AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339]
Notes de l’épisode
AI Chat with Maxime Lamothe-Brassard and Chris Luft.
A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard.
In this episode:
• Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire local Git repository — commit history, branches and .env files with API keys — to a Google Cloud bucket; wire-level analysis via mitmproxy, a quiet server-side fix, and why you should rotate keys if you used the tool.
• Fortinet's take (via Mexico Business News) on AI accelerating vulnerability discovery and exploitation: 24–48 hours from disclosure to active exploitation vs. 16 days to patch — and whether "virtual patching" is a real mitigation or a feat of marketing.
• The AI distillation debate: after years of arguing fair use for scraping the internet, frontier labs now object to competitors training on their model outputs — Business Insider's look at the irony, shared by Pascal Hetzscholdt (Wiley).
• Neon Cyber's survey on shadow AI rising with seniority: 14% of individual contributors use unapproved AI tools vs. 63.7% of managers and 70% of VPs and above — and why enforcement, not awareness, is the real challenge.
Stories covered:
• / guptanipun_my-spare-laptop-ran-completely-...
• https://mexicobusiness.news/cybersecu...
• / pascal-hetzscholdt_quote-heres-some-delici...
• https://neoncyber.com/blog/shadow-ai-...
Chapters:
0:00 Intro — welcome to AI Chat
0:45 Grok Build CLI uploading entire repos (Nipun Gupta / Optimus Labs)
4:57 AI is outpacing patch management — is virtual patching the answer?
12:32 The AI distillation debate: scraping irony at the frontier labs
16:29 Shadow AI use rises with seniority (Neon Cyber)
22:51 Wrap-up
The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.
Subscribe wherever you listen:
• Spotify: https://open.spotify.com/show/6ep00ze...
• Apple Podcasts: https://podcasts.apple.com/us/podcast...
• YouTube: / @limacharlieio