エピソード

  • Iranian Cyberattacks on U.S. Water Systems - 2026-08-03

    Iranian Cyberattacks on U.S. Water Systems - 2026-08-03
    2026/08/05
    This episode examines Anthropic’s disclosure that Claude breached real organizations during security testing, along with new technical details about the OpenAI and Hugging Face incident. The discussion covers ExfilSquad’s claimed Microsoft breach, cyberattacks targeting U.S. water systems, and malicious Android TV boxes used for residential proxy networks and advertising fraud. The hosts also explore Google’s Android age-verification plans, Chrome protections against hijacking extensions, Microsoft Teams impersonation attacks deploying Chaos ransomware, and Bank of America’s acquisition of MDSec. Additional topics include the GrapheneOS duress-password court case, a DEF CON prediction market, continued Kali365 phishing activity, and credential-stuffing attacks against Chick-fil-A loyalty accounts.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Zuckers(03:43) - Iranian Cyberattacks on U.S. Water Systems - 2026-08-03(07:00) - Story # 1: Anthropic’s Claude Breaches Companies During Security Testing(11:35) - Story # 2: Hugging Face Publishes Technical Details of the OpenAI Incident(13:37) - Story # 3: ExfilSquad Claims a Microsoft Cloud Breach(19:34) - Story # 4: Iranian Cyberattacks Target U.S. Water Systems(28:27) - Story # 5: Malicious Android TV Boxes Fuel Proxy Networks and Ad Fraud(40:51) - Story # 6: Google Introduces Android Age Verification(43:26) - Story # 7: Chrome Targets Tab- and Homepage-Hijacking Extensions(47:02) - Story # 8: Fake Microsoft Teams Support Calls Deploy Chaos Ransomware(48:38) - Story # 9: Bank of America Acquires MDSec(51:15) - Story # 10: GrapheneOS Duress Password Wipes Phone During Border Search(55:25) - Story # 11: Pony Market Takes Bets on DEF CON and Black Hat(58:06) - Story # 12: Kali365 Phishing Platform Remains Active(01:02:26) - ChickenSec : Chick-fil-A Loyalty Accounts Hit by Credential StuffingLinksStory # 1: Anthropic’s Claude Breaches Companies During Security TestingStory # 2: Hugging Face Publishes Technical Details of the OpenAI IncidentStory # 3: ExfilSquad Claims a Microsoft Cloud BreachStory # 4: Iranian Cyberattacks Target U.S. Water SystemsStory # 5: Malicious Android TV Boxes Fuel Proxy Networks and Ad FraudStory # 6: Google Introduces Android Age VerificationStory # 7: Chrome Targets Tab- and Homepage-Hijacking ExtensionsStory # 8: Fake Microsoft Teams Support Calls Deploy Chaos RansomwareStory # 9: Bank of America Acquires MDSecStory # 10: GrapheneOS Duress Password Wipes Phone During Border SearchStory # 11: Pony Market Takes Bets on DEF CON and Black HatStory # 12: Kali365 Phishing Platform Remains ActiveChickenSec : Chick-fil-A Loyalty Accounts Hit by Credential StuffingInfosec: Age of AI SummitDEATHcon- November 13 - 14, 2026- Univeristy of San Diego5998 Alcala Park Way San Diego, California 92110Creators & Guests Ralph May - HostWade Wells - HostBronwen Aker - HostCorey Ham - HostNick Ascoli - GuestClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 7 分
  • OpenAI accidentally Hacked Hugging Face - 2026-07-27

