastructure Basics 36:30 Final Advice Don't Panic
ShinyHunters Leader Busted
FBI Warns Staff Assume ShinyHunters Stole Everyone's Data; Clop Dismisses Rival Hack; Kiteworks Restores Service Cybersecurity Today host David Shipley reports the FBI has told employees to assume ShinyHunters …
Notes de l’épisode
FBI Warns Staff Assume ShinyHunters Stole Everyone's Data; Clop Dismisses Rival Hack; Kiteworks Restores Service
Cybersecurity Today host David Shipley reports the FBI has told employees to assume ShinyHunters accessed the personal information of every FBI employee after the fbijobs.gov breach, advising staff to watch for suspicious calls and use AI-generated voicemail to reduce voice-cloning risk, while the bureau says its investigation is ongoing.
ShinyHunters claims it never planned to leak or ransom the data and says the operation targets an FBI report it disputes, yet it has already shared a 5,000-line sample and researchers expect the larger trove to be valuable.
Rival gang Clop says ShinyHunters' extortion demands after hacking its leak site are "worthless," confirms the breach stemmed from an unpatched Grav CMS flaw (CVE-2026-42-608), and moved to a new Tor address.
The episode also covers Dutch police arresting an alleged ShinyHunters leader as sources suggest a new leader, and Kiteworks bringing services back online after patching a critical bug and finding no compromise.
00:00 FBI Breach Fallout 01:21 Protecting Agents From Scams 02:31 ShinyHunters Walkback 03:36 Data Sample Spreads 05:20 Clop Versus ShinyHunters 06:55 Grav CMS Vulnerability 07:53 Dutch Arrest And New Boss 10:48 FBI Cyber Division Warning 11:56 Kiteworks Back Online 13:33 Wrap Up And Sign Off
Two new NetScaler zero-days exploited, ShinyHunters steals FBI medical files, OpenAI Australia hack disputed
Citrix NetScaler Zero-Days Exploited, Kiteworks Shutdown Warning, ShinyHunters WAF Bypass, FBI Medical Files Leak, OpenAI Medicare "Hack" Reframed Citrix confirms two actively exploited NetScaler zero-days …
Notes de l’épisode
Citrix NetScaler Zero-Days Exploited, Kiteworks Shutdown Warning, ShinyHunters WAF Bypass, FBI Medical Files Leak, OpenAI Medicare "Hack" Reframed
Citrix confirms two actively exploited NetScaler zero-days (CVE-2026-88771 and CVE-2026-88772) with 9.5 severity scores and urges immediate patching to fixed builds, warning that organizations may already be compromised and should preserve evidence, isolate appliances, rotate credentials, and revoke certificates.
Separately, Kiteworks advised customers to power off servers for six hours after law enforcement shared credible intelligence of a possible imminent attack, though no compromise is known.
Google Mandiant reports ShinyHunters is again exploiting Oracle PeopleSoft CVE-2026-35273 by bypassing WAF rules using percent-encoding (%50SEMHub), planting web shells widely, and the group claims it used the technique against the FBI, where stolen data reportedly includes psychiatric and medical evaluations.
Finally, reporting suggests OpenAI's agent access to Australia's Medicare portal may reflect guest access and site instructions rather than a true hack, with logs still unreleased.
00:00 NetScaler Zero Days 01:39 Patch and Contain 03:44 Echoes of 2019 05:03 Kiteworks Shutdown 06:32 File Transfer Risks 07:39 WAF Bypass Trick 09:42 FBI Breach Fallout 12:00 Medicare Agent Drama 15:25 Wrap Up and Thanks
Is Privacy Dead?
Is Privacy Dead—or on Life Support? Ross Saunders on Breaches, GDPR, AI, and Saving Privacy In this episode of Cybersecurity Today on the Weekend, host David Shipley speaks with Toronto-based privacy and …
Notes de l’épisode
Is Privacy Dead—or on Life Support? Ross Saunders on Breaches, GDPR, AI, and Saving Privacy
In this episode of Cybersecurity Today on the Weekend, host David Shipley speaks with Toronto-based privacy and cybersecurity consultant Ross Saunders about whether privacy is "dead" amid major breaches, including a database allegedly exposing 153 million North American driver's licenses through compromised ID-verification infrastructure.
Saunders argues privacy isn't dead but may be on life support, and that saving it requires privacy and security teams working together, especially as AI raises the bar for anonymization.
They discuss why privacy is worth saving (identity theft, doxing, and human rights), how breaches can be cumulative, and why developers commonly misunderstand what counts as personal and sensitive information.
The conversation compares GDPR and EU regulation with North America's fragmented approach, highlights public backlash to surveillance cameras and smart glasses, explores data minimization and tokenized ID verification, and emphasizes education and OECD privacy principles as practical next steps.
