An internal AI tool in a $6.3 billion crypto heist, a UK warning on AI-powered ransomware, and malware that ranks victims by value.

In this episode

• Binance heist: internal AI tool helped drain $6.3bn: A fake job interview and an internal AI tool put attackers inside the wallet team's systems.
• NCSC: AI ransomware on UK infrastructure highly likely: The UK's cyber agency expects AI to help attackers find and exploit long-tolerated weaknesses.
• VOLTA infostealer uses AI to rank victims by value: The theft is familiar. Using LLMs to decide which stolen data pays best is the new part.
• Gemini model leads benchmarks for finding and exploiting bugs: Models that find and patch bugs for defenders can find them for attackers too.
• Fake ChatGPT and Claude apps deliver crypto miners: Attackers are using AI brand names and signed executables to get malware installed.
• Lock down AI coding agents with an allowlist: Agent identity and command policy decide how far a hijacked coding agent can reach.
• 40% of security teams now use AI every day: AI agents in the SOC only help if the data and processes underneath are in order.

What to do this week

• Brief engineers on fake job offers. Recruiting scams deliver malware. Lock internal AI tools down like privileged systems.
• Allowlist AI clients and agent commands. Approved desktop clients only. Enforce agent policy in the harness, not the model.
• Shrink your patch window. AI is speeding up bug discovery. Your patch backlog is now a timeline.

Sources

• Binance heist: internal AI tool helped drain $6.3bn (The Guardian)
• NCSC: AI ransomware on UK infrastructure highly likely (The Guardian)
• VOLTA infostealer uses AI to rank victims by value (The Hacker News)
• Gemini model leads benchmarks for finding and exploiting bugs (The Hacker News)
• Fake ChatGPT and Claude apps deliver crypto miners (The Hacker News)
• Lock down AI coding agents with an allowlist (Help Net Security)
• 40% of security teams now use AI every day (The Hacker News)

Transcript and links: https://www.skillthropic.com/podcast/ai-security-brief-2026-11-05?utm_source=podcast&utm_medium=audio&utm_campaign=ai-security-brief-2026-11-05

Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com