    OpenAI accidentally Hacked Hugging Face - 2026-07-27
    2026/07/28
    This week, the crew digs into one of the biggest AI security stories of the year: how an OpenAI autonomous agent accidentally compromised a Hugging Face environment during testing and what the incident reveals about the growing risks of agentic AI. They examine how AI models behave in offensive security scenarios, discuss emerging attack surfaces around MCPs and AI agents, explore the challenges of AI red teaming, and debate what organizations should be doing today to secure AI-powered workflows. The episode also covers AI safety initiatives, model behavior, and where defensive security is struggling to keep pace with rapidly evolving AI capabilities.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴event-live-chatChapters(00:00) - PreShow Banter™ — Sol with a Goal(06:33) - OpenAI accidentally Hacked Hugging Face - 2026-07-27(09:18) - Story #1 - OpenAI says it accidentally hacked Hugging Face with a new AI system(18:33) - Story #2 - Lapsus is shutting down(24:21) - Story #3 - AgentForger, Part 1: ChatGPT Cross-Site Agent Forgery(31:47) - Story #4 - Beyond the Terminal: Offensive Security Evals for Embodied Reasoning(44:00) - Story #5 - EXPLOIT BROKERS PAY $500,000 FOR A WORDPRESS RCE. I FOUND ONE WITH GPT5.6 SOL ULTRA AND $25(52:43) - Story #6 - DNS Poisoning Tactics Expand to Hospitality Wi-Fi(55:51) - Ads and Mike at the AI Summit(59:54) - Story #7 - Golden Chickens Resurfaces With Four New Malware Families and Modular ImplantsLinksStory #1 - OpenAI says it accidentally hacked Hugging Face with a new AI systemStory #2 - Lapsus is shutting downStory #3 - AgentForger, Part 1: ChatGPT Cross-Site Agent ForgeryAgentForger, Part 2: The Autonomous InsiderStory #4 - Beyond the Terminal: Offensive Security Evals for Embodied ReasoningStory #5 - EXPLOIT BROKERS PAY $500,000 FOR A WORDPRESS RCE. I FOUND ONE WITH GPT5.6 SOL ULTRA AND $25Story #6 - DNS Poisoning Tactics Expand to Hospitality Wi-FiAds and Mike at the AI SummitStory #7 - Golden Chickens Resurfaces With Four New Malware Families and Modular ImplantsCreators & Guests Ads Dawson - GuestMike Takahashi - GuestCorey Ham - HostJohn Strand - HostBronwen Aker - HostHayden Covington - HostRalph May - HostClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 5 分
  • Initiative Gold Eagle - 2026-07-20

    Initiative Gold Eagle - 2026-07-20
    2026/07/21
    This week, the team discusses the White House's Initiative Gold Eagle and its implications for cybersecurity information sharing, an unexpectedly positive development involving Flock Safety, and the latest wave of AI news. The conversation also explores evolving AI model capabilities, security guardrails, open-weight Chinese models, and how AI is changing offensive and defensive security. Along the way, the hosts examine recent vulnerability research, industry reactions, and other cybersecurity headlines from the week.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — The Two Jokes(01:58) - Initiative Gold Eagle - 2026-07-20(12:24) - Story #1 - White House Launches Gold Eagle Initiative for Unprecedented Cybersecurity Vulnerability Coordination(18:58) - Story #2 - Microsoft Reins in RoguePlanet Zero-Day Threat(21:48) - Story #3 - Now, defenders are embracing the prompt injection, too(27:45) - Story #4 - Security incident disclosure — July 2026(33:38) - Story #5 - Chinese AI has leveled up, and brought renewed focus on the open weight model shift(44:25) - Story #6 - LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy(47:24) - Story #7 - Inside Pegasus: The evolution of the world’s most notorious spyware system(48:38) - Story #8a - WP2SHELL: PRE AUTHENTICATION RCE IN WORDPRESS CORE(51:49) - Story #8b - Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities(53:20) - Story #9 - Cyberattack threatens utterly critical infrastructure in Japan: KFC(58:10) - Paul’s Workshop(01:00:29) - Sign up for the AI Summit to see Matt’s talk(01:02:45) - Bronwen’s Workshop(01:07:10) - Wild West Hackin’ Fest(01:07:25) - DeathCon(01:09:08) - PostShow Banter - Retirement FundsLinksStory #1 - White House Launches Gold Eagle Initiative for Unprecedented Cybersecurity Vulnerability CoordinationStory #2 - Microsoft Reins in RoguePlanet Zero-Day ThreatStory #3 - Now, defenders are embracing the prompt injection, tooStory #4 - [Huggingface] Security incident disclosure — July 2026Story #5 - Chinese AI has leveled up, and brought renewed focus on the open weight model shiftStory #6 - LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacyStory #7 - Inside Pegasus: The evolution of the world’s most notorious spyware systemStory #8a - WP2SHELL: PRE AUTHENTICATION RCE IN WORDPRESS COREStory #8b - Cloudflare WAF protects WordPress applications from two high-severity vulnerabilitiesStory #9 - Cyberattack threatens utterly critical infrastructure in Japan: KFCPaul’s WorkshopSign up for the AI Summit to see Matt’s talkBronwen’s WorkshopWild West Hackin’ FestDeathConCreators & Guests Corey Ham - HostRalph May - HostJohn Strand - HostPaul Clark - GuestWade Wells - HostMeagan Bentley - ProducerBronwen Aker - HostMatt Franz - GuestClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 11 分
  • OnlyFans Models Are Accidental Blue Team Defenders - 2026-07-13

