『Talkin' Bout [Infosec] News』のカバーアート

Talkin' Bout [Infosec] News

Talkin' Bout [Infosec] News

著者： Black Hills Information Security
無料で聴く

【Amazonプライム会員限定】今ならプレミアムプランが4か月 月額99円。

10月19日まで。※適用条件あり
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. Join us live on YouTube, Monday's at 4:30PM ETCopyright 2025 Talkin' About [Infosec] News, Powered by Black Hills Information Security 政治・政府
エピソード
  • Google’s Gemini Agent Escapes Containment - 2026-09-21

    Google’s Gemini Agent Escapes Containment - 2026-09-21
    2026/09/22
    This week, the crew examines Google’s reported Gemini containment failure, Anthropic’s new biology lab, Snickers-branded prompt injection, AI-assisted social engineering, and Claude’s access to financial data. They also cover major Linux, Cisco, Check Point, and Docker vulnerabilities; weak oversight of Flock surveillance searches; privacy concerns surrounding Waymo vehicles; continuing ransomware disruption at an Australian chicken producer; and the escalating conflict between ShinyHunters and Clop.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Justifying Our Existence(03:27) - Google’s Gemini Agent Escapes Containment - 2026-09-21(06:45) - Google’s Gemini Hacks 3 Real Companies During Test(10:05) - Anthropic Builds a Bay Area Biology Lab(13:22) - Snickers Turns Prompt Injection into an Ad Campaign(19:41) - Iranian Social Engineering Uses Fake MRI Scans(25:10) - Claude Requests Access to Financial Accounts(28:50) - Meta’s Agentic AI and Its Personal-Data Advantage(30:57) - OpenAI Introduces In-Platform Advertising(34:47) - Linux Local Privilege-Escalation Vulnerabilities(35:32) - Cisco Secure Email Gateway Exploited by Nation-States(37:28) - Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root(37:53) - Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files(38:27) - CISA Ends Its Weekly Cybersecurity Bulletin(40:53) - Flock Surveillance Searches and Weak Oversight(49:10) - Waymo Detects a Firearm and Calls Police(57:40) - Upcoming Events, Workshops, and Training(57:51) - Alethe's Physical-Assessment Training(59:02) - Andy’s XDRCLI Talk at Wild West Hackin’ Fest(59:52) - Jake’s Hands-On AI Risk-Assessment Training(01:01:27) - Wade’s San Diego AI-Detection Event(01:03:00) - Ransomware Continues Disrupting an Australian Chicken Producer(01:05:34) - ShinyHunters Compromises Clop’s Dark-Web SiteLinksGoogle’s Gemini Hacks 3 Real Companies During TestAnthropic Builds a Bay Area Biology LabSnickers Turns Prompt Injection into an Ad Campaignhttps://www.snickers.com/digitalsnickersIranian Social Engineering Uses Fake MRI ScansClaude Requests Access to Financial AccountsOpenAI Introduces In-Platform AdvertisingLinux Local Privilege-Escalation VulnerabilitiesCisco Secure Email Gateway Exploited by Nation-StatesCritical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as RootCritical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host FilesCISA Ends Its Weekly Cybersecurity BulletinFlock Surveillance Searches and Weak OversightWaymo Detects a Firearm and Calls PoliceAlethe’s Physical-Assessment TrainingAndy’s XDRCLI Talk at Wild West Hackin’ FestJake’s Hands-On AI Risk-Assessment TrainingWade’s San Diego AI-Detection EventRansomware Continues Disrupting an Australian Chicken ProducerShinyHunters Compromises Clop’s Dark-Web SiteCreators & Guests Alethe Denis - GuestCorey Ham - HostAndy Pettit "Nerf" - GuestWade Wells - HostBronwen Aker - HostRyan Poirier - ProducerJake Williams - GuestClick here to watch this episode on YouTube. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 9 分
  • World Leaders Reject Calls to Slow Down AI Development - 2026-09-14

    World Leaders Reject Calls to Slow Down AI Development - 2026-09-14
    2026/09/16
    This week, the team examines AI agents targeting RubyGems, Anthropic’s warnings about dangerous AI misuse, human review of ChatGPT conversations, predictive policing, and LG smart-TV privacy. They also cover passkey-themed phishing, ScreenConnect abuse, Microsoft Defender patch bypasses, and upcoming cybersecurity workshops, webcasts, and Wild West Hackin’ Fest training.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — A Protected Class(05:20) - World Leaders Reject Calls to Slow Down AI Development - 2026-09-14(07:58) - OpenAI Agent Swarm Targets RubyGems(16:12) - Anthropic Warns About Claude Misuse and Calls for Slower AI Development(31:38) - OpenAI’s Project Lily and Human Review of ChatGPT Conversations(38:54) - “Minority Report” Predictive Policing Using Financial Data(42:11) - LG Smart TVs Accused of Spying on Viewers(46:49) - Passkey-Themed Phishing Campaigns(47:20) - ConnectWise Patches ScreenConnect After Worm-Like Abuse(47:47) - Microsoft Defender “Shield Break” Patch Bypassed(54:19) - News Wrap-Up and Community Discussion(01:00:04) - Kip Boyle’s Book, Fire Doesn’t Innovate(01:00:27) - “Hunting Shadow AI” Workshop — September 25(01:01:05) - “Playbooks for Owning AI Risk” Live Training(01:03:01) - Wild West Hackin’ Fest and Karaoke(01:03:51) - Webcast: Attacking MCP and N8N Servers(01:04:10) - Webcast: Safely Using Offensive AI in Security Assessments(01:05:17) - Wild West Hackin’ Fest Satellite and SOC ClassesLinksOpenAI Agent Swarm Targets RubyGemsAnthropic Warns About Claude Misuse and Calls for Slower AI DevelopmentOpenAI’s Project Lily and Human Review of ChatGPT Conversations“Minority Report” Predictive Policing Using Financial DataLG Smart TVs Accused of Spying on ViewersPasskey-Themed Phishing CampaignsConnectWise Patches ScreenConnect After Worm-Like AbuseMicrosoft Defender “Shield Break” Patch BypassedKip Boyle’s Book, Fire Doesn’t Innovate“Hunting Shadow AI” Workshop — September 25“Playbooks for Owning AI Risk” Live TrainingWild West Hackin’ Fest and KaraokeWebcast: Attacking MCP and N8N ServersWebcast: Safely Using Offensive AI in Security AssessmentsWild West Hackin’ Fest Satellite Class...and SOC ClassesCreators & Guests Kip Boyle - GuestCorey Ham - HostJohn Strand - HostRalph May - HostBronwen Aker - HostCharles "bsdbandit" - GuestRyan Poirier - ProducerHayden Covington - HostClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 14 分
  • Anthropic Warns Users of Infostealer Abuse - 2026-09-08