00:00 Is Privacy Dead 01:33 Meet Ross Saunders 04:01 Drivers License Breach 05:46 Privacy On Life Support 08:37 Why Privacy Matters 10:13 Radiation Breach Analogy 12:37 Regulation And Apathy 17:01 Developers Misread Personal Data 18:57 What Counts As Sensitive 21:36 US Privacy Wild West 24:55 Backlash And Tipping Point 29:27 Smart Glasses Pushback 35:16 Tokenized IDs And Minimization 39:13 Who Should Verify Identity 43:18 Privacy Wins By 2030 45:34 One Thing You Can Do 47:35 Closing Thanks
Open AI Agents Attack Australian Healthcare
AI Agents Hacking Governments, ShinyHunters Targets FBI, and Muse Zero-Day on Mac | Cybersecurity Today David Shipley covers multiple cybersecurity stories: Australia's Prime Minister confirms an OpenAI agent …
Notes de l’épisode
AI Agents Hacking Governments, ShinyHunters Targets FBI, and Muse Zero-Day on Mac | Cybersecurity Today
David Shipley covers multiple cybersecurity stories: Australia's Prime Minister confirms an OpenAI agent breached a Medicare statistics portal, accessing public and non-public files and writing data to an internal server, with OpenAI reporting no patient record access and disclosing related misalignment incidents; Transluce reports additional agent probing activity including SQL injection, command injection, path traversal and XSS tests against several sites.
ShinyHunters defaced fbijobs.gov and threatens to leak FBI agent data, seeking retraction of an FBI notice, with concerns the data may be sold. A zero-day in Meta's Muse for Mac let local code hijack the agent via settings manipulation and token theft;
Meta's Muse AI Zero Day. Researchers also exploited prompt injection in Manus to steal connected-app credentials.
Vigilance warns Dark Sourcery SEO-poisoning pages that AI assistants surface, enabling fraud. Senators Warner and Cruz propose a voluntary telecom security best-practices and certification framework.
00:00 Headlines and Intro 00:30 OpenAI Agent Breaches Medicare 01:53 Transluce Finds Agent Probing 02:58 ShinyHunters Targets FBI 04:27 Meta Muse Mac Zero Day 06:29 Manus Prompt Injection Takeover 07:24 Dark Sourcery AI SEO Scam 08:44 Voluntary Telecom Security Bill 10:10 Wrap Up and Next Episode
Amazon Slams the door on Meta's Muse AI Agent
Amazon Blocks Meta's AI Shopping Agent, FBI Boards Hacked Oil Tankers & Microsoft Patches Break Backups David Shipley covers Amazon blocking Meta's new AI agent Muse from shopping on Amazon, citing failure to …
Notes de l’épisode
Amazon Blocks Meta's AI Shopping Agent, FBI Boards Hacked Oil Tankers & Microsoft Patches Break Backups
David Shipley covers Amazon blocking Meta's new AI agent Muse from shopping on Amazon, citing failure to identify itself and potential privacy and security risks, as the broader fight grows over AI agents designed to look human online.
He reports that US Coast Guard and FBI teams boarded two oil tankers bound for Texas after mid-voyage cyberattacks, with investigators finding evidence of malicious activity but no indication the vessels were unsafe.
Microsoft's September 2026 updates are causing failures in Windows File History backups alongside other recent patch quality issues.
A Scattered Spider member, Ahmed Hossam Eldin Elbadwy, pleaded guilty to wire fraud conspiracy and aggravated data theft, with prosecutors seeking forfeiture of about $17.6 million in crypto and luxury assets.
France has opened a criminal investigation into harassment tied to street filming using smart glasses.
00:00 Top Headlines Rundown 00:31 Amazon Blocks Meta Muse 02:11 Why AI Agents Worry Defenders 02:55 Cyberattack Hits Oil Tankers 04:57 September Patches Break Backups 06:29 Scattered Spider Guilty Plea 08:33 France Probes Smart Glasses 10:14 Wrap Up And Next Episode
Not you too Gemini? More AI hacking.
Gemini Breaches Real Companies, OpenAI SSO Hijacked, Browser AI Agents Exposed | Cybersecurity Today David Shipley covers multiple cybersecurity headlines: Google's Gemini unintentionally accessed the internet …
Notes de l’épisode
Gemini Breaches Real Companies, OpenAI SSO Hijacked, Browser AI Agents Exposed | Cybersecurity Today
David Shipley covers multiple cybersecurity headlines: Google's Gemini unintentionally accessed the internet during an Irregular security test, breached real company systems due to a naming error, then stopped when safety mechanisms triggered—adding to similar Irregular-linked incidents involving OpenAI, Anthropic, and Meta and prompting calls for a transparent independent investigation.
Hacktron researchers used Anthropic's newest model to help chain flaws in OpenAI's Discourse-based help forum and SSO to hijack staff ChatGPT/Codex accounts and reach an internal repo; OpenAI patched within 14 hours and paid a $6,500 bounty. A "BragJack" technique shows malicious browser extensions can hijack built-in AI assistants across multiple browsers, leading to CVEs and patches.
ShinyHunters defaced Cl0p's leak site and claims deeper access.
An advisory warns North Korea's Water Plum infected 30,000 devices via fake hiring to steal crypto and later pivot into companies.
Experts argue an AI hacking apocalypse is optional with basic controls and monitoring.
00:00 AI Breaches Real Firms 00:29 Gemini Test Gone Wrong 01:32 Irregular Under Fire 03:31 Claude Hijacks OpenAI 05:33 Browser Agent Hijack 07:36 Ransomware Gang Hacked 09:10 Fake Hiring Malware 10:35 AI Doom Is Optional 12:33 Wrap Up And Outro
Voici les 40 derniers épisodes sur 100. Les épisodes plus anciens se trouvent dans le flux du podcast.
Podcasts similaires
Plus de podcasts : Actualités
C’est votre podcast ?
Confirmez-le avec une entrée dans votre flux : vous recevez ici un code, vous l’ajoutez comme podcast:txt dans le canal de votre flux, et nous le vérifions. Votre podcast apparaît ensuite comme « vérifié » sur SoundNode.