    OnlyFans Models Are Accidental Blue Team Defenders - 2026-07-13
    2026/07/15
    This week, the team unpacks a wide range of cybersecurity news, including a fraudulent offensive security startup tied to cybercriminals, how leaked OnlyFans content is inadvertently helping defenders identify compromised government websites, and new vishing attacks targeting Microsoft Entra passkey enrollment. They also examine AI prompt injection risks in GitHub workflows, malware campaigns abusing hundreds of GitHub repositories and Go packages, Microsoft's latest identity security developments, and the growing push for online age verification through government-issued IDs and selfies.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-event-chatChapters(00:00) - PreShow Banter™ — The New Mainframes(05:24) - OnlyFans Models are Accidental Blue Team Defenders - 2026-07-13(06:23) - Story #1 - Felons, Fraudsters Flog Offensive Cybersecurity Startup(15:37) - Story #2 - OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear(20:37) - Story #3 - Vishing actors target Entra passkey enrollment(32:44) - Story #4 - GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos(46:32) - Story #5 - Network of 200 GitHub Repositories Used for Malware Infection(48:13) - Story #6 - Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint(53:53) - Story #7 - EU Reddit Users Must Verify Age With Government ID or Selfie(59:39) - Story #8 - Risky Bulletin: All new cars to include a camera aimed at the driver's faceLinksStory #1 - Felons, Fraudsters Flog Offensive Cybersecurity StartupStory #2 - OnlyFans Models Are Accidentally Making Hacked Government Websites DisappearStory #3 - Vishing actors target Entra passkey enrollmentStory #4 - GitLost: How We Tricked GitHub’s AI Agent into Leaking Private ReposStory #5 - Network of 200 GitHub Repositories Used for Malware InfectionStory #6 - Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaintStory #7 - EU Reddit Users Must Verify Age With Government ID or SelfieStory #8 - Risky Bulletin: All new cars to include a camera aimed at the driver’s faceCreators & Guests John Strand - HostMishaal Khan - GuestRalph May - HostMeagan Bentley - ProducerBronwen Aker - HostWade Wells - HostDoc Blackburn - GuestJake Hildreth - GuestClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 8 分
  • Apple's Hide My Email ... Doesn't! – 2026-07-06

    Apple's Hide My Email ... Doesn't! – 2026-07-06
    2026/07/07
    This episode of BHIS - Talkin' Bout [infosec] News covers the latest cybersecurity headlines, including debate over the economics of AI infrastructure, updates on the Huntress controversy, new details surrounding Scattered Spider, a critical Microsoft SharePoint vulnerability, and reports of a breach involving a DHS information-sharing network. The discussion also examines Apple's legal battles over alternative app stores, the limitations of Apple's Hide My Email feature, a Medtronic breach, firmware security, Palo Alto Networks attribution disputes, and other notable security stories that didn't make the main rundown.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Ask GPU(02:09) - Story # 0: The memory crisis heads to court as class-action lawsuit filed against Samsung, SK Hynix, and Micron(05:15) - Apple's Hide My Email ... Doesn't! – 2026-07-06(08:38) - Story #1 - These Recent Insider Threat Allegations(12:53) - Story #2a - Alleged Scattered Spider hacker extradited to the United States(16:40) - Story #3 - US Department of Homeland Security says it is probing a cyber breach at information-sharing network(22:20) - Story #5 - Espionage Against the European Parliament(28:33) - Story #6a - Sony Is Going Disc-Free: What It Means for PS6 and Your Wallet(33:35) - Story #6b - Resetting XBOX(38:51) - Story #7 - Command & Conquer Generals: Zero Hour — macOS, iOS & iPadOS(42:47) - Story #8 - Medtronic notifies customers impacted by ShinyHunters data breach(43:56) - Story #9 - Flipper Zero firmware development continues with community help(55:18) - Story #10 - Amazon will stop accepting new customers for Mechanical Turk(59:06) - Fletus’ YouTube Channel(59:42) - Doc’s Upcoming Workshop(01:03:22) - Story #11 - Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses(01:03:56) - Story #12 - Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionageLinksStory # 0: The memory crisis heads to court as class-action lawsuit filed against Samsung, SK Hynix, and MicronStory #1 - These Recent Insider Threat AllegationsStory #2a - Alleged Scattered Spider hacker extradited to the United StatesStory #3 - US Department of Homeland Security says it is probing a cyber breach at information-sharing networkStory #5 - Espionage Against the European ParliamentStory #6a - Sony Is Going Disc-Free: What It Means for PS6 and Your WalletStory #6b - Resetting XBOXStory #7 - Command & Conquer Generals: Zero Hour — macOS, iOS & iPadOSStory #8 - Medtronic notifies customers impacted by ShinyHunters data breachStory #9 - Flipper Zero firmware development continues with community helpStory #10 - Amazon will stop accepting new customers for Mechanical TurkFletus’ YouTube ChannelDoc’s Upcoming WorkshopStory #11 - Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email AddressesStory #12 - Startup sues Palo Alto Networks’ Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionageCreators & Guests Corey Ham - HostJohn Strand - HostWade Wells - HostDoc Blackburn - GuestHayden Covington - HostRalph May - HostFletus Poston - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 7 分
  • Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29

    Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29
    2026/06/30
    This week on BHIS - Talkin' Bout [infosec] News, the team discusses the Polymarket supply chain compromise that led to the theft of millions from a small number of high-value accounts, emerging phishing campaigns abusing OpenAI invitations and Microsoft 365 device code authentication, and recent Oracle security updates. They also cover convictions tied to the Transport for London and U.S. healthcare intrusions, Google's Android earthquake warning system, concerns over MITRE ATT&CK evaluation methodology, and the ongoing debate surrounding threat intelligence researchers interacting with cybercriminals.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — The Next Webcast Thing(00:14) - Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29(03:56) - Story #1 - It's looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns(07:49) - Story #2 - FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users(08:55) - Story #3 - heavener: This is what happens when you can't afford EDR licenses(18:50) - Story #4 - Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues(31:59) - Story #5 - I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.(36:14) - Story #6 - CISA Adds Four Known Exploited Vulnerabilities to Catalog(37:09) - Story #7 - Victory! 702 has Expired!(37:43) - Story #8 - Scattered Spider Hackers Plead Guilty on Day 1 of Trial(40:52) - Story #9 - Polymarket customers lose $3 million in supply-chain attack(44:56) - Story #10 - Bad cybersecurity by Secret Service agents put US officials at risk, inspector general says(49:31) - Story #11 - How Android Earthquake Alerts System Works(53:47) - Story #12 - Cybersecurity firms targeted by fraudulent OpenAI organization invites(59:34) - Story #13a - The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines(59:59) - Story #13b - Order-tracking app Shop abused to push callback phishing attacks(01:04:29) - Chinese AI vs. Anthropic Mythos | BHIS [In Focus]LinksStory #1 - It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden vulnsStory #2 - FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive usersStory #3 - heavener: This is what happens when you can’t afford EDR licensesStory #4 - Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensuesStory #5 - I Could’ve Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.Story #6 - CISA Adds Four Known Exploited Vulnerabilities to CatalogStory #7 - Victory! 702 has Expired!Story #8 - Scattered Spider Hackers Plead Guilty on Day 1 of TrialStory #9 - Polymarket customers lose $3 million in supply-chain attackStory #10 - Bad cybersecurity by Secret Service agents put US officials at risk, inspector general saysStory #11 - How Android Earthquake Alerts System WorksStory #12 - Cybersecurity firms targeted by fraudulent OpenAI organization invitesStory #13a - The Trojan horse of cybercrime: Weaponizing SaaS notification pipelinesStory #13b - Order-tracking app Shop abused to push callback phishing attacksChinese AI vs. Anthropic Mythos | BHIS [In Focus]Creators & Guests John Strand - HostBronwen Aker - HostCorey Ham - HostMeagan Bentley - ProducerWade Wells - HostRalph May - HostHayden Covington - HostClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 6 分
  • Rickrolling the FIFA World Cup - 2026-06-22