    Anthropic Warns Users of Infostealer Abuse - 2026-09-08
    2026/09/09
    AI agents take center stage as the team examines OpenAI models using a German forum for private communications, Anthropic’s response to a compromised Claude account, new model releases, and the growing demand for Apple hardware to train computer-using agents. The discussion also covers the sale of stolen driver’s licenses, a claimed Florida DMV breach, and vulnerabilities affecting JFrog Artifactory, Proxmox, Plex, and Langflow. Finally, the panel considers CISA’s decision to discontinue six cybersecurity assessment services, new research into compromising passkeys, and Outflank’s compact NTLMv1 rainbow tables.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Internet Fall Weather(03:17) - Anthropic Warns Users of Infostealer Abuse - 2026-09-08(06:59) - OpenAI Agents Exploit a German Forum for Private Communications(17:18) - Anthropic Warns a User About Infostealer Abuse of Their Claude Account(23:32) - OpenAI’s Latest Model Tops AI Leaderboards and Revives the AGI Debate(26:01) - CrowdStrike Releases AI Models Developed with NVIDIA(29:12) - FBI Investigates the Sale of 103,000 Stolen Driver’s Licenses(32:41) - ShinyHunters Claims a Breach of the Florida DMV(35:19) - AI Labs Amass Mac Minis and Mac Studios for Agent Training(38:02) - Critical Authentication Bypass Disclosed in JFrog Artifactory(39:00) - Proxmox Vulnerability Exposes Internet-Facing Hosts(40:17) - New Plex Vulnerability Raises Home-Network Security Concerns(41:24) - Langflow Vulnerability Enables Unauthenticated Remote Code Execution(47:07) - Thomson Reuters Breach Disrupts State Court Systems(47:25) - CISA Cuts Six Free Cybersecurity Assessment Services(52:24) - New Research Demonstrates Ways to Compromise Passkeys(54:07) - Outflank Publishes a Smaller NTLMv1 Rainbow Table and Cracking Tool(56:02) - Dan DeCloss: Turning Pen Tests into Risk Intelligence Anti-Cast(56:53) - PlexTrac’s AI-Assisted Reporting and Retesting(01:03:44) - Charles Shirer Introduces the FanMeyer Creator Platform(01:05:06) - Upcoming AI Browser Research and Wild West Hackin’ Fest Talk(01:05:49) - Hacking and Defending Satellite Infrastructure at Wild West(01:06:25) - Upcoming AI Core Skills Fundamentals CourseLinksOpenAI Agents Exploit a German Forum for Private CommunicationsAnthropic Warns a User About Infostealer Abuse of Their Claude AccountOpenAI’s Latest Model Tops AI Leaderboards and Revives the AGI DebateCrowdStrike Releases AI Models Developed with NVIDIAFBI Investigates the Sale of 103,000 Stolen Driver’s LicensesShinyHunters Claims a Breach of the Florida DMVAI Labs Amass Mac Minis and Mac Studios for Agent TrainingCritical Authentication Bypass Disclosed in JFrog ArtifactoryProxmox Vulnerability Exposes Internet-Facing HostsNew Plex Vulnerability Raises Home-Network Security ConcernsLangflow Vulnerability Enables Unauthenticated Remote Code ExecutionThomson Reuters Breach Disrupts State Court SystemsCISA Cuts Six Free Cybersecurity Assessment ServicesNew Research Demonstrates Ways to Compromise PasskeysOutflank Publishes a Smaller NTLMv1 Rainbow Table and Cracking ToolDan DeCloss: Turning Pen Tests into Risk Intelligence Anti-CastCharles Shirer Introduces the FanMeyer Creator PlatformUpcoming AI Browser Research and Wild West Hackin’ Fest TalkHacking and Defending Satellite Infrastructure at Wild WestCreators & Guests Corey Ham - HostBronwen Aker - HostRalph May - HostCharles "bsdbandit" - GuestRyan Poirier - ProducerDan DeCloss - GuestClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec....
    続きを読む 一部表示
    1 時間 8 分
adbl_web_anon_alc_button_suppression_t1
まだレビューはありません