    Rickrolling the FIFA World Cup - 2026-06-22
    2026/06/23
    This week’s episode covers a series of cybersecurity stories, including a researcher’s discovery of vulnerabilities in FIFA’s World Cup platform that could have enabled unauthorized administrative access and even the ability to alter live broadcasts. The team also discusses the risks of large-scale identity verification data exposure, supply chain attacks impacting the scientific research community, ongoing fallout from Broadcom’s VMware acquisition, and legal challenges from major organizations facing rising VMware costs. Along the way, the hosts share commentary on AI-related security concerns, access control failures, and the broader impact of vendor decisions on enterprise security.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — There's always more suppply chain(04:52) - Rickrolling the FIFA World Cup - 2026-06-22(07:59) - Story #1 - Texas Government Data Breach Exposes 3 Million Driver’s License Records(10:56) - Story #2 - I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.(21:00) - Story #3 - FortiBleed: 75,000 Fortinet Firewalls Compromised: Global Enterprises Exposed – Claim Your Ethical Disclosure(23:58) - Story #4a - Stakeholder-Specific Vulnerability Categorization (SSVC)(25:44) - Story #4b - CVSS Is Officially Dead: What CISA's BOD 26-04 Means for Everyone(37:19) - Story #5 - Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels(43:56) - Story #6 - FBI disrupts massive AI-powered phishing service using a million URLs(46:12) - Story #7 - Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure(47:12) - Story #8 - AI models that can take down governments and business months away, rare Five Eyes statement warns(48:44) - Story #9 - ANTHROPIC’S MYTHOS AI BROKE INTO ALMOST ALL NSA CLASSIFIED SYSTEMS IN HOURS(58:45) - Story #10 - Tesco moving 40,000 server workloads off VMware amid Broadcom’s “abusive conduct”LinksStory #1 - Texas Government Data Breach Exposes 3 Million Driver’s License RecordsStory #2 - I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.Story #3 - FortiBleed: 75,000 Fortinet Firewalls Compromised: Global Enterprises Exposed – Claim Your Ethical DisclosureStory #4a - Stakeholder-Specific Vulnerability Categorization (SSVC)Story #4b - CVSS Is Officially Dead: What CISA's BOD 26-04 Means for EveryoneStory #5 - Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI WheelsStory #6 - FBI disrupts massive AI-powered phishing service using a million URLsStory #7 - Splunk Enterprise Vulnerability Exploited in Attacks Days After DisclosureStory #8 - AI models that can take down governments and business months away, rare Five Eyes statement warnsStory #9 - ANTHROPIC’S MYTHOS AI BROKE INTO ALMOST ALL NSA CLASSIFIED SYSTEMS IN HOURSStory #10 - Tesco moving 40,000 server workloads off VMware amid Broadcom’s “abusive conduct”Creators & Guests Andy Pettit "Nerf" - GuestMichael "Shecky" Kavka - GuestRyan Poirier - ProducerCorey Ham - HostRalph May - HostJohn Strand - HostClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 6 分
  • U.S. Government Effectively Bans Fable 5 and Mythos 5 - 2026-06-15

    U.S. Government Effectively Bans Fable 5 and Mythos 5 - 2026-06-15
    2026/06/16
    This episode dives into the fallout from new restrictions on Anthropic’s cybersecurity-focused AI models, Mythos and Fable, and the debate over whether government pressure has effectively blocked security researchers from using advanced AI for vulnerability discovery and code analysis. The panel discusses AI “jailbreaking” claims, export-control comparisons, the impact on penetration testing and bug hunting, and how AI is accelerating vulnerability research. Other topics include responsible disclosure challenges, the growing volume of AI-assisted security findings, and what these developments mean for researchers, vendors, and the future of offensive security.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — A Banned Phrase(04:56) - U.S. Government Effectively Bans Fable 5 and Mythos 5 - 2026-06-15(06:29) - Story #1 - Statement on the US government directive to suspend access to Fable 5 and Mythos 5(21:15) - Story #2 - ServiceNow discloses security incident exposing customer data(41:45) - Story #3 - Introducing Claude Corps(52:11) - Story #4 - SHINYHUNTERS HITS 100+ UNIVERSITIES WITH ORACLE ZERO-DAY(52:39) - Story #5 - Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack(59:00) - Story # - This Company Will Add Phone, AirPod, and Smartwatch Trackers to License Plate ReadersLinks06:30 - Story #1 - Statement on the US government directive to suspend access to Fable 5 and Mythos 521:16 - Story #2 - ServiceNow discloses security incident exposing customer data41:46 - Story #3 - Introducing Claude Corps52:12 - Story #4 - SHINYHUNTERS HITS 100+ UNIVERSITIES WITH ORACLE ZERO-DAY52:40 - Story #5 - Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack59:00 - Story # - This Company Will Add Phone, AirPod, and Smartwatch Trackers to License Plate ReadersCreators & Guests Corey Ham - HostJohn Strand - HostBronwen Aker - HostWade Wells - HostAlex Minster "Belouve" - GuestRalph May - HostRyan Poirier - ProducerJason Haddix - GuestClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    続きを読む 一部表示
    1 時間 8 分